Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/3137372e35332e3139382e302f32332d3332203d3e20323734373239.roa
File:                     3137372e35332e3139382e302f32332d3332203d3e20323734373239.roa (raw, json)
Hash identifier:          IdBOs/S7+8TleHvau2xQgG+7vVVMKfP2UiHd6e5c7Og=
Subject key identifier:   D9:4C:9E:7B:13:8C:4E:4F:2A:F8:DB:E9:71:2E:18:96:73:9E:3F:BC
Certificate issuer:       /CN=7DB259F8914E477AB02343D86C1BA4D33A52A17B
Certificate serial:       68A53EFBC928A5A20441DB9F0EE7EA335D359CD7
Authority key identifier: 7D:B2:59:F8:91:4E:47:7A:B0:23:43:D8:6C:1B:A4:D3:3A:52:A1:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/3137372e35332e3139382e302f32332d3332203d3e20323734373239.roa
Signing time:             Fri 24 Jul 2026 20:03:28 +0000
ROA not before:           Fri 24 Jul 2026 19:58:28 +0000
ROA not after:            Fri 23 Jul 2027 20:03:28 +0000
asID:                     274729
IP address blocks:        177.53.198.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.crl
                          rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a5:3e:fb:c9:28:a5:a2:04:41:db:9f:0e:e7:ea:33:5d:35:9c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DB259F8914E477AB02343D86C1BA4D33A52A17B
        Validity
            Not Before: Jul 24 19:58:28 2026 GMT
            Not After : Jul 23 20:03:28 2027 GMT
        Subject: CN=D94C9E7B138C4E4F2AF8DBE9712E1896739E3FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:70:8b:06:61:40:f0:a7:af:03:ce:b9:37:
                    cc:e8:ff:22:90:dd:e7:ad:fb:26:a6:e1:15:76:0e:
                    bb:cf:df:9b:e3:34:53:c4:e5:d6:83:3c:39:8a:57:
                    fa:fa:7b:f5:53:ca:59:8f:2c:94:ce:1a:fb:c8:b2:
                    e8:db:67:b6:95:5e:55:d8:2d:ff:8c:0e:5a:6b:fc:
                    cf:bc:23:31:49:e1:17:2d:93:52:e1:2f:39:d7:69:
                    1c:f9:6e:55:aa:bc:61:81:fd:86:af:77:0f:97:1e:
                    17:ac:73:94:fb:3c:de:5c:bc:da:77:2c:7e:2f:24:
                    ed:12:57:97:ff:61:02:13:ff:18:2a:4c:79:f5:fe:
                    84:73:d4:85:33:23:64:1b:f9:17:b9:4f:0c:d2:c8:
                    13:7f:fb:e6:94:2b:6c:84:7a:49:9d:e3:f3:60:72:
                    a6:9d:a2:5e:9d:a3:db:54:c2:79:27:c6:ea:d6:14:
                    be:ad:98:78:88:a1:0b:1a:b6:f9:ea:36:2c:08:ac:
                    80:87:06:b0:d7:28:64:d7:ab:92:06:42:29:2f:9c:
                    a6:e4:d5:06:6c:2d:fd:5d:22:2f:5f:2d:6c:ee:a3:
                    80:3a:70:86:34:59:ce:a1:50:f6:db:81:e6:91:d1:
                    d3:f5:d4:79:b5:42:1f:4d:6b:af:34:b7:d8:4c:82:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:9E:7B:13:8C:4E:4F:2A:F8:DB:E9:71:2E:18:96:73:9E:3F:BC
            X509v3 Authority Key Identifier:
                keyid:7D:B2:59:F8:91:4E:47:7A:B0:23:43:D8:6C:1B:A4:D3:3A:52:A1:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/7DB259F8914E477AB02343D86C1BA4D33A52A17B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DB259F8914E477AB02343D86C1BA4D33A52A17B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yfUN7SvXt8NRfJVJgq597tu4A7bhQeQm7dSk3q2Sb4y/0/3137372e35332e3139382e302f32332d3332203d3e20323734373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:f4:26:78:9d:0a:db:71:3f:30:46:b4:87:96:cf:d7:59:
         d5:c5:15:8b:37:d2:52:d3:f0:dc:8f:63:d0:44:31:91:c9:72:
         b3:e5:51:ac:ae:0a:95:60:ca:dd:09:19:41:2b:44:4f:dd:94:
         f4:f7:56:dd:79:8e:8f:ef:9d:61:ad:71:2c:09:33:4e:4c:e6:
         18:10:21:8b:d0:58:a4:91:bf:30:24:a9:24:fd:d9:0e:ef:a5:
         70:e0:2b:3a:eb:a3:ad:60:26:eb:c6:6f:41:f7:c7:01:13:e4:
         b9:0c:4b:86:e8:91:51:6a:5c:1e:f5:91:a0:04:af:1d:0f:f0:
         cb:f2:7e:50:aa:c0:d0:ff:cc:f7:d6:ad:85:0b:44:24:48:a3:
         8d:c9:5a:11:ec:2d:b2:e8:81:03:86:7c:45:20:34:b3:03:b4:
         db:90:fc:26:f0:73:f1:f8:c4:c4:23:4b:14:b0:fd:af:45:fa:
         d0:58:76:00:60:e4:85:69:38:b5:7c:5a:15:4e:5c:0c:c2:a9:
         cc:f9:e1:50:55:55:cb:a7:c4:f4:fa:3f:24:d2:3e:c6:2a:10:
         0a:78:c6:f8:0b:9c:b4:09:a2:70:c8:db:dc:cf:ca:b3:80:b9:
         d3:82:86:57:b1:00:3b:67:30:69:bc:8e:4f:44:71:de:69:f4:
         55:3d:77:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:59 2026 by rpki-client