Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa
File:                     3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa (raw, json)
Hash identifier:          AVHkfSuyR10ci91IYKkr6Nq+h5XbQ1gapRHf2e7SvUE=
Subject key identifier:   96:AA:A9:A6:F7:33:EC:C6:2C:D8:C6:A4:49:C8:97:E8:9A:BE:C0:9A
Certificate issuer:       /CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
Certificate serial:       6BB4302EAB3D8AB57A1C0268A7294CA40C19FCA8
Authority key identifier: 9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa
Signing time:             Tue 05 May 2026 19:02:02 +0000
ROA not before:           Tue 05 May 2026 18:57:02 +0000
ROA not after:            Tue 04 May 2027 19:02:02 +0000
asID:                     263586
IP address blocks:        177.155.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl
                          rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b4:30:2e:ab:3d:8a:b5:7a:1c:02:68:a7:29:4c:a4:0c:19:fc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A
        Validity
            Not Before: May  5 18:57:02 2026 GMT
            Not After : May  4 19:02:02 2027 GMT
        Subject: CN=96AAA9A6F733ECC62CD8C6A449C897E89ABEC09A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1d:6a:c5:0d:db:ad:4a:e4:15:4c:5d:df:eb:
                    68:0e:60:df:bf:bb:64:1d:f9:08:bf:f2:2f:b6:89:
                    49:5f:a7:af:9f:b4:58:61:e5:9f:d1:26:a9:19:26:
                    2f:ce:39:86:bb:85:bc:23:8f:7a:88:2e:ed:6c:d6:
                    13:f3:9f:7a:ed:00:a0:fc:b9:63:13:3e:20:64:c0:
                    29:50:03:3d:12:ff:cc:92:b6:f2:9d:cd:ef:7a:55:
                    b1:c6:78:07:fc:59:81:87:62:74:59:ec:83:70:db:
                    dc:65:69:8e:0d:8c:50:02:3a:46:67:11:10:01:e2:
                    63:85:61:c7:d2:c5:ab:12:f3:0e:96:1f:2e:4d:9d:
                    b9:2d:d9:b8:44:95:bd:ac:96:57:c2:35:1b:d9:3a:
                    19:31:6a:9e:91:83:de:91:e5:a3:4c:21:55:e6:37:
                    12:67:6e:e6:6e:3c:17:ed:76:72:e2:e3:8d:3d:34:
                    08:24:44:81:12:1d:a8:83:36:30:45:fe:58:15:14:
                    91:a5:38:9f:07:25:8d:cb:f1:ae:cb:89:06:27:bd:
                    ae:35:37:03:8c:bd:e2:59:bc:d7:83:48:c5:71:4c:
                    c1:bc:a4:4b:9c:74:0f:1f:63:68:bc:3d:da:f2:e0:
                    79:06:10:90:62:fe:3d:c6:a6:46:8f:c0:c5:f8:5b:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AA:A9:A6:F7:33:EC:C6:2C:D8:C6:A4:49:C8:97:E8:9A:BE:C0:9A
            X509v3 Authority Key Identifier:
                keyid:9C:96:A5:BD:45:B0:FB:8E:B4:DC:60:35:24:F9:AF:E8:41:D3:0D:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C96A5BD45B0FB8EB4DC603524F9AFE841D30D5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GR3z2prc4rrupeBbeozBaUFU49BYGZ6AnMEGaaJ3aLR1/0/3137372e3135352e38382e302f32312d3234203d3e20323633353836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:09:2f:72:c4:d0:ff:e8:01:0c:2d:fa:10:69:86:f1:23:be:
         7a:4f:90:11:7c:46:2f:22:78:09:3a:bd:d7:0f:4d:1f:38:ff:
         d1:80:18:d3:88:9f:bc:4b:06:13:d2:ef:32:4a:36:d6:82:76:
         ff:c2:89:44:e4:a0:cc:fd:b2:90:38:db:d6:b2:64:21:72:46:
         23:54:6f:35:79:6b:51:94:c5:f2:86:af:68:4f:09:80:f6:91:
         be:73:ae:fc:0a:a9:6d:97:9f:94:af:6d:60:98:2a:fe:2e:6e:
         16:a6:d6:b0:82:33:cb:07:f6:94:82:a2:90:19:a1:49:60:d5:
         76:f1:cc:51:6c:71:d2:d0:47:66:21:9f:49:3d:ca:04:71:53:
         c9:d8:80:cb:ea:27:ae:8b:52:23:27:62:f3:e0:09:67:85:ec:
         5e:ce:5e:a5:b0:83:2c:78:0a:95:8e:43:17:7f:32:6b:ca:52:
         02:d2:4b:6c:a1:df:0b:91:4d:d6:94:a7:6f:f5:4c:48:99:ea:
         66:24:45:a8:ec:4c:87:90:80:c9:05:81:1f:0d:7c:c7:a5:1f:
         68:81:07:72:b4:42:fd:c9:0e:df:0a:df:5f:13:8e:63:0e:5d:
         31:c6:c4:ce:3c:c9:9e:b7:6c:5d:31:e3:d1:4f:09:da:5d:22:
         ab:26:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:12:46 2026 by rpki-client