Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa
File:                     3137372e3135352e36342e302f32312d3231203d3e203532373438.roa (raw, json)
Hash identifier:          9yLrW4IlP3AujgkPTuljf16vdSMnMwG5aHCmK09FQfc=
Subject key identifier:   26:12:57:58:04:6D:DE:39:9A:EB:CD:6D:83:88:B3:F7:F1:FC:E7:F0
Certificate issuer:       /CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
Certificate serial:       09A48984579AC2E443CED73D5034D09EB10F5587
Authority key identifier: 84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa
Signing time:             Wed 11 Mar 2026 14:29:44 +0000
ROA not before:           Wed 11 Mar 2026 14:24:44 +0000
ROA not after:            Wed 10 Mar 2027 14:29:44 +0000
asID:                     52748
IP address blocks:        177.155.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl
                          rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:22:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a4:89:84:57:9a:c2:e4:43:ce:d7:3d:50:34:d0:9e:b1:0f:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84A76C454E1EADE3E33056011C14E1F25D7EB27F
        Validity
            Not Before: Mar 11 14:24:44 2026 GMT
            Not After : Mar 10 14:29:44 2027 GMT
        Subject: CN=26125758046DDE399AEBCD6D8388B3F7F1FCE7F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:26:4d:2d:c4:54:5b:bd:2b:57:a1:3a:d7:35:
                    f8:4e:36:9b:20:9e:96:a3:44:71:b4:49:b7:18:86:
                    66:09:39:d4:cf:ec:be:ee:4e:99:f1:bb:16:12:c9:
                    ac:6d:37:12:33:b9:02:9b:67:f7:7f:dd:0b:1f:40:
                    73:3f:56:9c:9a:76:06:8a:16:36:29:3d:14:79:a5:
                    cb:9d:ad:76:7f:3f:50:48:d2:ed:c5:84:17:08:f3:
                    6b:fa:17:99:f9:97:f6:20:54:28:30:3e:17:21:e5:
                    98:03:fd:15:02:62:79:48:ba:32:e7:12:5d:f4:7e:
                    83:67:a9:80:93:b1:ad:73:bc:1d:2a:4d:64:e9:72:
                    8f:e7:8c:f3:26:84:62:66:16:ce:5e:68:00:61:b5:
                    72:ec:a9:1f:af:52:da:ae:6d:ad:63:65:65:0b:f2:
                    6a:d2:64:92:3e:03:13:9b:a2:54:ae:e1:14:07:a1:
                    29:ef:6c:32:e0:a5:34:4e:f5:5b:d3:5b:74:3e:57:
                    60:8b:2a:9a:ea:5c:38:b9:fa:88:47:2c:a0:4d:c8:
                    92:0f:2f:0b:bc:b0:d6:8b:f9:5c:93:93:af:52:dd:
                    ea:89:78:da:19:12:f9:39:0b:2a:46:a0:55:a5:7b:
                    71:74:5d:1d:2d:ac:e9:7c:55:69:fa:d7:91:80:f9:
                    fc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:57:58:04:6D:DE:39:9A:EB:CD:6D:83:88:B3:F7:F1:FC:E7:F0
            X509v3 Authority Key Identifier:
                keyid:84:A7:6C:45:4E:1E:AD:E3:E3:30:56:01:1C:14:E1:F2:5D:7E:B2:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/84A76C454E1EADE3E33056011C14E1F25D7EB27F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84A76C454E1EADE3E33056011C14E1F25D7EB27F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/2/3137372e3135352e36342e302f32312d3231203d3e203532373438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:1a:0c:78:80:bc:11:2f:8a:72:7f:a1:91:4e:bf:97:a9:
         31:32:3c:c5:d9:43:7b:ed:7d:ec:b0:bd:a7:b6:1a:a1:98:f7:
         da:e1:c7:f2:19:10:e6:9e:f2:85:a4:62:e1:d9:c1:e7:67:8d:
         66:c5:d0:65:a6:55:1a:14:52:03:41:16:c3:3c:0f:c9:b3:3f:
         c7:80:29:11:b1:f5:b8:69:33:6d:29:08:c2:85:29:a8:87:c9:
         65:c8:4d:96:15:d4:41:25:f2:38:1e:2c:9f:b5:9a:d9:f8:8a:
         3a:7e:61:df:1d:2a:2b:e1:66:f3:bb:e2:55:6d:85:0d:2a:ff:
         b9:8d:b6:26:ed:49:e7:fd:cb:e4:fd:c8:ba:2d:3c:51:d9:ed:
         00:ef:9b:34:8f:71:62:eb:6a:d0:ba:1b:b4:2a:8b:ae:79:8b:
         6f:c5:02:d8:97:af:05:a1:84:c6:57:f5:e8:d7:71:d1:01:19:
         4c:c4:34:03:e5:23:36:f8:c6:40:3b:83:ce:b3:b3:2e:df:c0:
         a0:d3:9e:e1:a7:68:1f:98:f2:a1:42:4c:95:59:c1:db:ae:41:
         0b:2e:1e:8a:e5:20:3f:b9:19:80:85:d5:c1:02:32:81:5b:14:
         9e:d0:50:6f:83:1e:c7:1d:ad:ff:ae:95:d2:92:42:e2:10:f9:
         4e:76:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:17:00 2026 by rpki-client