Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33312e302f32342d3234203d3e203533313037.roa
File:                     3137372e3133372e33312e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          uivS19M4UHpgdoZkurU4eobFbwhNGmz0VrzsrVCYcFE=
Subject key identifier:   BE:8F:31:98:43:71:5A:66:62:50:13:0A:20:2D:12:4B:E3:B2:D5:00
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       7FE05199D06F1287FDFFB287317C0791E053F9D7
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33312e302f32342d3234203d3e203533313037.roa
Signing time:             Wed 13 May 2026 12:26:14 +0000
ROA not before:           Wed 13 May 2026 12:21:14 +0000
ROA not after:            Wed 12 May 2027 12:26:14 +0000
asID:                     53107
IP address blocks:        177.137.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e0:51:99:d0:6f:12:87:fd:ff:b2:87:31:7c:07:91:e0:53:f9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:21:14 2026 GMT
            Not After : May 12 12:26:14 2027 GMT
        Subject: CN=BE8F319843715A666250130A202D124BE3B2D500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:c6:81:21:ea:a7:00:34:78:0b:22:1d:f8:
                    ec:94:af:97:93:4d:3c:85:ec:6c:2a:b7:98:3e:40:
                    c6:d9:3a:e2:6e:c7:9f:60:81:00:e7:5e:96:4f:c6:
                    5c:04:7e:77:6b:24:b8:07:4a:7d:22:8b:27:52:84:
                    26:08:b3:b4:67:7a:7e:73:8c:04:1c:9c:0b:76:19:
                    e1:70:39:c5:be:73:15:be:c5:2c:4f:24:f6:27:23:
                    3f:90:0b:16:6d:84:79:51:70:62:5f:4f:24:c1:0a:
                    35:f3:79:51:f4:43:1f:b2:0d:3b:30:af:16:c2:32:
                    dd:74:45:ab:04:36:f2:94:fb:74:0e:97:ed:1a:77:
                    86:2f:43:bc:20:af:81:29:f8:6c:28:cf:47:5a:0b:
                    77:9b:80:04:11:72:50:ee:fc:3b:30:cd:59:1b:12:
                    cf:7e:0c:da:e2:c1:54:6e:22:5b:de:28:90:68:5f:
                    46:47:ef:34:2d:83:f8:3b:39:ae:ee:4d:2a:a7:50:
                    e0:c0:96:1e:21:e5:42:df:4f:50:8c:db:20:7b:e9:
                    ec:16:b6:71:55:b8:f1:4d:ec:1d:4c:71:10:61:63:
                    c0:0a:68:76:31:12:e4:78:85:fd:35:1a:7e:65:de:
                    00:66:80:c6:31:d1:79:f4:c9:3b:00:4a:64:a0:78:
                    c9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8F:31:98:43:71:5A:66:62:50:13:0A:20:2D:12:4B:E3:B2:D5:00
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e33312e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:2c:cf:df:35:0c:fc:77:67:20:18:0c:f9:0c:a8:58:93:92:
         90:49:96:e4:a9:49:9e:7e:5a:11:e7:23:fb:a1:46:11:9d:11:
         b8:57:2f:46:7e:9a:fd:1c:d0:64:a6:f5:fe:e6:45:a3:66:02:
         7e:0f:ad:85:b4:2a:62:98:f3:ea:74:4e:5a:98:72:7e:67:26:
         1f:b3:a1:d4:56:55:8d:ce:6e:3e:b3:bc:fb:ad:15:76:2b:0e:
         13:27:c9:fb:ed:5d:57:db:06:20:84:96:d3:bc:4b:c0:da:1a:
         4b:de:ab:bf:e5:57:20:99:73:01:50:f3:1b:55:2c:e8:57:5b:
         75:26:99:60:23:09:cd:10:0f:52:aa:de:14:75:e4:90:fc:a5:
         98:53:7f:b6:89:08:40:81:7a:49:71:4a:0c:2d:d8:26:d5:7d:
         9d:64:75:5b:56:dc:da:a1:52:c7:10:26:fd:7e:8b:51:ee:08:
         51:fa:3b:1e:1b:11:17:be:f5:db:43:33:d1:ed:72:06:a5:c7:
         14:35:7c:a4:75:24:92:b7:2c:d9:49:db:e2:89:e3:f0:0c:53:
         f0:99:9c:37:f6:81:01:c2:3f:99:d1:19:3b:b1:40:a9:f0:bb:
         70:4d:f7:fc:e5:2b:50:b7:11:f1:eb:0f:36:f3:f8:c7:e0:c6:
         7d:5e:69:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:00:19 2026 by rpki-client