Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134312e302f32342d3234203d3e20323730383337.roa
File:                     3137372e35322e3134312e302f32342d3234203d3e20323730383337.roa (raw, json)
Hash identifier:          EgutS3KucWxYyoT0VxcnDnvNA7J9T8x7fd241Bb6mBM=
Subject key identifier:   6B:BE:D7:32:9C:DD:D5:69:B7:10:73:1B:42:52:E3:94:4D:23:8A:88
Certificate issuer:       /CN=637D8AA9E8D9DB10D9378313C9F712FFF258C7A9
Certificate serial:       6CEDA02CA8B7A139D96C00D531D4AFD0C0B9EAC9
Authority key identifier: 63:7D:8A:A9:E8:D9:DB:10:D9:37:83:13:C9:F7:12:FF:F2:58:C7:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134312e302f32342d3234203d3e20323730383337.roa
Signing time:             Mon 05 Oct 2026 15:27:58 +0000
ROA not before:           Mon 05 Oct 2026 15:22:58 +0000
ROA not after:            Mon 04 Oct 2027 15:27:58 +0000
asID:                     270837
IP address blocks:        177.52.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.crl
                          rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ed:a0:2c:a8:b7:a1:39:d9:6c:00:d5:31:d4:af:d0:c0:b9:ea:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637D8AA9E8D9DB10D9378313C9F712FFF258C7A9
        Validity
            Not Before: Oct  5 15:22:58 2026 GMT
            Not After : Oct  4 15:27:58 2027 GMT
        Subject: CN=6BBED7329CDDD569B710731B4252E3944D238A88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:6a:e1:f4:72:76:ee:2a:20:97:cd:45:b6:
                    25:c9:11:60:76:c2:2a:44:29:84:6c:29:4c:8e:48:
                    9b:61:da:85:b2:a4:82:e8:2f:38:eb:eb:0b:0e:71:
                    de:4f:f1:b8:27:1a:b9:10:39:c4:e3:2e:6e:fc:ef:
                    a4:dd:69:b3:1a:66:97:a6:99:ff:a4:4d:86:35:24:
                    64:1e:c7:47:31:1c:7c:f3:7d:85:6c:0b:14:f1:35:
                    61:6a:2c:c8:c1:37:b3:3b:da:78:53:d6:70:2b:bf:
                    52:af:3e:86:f8:5b:c5:27:81:d2:ff:ef:0d:1d:50:
                    2c:6c:83:c1:ab:89:0d:a5:29:46:88:5a:34:c5:be:
                    b3:2d:8d:64:74:a6:7e:29:83:67:72:36:98:8b:f4:
                    f7:91:7b:90:71:d8:31:ac:90:c8:a1:0d:a1:05:21:
                    6f:c9:25:f5:fe:71:99:76:68:2f:1f:7e:de:50:28:
                    3a:6f:ee:93:9d:5d:34:87:7b:6c:e6:d5:8d:25:dc:
                    94:5e:9a:7f:88:f4:70:c7:c3:53:cd:78:2c:8b:0f:
                    19:73:c5:39:e6:09:b0:ec:7e:5f:c6:94:45:62:0a:
                    e5:ea:e8:15:4e:0a:94:1e:2e:5e:7e:1a:1e:02:cc:
                    8d:a8:f6:e0:9d:67:f8:0a:ad:e8:1d:cd:66:0f:75:
                    b2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BE:D7:32:9C:DD:D5:69:B7:10:73:1B:42:52:E3:94:4D:23:8A:88
            X509v3 Authority Key Identifier:
                keyid:63:7D:8A:A9:E8:D9:DB:10:D9:37:83:13:C9:F7:12:FF:F2:58:C7:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/637D8AA9E8D9DB10D9378313C9F712FFF258C7A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qfdey7QoiByWt1GLd48NMekhLgtiREBs9fKYZaUmwFL/0/3137372e35322e3134312e302f32342d3234203d3e20323730383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:02:ec:d0:c1:8c:a6:80:23:fd:77:77:db:0b:b5:fe:84:d3:
         6e:a0:fc:e7:6a:24:a7:88:3a:9d:c2:61:a4:7a:cb:e3:e0:cc:
         40:c5:18:ce:c3:83:60:b6:36:ba:17:61:83:c0:c7:58:62:13:
         9f:ee:9f:2e:55:4e:78:ce:87:f2:f3:a6:c0:a1:c1:ec:6f:6e:
         7e:c3:36:73:74:18:a3:94:86:41:7c:0f:e6:bd:24:40:73:78:
         24:03:47:fe:16:80:95:82:18:5d:c3:42:32:02:b5:25:88:87:
         07:48:97:fb:01:f7:8c:02:60:28:7d:90:33:17:1b:cd:c6:e9:
         11:a5:55:0f:17:5b:cb:af:a2:fb:b9:e7:99:14:86:b5:71:0d:
         d9:3c:96:0f:7f:81:80:88:3c:e5:70:bd:a3:52:ed:4f:5c:07:
         29:43:48:dc:4f:98:eb:78:64:bb:e3:ab:b4:45:a0:84:6a:8b:
         97:38:68:52:8c:3a:5e:bd:21:68:52:d7:d9:fe:67:46:1a:27:
         30:8d:af:57:de:34:14:06:60:fe:8f:67:f0:54:2a:37:44:d1:
         9b:06:60:bc:c9:2d:93:4d:4a:ae:42:4d:ea:94:b2:55:98:4d:
         0a:9d:1a:59:e2:7f:53:e4:84:10:fb:8b:e0:28:4e:0a:8a:af:
         c5:c0:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:29:32 2026 by rpki-client