Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa
File:                     3137372e38342e33322e302f32322d3232203d3e20323632353738.roa (raw, json)
Hash identifier:          tbEssQf7lYrbmxp5zDjbUNCOhw9/Rwda7FfNwY9TstM=
Subject key identifier:   BE:C8:19:88:23:6A:FE:59:AB:47:3D:EE:68:68:16:4D:77:92:75:85
Certificate issuer:       /CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
Certificate serial:       42B1158F0993D19CEFD865013B3046822B44CFB7
Authority key identifier: A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa
Signing time:             Fri 01 May 2026 18:18:34 +0000
ROA not before:           Fri 01 May 2026 18:13:34 +0000
ROA not after:            Fri 30 Apr 2027 18:18:34 +0000
asID:                     262578
IP address blocks:        177.84.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl
                          rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b1:15:8f:09:93:d1:9c:ef:d8:65:01:3b:30:46:82:2b:44:cf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76
        Validity
            Not Before: May  1 18:13:34 2026 GMT
            Not After : Apr 30 18:18:34 2027 GMT
        Subject: CN=BEC81988236AFE59AB473DEE6868164D77927585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:51:70:13:36:5c:28:fc:6d:cf:6a:22:03:
                    b4:9c:4c:e4:55:31:cf:3c:ca:67:1d:69:4e:e6:fb:
                    3c:6a:24:42:ce:d1:7b:04:b3:da:a6:8a:ae:83:0f:
                    fb:c4:7b:8c:77:45:67:aa:14:63:87:d6:c2:48:f2:
                    4a:ab:f1:b2:b8:fd:a0:3d:08:b6:5b:fa:d4:f7:e4:
                    56:27:cf:0d:7c:d3:df:8d:f7:67:ed:30:44:92:44:
                    de:97:d9:df:b6:89:4a:e0:33:99:22:e2:c2:96:34:
                    28:5d:d3:e7:93:f7:b3:47:56:94:f1:50:16:7c:19:
                    7d:bb:ce:aa:42:6a:c5:ac:bc:d1:74:0c:17:a3:db:
                    f1:02:51:1d:bc:57:07:09:b6:dd:d0:fe:17:f7:5a:
                    6f:17:ed:38:c7:3b:8c:05:cd:42:68:b3:ab:b0:1d:
                    0b:64:ce:7d:c2:b4:f8:cc:33:08:23:be:c6:3b:e2:
                    89:d3:c9:c6:63:95:a3:5f:11:1b:15:c8:45:fe:29:
                    a9:67:ee:9e:3c:76:6b:b1:79:ce:e2:da:3c:3c:b1:
                    1b:6a:43:37:b2:75:cd:14:89:82:ff:1e:c1:34:7e:
                    f3:05:26:35:eb:32:37:b9:f0:78:2d:a1:f6:87:f3:
                    75:4a:d7:16:83:3a:ad:8a:76:f4:c2:d6:2c:a6:97:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C8:19:88:23:6A:FE:59:AB:47:3D:EE:68:68:16:4D:77:92:75:85
            X509v3 Authority Key Identifier:
                keyid:A8:04:9D:06:C9:C3:DD:09:DB:B1:A4:8A:F9:DA:94:6E:9F:57:AE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8049D06C9C3DD09DBB1A48AF9DA946E9F57AE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcgvT9JE4ZwdxMDZQ85SEfmLJas25KyARTtBzbM4L4BA/0/3137372e38342e33322e302f32322d3232203d3e20323632353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:08:91:c4:78:d3:5c:ed:80:26:de:28:6d:3f:81:d0:27:0f:
         c6:cc:38:9c:c6:78:c1:fe:f7:94:af:c2:80:76:47:2b:41:64:
         a0:d4:10:5c:ba:7f:2c:8f:12:4a:47:1a:5b:30:d5:3e:2e:56:
         6f:45:cf:cd:84:bd:1d:fd:ad:fd:a3:33:3b:4d:b9:db:74:48:
         6d:b8:6e:53:be:cc:ba:50:7b:56:a6:32:26:85:97:65:a7:28:
         36:d9:64:bd:fb:f7:fb:ef:77:9f:d0:49:12:3e:d6:fb:25:d6:
         ab:ac:61:5b:a8:70:58:cd:7a:7f:62:a0:fe:0f:0b:78:81:fa:
         4a:a5:e5:11:d7:e6:71:6d:c9:e7:1b:14:73:b0:42:14:ac:31:
         9d:d7:ec:8f:4e:94:33:95:8f:60:d2:73:d9:39:79:9c:6b:6c:
         75:46:e2:51:bd:c6:8e:0a:40:0a:87:4a:f8:a4:a8:0c:50:33:
         2b:65:e8:cd:44:46:85:6f:43:01:51:6c:1f:6c:5f:58:9b:26:
         77:65:61:ef:ba:72:ef:d0:49:17:cd:30:24:de:7c:21:05:17:
         8a:fa:c6:87:49:53:15:68:49:92:87:d0:b4:6f:f0:c7:7b:00:
         6a:c5:19:49:7e:40:f5:11:ef:c1:18:9f:e2:0b:9b:22:d9:2d:
         ff:d8:02:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:07:38 2026 by rpki-client