Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32332e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          al/kOg/muJ1qXkFTrPpQrhExubYtoxmzOoAAYYw+w0U=
Subject key identifier:   9D:5A:60:96:3E:98:44:DC:90:58:F2:7D:DD:AB:7B:6A:41:E9:30:E5
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       43B4B48C9A2AAB0820B7464248D7D2D7ABAC11F3
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:35:05 +0000
ROA not before:           Wed 13 May 2026 12:30:05 +0000
ROA not after:            Wed 12 May 2027 12:35:05 +0000
asID:                     53225
IP address blocks:        177.137.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b4:b4:8c:9a:2a:ab:08:20:b7:46:42:48:d7:d2:d7:ab:ac:11:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:30:05 2026 GMT
            Not After : May 12 12:35:05 2027 GMT
        Subject: CN=9D5A60963E9844DC9058F27DDDAB7B6A41E930E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:ea:ff:7a:ae:d2:a7:64:7d:f8:68:1f:36:
                    1f:59:85:4f:bb:c5:e8:f5:13:fc:8c:53:72:62:33:
                    fe:29:f5:ed:f0:d2:08:91:53:6d:b3:ab:fb:d4:dd:
                    af:30:1f:84:f4:c3:57:18:e0:59:76:b5:a0:31:b5:
                    73:db:63:ee:fc:e8:08:78:3e:9d:c7:fd:cd:f7:9f:
                    7c:6d:58:40:f6:d0:d1:e4:80:0f:38:90:00:dc:c9:
                    d9:9c:c3:58:21:c2:00:d2:ec:28:30:1d:8c:6c:c0:
                    98:67:98:b4:d2:65:b2:e1:92:d9:48:78:36:75:15:
                    49:6e:8e:81:1c:95:fb:6b:38:85:91:de:73:14:ec:
                    51:a2:a2:5f:6b:4a:78:3b:3b:ff:3e:83:4e:43:fb:
                    85:b4:76:78:62:6b:5f:d5:eb:95:29:9a:95:92:fb:
                    42:2c:dd:0f:5d:38:5c:ea:dc:f9:de:15:3f:9d:78:
                    0c:79:26:13:0d:fc:b5:6b:99:f2:53:ca:97:5e:a2:
                    1d:2f:ef:1e:80:d4:ab:08:d3:0a:80:b8:f6:e6:d6:
                    97:42:58:91:fe:49:a2:02:81:fd:2f:c2:68:4b:f9:
                    e0:f2:ca:d8:79:d1:84:3f:ea:2f:43:68:69:14:85:
                    e1:fc:c2:d9:9a:60:21:70:c4:09:bd:c8:e4:65:5d:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5A:60:96:3E:98:44:DC:90:58:F2:7D:DD:AB:7B:6A:41:E9:30:E5
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32332e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:c6:16:c0:22:44:8c:e6:71:89:d6:f3:e6:3b:6a:4a:47:
         ae:ad:47:7e:14:15:54:cb:20:7a:9c:26:d9:cd:05:c4:9a:ec:
         6c:ba:1e:59:e3:e4:33:7c:be:b5:2d:12:c8:72:75:eb:d6:9a:
         3f:c4:66:17:8b:9f:90:c9:19:32:9e:7d:eb:9e:4b:3f:ef:ca:
         bc:ff:4a:a0:e7:28:ac:c2:2f:a3:84:76:2f:a8:06:2b:e6:b0:
         73:16:f0:99:f9:f4:72:bb:1d:48:7c:a9:c1:03:04:fc:a3:75:
         20:34:ab:b1:9e:14:20:32:26:03:42:ec:80:a8:09:d1:2e:3b:
         88:97:b3:f4:3e:53:ac:12:66:3a:71:6c:bc:f5:03:f9:aa:37:
         64:2f:22:f9:f1:c0:79:ef:9c:2d:76:cf:28:c3:23:f4:14:26:
         c8:25:e3:b1:64:c4:23:75:13:44:f5:61:d3:86:29:00:8b:a4:
         55:d6:47:dc:06:d9:b2:69:cc:5f:7d:36:6c:ac:0d:8a:d1:69:
         50:a5:f1:c2:e3:50:56:3e:b3:ea:57:a3:25:62:0d:94:aa:2e:
         9a:52:6e:eb:5a:05:1a:eb:ac:ae:0b:13:28:36:44:95:ad:8c:
         f3:79:39:06:14:a4:fd:bc:92:7d:a8:af:da:6c:15:92:43:fe:
         af:78:18:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:47 2026 by rpki-client