Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133362e302f32322d3232203d3e203631373736.roa
File:                     3137372e35332e3133362e302f32322d3232203d3e203631373736.roa (raw, json)
Hash identifier:          zPo7T/oz3n45thal1eOolnPLOfA/Fb+ra0bIYAA9xhg=
Subject key identifier:   4C:57:C3:EB:00:64:40:AB:F6:9B:61:2D:EF:E8:33:D5:DD:4B:8E:7B
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       7EE079BA2D81DC673DBF6B4F1A06267A200FCA31
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133362e302f32322d3232203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        177.53.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:e0:79:ba:2d:81:dc:67:3d:bf:6b:4f:1a:06:26:7a:20:0f:ca:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=4C57C3EB006440ABF69B612DEFE833D5DD4B8E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:12:d2:47:56:f9:d1:36:f1:cd:18:26:85:
                    8c:27:f6:0c:48:3f:70:50:ca:63:6e:59:ab:2a:1b:
                    15:ea:85:dd:63:23:f3:dc:cd:b2:8e:c7:20:f9:bf:
                    93:b6:4b:ee:36:76:98:a2:04:c1:1b:0a:00:cb:db:
                    4e:c7:29:74:e2:a6:5e:d7:37:c9:44:b3:36:b0:da:
                    61:61:7a:42:67:a7:f5:8b:83:da:c0:49:06:ca:d7:
                    54:d2:28:d9:c0:6b:f4:68:84:f4:3c:78:bf:1a:4f:
                    13:b4:3c:71:8c:df:1b:24:47:98:4e:84:5e:90:46:
                    ca:67:c1:a0:9d:24:6e:1d:44:01:64:d5:4b:9b:e4:
                    12:97:4b:8a:05:28:a9:58:7b:b6:01:b2:0b:81:42:
                    8a:0e:84:6d:ec:bb:a4:de:3c:b0:95:5f:54:62:9a:
                    7d:78:17:5e:7e:01:da:dd:09:ac:cb:1d:25:98:71:
                    47:b7:dc:d1:b5:d4:3d:46:e7:0f:c7:27:d8:b3:ca:
                    64:74:05:b7:70:ef:05:8d:fe:38:28:0c:4e:d3:f3:
                    42:d1:33:2c:f5:8e:75:ba:bd:f1:01:12:cc:cf:a0:
                    24:10:d3:ff:fd:5e:9b:ed:e8:7d:0a:ee:72:a3:24:
                    73:ec:24:df:f5:a3:2f:7c:19:85:97:52:a5:40:08:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:57:C3:EB:00:64:40:AB:F6:9B:61:2D:EF:E8:33:D5:DD:4B:8E:7B
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3137372e35332e3133362e302f32322d3232203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:98:01:0b:e1:e9:93:2b:0f:4f:0f:de:2a:f8:27:12:a2:
         e4:02:b7:b2:4d:23:e6:99:91:35:03:7c:21:b5:74:84:4d:32:
         2d:af:6f:ee:ba:0f:76:62:b0:74:dc:ca:9d:c3:f3:37:90:29:
         ea:b3:fb:53:37:59:77:86:42:7f:16:40:cb:27:a5:3e:c8:59:
         87:d0:97:12:ec:f3:93:0c:fb:fc:7f:cc:2d:90:9c:8d:fc:96:
         b7:10:5b:10:21:91:6d:89:9e:66:3e:3d:10:ac:90:e0:7a:59:
         5f:07:6b:ae:b8:68:3d:f4:ca:fe:74:34:2b:1f:af:31:6e:79:
         3a:68:ca:d3:3f:f1:52:89:2b:2d:c7:c8:7f:cc:3c:3d:f3:be:
         f8:da:8e:44:50:ad:19:fa:3a:88:12:e5:82:e8:f6:66:fe:52:
         af:13:7e:b4:e2:d4:ed:0c:9c:7d:49:6b:02:14:92:00:f8:b6:
         46:c9:17:cb:ae:86:9f:9e:65:4a:04:ec:ee:2e:a0:ec:6d:7a:
         52:96:82:ef:90:11:3d:f2:90:1f:b3:b4:cc:21:46:ef:3a:3c:
         75:bc:c7:f9:32:a0:fd:55:96:d3:3b:2f:cf:50:56:1b:0e:9b:
         86:08:45:e0:ce:f1:7c:96:a7:25:18:85:07:90:1d:00:8d:30:
         15:db:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:26:27 2026 by rpki-client