Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235352e302f32342d3234203d3e20323632323836.roa
File:                     3137372e35322e3235352e302f32342d3234203d3e20323632323836.roa (raw, json)
Hash identifier:          aQuljvvzROdXg3g74KvElzATM97I85D95sdVeGORfTE=
Subject key identifier:   2A:37:38:E1:40:C3:61:D2:55:74:B7:C1:08:28:C1:17:0F:B1:1D:BA
Certificate issuer:       /CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
Certificate serial:       4062C732C92A95FBCDF1697109652F321B9E5841
Authority key identifier: AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235352e302f32342d3234203d3e20323632323836.roa
Signing time:             Tue 06 Oct 2026 13:13:50 +0000
ROA not before:           Tue 06 Oct 2026 13:08:50 +0000
ROA not after:            Tue 05 Oct 2027 13:13:50 +0000
asID:                     262286
IP address blocks:        177.52.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl
                          rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:c7:32:c9:2a:95:fb:cd:f1:69:71:09:65:2f:32:1b:9e:58:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD471BD663C1E455A719ED3EA655E4E736DF4C67
        Validity
            Not Before: Oct  6 13:08:50 2026 GMT
            Not After : Oct  5 13:13:50 2027 GMT
        Subject: CN=2A3738E140C361D25574B7C10828C1170FB11DBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2c:3a:ad:15:38:6f:e9:fe:92:ce:82:49:57:
                    e3:2b:86:da:01:b7:8c:f1:db:b9:6f:87:ad:ad:00:
                    7d:36:bb:e5:6c:8c:e4:a8:78:ea:63:71:49:52:03:
                    8e:6e:79:fc:55:a9:eb:8a:30:a7:d7:e7:87:e6:52:
                    e4:d9:3a:79:98:1c:ce:32:6d:18:31:3d:45:b4:47:
                    99:f8:07:12:38:05:74:0c:0e:8c:f6:fa:b5:69:a4:
                    21:39:07:ec:56:ca:9b:31:53:46:03:9c:48:28:d5:
                    66:17:3a:a6:b4:ba:00:2f:f1:58:0b:64:02:44:fa:
                    cb:8a:f9:21:bd:fd:0b:21:45:59:44:b6:0a:cc:f9:
                    a5:ac:ff:80:b8:44:cd:b4:b2:73:91:3e:37:9c:6e:
                    c7:df:05:14:0f:ac:01:17:de:3f:e1:0d:81:27:0d:
                    f5:89:ba:1f:f8:2b:9b:42:ed:e4:76:9a:d6:85:eb:
                    98:64:2a:fe:e7:c2:f5:b5:61:bd:78:e7:1d:8a:30:
                    2a:1c:ba:c3:6a:b3:d2:bf:a3:0f:9d:49:3c:db:da:
                    72:22:ed:41:5f:8a:30:3b:a5:db:8b:66:1c:4d:49:
                    6f:97:21:c8:73:93:b5:1d:3f:4e:1e:59:59:14:c4:
                    99:d8:fd:5b:f1:7f:19:99:a7:5d:0f:f6:bf:c3:d6:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:37:38:E1:40:C3:61:D2:55:74:B7:C1:08:28:C1:17:0F:B1:1D:BA
            X509v3 Authority Key Identifier:
                keyid:AD:47:1B:D6:63:C1:E4:55:A7:19:ED:3E:A6:55:E4:E7:36:DF:4C:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/AD471BD663C1E455A719ED3EA655E4E736DF4C67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD471BD663C1E455A719ED3EA655E4E736DF4C67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUHdLK9p8TtK3jrivTitR7sd6t6Fx9USVSxHqcZq9DtT/0/3137372e35322e3235352e302f32342d3234203d3e20323632323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:1f:e6:96:32:46:74:81:da:ce:af:f4:50:51:12:c5:04:
         12:5a:04:7a:6c:ec:25:46:da:bf:e9:65:c8:03:70:13:6e:ce:
         b9:aa:60:71:59:49:88:c1:8b:d7:e9:11:d6:08:8f:cb:29:7c:
         f1:36:f1:fa:dd:33:56:1d:8f:47:37:93:d1:13:f8:02:cf:91:
         bf:ec:4a:d1:01:56:50:67:0d:de:01:73:30:da:08:1d:e0:ea:
         9a:fe:1a:ac:2b:7e:49:e3:f2:9c:cb:1c:e4:7b:98:f2:c0:e7:
         ff:88:70:bb:53:bc:41:64:b0:dd:6e:b6:fe:e5:53:75:7d:ee:
         77:8c:5f:b7:af:cb:28:5c:1c:1f:bf:b1:30:61:b6:dd:61:a8:
         72:f9:7f:ef:59:5b:b9:83:74:13:15:c3:75:1c:68:8d:e9:6e:
         97:50:cf:ae:81:c9:2a:d4:78:3e:a0:16:83:e2:6b:e1:d8:d8:
         53:fd:9e:7e:39:7c:58:e5:25:07:e8:f8:5e:cc:81:2a:fc:2e:
         8c:4a:4f:31:a7:f9:a4:a0:b0:c3:d5:c9:e3:99:d3:ab:38:20:
         bd:90:b2:08:36:ac:64:8e:ca:ed:7a:1d:84:10:b9:81:bf:b8:
         bc:1d:71:60:22:95:b5:87:d6:6b:0c:84:a2:cf:98:14:17:a9:
         e1:e3:43:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:40:14 2026 by rpki-client