Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          l63PMu7B8kpzRZkNp6/Aqr2RF6tmr4v5QY/mlT0ilAg=
Subject key identifier:   87:17:3E:CA:01:93:7B:64:B7:CF:F0:61:0E:E9:4C:C2:9E:C3:40:E0
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       51FDD3E590C58EC3685ADCADB4E5AFEBC7E70B56
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:46 +0000
ROA not before:           Wed 08 Jul 2026 01:30:46 +0000
ROA not after:            Wed 07 Jul 2027 01:35:46 +0000
asID:                     262352
IP address blocks:        170.246.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fd:d3:e5:90:c5:8e:c3:68:5a:dc:ad:b4:e5:af:eb:c7:e7:0b:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:46 2026 GMT
            Not After : Jul  7 01:35:46 2027 GMT
        Subject: CN=87173ECA01937B64B7CFF0610EE94CC29EC340E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:8b:36:a1:da:2f:64:4b:02:e9:5b:13:17:
                    4f:fa:91:a1:7a:9c:ad:1a:86:dc:93:17:a9:30:79:
                    52:ef:c9:26:43:f1:b2:5d:0d:72:6c:fa:96:cb:62:
                    04:02:55:19:63:98:a5:f7:35:60:fb:2d:5a:79:ca:
                    18:b4:de:27:fe:07:e5:13:6d:5e:32:38:89:48:98:
                    4c:72:38:4c:8c:fe:b0:20:c9:69:e4:e5:58:55:62:
                    87:08:db:33:aa:80:39:f3:e2:50:33:94:b5:9f:ef:
                    ba:91:39:d2:10:4c:8d:14:cf:2d:c8:d6:e4:83:2f:
                    60:8a:02:42:37:c9:ab:35:e2:93:7a:05:b6:5b:4c:
                    c1:fa:07:5e:c5:9b:aa:d2:5d:d6:c4:f6:83:32:21:
                    ac:b2:26:d0:f3:ab:71:d8:2d:3b:2f:36:00:52:da:
                    86:51:83:5d:76:f5:a2:de:b5:2e:87:60:6f:76:2f:
                    b0:da:af:d6:12:07:8e:c9:55:df:5f:fd:0f:e9:c6:
                    8e:4d:eb:84:01:3b:a3:a1:19:5f:e6:4f:43:cd:29:
                    ad:d1:10:d4:52:0c:7b:5a:09:4c:ea:e4:69:7d:f5:
                    6f:9c:8f:9b:aa:73:3f:df:c5:06:ac:4a:b9:b3:5b:
                    6b:d7:8b:6e:d9:d6:03:4e:0e:78:59:9a:7b:ce:0c:
                    5f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:3E:CA:01:93:7B:64:B7:CF:F0:61:0E:E9:4C:C2:9E:C3:40:E0
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:91:33:2c:e9:df:fd:d3:7f:33:d5:d9:81:a2:9c:ec:52:51:
         27:b0:79:bb:f7:c6:7d:0e:6b:18:35:47:64:c0:93:7a:6d:dd:
         93:19:cb:81:9c:93:ee:b9:a2:b6:1d:ae:0b:f4:ac:80:a0:81:
         e9:0b:1d:d1:e6:a4:eb:a7:f0:02:82:8e:4c:f4:c2:c2:70:1a:
         14:c4:59:f7:00:a0:d2:1b:76:a3:1e:f1:c3:ea:38:cc:74:e4:
         c0:95:73:41:3d:65:9e:51:c7:cc:45:8b:43:6d:11:e0:f7:fd:
         e0:bf:67:f1:31:92:8c:35:f9:dc:5e:0a:ea:45:04:2d:da:20:
         ed:a0:f7:3f:64:b3:d6:fb:07:f8:e2:cd:14:bd:f0:49:13:04:
         d6:87:ff:32:87:d3:49:1f:1d:71:e9:47:ce:02:14:06:08:6f:
         f8:91:c7:00:f7:42:8f:6a:4e:e8:ce:b7:5c:8e:c5:14:c4:7f:
         3d:1e:1e:d9:76:43:ac:9b:88:c1:8d:38:bc:42:0c:f4:b2:ee:
         1b:33:76:fb:a8:22:9c:56:b5:cb:7d:71:63:ed:63:1a:2c:f6:
         02:b6:65:0c:03:9c:f7:76:9c:23:b4:68:b3:d6:9f:48:df:fa:
         e6:04:d6:ea:ec:7d:03:58:12:e3:25:15:3f:11:f5:af:f9:98:
         6b:a9:d8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:19 2026 by rpki-client