Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          qhdCYUt9mi5bCSnS9WMsJUbkMgk2cma6x73rEYUG/bo=
Subject key identifier:   32:CE:E1:46:73:EC:7C:3E:D7:E3:CF:82:0C:FC:0E:7A:CD:98:58:12
Certificate issuer:       /CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
Certificate serial:       29BABE37D029CBB67346E16AE2F80C15090AB5FB
Authority key identifier: E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa
Signing time:             Mon 29 Jun 2026 12:21:06 +0000
ROA not before:           Mon 29 Jun 2026 12:16:06 +0000
ROA not after:            Mon 28 Jun 2027 12:21:06 +0000
asID:                     262653
IP address blocks:        177.105.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ba:be:37:d0:29:cb:b6:73:46:e1:6a:e2:f8:0c:15:09:0a:b5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
        Validity
            Not Before: Jun 29 12:16:06 2026 GMT
            Not After : Jun 28 12:21:06 2027 GMT
        Subject: CN=32CEE14673EC7C3ED7E3CF820CFC0E7ACD985812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:c4:1c:07:90:f8:af:d5:ad:c4:f9:5c:11:
                    df:34:4f:27:5b:85:81:c9:23:01:b6:43:68:8b:2d:
                    7e:ee:2b:e1:7f:90:69:0b:67:9a:63:12:01:72:ff:
                    99:17:df:5a:26:80:ec:a8:f8:0f:a4:62:cc:4f:e9:
                    4c:60:e7:03:69:36:2a:e7:24:d0:46:67:c2:d8:e8:
                    fb:80:5c:b3:62:36:9b:a2:d1:24:5b:ee:1f:51:e2:
                    77:9c:0e:96:d4:83:87:1f:f5:4c:9a:4e:46:d5:f1:
                    8c:d0:71:7d:0a:2f:80:df:fe:db:80:49:c9:53:5e:
                    9e:aa:79:f7:21:31:08:84:f9:8d:fb:30:b0:fc:0d:
                    a2:5f:af:98:0f:0d:38:ac:88:96:d2:2b:78:b9:d2:
                    c5:91:fa:2e:85:d6:99:fe:96:39:69:c7:da:b9:7b:
                    67:8a:8c:3d:dc:95:6e:ad:85:7a:21:99:09:56:3f:
                    b6:73:ee:5f:2e:33:27:25:8b:76:9c:8e:b4:9c:63:
                    a5:f8:b2:dd:7d:8c:ed:8b:58:4b:ff:34:bc:b6:99:
                    ba:70:c9:27:1a:f4:99:06:62:2d:65:58:4e:3c:7c:
                    5d:01:80:08:f5:be:f9:9d:0e:1f:22:1d:fa:c9:80:
                    80:df:3a:60:a4:3e:8e:69:50:df:22:8a:fa:01:c2:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CE:E1:46:73:EC:7C:3E:D7:E3:CF:82:0C:FC:0E:7A:CD:98:58:12
            X509v3 Authority Key Identifier:
                keyid:E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230392e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:7b:be:c7:9b:60:27:0e:38:44:3c:ce:07:ce:d3:6d:b7:
         a6:10:a2:ae:f6:7f:e1:46:5e:d2:01:4e:be:ed:56:ca:6b:f1:
         cc:7e:38:50:9a:98:86:d7:fe:d9:5b:a2:e1:c3:c2:d1:aa:bb:
         a1:72:a9:0c:c2:3c:2b:82:e1:c8:f7:ef:16:3f:73:81:84:2e:
         ba:da:6b:82:10:b1:08:1a:71:0a:3f:24:10:70:6f:8f:8c:11:
         a0:61:49:34:21:ab:62:e2:55:77:a6:a6:75:32:5a:32:02:e8:
         70:d5:4f:39:2f:45:4f:88:a6:ad:4e:57:85:ad:0c:e9:70:27:
         ee:38:5d:c9:8a:7b:82:8d:e0:5f:b9:91:76:8a:d9:a6:26:00:
         d8:54:3e:a3:04:1f:29:69:02:d2:d0:63:62:b9:0a:48:3a:fd:
         44:c3:e0:8a:39:65:a5:bd:80:79:bc:47:74:69:b0:a0:c6:49:
         93:b6:3b:1a:c6:42:3a:b9:45:d2:db:f1:dc:b3:2f:02:75:f6:
         2e:fe:34:b0:09:c9:e4:bf:c3:5c:b9:1b:cd:b9:6e:78:69:36:
         7a:b6:0f:a5:9b:48:e7:42:80:75:b9:a4:65:11:6b:e7:37:4b:
         29:85:73:87:b5:d7:73:9b:81:d2:cd:f6:f4:3f:d6:6e:5e:e7:
         cb:65:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:12 2026 by rpki-client