Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
File:                     3137372e3232312e33322e302f32302d3234203d3e203532393635.roa (raw, json)
Hash identifier:          TtJ98NwuDkSnjqw8mXhMU/LyByMOdGVFIsTzELdPvac=
Subject key identifier:   2B:58:5E:CB:DF:14:66:5F:5C:60:2F:4D:BA:3E:B8:51:DA:15:84:FD
Certificate issuer:       /CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
Certificate serial:       0A7A1DA93CAE225E11DEF444C9F45BB0EC195104
Authority key identifier: 31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa
Signing time:             Thu 26 Mar 2026 13:07:12 +0000
ROA not before:           Thu 26 Mar 2026 13:02:12 +0000
ROA not after:            Thu 25 Mar 2027 13:07:12 +0000
asID:                     52965
IP address blocks:        177.221.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl
                          rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7a:1d:a9:3c:ae:22:5e:11:de:f4:44:c9:f4:5b:b0:ec:19:51:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1
        Validity
            Not Before: Mar 26 13:02:12 2026 GMT
            Not After : Mar 25 13:07:12 2027 GMT
        Subject: CN=2B585ECBDF14665F5C602F4DBA3EB851DA1584FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c0:ba:0c:8b:e9:79:39:25:19:99:7b:1b:fe:
                    48:ad:f6:ca:77:16:00:0d:36:b4:0f:a6:bf:b8:e0:
                    b0:ce:df:c4:90:0e:f8:c9:9e:17:65:a1:7c:b5:de:
                    7b:85:ff:b7:97:2f:94:44:bc:2c:5d:04:39:84:e8:
                    da:ec:06:95:c2:c1:f4:02:4c:70:a6:d5:68:e4:40:
                    00:54:22:6d:73:e7:e0:87:dd:cf:45:02:7f:e1:8a:
                    46:2e:6b:73:17:5f:54:ac:d7:53:54:03:7b:23:3b:
                    71:97:48:a2:c3:06:01:6f:b3:30:79:8f:a6:35:67:
                    01:03:b1:8b:31:cb:d1:3e:27:53:e0:f0:5e:45:93:
                    fd:85:75:8a:25:e3:3f:3c:81:76:20:b0:04:0b:6a:
                    9c:e2:08:7d:dc:f5:b5:d8:a5:ce:8a:7d:11:6f:9d:
                    da:e1:7f:8e:64:8d:67:ff:ec:3c:d9:4d:fc:38:4c:
                    5e:63:61:b4:a9:ba:32:5c:de:64:a6:36:15:e4:41:
                    a9:2c:d0:a1:47:2b:28:56:23:c7:ae:24:97:94:e6:
                    dd:c3:d2:14:99:ff:07:ec:bf:7d:61:c4:5e:95:3f:
                    75:3e:14:d3:8d:5b:f0:82:26:12:d3:48:30:c4:bd:
                    7f:6c:3a:29:ee:7b:15:49:1b:b6:a8:58:32:93:69:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:58:5E:CB:DF:14:66:5F:5C:60:2F:4D:BA:3E:B8:51:DA:15:84:FD
            X509v3 Authority Key Identifier:
                keyid:31:6F:29:85:D9:3D:31:DC:FE:2F:EA:3B:FF:AD:81:E5:B6:06:F6:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/316F2985D93D31DCFE2FEA3BFFAD81E5B606F6B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/3137372e3232312e33322e302f32302d3234203d3e203532393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:c6:e1:e4:a9:aa:d7:79:36:33:52:fd:55:77:e4:a8:13:1b:
         b8:88:34:da:d0:f7:8a:b3:c4:26:7b:65:bc:00:f0:73:99:66:
         e9:eb:d5:f8:01:d3:14:ed:7e:33:66:7f:96:bc:f2:bf:42:9e:
         3b:c4:c1:54:0c:53:19:71:a6:ac:c0:fd:f1:ea:80:04:1c:95:
         e4:02:59:e7:44:2c:79:60:88:d1:de:02:bb:8b:e2:b9:ab:c7:
         f2:03:c8:6f:98:76:fc:72:fa:9f:f3:58:78:51:70:1f:c5:16:
         6a:17:f4:30:43:5c:c7:b4:28:c7:1a:e5:8f:15:fc:a8:14:66:
         0c:fa:d2:0e:bb:61:bb:b5:92:09:08:39:a5:52:e4:af:19:69:
         5c:8f:0a:38:a5:f9:99:c1:e2:dd:7f:7c:64:8b:fb:5b:f1:bb:
         15:12:73:f1:4a:4f:ae:c2:a9:58:04:26:aa:6a:4c:e7:50:76:
         f7:ea:bd:e4:e4:d4:bc:75:b9:5c:87:66:8a:1e:e1:be:df:13:
         07:32:57:e6:8e:c8:90:17:33:06:07:d7:53:e3:6f:c9:ab:e5:
         50:4c:92:f6:ec:74:7f:34:08:ea:17:1c:6f:19:90:ae:5d:05:
         04:d2:3b:04:a8:0d:ea:90:ac:9f:e0:86:3a:0e:c3:ce:2f:92:
         be:6a:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:58:18 2026 by rpki-client