Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
File:                     3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa (raw, json)
Hash identifier:          FttZwHXzPjBAstZlrov1Q8mt9OSS40t/Vx1wP6c0dbE=
Subject key identifier:   CB:64:73:7A:A8:34:8C:1D:E7:30:C1:60:6B:09:AB:EA:7B:59:D9:D5
Certificate issuer:       /CN=B64BD1527937C2519F33421A50F9D445C493A4B2
Certificate serial:       784DFCC25BB8CA23A2C852D2F5EB06C8210CCFAA
Authority key identifier: B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa
Signing time:             Wed 08 Jul 2026 01:35:46 +0000
ROA not before:           Wed 08 Jul 2026 01:30:46 +0000
ROA not after:            Wed 07 Jul 2027 01:35:46 +0000
asID:                     262352
IP address blocks:        177.126.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:fc:c2:5b:b8:ca:23:a2:c8:52:d2:f5:eb:06:c8:21:0c:cf:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B64BD1527937C2519F33421A50F9D445C493A4B2
        Validity
            Not Before: Jul  8 01:30:46 2026 GMT
            Not After : Jul  7 01:35:46 2027 GMT
        Subject: CN=CB64737AA8348C1DE730C1606B09ABEA7B59D9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:ff:42:31:93:0c:33:91:04:4f:15:bd:47:
                    f5:63:20:67:7d:80:1d:1b:96:c5:33:7f:78:ca:89:
                    3a:c5:34:1a:3d:be:72:18:0c:9b:98:86:f6:f4:36:
                    0a:3e:e9:5b:52:d1:34:8e:50:7a:a8:61:ba:de:a1:
                    09:ef:8d:1d:2c:67:a3:b9:f6:79:e8:e0:c9:33:ed:
                    6c:bc:28:4e:e3:98:ec:ba:1d:bc:cf:4c:51:3d:04:
                    c9:37:2e:6a:60:14:02:78:3f:1a:10:e8:b9:a4:c3:
                    0c:53:63:ff:b5:39:2f:8f:22:92:4a:f1:84:e8:c4:
                    40:5d:c7:13:65:51:91:10:42:3a:92:15:a5:d1:93:
                    5b:0f:04:de:ca:2b:aa:c7:bb:36:4a:f9:83:ed:09:
                    d8:df:b6:71:35:f6:72:15:e7:a6:68:d4:b8:28:68:
                    02:55:ef:80:68:bd:b8:a2:9f:0d:fc:37:b9:27:6c:
                    16:04:bc:bd:77:e2:1b:ba:c4:96:e0:38:2c:aa:95:
                    a0:33:99:73:c8:08:7a:38:fb:98:53:42:84:9a:e7:
                    ee:b8:2a:5b:b9:d2:0f:2a:c5:9c:ea:8a:cd:8c:1a:
                    f3:cc:99:50:fa:44:d4:ef:e3:5f:0f:94:f5:e3:3c:
                    fb:6b:98:79:07:d6:76:b0:3a:64:5e:ec:98:ee:e8:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:73:7A:A8:34:8C:1D:E7:30:C1:60:6B:09:AB:EA:7B:59:D9:D5
            X509v3 Authority Key Identifier:
                keyid:B6:4B:D1:52:79:37:C2:51:9F:33:42:1A:50:F9:D4:45:C4:93:A4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/B64BD1527937C2519F33421A50F9D445C493A4B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B64BD1527937C2519F33421A50F9D445C493A4B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e39342e302f32342d3234203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:a4:7b:3c:cf:06:2c:3b:bc:7c:d5:d4:ec:ad:33:27:88:b0:
         ed:d1:a5:11:bf:fe:14:48:73:ba:3d:e4:af:6f:3b:f1:32:bc:
         58:25:df:19:16:58:a4:ab:1c:65:43:a8:3d:44:06:d6:f5:0c:
         9a:03:3e:26:a1:a1:7e:38:e9:11:8d:2d:f3:76:2c:a0:02:16:
         8c:0a:87:0b:20:b2:ce:98:f1:7f:42:ce:10:55:34:43:16:3f:
         94:f5:2f:d7:5b:79:1c:ed:8a:68:6b:3c:20:16:e2:8e:46:46:
         8c:ad:5e:9f:b2:e2:46:9d:41:eb:4a:38:2e:41:36:8f:a4:36:
         7e:de:bd:5b:29:46:69:f9:81:43:f9:96:52:ce:3b:58:9b:b5:
         8d:55:e3:6f:f1:52:66:69:ff:ed:4a:76:7d:bb:5d:e7:40:b8:
         ee:81:51:2b:b5:6d:ea:0f:cc:62:70:be:48:27:83:92:2e:dd:
         10:a2:2e:bf:43:1d:50:1a:08:94:4e:8e:f8:ee:10:2f:c8:ca:
         a4:6b:90:0c:25:d6:7f:bd:77:a0:0a:a5:31:29:e9:98:2b:57:
         77:6e:2e:9e:ad:64:cf:a8:55:cd:8e:60:2b:54:fa:ea:a9:e2:
         21:fb:d0:22:8b:af:26:79:e1:b2:92:f8:14:cd:51:f8:08:c1:
         b3:bd:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:22 2026 by rpki-client