Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa
File:                     3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa (raw, json)
Hash identifier:          tUpCwZR6hfOQwzUP9HvK6FFo0BJFMyD9ScCBWvCm/UQ=
Subject key identifier:   9F:F5:B5:25:91:36:D7:7D:DA:87:DB:4C:4E:F3:6D:C2:3A:33:5F:E4
Certificate issuer:       /CN=9859D9F5C4B470BE54CCC95506C40353AB1B4EDB
Certificate serial:       4EFDC1D074FFA2B65A1A8AC6B3EF69EEAA5A7EEB
Authority key identifier: 98:59:D9:F5:C4:B4:70:BE:54:CC:C9:55:06:C4:03:53:AB:1B:4E:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa
Signing time:             Fri 04 Sep 2026 18:51:05 +0000
ROA not before:           Fri 04 Sep 2026 18:46:05 +0000
ROA not after:            Fri 03 Sep 2027 18:51:05 +0000
asID:                     270917
IP address blocks:        177.200.136.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.crl
                          rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 22:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:c1:d0:74:ff:a2:b6:5a:1a:8a:c6:b3:ef:69:ee:aa:5a:7e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9859D9F5C4B470BE54CCC95506C40353AB1B4EDB
        Validity
            Not Before: Sep  4 18:46:05 2026 GMT
            Not After : Sep  3 18:51:05 2027 GMT
        Subject: CN=9FF5B5259136D77DDA87DB4C4EF36DC23A335FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:11:f2:49:c8:37:cb:cd:d0:15:19:65:5a:
                    de:69:25:3c:8d:58:36:5b:2c:be:94:e5:c2:1c:0e:
                    bb:a7:13:cc:35:d9:c8:df:4e:6a:ab:21:f9:2c:93:
                    a2:0f:db:38:7b:06:dd:c1:12:68:49:a6:e0:08:ea:
                    5c:bf:7b:37:bf:cb:d3:5c:13:4c:20:b1:6c:b7:f9:
                    fe:9f:3f:02:a6:bf:81:54:f1:84:12:f3:eb:0c:40:
                    cc:2d:a1:81:ea:9a:bb:f1:e2:50:cd:e1:51:0f:61:
                    92:65:e3:84:27:df:98:01:49:d2:e3:82:1b:ea:53:
                    b0:d8:14:9a:1e:7b:57:b3:18:d7:c7:a7:5a:6c:8e:
                    8c:19:6f:fb:f4:6e:19:4c:ab:2c:47:2d:4c:e3:14:
                    e8:31:56:fd:9e:0b:65:93:25:99:47:61:2d:f6:3b:
                    5d:c4:a4:4b:1d:cd:c3:c3:1a:fd:5c:72:f4:a6:1b:
                    9d:f1:c9:29:b8:31:35:dd:89:f8:57:9f:a8:9a:9b:
                    f3:16:39:da:35:94:5b:1d:ac:aa:86:0a:f3:af:e7:
                    1e:cb:c1:1e:62:3a:ba:4d:22:a8:7b:48:49:41:3f:
                    c7:cd:bb:9e:50:31:6f:4a:71:35:90:21:0a:0b:5c:
                    6b:98:44:be:74:bf:9c:f8:27:3f:d0:e6:0d:4e:cf:
                    1b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F5:B5:25:91:36:D7:7D:DA:87:DB:4C:4E:F3:6D:C2:3A:33:5F:E4
            X509v3 Authority Key Identifier:
                keyid:98:59:D9:F5:C4:B4:70:BE:54:CC:C9:55:06:C4:03:53:AB:1B:4E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9859D9F5C4B470BE54CCC95506C40353AB1B4EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmtvWpTinVUoGzZcCnwgi1Jvhphx4Lt2RjuzZh6JSWBY/0/3137372e3230302e3133362e302f32322d3332203d3e20323730393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:c4:c7:46:61:f4:32:87:1d:7f:6d:2c:d9:da:70:64:77:0f:
         cc:df:e5:e4:0b:da:df:4e:c3:38:23:d0:e6:1f:b2:24:25:b6:
         81:58:6f:24:5a:45:e7:dd:1f:02:e3:05:e9:73:22:f2:99:2b:
         fc:f9:fe:4f:2c:fb:fe:72:8c:e8:16:66:2d:a3:6e:6d:6a:08:
         0a:44:e8:b0:a2:08:00:86:2f:09:68:b3:a7:8d:54:2b:2d:eb:
         e4:91:f3:29:1c:3e:a8:74:11:66:17:23:c5:16:2c:c8:f7:be:
         e8:6b:76:2e:de:3c:52:de:e2:d3:69:d1:69:c1:b5:9e:78:ec:
         8e:d0:fa:fa:0a:a2:9b:a3:4b:da:65:de:bb:88:de:67:1b:11:
         d2:a6:e6:d9:63:b0:a6:25:1d:ff:3a:c1:e8:c6:cd:02:0e:01:
         20:7f:bc:43:28:ea:33:86:8e:30:f3:5c:85:8f:71:cd:9c:56:
         c1:f3:ba:40:7c:67:a5:4f:7e:5e:33:10:17:4d:1b:80:bb:4a:
         a2:60:97:9b:16:ad:ec:9e:7f:af:0b:92:d8:51:67:44:35:51:
         cd:6d:b9:30:5a:0e:df:e8:8e:ba:d5:75:25:32:1a:02:c3:55:
         05:3b:12:c3:02:ca:c9:eb:76:8a:21:ef:6a:da:ae:03:a0:df:
         80:cf:4c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:55 2026 by rpki-client