Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          XBKOOKXLojVSOB6+dPlqfZZUqm7pp3CU/5YTGwnWOIU=
Subject key identifier:   79:63:1E:F6:4C:55:63:29:F8:D6:26:AD:0F:13:48:04:1F:2C:CB:89
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       013858FD895BA241BF869077F3D6C725D79FF575
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 27 Jun 2026 20:47:32 +0000
ROA not before:           Sat 27 Jun 2026 20:42:32 +0000
ROA not after:            Sat 26 Jun 2027 20:47:32 +0000
asID:                     262393
IP address blocks:        177.190.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:38:58:fd:89:5b:a2:41:bf:86:90:77:f3:d6:c7:25:d7:9f:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Jun 27 20:42:32 2026 GMT
            Not After : Jun 26 20:47:32 2027 GMT
        Subject: CN=79631EF64C556329F8D626AD0F1348041F2CCB89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:29:18:de:38:cc:b6:ce:ba:4e:43:39:bc:
                    42:b4:cb:70:b4:fe:40:8d:c1:1a:15:5f:3d:2d:0b:
                    92:f7:a0:f5:63:ef:83:23:a1:08:61:75:78:6a:da:
                    c1:e6:1e:e5:cb:dd:d7:3f:cd:bd:83:9d:e8:37:a4:
                    b4:f3:8a:ec:d9:b6:27:09:43:17:e1:63:77:fa:cd:
                    23:7b:ae:83:ce:73:80:e5:ba:cd:e9:04:21:4e:5b:
                    14:44:36:7f:f6:70:84:c6:bb:2e:65:7f:d2:c8:09:
                    76:a8:a6:dd:28:4a:c0:73:a0:75:a0:6e:68:ff:a3:
                    de:06:f5:60:04:b0:00:8c:1c:3a:9c:44:25:e3:76:
                    a3:66:60:b6:4e:ce:cd:6c:23:1d:e8:52:c0:f1:f7:
                    99:c6:2e:84:86:aa:c0:83:69:03:e3:89:6a:d2:58:
                    66:7b:7a:04:19:13:98:b8:84:4f:f7:4c:55:f0:4c:
                    21:31:da:9d:33:14:4b:7d:a7:7c:15:3e:6e:fc:fa:
                    87:7e:14:58:9f:aa:a4:00:fd:86:ee:9e:ba:12:fe:
                    8c:64:96:e1:e0:7a:57:d6:41:82:6e:8a:6d:c3:d5:
                    b4:88:c0:b2:23:27:7b:37:0a:cd:3c:19:39:ee:8d:
                    12:8d:e4:fa:a9:53:cb:95:b8:1f:bc:bd:6b:03:a1:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:63:1E:F6:4C:55:63:29:F8:D6:26:AD:0F:13:48:04:1F:2C:CB:89
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:68:eb:20:0f:d8:73:5a:fe:5a:78:00:a5:c9:b3:b3:23:44:
         e3:85:15:71:05:65:fd:fd:28:e3:33:17:51:ed:c1:b9:89:18:
         10:2b:b2:aa:4b:c7:f6:9c:b9:ec:ff:5a:13:4f:fd:18:b1:d1:
         bf:08:12:c9:30:71:19:6f:d5:09:59:36:e6:7d:86:d7:19:1b:
         c9:54:ec:98:d4:6f:80:f0:5f:96:0e:9e:d8:bd:7b:ce:d3:c6:
         eb:b0:4b:1d:42:be:ab:34:57:14:82:6f:4f:4a:aa:b4:b7:c7:
         71:7c:00:f4:65:0b:22:cc:1a:2c:93:69:0f:5d:ec:80:bf:15:
         5d:a2:94:25:f1:1c:67:ad:e1:9a:2f:25:43:78:c1:cd:1b:d3:
         8c:fd:e7:71:aa:94:7a:b6:68:09:4a:83:ae:23:6d:91:92:fd:
         dc:58:24:7e:70:bb:70:be:a1:2d:0d:e6:24:ec:12:ef:03:a2:
         d7:3c:dc:a8:67:57:9d:46:6a:a0:4d:cb:29:61:1c:12:ef:89:
         c4:97:13:b9:65:1f:33:ed:04:d5:c5:0b:0c:47:06:ba:c1:32:
         8d:24:38:1c:87:e0:07:b7:6e:d2:1d:ee:fb:37:f0:29:69:6b:
         78:d4:08:b1:3f:ac:b0:72:d5:b0:21:3e:35:91:35:14:af:18:
         34:28:92:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:19:26 2026 by rpki-client