Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
File:                     3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa (raw, json)
Hash identifier:          ah+XyS7zAE0IwrMsWKD/6qXg14E/IwQBeqH5TreyGVY=
Subject key identifier:   1F:34:D1:3A:7F:9F:C6:E2:82:89:D8:D4:2B:27:79:9D:7D:6C:D1:52
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       65CE294038497D9822C909304AE3BC9D0BD9482E
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:45 +0000
ROA not before:           Wed 08 Jul 2026 01:30:45 +0000
ROA not after:            Wed 07 Jul 2027 01:35:45 +0000
asID:                     262352
IP address blocks:        177.126.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ce:29:40:38:49:7d:98:22:c9:09:30:4a:e3:bc:9d:0b:d9:48:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:45 2026 GMT
            Not After : Jul  7 01:35:45 2027 GMT
        Subject: CN=1F34D13A7F9FC6E28289D8D42B27799D7D6CD152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:a9:b8:ec:bc:56:51:88:50:b1:87:80:d4:
                    40:98:49:14:e7:ff:22:a4:2f:73:7b:42:e4:08:38:
                    1b:8e:fa:ba:d1:19:d1:7e:c9:08:74:40:5c:98:b4:
                    b8:ca:24:08:b9:2e:1d:73:9b:68:6a:ef:53:e3:68:
                    0d:d7:e2:5e:bc:df:40:c7:0d:ea:7a:9b:fb:11:e3:
                    f7:fd:1a:0f:13:32:ef:cc:fa:d9:9c:ce:5b:b0:fb:
                    7e:63:1a:7f:80:cb:c6:31:04:ce:c8:9c:61:8e:e7:
                    4f:e4:bb:c5:76:61:a9:af:6c:0a:3a:c5:3c:8d:52:
                    4e:4c:ef:cb:29:08:26:18:c0:ef:7b:61:b8:28:7d:
                    e0:a7:bf:91:c3:ae:7a:f1:aa:1d:e2:38:8c:68:89:
                    25:16:bf:33:3b:0d:9e:5a:04:88:f8:b1:c2:97:8f:
                    6e:35:b6:35:d3:99:76:d2:6f:b8:a8:56:24:93:13:
                    ec:f3:e4:b6:f5:58:b9:11:43:5a:98:ae:d8:73:ea:
                    85:f0:08:97:9a:d5:0a:a5:ca:df:16:49:59:96:54:
                    e1:ca:d9:d4:af:12:c1:a0:76:b3:ff:fc:2c:be:b8:
                    26:a0:bc:d4:b6:aa:ec:a8:c0:42:ce:f8:52:dc:ee:
                    f2:5f:bc:2d:c8:04:ad:32:74:10:1d:2d:a6:7a:36:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:34:D1:3A:7F:9F:C6:E2:82:89:D8:D4:2B:27:79:9D:7D:6C:D1:52
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39322e302f32322d3232203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:63:7b:ea:5e:8e:83:d0:d6:72:16:41:78:02:4f:01:6d:6c:
         38:ea:1a:6d:13:ce:6f:7a:56:d6:14:43:3e:ca:4d:0a:bd:7c:
         32:42:7e:46:37:85:e4:46:05:58:22:f7:79:de:9d:7b:01:70:
         14:fd:32:db:50:2b:70:a7:d5:38:dc:19:7a:38:90:06:c8:62:
         e3:1f:3f:b8:f4:6b:8c:df:2b:ab:69:e2:be:30:7e:a6:65:2e:
         cd:b8:95:9a:46:20:47:ba:c6:d1:5b:08:a4:69:18:ba:5d:f0:
         d1:62:78:17:52:cc:0c:50:7b:bb:5c:6c:3b:f8:9e:df:e0:83:
         59:49:b2:a7:05:de:28:f0:c3:f6:d4:86:c3:12:32:5e:62:91:
         06:40:7e:52:3e:b4:a4:fa:c9:f4:4a:dc:aa:3a:63:e7:3b:64:
         0b:78:83:3d:4b:2b:a7:06:44:b1:6d:0c:3d:d2:c8:24:4c:ef:
         69:45:72:e0:41:dd:47:38:93:da:53:3e:5d:b6:a3:6f:eb:25:
         ab:99:cf:25:6e:6f:6e:f1:56:f5:57:1c:f4:bb:2c:f0:0d:72:
         39:14:38:33:9a:66:57:dc:d3:39:e5:4f:74:c8:de:7c:9a:b7:
         6e:31:f3:b0:e2:18:e8:f5:b6:a8:a8:b1:5e:50:dd:66:44:66:
         3b:2d:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:00:04 2026 by rpki-client