Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa
File:                     3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa (raw, json)
Hash identifier:          yFdSjYVdoNkOuNGx4D8qqAH8ijlLNUBGbNdjQ+A+gqc=
Subject key identifier:   3D:26:98:D6:3C:DE:62:1C:0B:9C:73:2B:79:6A:C2:3D:C7:01:49:11
Certificate issuer:       /CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
Certificate serial:       79704E18EDC76ECD660CE82FE099B8BFA023DE90
Authority key identifier: 15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa
Signing time:             Wed 09 Sep 2026 00:27:59 +0000
ROA not before:           Wed 09 Sep 2026 00:22:59 +0000
ROA not after:            Wed 08 Sep 2027 00:27:59 +0000
asID:                     263289
IP address blocks:        177.190.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl
                          rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 15:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:4e:18:ed:c7:6e:cd:66:0c:e8:2f:e0:99:b8:bf:a0:23:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15513D1A379C5EDDB8158CEA26166691DE1B169A
        Validity
            Not Before: Sep  9 00:22:59 2026 GMT
            Not After : Sep  8 00:27:59 2027 GMT
        Subject: CN=3D2698D63CDE621C0B9C732B796AC23DC7014911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:f4:db:52:c1:fa:59:f2:0e:78:40:a4:0c:
                    9c:6a:e6:b5:87:ea:5f:51:61:de:f7:1d:82:bc:01:
                    f3:dd:3c:9f:3a:8d:78:cb:7b:5e:90:4d:39:f0:18:
                    07:ba:10:27:62:a2:2d:4e:cc:9f:e5:37:60:2c:dd:
                    df:2f:b1:dd:9d:b0:e4:cb:1e:36:94:1b:8d:36:95:
                    53:e2:87:dc:f3:2d:30:c7:81:e3:3a:a0:51:6a:ec:
                    11:bb:22:62:ad:c8:0a:45:05:01:18:d1:8e:a7:cf:
                    a9:91:33:50:3a:77:78:92:cc:33:e3:c9:c3:bf:4a:
                    82:a7:49:aa:4b:b0:f7:ec:53:bd:1b:33:53:31:4a:
                    ad:ed:f4:1c:2e:d1:a9:8b:2b:66:42:4f:3a:ed:8b:
                    85:01:f7:aa:41:56:ce:32:75:41:4a:27:bf:fb:27:
                    b8:66:92:c1:b6:f4:d0:86:ea:5b:d6:58:e0:55:ec:
                    94:be:2f:d6:3c:50:13:5d:e2:18:f0:d2:fb:91:4a:
                    45:f7:b2:eb:b5:37:e5:d1:83:a6:7a:a1:ab:7f:5b:
                    fa:7b:56:5e:6f:d1:7b:6f:55:17:8d:de:53:8b:58:
                    c6:13:eb:56:c7:6f:12:ca:cf:0d:57:63:92:69:04:
                    bc:c6:65:84:64:b0:99:19:ad:f9:40:95:27:5c:f3:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:98:D6:3C:DE:62:1C:0B:9C:73:2B:79:6A:C2:3D:C7:01:49:11
            X509v3 Authority Key Identifier:
                keyid:15:51:3D:1A:37:9C:5E:DD:B8:15:8C:EA:26:16:66:91:DE:1B:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15513D1A379C5EDDB8158CEA26166691DE1B169A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/1/3137372e3139302e36362e302f32332d3233203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:2f:6d:52:47:38:8c:9e:f0:70:c1:45:40:e0:6a:59:11:18:
         ba:b1:ad:18:b1:45:a8:59:b6:a3:d7:0a:09:1b:73:6c:1a:fe:
         0c:7d:ff:52:81:cc:e2:50:73:ae:91:a5:61:12:35:67:9c:01:
         30:97:b6:ac:37:c4:91:a3:a1:e5:a3:9c:56:62:79:a4:7a:5c:
         da:c5:9b:f0:5d:3e:36:ab:a3:a3:66:ad:9f:87:d7:25:92:39:
         5d:92:23:51:79:6b:2d:7c:94:95:e5:ae:2a:68:35:a0:49:03:
         13:28:b2:cc:6a:9d:13:e2:e8:ad:76:62:b9:a4:04:d1:84:93:
         53:4f:d8:4b:cd:2e:21:bc:f9:73:c6:8d:45:d6:fc:dd:39:7c:
         5c:e8:06:cb:2c:aa:64:0b:bb:7f:f0:96:8c:f5:81:2f:1b:30:
         89:8e:ab:aa:74:f8:e5:02:e5:bb:16:b9:36:ea:4b:7a:71:13:
         ff:33:11:f3:98:99:b5:56:50:16:df:e6:9e:9a:b9:10:04:da:
         07:9f:ac:9c:6e:b4:72:c6:85:cc:46:8e:f6:04:20:04:c9:96:
         70:c5:10:f5:f2:e6:e0:ff:6d:1e:f8:49:ef:08:78:8a:22:dd:
         37:7c:0e:71:12:4c:d2:8e:45:1f:90:35:6f:22:0b:02:d6:d0:
         52:cd:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:58:11 2026 by rpki-client