Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
File:                     3137372e33362e37362e302f32332d3233203d3e20323731323136.roa (raw, json)
Hash identifier:          8oOWL335dtT7CPQIFBXeV4uG9LtQVcc4WrhgijKOP3k=
Subject key identifier:   A4:2D:8D:8A:12:72:2F:5E:E6:D1:72:97:56:56:35:23:9F:62:22:44
Certificate issuer:       /CN=EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9
Certificate serial:       1D9F4BA88EE3284FEC8811E1A13E5F25BE70B05F
Authority key identifier: EC:69:30:B3:4F:7B:CD:69:31:C4:C2:48:BE:1C:14:4F:76:E3:F9:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa
Signing time:             Thu 17 Sep 2026 02:45:11 +0000
ROA not before:           Thu 17 Sep 2026 02:40:11 +0000
ROA not after:            Thu 16 Sep 2027 02:45:11 +0000
asID:                     271216
IP address blocks:        177.36.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl
                          rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 07:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9f:4b:a8:8e:e3:28:4f:ec:88:11:e1:a1:3e:5f:25:be:70:b0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9
        Validity
            Not Before: Sep 17 02:40:11 2026 GMT
            Not After : Sep 16 02:45:11 2027 GMT
        Subject: CN=A42D8D8A12722F5EE6D17297565635239F622244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:0f:33:88:55:55:f1:91:b0:92:12:04:66:
                    9f:a0:19:c0:12:a8:ed:90:08:4e:59:1a:ba:8c:95:
                    61:5c:8a:78:1f:37:13:d8:31:22:d7:2e:e3:49:5f:
                    18:37:cd:da:22:fd:80:a8:09:5f:f5:7e:47:04:3f:
                    8f:bd:9b:1b:27:0d:57:75:90:4a:ca:7f:8b:9a:29:
                    45:e4:32:f3:43:23:a6:b5:72:23:ee:ef:c5:a3:00:
                    9c:7d:30:72:04:e8:42:d2:58:33:e8:3a:bc:fe:ec:
                    88:2c:b1:5d:97:47:ca:3c:14:1c:60:5e:96:87:50:
                    c2:6d:51:5e:fc:55:3d:9c:7d:00:da:48:d1:bb:88:
                    7c:f5:2b:2a:ba:73:a4:66:19:d6:f9:67:78:d8:01:
                    b6:09:7a:f8:76:9d:4d:a7:d5:e5:05:15:63:b9:2b:
                    d0:9f:68:fd:a4:fb:9c:90:a8:48:9b:2e:12:05:e4:
                    a9:f0:4f:19:e6:19:f9:37:78:bf:d1:95:1d:bb:0b:
                    59:5f:44:6b:f7:8e:c4:b1:c5:b5:5c:7e:32:04:9a:
                    00:24:3c:ab:17:cc:c8:80:fd:f6:9c:00:e7:61:0b:
                    56:66:10:70:f7:41:71:27:b4:fc:c9:d8:04:1f:0c:
                    a7:55:f3:78:44:70:e9:67:55:d7:6c:8c:b1:f9:16:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2D:8D:8A:12:72:2F:5E:E6:D1:72:97:56:56:35:23:9F:62:22:44
            X509v3 Authority Key Identifier:
                keyid:EC:69:30:B3:4F:7B:CD:69:31:C4:C2:48:BE:1C:14:4F:76:E3:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC6930B34F7BCD6931C4C248BE1C144F76E3F9D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/3137372e33362e37362e302f32332d3233203d3e20323731323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:0a:ac:f5:ff:1f:5b:9b:ef:d1:45:7f:c9:8c:33:28:09:20:
         5a:32:56:27:11:79:ef:15:b4:a1:06:4e:c8:1c:fb:d0:76:bb:
         cd:2b:bc:fb:00:a4:42:78:c3:0f:63:16:b5:44:52:1d:83:5b:
         63:b7:29:bb:cc:0f:13:0e:07:3b:0d:d4:9f:49:3c:e6:ae:df:
         4a:ed:ae:10:86:ed:fe:76:76:c3:36:1d:57:e1:86:25:5b:93:
         ab:a1:e9:f3:f5:9b:7c:6f:ae:f6:48:80:e6:0c:3a:91:de:14:
         94:e2:dc:72:09:ae:08:88:1a:ae:47:4f:6e:63:a3:8e:e5:6e:
         27:69:22:22:8c:b2:98:f2:6b:79:6a:c8:32:c8:d5:b0:bc:3d:
         31:9c:03:bb:c6:cd:a8:85:92:7c:37:76:96:9d:71:05:c8:fc:
         23:57:43:f6:4b:d3:06:73:c0:ec:01:ef:5c:c8:0e:44:7d:18:
         93:60:4d:04:c5:2f:98:30:af:26:b8:61:fd:c7:7e:15:d5:27:
         51:44:ec:5d:48:94:95:c8:fb:01:6b:52:df:2c:5b:0b:0c:8e:
         ff:6e:9b:cf:4d:21:56:5c:07:45:4e:5b:49:6a:b8:33:63:db:
         a7:cb:57:ed:8c:1a:77:b6:f0:e3:9a:19:19:96:b7:f5:8c:ae:
         25:96:48:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----