Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa
File:                     3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa (raw, json)
Hash identifier:          A/UcRsqvVf5abcDYZUxPg+khCncgvy54w/dg6cuiVrA=
Subject key identifier:   90:C3:49:E0:B1:CF:8B:B6:CF:71:8D:E1:1B:B3:56:75:E6:C1:56:11
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       50C8DADF861214427739C2DF7E39325B46D0B22B
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:45 +0000
ROA not before:           Wed 08 Jul 2026 01:30:45 +0000
ROA not after:            Wed 07 Jul 2027 01:35:45 +0000
asID:                     262352
IP address blocks:        177.126.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c8:da:df:86:12:14:42:77:39:c2:df:7e:39:32:5b:46:d0:b2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:45 2026 GMT
            Not After : Jul  7 01:35:45 2027 GMT
        Subject: CN=90C349E0B1CF8BB6CF718DE11BB35675E6C15611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:22:13:48:2e:36:5c:45:f5:e3:c8:af:3e:
                    c7:d0:20:c9:52:59:3b:16:09:94:73:08:cf:d6:7f:
                    9e:2f:58:3b:39:a0:4a:7b:46:f7:99:83:d9:5a:fa:
                    78:62:5d:c7:ed:77:b0:54:18:f6:9b:91:88:35:bc:
                    38:c2:aa:2a:b2:2d:0d:94:94:3e:fb:bf:89:10:8a:
                    7b:fd:51:e4:5f:36:f1:87:7b:b1:61:14:4d:fd:c4:
                    7b:8b:ca:f3:d6:6d:60:71:ad:38:fe:93:17:3e:38:
                    ea:60:71:fd:13:41:c5:b7:c6:e8:74:08:db:83:67:
                    de:ff:0b:af:af:2d:88:d0:a5:fc:0c:91:6f:63:72:
                    7c:73:f5:81:03:17:9b:78:e5:56:69:f9:04:3f:64:
                    7b:ef:0b:b8:25:cf:cc:de:b6:dc:7f:f0:93:a9:66:
                    11:f3:e4:2d:20:cb:a2:90:5f:1b:8b:d4:33:7e:9b:
                    3d:13:30:95:d0:04:85:c2:fe:e6:e5:63:40:fd:a8:
                    7c:f0:ee:3a:5e:eb:21:74:13:52:1e:da:74:9b:45:
                    32:f2:d7:73:ea:1f:cf:19:3e:3d:9c:41:e5:1d:09:
                    37:11:cb:b1:6a:f1:35:f7:0b:9d:cb:86:96:1c:68:
                    f9:4c:87:69:e0:0d:da:70:a3:5b:1a:25:c9:0d:c2:
                    ca:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C3:49:E0:B1:CF:8B:B6:CF:71:8D:E1:1B:B3:56:75:E6:C1:56:11
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38302e302f32312d3231203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:32:48:14:72:5e:07:4b:ce:84:fa:ea:7f:f4:71:51:86:24:
         0f:76:f1:c1:53:f7:54:1d:7d:16:a0:c1:7f:26:f1:33:ed:d9:
         ef:14:23:79:70:bd:65:76:e2:f4:26:72:fe:da:80:24:34:d6:
         5e:2c:66:ca:60:fb:95:70:eb:0a:32:cc:57:23:15:52:bd:fc:
         47:07:46:2b:b6:37:29:ef:a3:9c:13:e7:55:12:61:53:fd:e9:
         99:26:46:38:de:7b:58:47:93:98:8f:82:fd:44:69:bd:21:68:
         ae:20:cd:03:ee:0a:f7:e4:21:ba:27:c0:6a:1d:47:72:41:55:
         5d:71:ef:bd:0b:ae:04:01:b0:4c:bd:c5:13:70:74:81:ad:9e:
         85:11:2d:18:ac:4a:f5:de:20:72:33:ef:52:19:29:e5:9d:21:
         1d:f5:4c:a6:85:50:1c:b8:37:8e:e6:ef:c1:ef:a0:ff:2c:f3:
         09:af:8d:fc:c5:77:d3:3c:09:13:89:65:30:97:a5:41:f6:d6:
         53:62:a2:7b:ff:f2:cf:a4:c3:ee:28:1c:51:7a:e8:b3:bd:8e:
         d4:8c:a7:11:92:d9:4d:bb:11:3f:ad:9f:3f:9e:08:41:da:e0:
         b0:ef:57:74:95:c5:a7:3e:4a:8d:31:6c:f2:2a:2e:38:42:be:
         98:d6:e3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:57 2026 by rpki-client