Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32332d3233203d3e203533323235.roa
File:                     3137372e3133372e32302e302f32332d3233203d3e203533323235.roa (raw, json)
Hash identifier:          qy6lNpzxW3ul02ZtL/kfSUzfiYM3FrEzPet1HUkrXOU=
Subject key identifier:   57:D3:B0:AE:EA:75:75:05:CD:41:46:BE:F4:E8:23:71:D8:26:8F:EB
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       3D6647CAEC4A35947AEAED40F1C40A17073ED8B3
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32332d3233203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:35:27 +0000
ROA not before:           Wed 13 May 2026 12:30:27 +0000
ROA not after:            Wed 12 May 2027 12:35:27 +0000
asID:                     53225
IP address blocks:        177.137.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:66:47:ca:ec:4a:35:94:7a:ea:ed:40:f1:c4:0a:17:07:3e:d8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:30:27 2026 GMT
            Not After : May 12 12:35:27 2027 GMT
        Subject: CN=57D3B0AEEA757505CD4146BEF4E82371D8268FEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:55:30:82:6c:88:b5:58:3e:6e:d6:e4:61:
                    73:1e:92:f9:bf:78:eb:9d:c6:5e:34:b8:78:18:1a:
                    68:8d:c8:61:0e:bd:4b:4f:eb:85:cd:8c:db:42:bb:
                    33:32:0f:64:03:11:b6:ea:d6:60:9d:06:56:c8:aa:
                    4e:60:4c:53:c1:95:5a:39:e3:43:51:56:6c:33:32:
                    df:5c:a1:af:39:6f:12:5a:e9:80:d5:ca:41:12:09:
                    6c:e0:e9:fc:37:fa:38:d0:da:af:46:ba:a3:5d:e0:
                    4b:5a:82:8b:98:03:05:9e:b1:6b:27:50:fc:f3:5a:
                    f3:8b:0c:50:a8:a4:30:58:c0:62:e0:4e:65:de:62:
                    28:ec:09:39:e9:a9:b6:11:43:05:01:57:6b:d1:57:
                    21:3c:24:09:d8:cc:40:a9:b8:e6:be:f3:33:24:97:
                    5b:ce:03:e1:05:fb:83:59:19:12:d1:83:d3:0c:ac:
                    3b:d3:3a:cb:2c:4e:c4:48:ba:68:98:29:c2:86:ae:
                    cf:d6:92:76:81:51:2c:82:05:c7:08:32:19:6a:1a:
                    ac:06:9e:b2:26:dc:80:4b:c4:77:ff:86:bd:76:6d:
                    55:29:3a:24:6f:78:f5:db:e4:0b:81:e9:a9:99:e2:
                    ea:e7:2a:31:ab:32:13:3f:aa:ff:cb:8d:36:f5:fa:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:B0:AE:EA:75:75:05:CD:41:46:BE:F4:E8:23:71:D8:26:8F:EB
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32302e302f32332d3233203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:4f:f9:c0:4f:85:17:c2:df:5d:37:49:5e:1d:3c:38:2f:40:
         ca:ca:61:4c:44:b7:db:e5:32:66:07:54:a7:a5:7c:29:a0:7e:
         7c:ff:41:3f:ba:09:2e:e7:fd:94:8a:35:d9:5d:03:41:30:bd:
         7d:91:43:d3:07:d7:55:58:7d:51:af:8b:0a:20:1c:bf:d2:59:
         b2:d0:e0:5f:8d:76:87:8a:0d:71:b3:85:8f:ad:11:89:04:52:
         24:05:73:c8:9a:89:82:5f:3c:38:ea:5c:65:61:4f:58:a7:c1:
         6c:77:c7:d9:16:a2:3c:c7:c9:a1:0e:c8:89:ec:d3:91:b4:e5:
         0f:10:18:31:2f:96:ab:15:e7:a1:60:bb:75:64:59:26:0b:25:
         d3:b7:79:64:f8:0b:ba:b8:25:df:dd:fb:15:24:30:76:56:c1:
         74:8d:08:6d:90:3f:c3:54:ec:79:d5:18:93:45:57:bb:e4:f6:
         4f:b3:e8:c3:84:90:2d:62:98:46:99:2b:17:ba:25:0a:ee:8f:
         1f:08:bd:0e:b3:a5:3b:b5:eb:08:56:65:ce:04:32:03:76:fa:
         11:dd:bb:92:70:41:53:14:cd:b4:e5:f5:c9:ef:c3:8b:7f:c2:
         b2:54:bb:57:da:76:28:b2:4a:fa:95:77:59:49:36:7f:fa:50:
         27:c5:0e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:59:38 2026 by rpki-client