Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e31332e302e302f31362d3234203d3e203131333338.roa
File:                     3137372e31332e302e302f31362d3234203d3e203131333338.roa (raw, json)
Hash identifier:          PiQL+4EdmLvuGEpdjnLzes69Ue7fOV/o6IMK4YtFxEk=
Subject key identifier:   35:06:19:A6:50:87:02:3A:8E:B6:F0:30:E5:3E:1C:0D:A3:51:2E:BE
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       1B6762CF1081BB9BB4DEBF72B6D6EC73A3B5B248
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e31332e302e302f31362d3234203d3e203131333338.roa
Signing time:             Wed 22 Jul 2026 18:04:26 +0000
ROA not before:           Wed 22 Jul 2026 17:59:26 +0000
ROA not after:            Wed 21 Jul 2027 18:04:26 +0000
asID:                     11338
IP address blocks:        177.13.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:67:62:cf:10:81:bb:9b:b4:de:bf:72:b6:d6:ec:73:a3:b5:b2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Jul 22 17:59:26 2026 GMT
            Not After : Jul 21 18:04:26 2027 GMT
        Subject: CN=350619A65087023A8EB6F030E53E1C0DA3512EBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f1:f4:a0:be:1e:0c:c2:e9:19:98:0c:5f:44:
                    85:62:fd:ff:9d:b3:62:5e:ed:ba:48:e1:df:ed:65:
                    ad:f3:45:e4:37:63:b3:ce:97:72:47:9f:7d:d8:68:
                    38:b6:61:1b:a9:89:91:98:17:f2:53:71:15:e3:a6:
                    b1:cd:04:f7:44:16:78:1b:2b:ca:7b:fc:0c:06:ea:
                    99:db:c2:3f:10:f0:de:6b:c4:ab:da:bc:e5:20:1b:
                    22:f3:f0:6d:e6:47:b8:28:e4:d0:a1:b4:98:e5:8d:
                    49:03:3c:25:3c:63:d9:71:8b:81:13:d0:68:c8:25:
                    90:83:91:ac:0e:52:23:3c:7d:b8:5c:f0:a6:c3:db:
                    d0:33:41:cb:99:09:aa:d6:94:65:ed:23:75:41:0f:
                    8d:1d:10:6a:aa:b5:44:b3:97:db:85:80:2f:fc:c1:
                    79:2b:21:f2:79:02:d2:fd:43:ee:1c:03:e4:bb:ed:
                    7c:59:89:6e:96:74:9f:09:31:a7:77:9e:3f:6c:06:
                    2e:16:fd:ca:26:ff:74:8c:78:fe:4c:9a:0f:8a:04:
                    59:90:f5:40:c4:7c:fb:bf:34:c7:83:14:63:9a:bd:
                    7f:b3:89:b2:fd:86:46:44:3c:ff:9f:47:2a:ef:b5:
                    2c:96:2d:60:c3:4e:55:73:9f:24:b4:21:0d:53:a6:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:19:A6:50:87:02:3A:8E:B6:F0:30:E5:3E:1C:0D:A3:51:2E:BE
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3137372e31332e302e302f31362d3234203d3e203131333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:61:59:00:c6:f7:48:d2:a5:32:8e:f5:30:d8:9d:87:54:
         94:1e:ba:b7:27:a3:83:43:87:a9:84:e7:e1:bd:2e:08:31:25:
         4b:5a:db:80:92:69:b6:13:81:c5:4a:44:c7:86:c8:a3:34:a1:
         00:ce:d4:e6:79:a2:60:ae:6b:ca:4d:ef:64:34:58:b6:8f:ae:
         c7:26:63:d6:dd:b2:0a:7d:05:6b:86:57:3a:bc:67:94:d2:33:
         fd:ef:5b:f9:c9:8a:7d:de:06:88:d3:e1:c6:da:ae:af:12:7d:
         10:ba:81:0e:60:6f:69:1d:17:d9:da:49:0a:9e:2a:0a:16:98:
         15:cc:6f:3d:e3:81:9f:22:90:10:8b:f7:79:7f:9d:07:26:1d:
         ec:8b:60:54:44:65:7a:dc:f2:44:b2:15:52:c8:c2:0c:c7:d6:
         e2:86:01:e5:22:c7:0a:f5:53:e2:c4:57:e6:56:09:93:88:13:
         72:75:9c:0b:ac:ed:0e:20:9b:1c:4c:6e:f0:f1:90:54:d9:72:
         a6:10:d5:44:af:62:a1:2c:dd:f9:eb:83:7f:71:ea:6d:07:49:
         44:89:72:5e:47:a3:03:98:fa:a4:90:83:65:15:fa:ca:07:8d:
         e8:3d:36:7d:a4:c1:a3:14:06:ea:08:81:83:4f:cc:dd:cb:83:
         fc:92:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:53:03 2026 by rpki-client