Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa
File:                     3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa (raw, json)
Hash identifier:          WlDv8D9xF39y8mgRqFaEG0O63hpVWIHBUXqGUmmO7z4=
Subject key identifier:   29:D7:F5:85:81:B3:8C:34:38:7A:19:9E:13:AC:07:9B:A8:7D:F5:85
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       6CB4356B2BA445FDC2D5E0B4CFE97FF30903D35F
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa
Signing time:             Tue 05 May 2026 21:27:06 +0000
ROA not before:           Tue 05 May 2026 21:22:06 +0000
ROA not after:            Tue 04 May 2027 21:27:06 +0000
asID:                     262434
IP address blocks:        177.44.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b4:35:6b:2b:a4:45:fd:c2:d5:e0:b4:cf:e9:7f:f3:09:03:d3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: May  5 21:22:06 2026 GMT
            Not After : May  4 21:27:06 2027 GMT
        Subject: CN=29D7F58581B38C34387A199E13AC079BA87DF585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:93:1f:c0:1b:8e:2e:1f:8a:e2:8e:8a:c2:
                    2c:52:cb:ac:b1:17:e0:ff:c6:5b:41:20:5b:78:93:
                    65:59:a6:d0:76:c4:ff:bf:6e:ce:0b:18:b4:1d:af:
                    3d:85:86:bb:20:a1:2c:19:13:39:7b:45:a8:cf:84:
                    b6:d1:70:4c:50:c6:cb:5f:9f:64:7f:e9:3c:ea:fd:
                    3a:51:b5:66:c5:ce:81:f0:05:e7:14:1f:d3:49:19:
                    fd:7c:d8:5f:6f:78:bb:a7:53:73:31:79:2b:ab:9e:
                    95:89:c6:8c:37:98:21:39:2a:26:18:76:f4:fe:5c:
                    26:0e:a2:94:7f:3e:5b:5b:9e:de:35:27:58:1f:6a:
                    fc:da:b9:64:80:4e:27:20:fe:c1:ed:af:f6:77:75:
                    7f:34:74:71:ba:d4:68:bb:cc:ac:a3:f4:33:6a:d0:
                    7b:e8:9a:64:e9:3a:fc:16:45:fb:fa:4f:ae:51:2b:
                    4e:41:9d:23:28:01:f4:46:a2:64:8c:91:99:dc:a3:
                    5d:08:df:7e:20:0f:7f:19:35:4a:82:c8:08:fb:a2:
                    34:7b:96:72:11:8f:ce:af:5d:b4:1d:7e:7d:89:dc:
                    8a:dd:03:84:3f:4d:98:47:eb:76:3e:e7:b6:59:be:
                    99:8d:d6:72:64:07:11:ea:d5:cb:a8:77:be:12:b2:
                    a0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D7:F5:85:81:B3:8C:34:38:7A:19:9E:13:AC:07:9B:A8:7D:F5:85
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3137372e34342e3136302e302f32302d3234203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:78:bf:85:92:21:7b:17:8d:f4:c1:8a:b9:e7:31:d3:1a:
         0c:e2:fe:2a:c4:ad:bc:5c:82:d3:37:5b:96:f1:2f:52:46:ea:
         4c:44:3d:c8:4e:12:2f:f6:8c:4f:1c:cc:2b:ca:85:7e:06:b2:
         82:77:0c:a0:9a:40:4c:d3:c1:64:13:60:e1:2c:b3:60:b0:86:
         ef:03:da:33:a4:45:9d:00:9e:57:7f:a9:6c:06:81:9e:15:29:
         1f:50:31:2b:a8:e5:29:f9:e4:a9:70:49:84:88:b5:d4:70:6e:
         a8:01:a7:f5:69:d3:97:35:19:06:7f:e2:6a:a7:71:2c:ea:a4:
         29:9d:56:a5:12:d1:c5:9f:f5:3c:da:33:53:86:14:81:32:c9:
         de:ea:6d:bb:39:9f:ea:ca:f5:b4:44:eb:ea:e6:d4:38:8f:44:
         f8:b9:ca:52:d4:9b:44:fc:b3:14:28:52:92:28:92:4e:a9:8b:
         9e:80:ac:93:0a:fe:2f:61:82:a4:6a:4b:1d:e0:10:ec:91:a8:
         18:1f:09:9e:59:b1:aa:f0:7d:88:24:05:3d:13:5f:bf:da:80:
         87:16:b7:42:92:a1:4a:ba:55:4d:0b:38:79:5e:40:91:10:9e:
         df:f9:e2:e5:5b:ca:ae:3e:89:1e:39:5c:c7:0f:3e:13:d0:88:
         80:55:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:15:50 2026 by rpki-client