Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31392e302f32342d3234203d3e203533303136.roa
File:                     3137372e37342e31392e302f32342d3234203d3e203533303136.roa (raw, json)
Hash identifier:          nxZCVGO5jaEKF1RSo3jmzUZ+/5+FbvVerq4vebE+AR4=
Subject key identifier:   64:A6:1C:7D:93:27:2A:B5:52:0D:0C:15:0B:94:3A:AF:3D:93:C4:11
Certificate issuer:       /CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
Certificate serial:       7FA0904D7BE989F92F7F797E91B570B23560359B
Authority key identifier: 73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31392e302f32342d3234203d3e203533303136.roa
Signing time:             Tue 04 Aug 2026 16:28:59 +0000
ROA not before:           Tue 04 Aug 2026 16:23:59 +0000
ROA not after:            Tue 03 Aug 2027 16:28:59 +0000
asID:                     53016
IP address blocks:        177.74.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl
                          rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 23:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a0:90:4d:7b:e9:89:f9:2f:7f:79:7e:91:b5:70:b2:35:60:35:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73A3D916FCAB2E9CD85D96578E40242A2F5C9662
        Validity
            Not Before: Aug  4 16:23:59 2026 GMT
            Not After : Aug  3 16:28:59 2027 GMT
        Subject: CN=64A61C7D93272AB5520D0C150B943AAF3D93C411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:37:6e:c4:cb:c7:d7:1e:ed:28:da:37:35:
                    b3:09:50:c0:9c:a7:d8:0c:29:ad:79:dc:bb:73:6d:
                    46:c6:d4:b6:7b:ef:e0:99:0a:f6:41:c9:f3:59:73:
                    e0:fd:da:5b:d1:6e:56:d7:c1:1a:45:e1:a5:e0:48:
                    2b:61:ab:fd:82:c4:0d:d1:c7:a9:76:38:73:2a:77:
                    d9:7a:c6:fb:28:d7:e2:9f:74:41:b6:06:2f:2b:fb:
                    99:02:53:dc:ed:18:51:1f:f5:6a:13:1f:d8:8d:7b:
                    f7:de:18:1d:46:16:e1:70:fd:c0:70:7a:dc:d0:82:
                    83:2f:47:ab:cd:b6:fc:6a:c3:09:9a:52:7f:88:38:
                    c6:4c:d9:52:d9:98:f8:42:12:0c:20:b6:12:b3:c1:
                    a9:d2:f2:93:c5:c6:fe:ab:2e:27:89:23:dd:05:0a:
                    3e:0b:5c:7d:e7:7d:b9:78:7f:05:b1:6f:19:50:de:
                    3d:b6:66:0b:b4:a8:1a:c1:8a:bb:b2:f8:84:b0:f5:
                    3a:9d:c6:3b:f0:6c:ab:21:a4:2e:99:c5:e6:2d:27:
                    d2:1f:63:bd:c1:d1:22:c5:0e:d0:99:36:39:42:78:
                    2f:f1:5f:69:10:42:62:c7:ea:42:53:86:7f:4f:ab:
                    eb:92:51:bf:ef:be:74:61:3c:c8:c6:59:e1:1e:1b:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A6:1C:7D:93:27:2A:B5:52:0D:0C:15:0B:94:3A:AF:3D:93:C4:11
            X509v3 Authority Key Identifier:
                keyid:73:A3:D9:16:FC:AB:2E:9C:D8:5D:96:57:8E:40:24:2A:2F:5C:96:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73A3D916FCAB2E9CD85D96578E40242A2F5C9662.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1poSq9emxTUHNpFonkwfhBorUXwrdWV7JkLEUJiHCX6/0/3137372e37342e31392e302f32342d3234203d3e203533303136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:d6:27:4a:95:36:f4:ce:9f:e9:b2:39:cd:b6:d8:bc:52:
         b9:37:c1:54:cd:d6:c4:bb:e4:3a:0b:a0:1d:30:09:81:3f:53:
         e5:b8:2b:fa:e4:8f:a0:cd:19:13:2b:76:98:75:25:38:67:ea:
         e0:46:c4:ae:24:c3:77:9e:4c:c3:60:fd:66:22:7e:0e:57:4c:
         e2:77:67:2f:10:19:d7:d3:e2:8b:7d:20:b3:14:5f:84:ec:52:
         35:e5:2e:60:c8:25:26:8f:2d:5e:d1:ef:28:2f:53:9e:51:1a:
         1a:1a:3e:63:63:d0:b1:be:b9:9b:1b:a0:8b:13:08:b1:e3:d1:
         0f:e0:14:a6:69:5a:66:43:bc:84:ea:5c:26:89:43:84:f9:8d:
         60:11:1f:8d:6e:80:03:0d:f4:d9:ab:6f:bc:4f:19:e0:c0:9c:
         45:96:04:bb:71:b8:b7:94:a2:3f:d9:cc:b1:ab:58:81:09:22:
         6c:be:fa:b8:66:aa:7c:67:19:42:b5:3f:23:e4:09:94:e9:ee:
         c8:c8:09:81:14:fd:38:09:4a:a8:1e:7b:52:8b:ee:2a:74:19:
         00:e5:f4:e2:8b:db:60:62:5d:35:37:d5:43:a4:f4:b2:49:18:
         a2:cc:c9:dd:67:e9:b6:45:a7:e1:30:4b:97:93:70:56:bc:4c:
         4d:e2:38:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 13:19:27 2026 by rpki-client