Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa
File:                     3137372e31322e3131322e302f32302d3234203d3e203533313138.roa (raw, json)
Hash identifier:          MWfry5pyuvkoIlOkq8yXiX8VbvgfnqGv/teVykB3/jc=
Subject key identifier:   D3:E3:F4:0E:44:0D:ED:60:10:BC:21:67:BF:FC:85:F6:88:BC:09:BD
Certificate issuer:       /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial:       4B069BA2F2358D347D3A9E2DDDFADBDBD7E1E4D4
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa
Signing time:             Tue 21 Jul 2026 15:00:00 +0000
ROA not before:           Tue 21 Jul 2026 14:55:00 +0000
ROA not after:            Tue 20 Jul 2027 15:00:00 +0000
asID:                     53118
IP address blocks:        177.12.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
                          rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:06:9b:a2:f2:35:8d:34:7d:3a:9e:2d:dd:fa:db:db:d7:e1:e4:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
        Validity
            Not Before: Jul 21 14:55:00 2026 GMT
            Not After : Jul 20 15:00:00 2027 GMT
        Subject: CN=D3E3F40E440DED6010BC2167BFFC85F688BC09BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f5:3b:d5:e0:47:2b:b4:23:cf:b1:01:7f:e9:
                    58:90:b7:47:61:04:57:0d:a8:40:b2:d5:bf:e0:0e:
                    64:d1:c8:a8:29:8f:06:1d:4a:ac:f3:02:09:e4:8a:
                    f3:53:e0:13:65:48:83:48:d5:8e:bd:d7:77:87:a0:
                    a4:c8:b1:00:b1:4f:3e:13:ac:c9:3f:b3:f5:27:54:
                    67:bd:87:b4:e6:d2:d3:54:53:de:d5:23:ec:0f:7d:
                    bb:ea:62:7a:b5:32:e8:b3:82:b8:9d:a4:27:a7:21:
                    ee:98:bb:70:bc:e5:d0:ee:7e:e3:36:57:7e:c3:ae:
                    df:18:9a:60:e5:36:80:e4:5d:23:61:13:5d:c9:d5:
                    af:17:c5:8f:0c:a0:c2:70:96:18:5b:6d:d4:44:e1:
                    0a:05:3a:a3:2a:b4:a2:07:98:25:c4:dc:06:03:51:
                    73:58:c5:c6:19:e0:4d:e5:9c:e2:bc:0c:13:2c:8b:
                    1e:c2:51:eb:11:88:61:71:cb:0f:b7:3b:fa:64:c6:
                    cb:63:bd:8b:4d:88:22:a5:77:60:82:26:47:6f:8d:
                    0d:fd:55:7d:6c:89:60:7a:59:84:e1:75:1c:ee:07:
                    40:55:a8:b1:1f:52:2e:b1:b0:df:7b:af:d1:b6:77:
                    0c:f9:0d:01:4b:cf:79:87:b1:80:63:b1:10:3e:ce:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E3:F4:0E:44:0D:ED:60:10:BC:21:67:BF:FC:85:F6:88:BC:09:BD
            X509v3 Authority Key Identifier:
                keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/3137372e31322e3131322e302f32302d3234203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:df:04:06:2d:2a:d1:45:e8:a4:e1:32:bb:17:ca:3f:2d:
         27:b0:1a:c5:eb:64:1b:6d:4a:f3:f7:7d:fa:1f:ca:05:f1:e5:
         05:eb:cf:60:21:f1:28:53:ce:5a:e6:29:fc:2c:e8:ec:96:90:
         da:f9:c1:2c:a2:83:89:ff:80:4d:ac:9c:3a:31:2b:32:53:16:
         59:a4:48:7c:1c:d0:8d:ab:fd:a5:0a:5b:a1:7c:9c:8b:a2:9c:
         b7:58:ed:f3:2a:3e:8c:30:63:b3:2c:9c:56:72:f1:8a:03:d1:
         08:98:09:5a:cd:9d:46:6e:1d:d6:46:e9:c9:81:28:ba:b5:4f:
         e9:4c:97:84:8c:90:09:5f:88:85:74:43:5c:ac:58:60:fb:e6:
         b0:f7:c5:b4:2f:1c:b0:62:6c:a7:57:07:c5:b3:7b:f3:88:e3:
         80:a2:d8:87:c3:14:6b:51:2c:d1:33:a7:3f:6a:6a:3d:da:0e:
         2a:54:56:b8:68:9b:c2:73:a9:b8:8c:d6:22:6e:fc:13:ac:61:
         ba:8f:86:fb:2c:e5:e4:f9:67:8e:5d:fb:48:7c:a9:d8:0c:21:
         88:f3:e4:2d:a9:9a:72:92:63:bb:1b:85:de:8d:3e:23:6c:64:
         45:5e:c0:26:4d:95:d1:c9:d8:aa:6f:ff:91:d0:96:04:ce:f8:
         03:da:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:38 2026 by rpki-client