Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa
File:                     3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa (raw, json)
Hash identifier:          zgm/FpVkN2XxOh6cKVVAnB/f6b5o96NFG9lrM82TKME=
Subject key identifier:   72:22:08:88:D6:CD:F0:3A:BF:DF:84:0A:96:8F:7C:C3:E8:F1:21:6F
Certificate issuer:       /CN=8B61F412D9491EE5358447F35A3653BE4A23D667
Certificate serial:       7979FD7E973AB10304B28BCF4C6E1EC08E3423EB
Authority key identifier: 8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa
Signing time:             Wed 25 Mar 2026 16:17:21 +0000
ROA not before:           Wed 25 Mar 2026 16:12:21 +0000
ROA not after:            Wed 24 Mar 2027 16:17:21 +0000
asID:                     267142
IP address blocks:        177.128.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl
                          rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:fd:7e:97:3a:b1:03:04:b2:8b:cf:4c:6e:1e:c0:8e:34:23:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B61F412D9491EE5358447F35A3653BE4A23D667
        Validity
            Not Before: Mar 25 16:12:21 2026 GMT
            Not After : Mar 24 16:17:21 2027 GMT
        Subject: CN=72220888D6CDF03ABFDF840A968F7CC3E8F1216F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:9b:4d:b7:39:38:b6:f1:36:fd:25:82:db:
                    d0:61:9f:5e:60:4c:41:44:42:9b:51:5f:5e:d2:1e:
                    24:89:39:a1:31:2d:d4:f8:4a:e7:38:c0:c0:f5:7a:
                    85:46:9f:df:ea:16:e8:3a:66:12:75:23:da:14:51:
                    e8:b9:cf:7b:8c:56:20:89:20:49:24:f5:f6:9a:1d:
                    8e:4c:f8:a5:92:95:c2:b7:ec:86:ba:89:47:6c:04:
                    e2:af:0c:01:fd:30:68:77:25:41:d3:d3:05:82:91:
                    58:32:e6:d0:7c:cf:fe:58:3c:1f:85:7b:23:26:61:
                    88:62:07:64:b9:1f:f5:be:0a:6b:a3:e1:fb:9d:ad:
                    2b:65:d5:8f:56:8d:17:2a:45:be:34:ec:b2:8c:c2:
                    e7:8e:bd:5c:e3:6b:aa:3f:5c:66:fe:21:3e:6d:f2:
                    11:6a:3a:48:85:0f:a0:04:6a:0d:af:8b:0b:c1:79:
                    d9:ad:1d:2d:90:4b:e4:12:57:8c:4f:b8:fa:38:37:
                    be:71:24:bf:ff:f8:69:49:3f:7a:f9:c0:ed:a3:6f:
                    cc:d2:1d:5f:e2:35:51:f6:28:02:f5:d6:78:3d:d4:
                    d1:46:46:c4:da:be:24:6a:9d:b5:3c:c0:9d:c0:3b:
                    90:29:97:7a:7f:5f:a4:50:19:75:ed:8d:de:5d:4d:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:22:08:88:D6:CD:F0:3A:BF:DF:84:0A:96:8F:7C:C3:E8:F1:21:6F
            X509v3 Authority Key Identifier:
                keyid:8B:61:F4:12:D9:49:1E:E5:35:84:47:F3:5A:36:53:BE:4A:23:D6:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/8B61F412D9491EE5358447F35A3653BE4A23D667.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B61F412D9491EE5358447F35A3653BE4A23D667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/3137372e3132382e38392e302f32342d3234203d3e20323637313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:03:0f:88:8c:12:fa:0e:fe:6b:3b:69:50:98:ff:93:e9:
         39:8b:a3:56:cf:bb:e1:59:c2:b0:ea:66:39:30:dd:38:7d:46:
         69:b8:b0:fe:6f:b3:e3:24:ef:37:72:24:d5:d8:39:4c:ca:94:
         c9:b8:bd:d3:b7:3d:e7:a1:6c:a1:26:8b:ea:09:ac:71:ae:12:
         0d:e3:76:23:01:00:08:fa:0b:14:f3:95:a6:6c:5f:8a:ac:28:
         27:08:16:f9:06:ab:ad:3a:53:c1:37:ae:81:92:e3:ac:3e:d2:
         ba:f2:8d:8f:d2:e7:65:8f:40:c0:77:27:bc:ee:15:a4:6f:ca:
         1c:86:5d:bc:fa:d6:ce:e8:f1:79:72:9d:00:a0:1c:01:ed:c9:
         24:b3:86:e1:f8:93:06:f8:42:95:fa:c7:d7:71:d8:7c:61:f0:
         b9:f5:92:0b:00:3a:43:9e:60:b0:78:5c:79:f7:2a:25:3d:24:
         7a:d5:ac:8a:d6:0f:25:38:1b:cb:f6:10:91:1d:a4:6e:d3:30:
         e6:b5:c7:fe:d6:00:cd:48:8c:54:40:92:24:52:0f:0e:c0:b1:
         9a:df:24:5c:01:a3:cf:15:0d:f5:05:6c:d4:f1:1a:a8:f6:37:
         fa:b2:87:07:9c:00:c1:5e:f7:b8:7c:34:24:e2:63:83:9c:a5:
         f5:e5:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:22:57 2026 by rpki-client