Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          5lXcn4yQt+AaSrc5sDw4s8NeuFbJVuR+lFBL3qMI25c=
Subject key identifier:   29:E6:37:A5:C8:D8:68:E1:F9:A0:CB:AF:57:81:87:66:4F:A2:F9:58
Certificate issuer:       /CN=6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271
Certificate serial:       4022A256DD7694B22628AF9162D7D457D3377D90
Authority key identifier: 6D:71:0A:7B:93:EA:8D:33:B1:A6:E1:DA:6C:D8:41:D7:5D:DA:E2:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
Signing time:             Mon 23 Mar 2026 14:10:56 +0000
ROA not before:           Mon 23 Mar 2026 14:05:56 +0000
ROA not after:            Mon 22 Mar 2027 14:10:56 +0000
asID:                     271080
IP address blocks:        177.86.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:a2:56:dd:76:94:b2:26:28:af:91:62:d7:d4:57:d3:37:7d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271
        Validity
            Not Before: Mar 23 14:05:56 2026 GMT
            Not After : Mar 22 14:10:56 2027 GMT
        Subject: CN=29E637A5C8D868E1F9A0CBAF578187664FA2F958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:6d:bb:e5:5a:bf:08:70:56:90:87:bf:6e:
                    63:56:c3:90:c3:d2:62:38:8d:6b:59:d0:86:e2:fd:
                    d1:ab:f9:f7:82:aa:bf:e3:e2:89:18:27:22:1a:ac:
                    cc:02:ba:e3:cf:a0:df:0e:f8:c1:4f:1b:a3:b0:4b:
                    f8:e4:7e:cc:98:77:0d:38:36:9c:ef:48:05:01:d2:
                    69:45:9f:6d:35:91:17:19:e8:96:c2:ff:89:e4:74:
                    58:93:96:cd:f4:25:4b:07:b2:41:35:23:fb:12:ed:
                    ae:9b:6d:c5:31:23:4f:82:1c:2e:83:77:4a:c2:af:
                    60:a2:a4:87:5f:1d:5a:74:a9:94:71:03:8b:a9:5c:
                    7d:40:5f:d1:0e:14:18:ca:65:bf:76:56:1f:8f:ad:
                    de:e3:87:f5:68:29:e5:92:e6:8e:84:01:36:6f:ef:
                    fd:10:0a:6d:24:7a:76:bd:66:71:d7:69:0c:69:b0:
                    92:aa:18:5f:05:e7:5f:ba:46:b9:52:af:09:ef:34:
                    a4:15:94:da:1c:9e:ea:48:53:4d:ef:22:ef:03:8b:
                    3c:f0:48:b3:da:0c:58:92:f7:38:9a:1b:04:d4:34:
                    7f:5d:76:46:c4:a3:c0:07:28:b8:1b:1d:2e:0c:ec:
                    90:28:33:80:43:71:55:d1:ca:4b:a7:10:5a:ba:33:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:37:A5:C8:D8:68:E1:F9:A0:CB:AF:57:81:87:66:4F:A2:F9:58
            X509v3 Authority Key Identifier:
                keyid:6D:71:0A:7B:93:EA:8D:33:B1:A6:E1:DA:6C:D8:41:D7:5D:DA:E2:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D710A7B93EA8D33B1A6E1DA6CD841D75DDAE271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/0/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:7d:3b:3e:09:09:25:b6:90:d8:12:ce:1f:fd:df:b4:dd:
         1d:08:ed:ef:c4:25:47:db:fd:06:3f:65:c4:43:69:d9:06:1d:
         97:c8:42:19:74:bb:13:ed:ef:ec:d0:54:52:e5:c7:27:14:85:
         ca:ab:94:15:f5:78:f5:1c:0f:a7:c8:83:e4:d8:df:15:ab:20:
         69:ec:34:5b:74:e1:f1:f0:63:52:a4:23:a3:dd:64:b1:13:3f:
         9b:2a:9f:8e:e3:e1:2f:f0:4c:10:57:41:a0:b2:9f:3a:b8:a9:
         79:5d:d1:5d:36:43:6d:9c:76:e3:38:8d:54:ef:55:e6:83:48:
         6e:39:ab:3e:80:1a:81:d8:b0:35:1b:5c:47:f5:bf:27:de:e4:
         5b:a3:63:3e:1d:c4:ee:75:e7:1b:c0:34:0c:7b:1e:ae:cb:5b:
         c5:b2:a6:6b:42:cc:31:39:ac:1e:86:02:be:54:64:e8:2c:8f:
         16:eb:8a:fa:1d:92:61:58:63:45:c4:dc:0d:c1:e2:80:ae:4c:
         05:54:fc:b7:cc:59:8f:0d:e0:7b:39:97:d7:4c:cc:b7:7d:dd:
         ef:d0:eb:bc:a2:48:96:4e:0a:73:e8:97:64:de:59:7d:71:e2:
         88:7a:20:5c:04:f8:bb:36:24:ef:79:7d:1b:80:ab:31:b5:9f:
         9d:f0:86:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:23:27 2026 by rpki-client