Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
File:                     3137372e3130352e38302e302f32302d3234203d3e203532383535.roa (raw, json)
Hash identifier:          cczSmnq9Y6o9hIoNmERg6XnLqbDdPZ49+pOk6JcseNA=
Subject key identifier:   45:FE:83:23:DD:54:47:29:C4:8A:EE:B6:5D:2F:CA:0E:65:BA:EE:B4
Certificate issuer:       /CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
Certificate serial:       143F4F718963CD711B3F27229E15606AB9EB3393
Authority key identifier: 71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa
Signing time:             Mon 15 Jun 2026 14:07:15 +0000
ROA not before:           Mon 15 Jun 2026 14:02:15 +0000
ROA not after:            Mon 14 Jun 2027 14:07:15 +0000
asID:                     52855
IP address blocks:        177.105.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl
                          rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:50:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3f:4f:71:89:63:cd:71:1b:3f:27:22:9e:15:60:6a:b9:eb:33:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71AC817F1B0FFFA174ACAE38AC4180ABEDE45570
        Validity
            Not Before: Jun 15 14:02:15 2026 GMT
            Not After : Jun 14 14:07:15 2027 GMT
        Subject: CN=45FE8323DD544729C48AEEB65D2FCA0E65BAEEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:e2:4d:63:d4:27:32:ee:ad:0d:11:de:0d:
                    fb:0b:ad:28:9f:e0:d1:df:e0:55:f4:44:4b:d5:47:
                    7e:fa:fc:fa:63:de:0c:64:45:ba:92:52:94:f8:1e:
                    6f:f0:a3:22:40:63:f0:37:ad:e8:1b:c0:63:01:7b:
                    e4:e9:a0:a9:ce:1c:4a:6c:13:2e:b3:69:a3:22:cf:
                    d9:51:25:a2:3c:8f:cf:90:ab:4f:1f:1d:fe:e5:df:
                    b4:18:14:bc:c1:17:2f:2b:bb:10:6c:ec:71:3b:77:
                    07:b3:94:28:09:b9:cb:e7:64:86:59:30:96:f3:3d:
                    06:3f:f9:e4:ea:d2:b5:dc:60:89:2d:de:f8:73:42:
                    65:3b:f6:ae:f5:0b:11:26:25:15:ac:ab:bc:a0:10:
                    4c:c2:6b:4b:06:5e:12:07:5e:68:80:b9:90:d4:f0:
                    a8:04:c8:dd:61:85:5d:f6:b2:0c:47:37:a6:62:53:
                    e8:dc:61:d1:c7:6a:9c:6b:2b:79:8c:c8:66:fb:d3:
                    7e:3f:86:bf:9e:20:ca:4a:5f:8c:99:f6:4b:b0:a5:
                    3e:e3:12:1e:6a:2e:f0:e2:79:5b:1a:bb:0f:b2:c8:
                    79:9c:7d:5a:d5:52:ae:d4:b9:5f:04:18:dc:43:88:
                    42:20:b1:57:3d:80:f4:8e:9e:39:6a:97:3f:4b:2f:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:FE:83:23:DD:54:47:29:C4:8A:EE:B6:5D:2F:CA:0E:65:BA:EE:B4
            X509v3 Authority Key Identifier:
                keyid:71:AC:81:7F:1B:0F:FF:A1:74:AC:AE:38:AC:41:80:AB:ED:E4:55:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AC817F1B0FFFA174ACAE38AC4180ABEDE45570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFyiZhJjLBKzwSp4CTSi6Waai4KRDDiqE4AenVLceBTP/0/3137372e3130352e38302e302f32302d3234203d3e203532383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:41:26:a4:06:4f:b1:3e:42:4a:95:63:f6:75:88:c7:60:
         c0:05:08:62:09:61:92:7e:bc:2a:68:af:b6:07:c3:33:9a:84:
         d7:8e:b4:46:d1:20:36:28:89:6e:5b:db:45:e3:a6:cd:74:3b:
         d9:31:d7:3d:38:b6:83:9e:e7:a3:42:2e:17:4c:1c:fb:09:6d:
         ac:8e:ba:fd:df:2b:01:f2:e6:c7:04:31:7c:36:dd:78:b4:fc:
         45:49:55:70:bf:23:2d:1f:cc:b3:7e:bf:80:4b:97:30:02:dc:
         85:5b:fc:4b:4b:b7:0b:d8:05:e1:55:b7:1c:27:b1:66:c6:ee:
         84:ff:99:3f:86:00:cf:1f:48:e3:53:a7:01:22:ed:d9:77:c0:
         4e:05:26:42:2a:59:e5:26:6b:18:85:03:bd:82:42:f5:c1:94:
         6f:08:18:ff:77:64:06:75:2b:fa:53:2f:21:82:85:58:e1:ee:
         47:22:89:62:84:0d:d0:44:5c:18:5f:f7:20:ce:7d:52:fb:09:
         3c:98:cb:52:b1:6d:32:8a:23:f8:9a:df:fa:6d:5f:00:84:49:
         c9:f0:b7:94:23:7d:b3:d8:b3:fd:1c:91:93:30:70:5c:a7:d8:
         7d:40:48:16:e0:b1:7e:07:b2:90:d1:1a:0f:8f:da:38:f9:80:
         2f:11:d5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:50 2026 by rpki-client