Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3234203d3e203532353939.roa
File:                     3137372e3132342e34302e302f32322d3234203d3e203532353939.roa (raw, json)
Hash identifier:          HeegvqNfe4gMmiYQO7mLQBnqeKFyK3CWHiMnzACuMuA=
Subject key identifier:   2E:59:09:FC:FB:01:A7:A4:5F:3B:97:E5:85:80:82:A3:1A:41:50:1F
Certificate issuer:       /CN=AC8D34233BD06486497C1965CF0CF1CFDF6A581B
Certificate serial:       26F807A333E08136F13AF82789C510EC76DB4B31
Authority key identifier: AC:8D:34:23:3B:D0:64:86:49:7C:19:65:CF:0C:F1:CF:DF:6A:58:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3234203d3e203532353939.roa
Signing time:             Wed 26 Aug 2026 12:47:52 +0000
ROA not before:           Wed 26 Aug 2026 12:42:52 +0000
ROA not after:            Wed 25 Aug 2027 12:47:52 +0000
asID:                     52599
IP address blocks:        177.124.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.crl
                          rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 04:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f8:07:a3:33:e0:81:36:f1:3a:f8:27:89:c5:10:ec:76:db:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC8D34233BD06486497C1965CF0CF1CFDF6A581B
        Validity
            Not Before: Aug 26 12:42:52 2026 GMT
            Not After : Aug 25 12:47:52 2027 GMT
        Subject: CN=2E5909FCFB01A7A45F3B97E5858082A31A41501F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9d:7e:29:52:8f:ed:d3:3e:33:83:f2:36:51:
                    b8:69:13:33:6d:bb:d5:3e:bb:88:50:20:bb:50:f5:
                    6f:f9:48:9e:f4:f0:6c:fd:e2:44:42:f7:46:26:65:
                    1a:74:13:7f:e7:25:20:e2:4f:98:5b:1f:d1:52:0a:
                    b7:05:0f:ab:f4:68:16:71:20:70:7c:5d:7c:cf:d5:
                    8c:70:5d:5a:c1:05:3f:10:87:28:91:76:01:58:c4:
                    ca:5d:26:2c:e0:f1:95:bd:ab:53:cf:8e:0d:9d:97:
                    6a:87:1e:e3:8f:f5:d3:1c:42:e7:a3:d9:1d:93:b8:
                    5a:50:18:8d:af:56:41:c6:77:53:8c:3b:a2:bc:6c:
                    15:d9:c5:9b:02:cf:bf:17:d8:1b:82:c2:52:a8:8a:
                    ee:9f:0b:75:b0:4a:2d:a3:9a:c5:3f:f6:13:f8:38:
                    31:c6:a4:bc:bf:f4:d9:24:11:40:5f:a3:de:92:0d:
                    81:db:00:14:74:f0:08:4b:b3:9c:5b:9a:5f:79:7d:
                    e0:f2:f9:70:9c:65:d8:b7:f5:49:bb:03:d7:f4:51:
                    3a:8b:4f:65:eb:25:6d:59:f7:f5:0e:8b:8f:69:f5:
                    a4:67:37:a3:16:d3:86:65:fd:c2:d8:ea:df:52:bb:
                    25:9c:2a:03:d1:74:7c:ad:59:f9:49:29:d1:e8:c9:
                    9d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:59:09:FC:FB:01:A7:A4:5F:3B:97:E5:85:80:82:A3:1A:41:50:1F
            X509v3 Authority Key Identifier:
                keyid:AC:8D:34:23:3B:D0:64:86:49:7C:19:65:CF:0C:F1:CF:DF:6A:58:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC8D34233BD06486497C1965CF0CF1CFDF6A581B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ddmy5itJTTUjaBzBKkMHiFyEdnW9ojc5mnCrzvRYhVnA/0/3137372e3132342e34302e302f32322d3234203d3e203532353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:56:60:1e:b6:81:4f:9c:c6:e9:7f:57:99:00:45:79:f1:b1:
         af:c5:ef:fa:1a:88:e8:6d:9b:cd:76:54:9b:c3:bc:e8:11:84:
         c8:cc:3e:1d:b9:dd:34:93:7f:cc:b0:37:85:2c:92:0d:e1:06:
         f1:20:e3:97:92:86:a4:4c:f6:eb:ec:3c:4c:9c:be:67:68:00:
         ee:b8:02:42:ab:b8:12:ac:1b:b1:13:ae:4d:3f:d1:de:77:8f:
         52:b3:bb:b5:53:59:20:f4:2b:bd:63:ca:46:dc:57:04:5e:cc:
         0d:6f:f3:9b:58:b1:66:b9:a4:7a:a7:87:ce:16:4b:2e:51:91:
         f5:dc:ef:cf:96:fe:53:46:8b:02:48:6b:3a:d5:08:6e:ab:ad:
         3e:6d:e8:4a:eb:0d:0d:4e:55:4f:3d:ae:74:bc:6d:50:6d:b9:
         c4:32:21:a8:f6:ae:7b:1a:7b:c7:1c:50:1e:4f:61:42:43:f5:
         0b:9d:6d:47:69:17:56:62:1e:81:06:d7:31:f8:08:af:3d:da:
         2d:75:9f:da:ad:85:72:4f:8b:9f:92:b9:8e:4b:6d:b1:62:85:
         73:f3:7b:fd:ee:f1:93:90:7e:81:33:09:23:12:94:1d:4d:49:
         69:9d:13:4f:9e:70:67:b3:8f:7e:57:5f:8f:bd:f7:a8:8f:4b:
         2c:6c:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----