Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32342d3234203d3e20323632323836.roa
File:                     3137372e35322e3235322e302f32342d3234203d3e20323632323836.roa (raw, json)
Hash identifier:          bRaui4GY40FJ+kStpNttHj1nYflE/z4u3GUgScfn4Ww=
Subject key identifier:   DE:60:28:1B:96:10:8E:1A:97:E8:FF:3A:46:F4:75:E7:1C:24:EF:31
Certificate issuer:       /CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
Certificate serial:       1EFFA51AF82A7182FBE77ED4181A9EF393B84367
Authority key identifier: AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32342d3234203d3e20323632323836.roa
Signing time:             Tue 06 Oct 2026 13:13:54 +0000
ROA not before:           Tue 06 Oct 2026 13:08:54 +0000
ROA not after:            Tue 05 Oct 2027 13:13:54 +0000
asID:                     262286
IP address blocks:        177.52.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 14:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ff:a5:1a:f8:2a:71:82:fb:e7:7e:d4:18:1a:9e:f3:93:b8:43:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
        Validity
            Not Before: Oct  6 13:08:54 2026 GMT
            Not After : Oct  5 13:13:54 2027 GMT
        Subject: CN=DE60281B96108E1A97E8FF3A46F475E71C24EF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:54:ce:ad:53:87:57:66:16:b7:7c:b9:d8:b3:
                    96:b7:4d:d7:eb:46:0b:c6:2a:5a:6a:d8:6a:89:dd:
                    27:d4:3a:bf:d9:c7:6b:4f:d0:fe:5b:15:6c:f8:09:
                    b8:b8:95:69:54:80:50:e5:73:51:54:c5:58:ed:ad:
                    b8:8f:90:67:cb:a0:ae:8a:13:50:ca:a6:ec:d1:c4:
                    35:58:30:ff:24:0a:c6:e7:ff:08:3f:c8:8c:66:90:
                    f9:38:88:83:52:e9:be:75:f6:79:d4:f8:78:f0:d3:
                    79:76:e8:3e:4e:70:1c:ae:7a:69:11:7f:cf:fa:12:
                    ea:dd:55:08:bb:1e:80:dc:11:c6:d3:e9:ad:e8:5e:
                    ea:fe:67:37:d0:1e:02:3a:d6:f7:d0:ee:66:dc:d5:
                    a8:cd:e9:65:2b:d1:71:00:35:e0:f8:87:0e:89:a6:
                    ac:9a:ef:25:8c:99:fe:5f:6c:d7:d1:91:45:52:8a:
                    2e:d1:c3:76:d4:f2:d0:89:93:cd:e1:ef:b6:ba:46:
                    f9:fb:fc:c1:76:a1:92:df:c9:94:70:3c:60:f4:f4:
                    9c:12:18:ab:7f:19:98:c6:cf:09:94:81:b7:9d:75:
                    7f:58:a5:55:53:7e:35:f2:34:8e:0a:16:f6:9b:ca:
                    f3:08:26:6f:14:8c:55:99:86:33:7b:16:72:08:33:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:60:28:1B:96:10:8E:1A:97:E8:FF:3A:46:F4:75:E7:1C:24:EF:31
            X509v3 Authority Key Identifier:
                keyid:AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235322e302f32342d3234203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:34:6d:c0:43:c1:5c:4f:e1:c2:0a:46:11:e5:ed:16:f0:71:
         6d:48:cd:31:7c:2b:53:1a:fd:61:28:24:92:be:98:1e:27:f4:
         ac:7b:d9:2a:d8:df:af:79:bf:b5:6d:6b:ac:f2:c0:83:43:a5:
         0d:fe:42:cf:83:65:5b:b2:1f:1b:c3:68:ab:3a:13:62:c6:2a:
         79:d7:12:ef:8d:96:98:09:2d:4e:37:a5:33:f3:8a:4a:b4:23:
         f6:42:56:25:80:44:5a:27:5e:11:8a:dd:34:b4:f6:c8:10:bc:
         83:f6:ba:08:8d:12:01:45:b6:b0:5e:2f:81:38:c0:e9:d6:3d:
         1e:8f:ef:e0:ed:c5:2b:20:a2:4b:cc:78:99:16:55:86:ce:73:
         81:ab:51:3b:e6:70:2a:fa:c4:99:21:ab:4e:64:90:cc:e6:54:
         10:b1:d2:7a:00:3b:4d:71:4a:79:fd:a2:3f:1b:31:a1:de:6b:
         ce:ad:b8:82:dd:28:22:e8:26:9a:fa:de:b1:85:cd:b0:f3:f2:
         38:be:29:c7:68:b3:68:f9:34:67:d5:6e:11:75:95:ca:86:8c:
         fb:bf:15:2c:67:ba:2e:57:f0:5e:92:11:16:3d:07:75:bd:51:
         95:07:1c:25:de:1f:38:6d:eb:bf:a7:19:8a:4f:c3:bd:69:df:
         54:4e:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:49:11 2026 by rpki-client