Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3234203d3e203533323235.roa
File:                     3137372e3133372e32352e302f32342d3234203d3e203533323235.roa (raw, json)
Hash identifier:          Uji7fbj9bqxdZ9eyVVruNpoOY2lLwc0/qWhn9VllgFg=
Subject key identifier:   20:DD:BA:F6:7A:45:21:E0:08:C8:A2:2F:94:6F:70:FB:F7:01:93:47
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       4B2A8D7B32C5A18201A82892AD4817BF58F11A5B
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3234203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:35:37 +0000
ROA not before:           Wed 13 May 2026 12:30:37 +0000
ROA not after:            Wed 12 May 2027 12:35:37 +0000
asID:                     53225
IP address blocks:        177.137.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:2a:8d:7b:32:c5:a1:82:01:a8:28:92:ad:48:17:bf:58:f1:1a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:30:37 2026 GMT
            Not After : May 12 12:35:37 2027 GMT
        Subject: CN=20DDBAF67A4521E008C8A22F946F70FBF7019347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:5d:80:62:4d:7f:ee:cc:c9:87:91:54:1d:
                    70:04:e1:c1:e1:ba:c7:f0:cc:e0:2e:09:27:ff:b7:
                    a5:40:b4:ff:f0:f5:21:95:d8:29:f6:35:0e:22:26:
                    50:7f:d4:d0:51:f0:9a:b7:fb:80:1b:3e:6b:51:f2:
                    d1:0f:ab:65:f6:5d:98:d5:33:3d:b0:5a:42:6c:cc:
                    f9:62:d1:d3:85:0f:ac:71:47:30:14:76:76:e7:93:
                    e0:a1:a9:8b:6d:45:cc:53:e8:80:2b:9e:aa:30:f5:
                    62:3d:0c:20:43:03:d5:bb:32:b9:50:c6:45:67:3c:
                    7e:c9:05:ab:e1:39:e5:b4:3c:15:81:01:1a:e3:43:
                    1b:5d:ec:82:dd:81:f7:15:a8:6c:3a:03:a9:21:0b:
                    ce:62:dc:11:72:90:4a:66:c2:65:08:8a:63:78:c7:
                    6c:31:91:15:c0:ff:e6:7a:ed:d7:89:ab:c2:ae:4c:
                    ed:da:86:c6:8f:92:29:0b:7b:17:07:a6:f3:db:48:
                    76:db:04:b5:c8:61:f4:63:dd:0f:13:94:a9:f2:7f:
                    05:3d:48:00:a9:ac:f0:df:b0:62:17:a8:31:18:c8:
                    87:f3:45:e1:d3:e5:9e:90:12:3b:a9:0d:18:84:be:
                    29:b8:53:3b:f0:a6:bd:df:27:5d:2b:01:97:68:68:
                    6d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:BA:F6:7A:45:21:E0:08:C8:A2:2F:94:6F:70:FB:F7:01:93:47
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32352e302f32342d3234203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:cc:1c:52:ae:38:29:24:5d:22:81:5d:b0:c4:74:40:ad:6f:
         2b:17:f7:76:c9:28:08:47:20:c4:f5:06:1b:f1:52:46:37:1b:
         ed:bf:7a:7a:e9:ff:67:d8:34:4f:78:9d:7c:ea:64:95:5f:6e:
         d2:58:b6:b2:33:96:d8:c4:64:84:59:b0:1e:de:17:82:dd:d3:
         6c:21:43:99:fe:44:a4:0c:9e:95:cc:21:89:2b:21:81:56:c9:
         59:2c:70:0d:09:48:16:d7:09:b0:9f:c6:9b:b1:c1:d0:0b:4c:
         db:21:8a:12:c7:53:5d:ba:96:9b:31:16:00:b7:e5:25:bd:6b:
         19:ef:68:c2:a8:0d:33:24:3b:2e:e9:13:f1:1e:10:2e:d9:a7:
         09:cc:7c:c6:70:7f:60:f6:7a:2e:f8:c6:bd:8f:c1:28:a3:32:
         a6:47:d2:4c:bf:6f:ab:a6:84:c8:f7:1e:24:ab:6f:b2:a3:14:
         d4:df:d0:cc:19:b5:fc:9e:82:6c:73:d1:ed:74:5f:a4:c5:45:
         05:48:ac:b0:70:5a:13:e8:7d:a1:d2:f0:bb:fa:c0:9b:4a:45:
         6f:cd:b7:de:d1:27:98:fc:2a:11:f7:d0:76:3f:84:eb:40:6f:
         b0:3e:df:4e:15:87:45:25:17:bd:79:dd:64:cd:a2:53:d0:7c:
         1b:11:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:42 2026 by rpki-client