Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa
File:                     3137372e33382e3133362e302f32312d3231203d3e203532393437.roa (raw, json)
Hash identifier:          D8I6jy1S4NiU0/41bWekI4SvalijU160lOJCA/hqIEk=
Subject key identifier:   75:85:F8:8E:06:AE:4C:85:40:94:F5:2F:ED:4D:D7:8C:9D:47:1D:83
Certificate issuer:       /CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
Certificate serial:       6B50D46951155228320E564DCE584F2C9BC8B76A
Authority key identifier: 2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa
Signing time:             Fri 17 Jul 2026 13:03:36 +0000
ROA not before:           Fri 17 Jul 2026 12:58:36 +0000
ROA not after:            Fri 16 Jul 2027 13:03:36 +0000
asID:                     52947
IP address blocks:        177.38.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl
                          rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:50:d4:69:51:15:52:28:32:0e:56:4d:ce:58:4f:2c:9b:c8:b7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75
        Validity
            Not Before: Jul 17 12:58:36 2026 GMT
            Not After : Jul 16 13:03:36 2027 GMT
        Subject: CN=7585F88E06AE4C854094F52FED4DD78C9D471D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cb:3f:2c:ab:80:47:af:79:12:4f:79:e5:e2:
                    de:36:8a:bb:e4:1e:8e:eb:4a:0c:c4:b6:1d:b8:e0:
                    81:0d:10:37:9c:75:79:2b:30:d3:99:4b:81:31:62:
                    ce:7e:7c:57:93:28:82:b4:e9:b5:3d:8e:b5:29:c3:
                    71:34:a8:fe:6d:49:3a:cc:31:71:3c:07:46:69:32:
                    81:df:a2:df:c3:9b:51:d6:dd:a3:d2:a6:50:e8:97:
                    3b:b8:f4:29:bf:86:51:a6:c3:0a:4e:f5:eb:df:19:
                    31:0b:f1:93:09:14:32:11:73:2a:ac:f0:c2:1a:f5:
                    9d:65:5b:1b:5d:26:64:c4:25:12:40:b8:c4:19:e1:
                    ee:86:04:b5:12:3e:0e:9e:7d:df:43:f0:55:b6:fc:
                    3d:e9:30:a2:26:be:34:2a:d8:45:38:58:c6:1d:03:
                    57:9e:4a:70:dd:99:ee:40:4f:64:26:6b:10:7d:4c:
                    84:0e:d8:b8:15:b9:e3:79:a7:ec:8a:19:71:f5:f4:
                    72:8b:a9:3c:52:f8:2e:c3:ca:2d:4a:d7:04:e9:c3:
                    93:67:bf:84:72:66:ff:02:61:ea:f6:32:a7:89:a9:
                    60:12:d8:b6:4c:cc:c3:33:42:11:af:e2:07:f9:55:
                    6b:cf:ec:a5:dd:ab:2f:22:25:74:c3:3a:9b:1e:d1:
                    0b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:85:F8:8E:06:AE:4C:85:40:94:F5:2F:ED:4D:D7:8C:9D:47:1D:83
            X509v3 Authority Key Identifier:
                keyid:2D:35:57:8C:A2:1C:6C:8E:82:AB:F9:0B:55:A2:1F:DC:04:B4:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D35578CA21C6C8E82ABF90B55A21FDC04B4FF75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSY2zYZv6B5pHrp7U9wvqFgfxPqK6u5mgzG3Xxdgh15J/0/3137372e33382e3133362e302f32312d3231203d3e203532393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         80:07:9a:85:46:d0:f8:0b:c8:50:a6:50:5b:9a:46:9c:d0:18:
         9a:7b:06:6c:88:97:17:9e:35:d3:4d:93:84:8b:62:1c:ee:8d:
         a0:a9:f7:77:93:8a:5d:65:7f:1c:67:4d:8e:95:d8:ff:1d:89:
         a6:88:92:70:2a:26:77:b6:aa:e1:64:63:f1:01:fd:f0:ce:bb:
         a4:04:44:1d:35:2d:4c:93:8d:6a:38:d7:3d:c4:1e:ba:74:5f:
         cd:c6:b1:a1:bb:32:90:7f:77:c5:47:ca:3b:d5:e9:f3:2b:61:
         e9:2c:61:53:a9:9e:5a:02:41:75:f6:cc:a3:1b:d9:45:6e:74:
         ab:44:c3:f8:69:b7:41:68:1c:3a:29:7f:e9:2c:4b:fe:98:2d:
         8d:92:5b:69:f0:6e:cd:02:0e:cc:c8:eb:b1:25:e0:04:70:93:
         5b:49:ca:93:b4:e4:77:42:d4:07:e2:c9:96:8f:bb:8d:5a:51:
         22:b0:0d:6e:b7:61:63:f1:07:af:93:84:82:56:be:57:3c:c9:
         14:92:14:7d:b5:11:65:3a:8c:f3:6e:48:82:07:6b:72:61:39:
         a4:60:ee:4b:35:d8:05:11:7e:93:bc:dd:c7:be:56:58:b7:64:
         69:f8:af:5b:49:29:d7:56:6b:e3:7a:c1:49:4a:8b:08:be:44:
         f0:03:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:04:50 2026 by rpki-client