Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232332e302f32342d3234203d3e20323733343433.roa
File:                     3137372e32312e3232332e302f32342d3234203d3e20323733343433.roa (raw, json)
Hash identifier:          sBEsF8QgyG9yIlKiLH6D1OglZR5kV31HXaCjEnkzR+g=
Subject key identifier:   10:42:7C:7D:BC:89:75:F4:59:D9:F0:AE:A9:F7:E0:42:CC:DB:97:64
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       44AAE28D20A000DE1E868E892AE06EA46B923F38
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232332e302f32342d3234203d3e20323733343433.roa
Signing time:             Thu 15 Oct 2026 14:13:31 +0000
ROA not before:           Thu 15 Oct 2026 14:08:31 +0000
ROA not after:            Thu 14 Oct 2027 14:13:31 +0000
asID:                     273443
IP address blocks:        177.21.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 06:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:aa:e2:8d:20:a0:00:de:1e:86:8e:89:2a:e0:6e:a4:6b:92:3f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Oct 15 14:08:31 2026 GMT
            Not After : Oct 14 14:13:31 2027 GMT
        Subject: CN=10427C7DBC8975F459D9F0AEA9F7E042CCDB9764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:88:b7:4b:3f:35:22:c1:c7:be:51:08:f7:c2:
                    02:61:57:8a:be:e2:ae:d1:18:5c:bd:41:4c:8d:78:
                    12:4e:b0:9a:a1:a7:65:c9:a8:e5:c7:09:33:4a:ec:
                    74:ce:57:44:4b:28:99:7a:e8:57:22:3a:a4:9a:c1:
                    6a:06:ea:e1:e0:69:5a:ac:d3:a8:60:40:7d:9b:e8:
                    26:23:2d:2f:72:19:16:21:1a:8f:f7:a5:1f:70:c7:
                    f9:b2:1e:7c:ba:c0:02:8f:69:43:bf:7b:51:ab:b0:
                    a4:d4:1e:e4:cd:97:21:c7:d2:ad:f5:67:ed:6e:05:
                    55:48:d9:da:e3:cf:31:7c:5d:a1:46:27:a2:ae:fe:
                    d0:5f:54:69:77:a7:fb:53:3c:58:d8:a4:18:eb:de:
                    77:7a:b4:ae:a8:ae:e8:7b:f9:8b:ff:d1:d6:13:9b:
                    98:59:df:0c:d5:2f:8f:86:45:0e:67:a9:ed:0a:37:
                    eb:a5:06:e8:37:c7:34:21:38:28:31:24:7a:12:99:
                    0b:74:94:dc:c0:48:5a:e7:ff:6c:10:31:0f:1a:2d:
                    8e:a9:a2:ba:72:f0:8d:af:08:76:a9:3e:1a:35:21:
                    3b:11:d2:ad:14:4e:43:f2:4a:da:af:28:8f:91:ba:
                    64:d7:36:05:4b:3d:ff:c5:13:59:be:1b:87:9b:55:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:42:7C:7D:BC:89:75:F4:59:D9:F0:AE:A9:F7:E0:42:CC:DB:97:64
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3137372e32312e3232332e302f32342d3234203d3e20323733343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:19:36:d2:dd:3a:34:fd:39:94:d8:98:60:e4:71:c3:f5:79:
         c6:4d:3a:e6:e4:73:0f:c7:30:56:9e:9c:2a:01:33:57:bd:a1:
         29:8a:c7:5d:c9:e7:db:dc:82:24:e2:c0:ea:32:a3:59:33:bc:
         02:c7:a7:6a:cf:a6:c6:5c:6f:58:e8:56:f0:ca:a9:c1:35:60:
         94:e0:f4:35:76:57:64:bf:0f:9e:85:b6:54:2e:76:89:5d:b5:
         8e:43:79:5c:ef:c1:f3:26:44:51:50:29:50:44:f0:07:ea:e6:
         d4:c6:eb:a9:dc:71:0a:37:c0:87:9b:91:a2:19:0a:0d:64:7a:
         bb:fa:f1:12:a5:ce:7b:8e:dd:4a:03:7f:ca:58:f4:50:b1:f5:
         2e:f4:3c:fc:31:e3:58:8d:63:ca:a6:13:22:48:fe:b1:9e:77:
         14:77:c6:13:71:71:1b:46:fd:e9:bb:c0:72:e0:de:5f:00:88:
         88:6b:eb:9e:80:17:e7:61:ba:55:47:99:f0:43:a1:17:3f:b0:
         ad:a0:ea:6e:bf:94:53:72:2e:17:8e:fd:15:aa:67:42:cf:9c:
         7b:aa:68:53:89:06:b9:55:f2:44:69:62:31:99:22:0b:cd:1f:
         b4:1a:78:1c:c2:29:5e:b4:ad:9b:e9:67:84:13:f3:82:ca:7b:
         d2:44:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:56:23 2026 by rpki-client