Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32302e302f32332d3233203d3e20323634323934.roa
File:                     3137372e3130372e32302e302f32332d3233203d3e20323634323934.roa (raw, json)
Hash identifier:          z44FBFBRZgUPk7iXVdjhfVOkqWbHAX1YNp0IbyiJSGQ=
Subject key identifier:   4E:32:E4:63:2F:FC:B5:E6:BD:6F:DB:BD:80:3B:7C:C9:09:64:92:64
Certificate issuer:       /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial:       23149649945243C616739F77EFF32B766132DF0C
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32302e302f32332d3233203d3e20323634323934.roa
Signing time:             Wed 25 Mar 2026 13:37:14 +0000
ROA not before:           Wed 25 Mar 2026 13:32:14 +0000
ROA not after:            Wed 24 Mar 2027 13:37:14 +0000
asID:                     264294
IP address blocks:        177.107.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:14:96:49:94:52:43:c6:16:73:9f:77:ef:f3:2b:76:61:32:df:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
        Validity
            Not Before: Mar 25 13:32:14 2026 GMT
            Not After : Mar 24 13:37:14 2027 GMT
        Subject: CN=4E32E4632FFCB5E6BD6FDBBD803B7CC909649264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:a5:d1:c9:81:0f:4d:b7:f5:8c:f9:ba:c3:
                    be:2d:45:09:9b:90:8f:7a:d5:33:15:41:87:5b:c3:
                    c3:1a:6e:f3:25:19:54:fc:be:35:2c:37:a7:56:23:
                    0d:fa:75:90:f6:38:6c:e7:53:58:72:34:4f:55:7e:
                    31:d8:3e:45:23:ac:fc:4f:73:eb:1f:e1:2c:a2:ca:
                    99:c6:a5:a7:aa:88:5a:48:54:06:6e:d0:aa:5c:3a:
                    4d:67:21:db:83:fb:80:59:49:d9:c7:c9:98:46:66:
                    20:c4:6a:00:3f:b5:6e:8e:3d:82:82:60:83:d5:66:
                    b0:22:99:c4:e4:06:fe:14:46:6d:11:75:74:70:1f:
                    83:26:7b:dd:22:15:7e:08:e4:e4:e6:e8:47:69:ba:
                    fc:f3:49:81:ea:61:c3:11:79:95:9b:ef:a0:59:50:
                    8e:bb:e3:af:87:6c:79:00:fa:1c:da:60:70:30:9c:
                    67:77:94:8f:f1:ce:20:5b:42:ee:86:0d:df:bf:3b:
                    b3:ad:16:cd:3b:a1:84:e1:81:dd:f3:42:da:5a:22:
                    55:aa:23:ad:3b:8c:a9:4a:7f:d2:21:9d:ff:74:a3:
                    bd:ca:a8:9d:b7:e2:eb:da:45:94:14:c3:be:6d:55:
                    db:8d:94:cc:f5:aa:38:ec:d2:b6:39:d9:67:6c:e0:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:E4:63:2F:FC:B5:E6:BD:6F:DB:BD:80:3B:7C:C9:09:64:92:64
            X509v3 Authority Key Identifier:
                keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32302e302f32332d3233203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:74:aa:01:55:52:d5:d4:08:24:38:0a:54:46:1e:e7:b3:40:
         33:b2:e8:db:0c:f5:31:7e:b3:f8:fb:47:7b:c0:d7:11:75:21:
         69:3b:f6:74:76:a4:71:87:6e:65:6f:1d:2a:3c:29:60:58:fb:
         5e:1e:44:98:d8:1d:f5:3f:55:0e:f4:0e:ef:84:f6:55:13:18:
         bf:86:66:cc:25:91:67:2e:d1:1d:97:55:87:f7:7a:ba:25:ca:
         13:85:ce:c5:e4:af:41:ba:e5:64:1d:af:7f:6e:a1:1b:ac:d7:
         4b:51:f5:6b:1a:b1:a9:f9:4c:97:d8:a8:ab:97:86:60:03:d0:
         f9:84:e9:4d:e8:e4:ac:d7:ad:72:56:57:33:28:42:d1:3a:e5:
         e3:84:75:81:8f:95:03:4e:30:92:76:a1:14:7a:af:b5:50:93:
         44:62:79:13:37:cd:ce:78:f7:b3:e8:35:fa:b3:ae:f7:d8:d7:
         b9:d0:ff:d9:b8:1f:74:72:1d:5f:f2:84:86:7a:c9:e8:3e:6a:
         08:85:d9:5f:cf:c9:f4:ea:85:a7:14:4f:4a:b9:f8:c3:07:25:
         0f:f4:b0:ac:19:1f:7c:b6:4f:fc:6d:aa:f6:31:8a:c9:ef:01:
         a9:7b:40:e0:e2:8b:03:9d:6b:1e:45:5a:17:48:dc:a5:f3:a7:
         a4:fb:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:48:54 2026 by rpki-client