Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e36362e37322e302f32322d3233203d3e203134383638.roa
File:                     3137372e36362e37322e302f32322d3233203d3e203134383638.roa (raw, json)
Hash identifier:          Gmk4uAXjVLjihYGSKpcL5wXPJyqZUmtn89bwz8iWOvQ=
Subject key identifier:   34:6A:96:C7:5C:61:93:88:1B:EB:91:3A:76:EE:AD:B9:28:09:7D:D2
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       7DB5D9E45ED6A5D82FC66EC081E4B006F4DD66D4
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e36362e37322e302f32322d3233203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:32 +0000
ROA not before:           Mon 17 Aug 2026 17:43:32 +0000
ROA not after:            Mon 16 Aug 2027 17:48:32 +0000
asID:                     14868
IP address blocks:        177.66.72.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:b5:d9:e4:5e:d6:a5:d8:2f:c6:6e:c0:81:e4:b0:06:f4:dd:66:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:32 2026 GMT
            Not After : Aug 16 17:48:32 2027 GMT
        Subject: CN=346A96C75C6193881BEB913A76EEADB928097DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e8:ba:e8:78:1d:e1:73:7c:d4:a7:20:3c:58:
                    c0:23:bb:17:7d:8f:9f:c4:43:ce:e6:d3:95:ef:0f:
                    8a:a3:a4:8c:f3:2f:31:c9:12:52:7c:c2:b4:52:3e:
                    7b:31:6a:16:b6:2e:da:35:f9:40:70:54:f7:19:b8:
                    0f:f2:91:ea:f2:bf:2f:dd:24:85:08:3a:95:3d:1c:
                    37:9f:cf:8d:60:5e:a2:f4:ad:2a:ce:07:f3:f1:d3:
                    bd:e1:38:6b:ec:fb:db:2a:63:4c:bf:d1:94:15:9e:
                    84:0d:e1:8b:96:5c:37:47:26:f8:af:ad:33:4d:bc:
                    74:d2:7b:7c:8c:06:c8:06:a0:24:f3:39:01:82:c0:
                    dd:01:2c:51:00:fe:2a:f4:02:d9:c5:14:b4:bc:8b:
                    b0:7d:68:44:09:7c:e2:7c:b0:4a:b8:e8:c1:9f:fa:
                    ed:31:cc:45:e7:64:e9:8e:fb:e6:21:46:f9:c2:5c:
                    45:0b:f7:90:11:f4:dc:85:30:07:9c:92:cd:c9:09:
                    a1:fc:ad:5e:87:6f:84:62:c2:fd:23:67:0a:2e:7e:
                    31:ec:4b:e3:f4:37:cf:88:83:7f:7a:a7:40:db:96:
                    fc:58:cd:b5:ba:06:ec:45:da:5c:e4:49:31:31:e0:
                    ee:a8:65:a4:21:41:2d:89:f1:1c:58:d0:66:d8:46:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:96:C7:5C:61:93:88:1B:EB:91:3A:76:EE:AD:B9:28:09:7D:D2
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3137372e36362e37322e302f32322d3233203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:45:e7:3a:7e:09:b4:83:bd:dc:f0:15:58:25:eb:b6:f6:
         5d:02:be:fa:2f:87:eb:d3:c4:c2:ea:e4:c8:f3:95:0e:9c:cb:
         58:42:e9:1a:c8:61:6c:f3:a1:c9:3d:32:8f:d1:b9:25:52:35:
         dc:33:5d:bd:ff:d5:b4:7f:17:57:45:97:cc:70:5b:b3:db:4b:
         7b:85:be:65:81:c2:38:86:81:2b:9c:00:53:ee:6b:9d:05:fd:
         21:5f:8a:da:48:9a:f7:32:18:31:eb:84:83:84:41:1c:e4:cf:
         bc:75:79:2e:eb:ce:67:59:31:57:ad:7f:ac:9c:e2:7f:e3:24:
         b5:dc:f1:90:ed:3b:76:85:a2:65:2d:87:dc:9a:b1:aa:97:f5:
         fe:6c:11:c2:33:34:84:06:3a:5b:06:a0:4d:69:77:fc:57:90:
         80:7c:ef:7f:ef:0a:a8:97:ac:85:6a:28:d3:3b:9e:28:01:18:
         f3:99:d7:2a:f8:75:64:bb:02:32:8d:8f:dc:ae:cb:89:1a:61:
         d9:8b:51:35:2d:0d:76:de:76:52:a8:55:eb:34:37:c5:8d:d8:
         5a:9f:08:9f:b6:29:0a:08:5c:ed:5a:90:0f:be:53:98:6b:8b:
         7b:e3:d6:74:a1:bf:fd:0b:30:85:4c:64:19:3a:ed:34:55:33:
         90:29:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:49 2026 by rpki-client