Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
File:                     3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          aJGFMO8YxvR7+tjIr8zNxMiV6lBDSAb3oevUWserlZw=
Subject key identifier:   C0:0F:CE:12:FB:CB:45:D6:B4:23:14:54:73:7F:1E:43:A5:27:DF:CA
Certificate issuer:       /CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
Certificate serial:       7BE18BF1EA7BDEC2F6CC60B7BAED9832641550A9
Authority key identifier: 10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa
Signing time:             Mon 02 Mar 2026 20:36:27 +0000
ROA not before:           Mon 02 Mar 2026 20:31:27 +0000
ROA not after:            Mon 01 Mar 2027 20:36:27 +0000
asID:                     262391
IP address blocks:        177.131.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl
                          rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 04:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e1:8b:f1:ea:7b:de:c2:f6:cc:60:b7:ba:ed:98:32:64:15:50:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1063B5203A1581839E177D89B6F58F1744A1E5D8
        Validity
            Not Before: Mar  2 20:31:27 2026 GMT
            Not After : Mar  1 20:36:27 2027 GMT
        Subject: CN=C00FCE12FBCB45D6B4231454737F1E43A527DFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:54:83:89:26:4f:03:87:c7:3b:f6:4d:71:79:
                    0a:13:08:71:f0:d7:73:6f:85:46:8e:79:34:c1:24:
                    f4:a5:ac:be:60:e0:6d:a5:3e:47:1a:b1:c2:46:54:
                    43:82:3d:7e:6f:79:1b:94:32:97:d8:d3:45:a5:1f:
                    c0:46:35:f5:e5:0c:fb:84:f2:c6:43:e6:08:c3:b9:
                    29:1d:2f:86:41:81:05:23:c0:23:35:26:2e:eb:7f:
                    42:47:a9:18:c3:46:81:c1:3d:a8:e8:81:c4:3f:0a:
                    06:53:28:0e:b8:88:85:2a:21:af:6f:af:24:4b:16:
                    80:09:46:78:14:10:92:b6:7e:d2:99:3d:a4:d7:e3:
                    e6:3a:d7:ad:04:65:4b:51:f4:25:ee:65:8d:c2:90:
                    31:2a:02:57:ae:87:48:15:1b:2d:18:1f:df:f2:c9:
                    a4:a2:96:06:ef:37:74:88:60:e9:38:3a:48:54:74:
                    26:ae:89:d5:d0:a8:88:22:cc:c0:49:6a:ae:87:72:
                    a4:54:c5:3d:91:1f:a8:b2:03:a5:8d:a0:27:b5:4a:
                    1c:a4:bf:1d:0c:65:7b:9c:8d:54:8f:92:65:3f:c8:
                    08:f8:55:62:30:dc:b7:7f:5b:71:27:b8:6a:8e:96:
                    e3:e8:2c:d7:d8:c3:b9:4b:4e:24:b1:58:49:7e:4f:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0F:CE:12:FB:CB:45:D6:B4:23:14:54:73:7F:1E:43:A5:27:DF:CA
            X509v3 Authority Key Identifier:
                keyid:10:63:B5:20:3A:15:81:83:9E:17:7D:89:B6:F5:8F:17:44:A1:E5:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/1063B5203A1581839E177D89B6F58F1744A1E5D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1063B5203A1581839E177D89B6F58F1744A1E5D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/4/3137372e3133312e3131322e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:ec:66:5a:b8:40:6f:1c:31:ce:b5:ee:c3:29:e1:93:83:
         76:da:24:bc:12:a9:db:95:8d:a2:28:04:da:9e:bf:6f:73:95:
         c1:70:0e:60:43:10:5c:77:08:fa:2a:95:a9:db:c3:63:40:df:
         2d:0d:55:a0:07:bf:ab:7b:cc:25:d7:3b:ae:48:7e:8b:ad:52:
         7b:d6:9c:50:3f:f0:f6:42:1b:3d:9c:82:00:54:34:c1:1c:de:
         82:ad:20:33:e3:cf:e3:bd:2d:2c:c4:8e:65:f6:c4:6a:77:53:
         bf:5a:ba:36:3a:05:be:a1:ad:96:8e:3e:06:eb:77:3a:45:47:
         67:25:3d:50:3a:93:0b:f1:5a:6a:59:e2:77:02:4d:cd:6b:4d:
         bc:3b:59:38:10:2f:f7:db:75:a4:a0:b3:20:2b:fc:c2:df:8b:
         08:3e:fb:cf:b4:9b:0d:76:9e:17:76:e9:ca:93:27:42:b4:56:
         b1:44:ae:97:4e:0c:1b:27:19:c9:7a:45:09:72:25:d3:40:36:
         44:a0:7f:73:f7:3a:00:c7:f5:13:37:28:8d:88:70:ad:32:f6:
         dd:9e:4e:f1:10:6f:46:ea:e0:cb:b4:0e:bf:c6:29:f6:f2:9e:
         13:3d:5c:81:0f:6e:f6:e5:1a:11:61:70:d8:f5:07:b7:58:69:
         d3:95:84:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:13 2026 by rpki-client