Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa
File:                     3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa (raw, json)
Hash identifier:          fpfEBraRzK4BaJtKoNiB0O0VJtIqQeNTRaonxXFwrxk=
Subject key identifier:   87:07:9D:29:8F:7C:A7:D2:DA:05:3F:36:9F:78:49:61:BD:3D:78:05
Certificate issuer:       /CN=8B61F412D9491EE5358447F35A3653BE4A23D667
Certificate serial:       2EEEAAC29D61BFDF0FA089716160303B7C5EAB62
Authority key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa
Signing time:             Wed 25 Mar 2026 16:17:23 +0000
ROA not before:           Wed 25 Mar 2026 16:12:23 +0000
ROA not after:            Wed 24 Mar 2027 16:17:23 +0000
asID:                     267142
IP address blocks:        177.128.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ee:aa:c2:9d:61:bf:df:0f:a0:89:71:61:60:30:3b:7c:5e:ab:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B61F412D9491EE5358447F35A3653BE4A23D667
        Validity
            Not Before: Mar 25 16:12:23 2026 GMT
            Not After : Mar 24 16:17:23 2027 GMT
        Subject: CN=87079D298F7CA7D2DA053F369F784961BD3D7805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:05:85:dc:19:ee:a8:ba:5d:bd:97:0e:db:
                    b5:89:fe:25:58:a3:76:dc:ab:b3:be:57:da:4e:90:
                    56:95:44:82:1d:01:9b:38:85:d7:6a:20:d8:a2:9c:
                    71:91:72:51:7a:ad:e2:45:e0:1f:94:23:04:f9:6e:
                    7d:a1:d2:d8:1c:63:c5:40:06:30:47:8f:ab:2f:d2:
                    21:6c:fb:54:23:0a:18:a0:14:03:1e:98:52:55:86:
                    c6:bd:a8:d7:e9:e6:48:57:fa:20:53:5e:e0:e9:ea:
                    53:26:c5:72:cb:46:55:28:d9:76:87:a0:07:81:2b:
                    32:f1:82:34:09:37:99:ef:cb:17:dd:85:d5:aa:11:
                    b7:4c:bd:6c:bf:1c:30:03:7d:ba:ac:5d:bf:37:ea:
                    12:7b:89:0d:70:ab:2a:0b:2f:b4:d0:bc:de:e5:2b:
                    3e:d9:2b:87:a6:6f:4a:5a:85:96:fb:40:06:05:c4:
                    d7:6f:c0:21:02:ab:c6:5f:59:aa:2a:26:20:e4:fd:
                    1a:42:cf:96:99:0c:3e:62:d2:69:b5:9e:58:2b:f3:
                    e1:80:35:70:28:3a:03:a2:a4:14:25:de:9c:7f:37:
                    83:c7:09:5e:d6:90:ed:b5:a4:7c:ad:89:c5:9f:f6:
                    e6:ea:b1:98:d3:14:54:53:fe:41:e5:2a:19:42:6b:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:07:9D:29:8F:7C:A7:D2:DA:05:3F:36:9F:78:49:61:BD:3D:78:05
            X509v3 Authority Key Identifier:
                keyid:8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38382e302f32322d3232203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:60:54:cc:c6:56:6e:e6:71:c0:0d:a2:91:e3:c0:f5:91:e0:
         61:35:de:88:74:36:26:3f:06:d4:05:59:82:28:05:83:04:f9:
         22:8b:68:1c:14:fc:81:41:42:52:1f:82:cf:0b:64:63:35:40:
         59:ae:45:b1:e6:df:b5:5b:92:23:76:ce:86:f0:28:3b:76:4f:
         a9:76:44:72:70:3e:13:99:9c:fc:d1:57:88:f0:b4:53:db:f0:
         f8:4d:c1:18:82:5d:4c:91:52:b8:8a:48:42:f8:7c:a3:84:6d:
         1e:62:13:a5:dd:19:65:ea:a1:b4:30:a6:ba:4d:8b:e1:75:49:
         91:39:a3:83:6e:0a:ec:b6:f8:e7:1c:84:8e:38:f7:c0:eb:ea:
         32:03:b7:dd:20:79:21:42:70:e9:b6:8f:3e:7a:ed:8a:55:3a:
         9e:f2:7d:6f:b4:9f:73:f6:95:bc:81:e5:4d:c3:54:92:a6:fc:
         33:a9:d2:ba:f3:60:84:39:33:cd:2a:cd:bc:fc:65:f2:ec:8a:
         1a:84:0b:7d:30:3b:62:ba:47:11:bb:d3:b2:37:1b:1e:01:fc:
         21:a4:cf:4a:f2:73:e8:63:b1:d4:da:9e:85:34:9f:1f:90:aa:
         e5:85:cf:89:e8:77:75:28:b0:14:6d:b6:47:41:94:72:8f:dd:
         60:d0:dc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:01:04 2026 by rpki-client