Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20313938393439.roa
File:                     3137372e37332e3230382e302f32312d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          IG0CPna2bgn6voOHaQuji3Yi1yzi9jlNXfHLOc12IZY=
Subject key identifier:   3D:B4:1B:72:7B:B2:C5:69:7B:2D:F1:F0:12:76:23:8E:FF:F2:D8:84
Certificate issuer:       /CN=EF8E653F55597910A76FC271E222514D7CDB9D90
Certificate serial:       266DA65F0DE3F27624BBA884505D1B14DC7108FC
Authority key identifier: EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20313938393439.roa
Signing time:             Mon 20 Jul 2026 13:48:33 +0000
ROA not before:           Mon 20 Jul 2026 13:43:33 +0000
ROA not after:            Mon 19 Jul 2027 13:48:33 +0000
asID:                     198949
IP address blocks:        177.73.208.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl
                          rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Jul 2026 10:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6d:a6:5f:0d:e3:f2:76:24:bb:a8:84:50:5d:1b:14:dc:71:08:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8E653F55597910A76FC271E222514D7CDB9D90
        Validity
            Not Before: Jul 20 13:43:33 2026 GMT
            Not After : Jul 19 13:48:33 2027 GMT
        Subject: CN=3DB41B727BB2C5697B2DF1F01276238EFFF2D884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:0c:e7:a4:f1:5b:8e:a4:32:06:07:08:75:
                    9e:79:09:97:d1:b6:17:1f:8d:45:27:09:0e:20:a1:
                    88:54:a0:b2:c2:ea:fe:36:8f:83:db:8b:c9:a9:1a:
                    50:fa:1a:0e:af:20:f5:45:62:53:de:bc:3f:83:56:
                    8b:df:fd:2a:91:99:e1:81:6e:cb:ce:48:48:68:8f:
                    86:5d:db:77:ce:25:d6:77:c2:e9:57:15:b9:71:8f:
                    cd:7c:49:b5:20:e5:cd:a3:bd:ce:e6:a9:50:1f:4d:
                    3a:65:1b:d6:07:76:16:1e:91:23:03:ca:42:9b:0c:
                    1f:df:d9:1b:a5:b6:3d:8f:4c:f0:3a:b8:a3:3d:bb:
                    ee:5b:79:3a:ff:54:95:3a:83:24:94:f3:80:b6:20:
                    15:c8:bc:c2:80:cd:23:38:82:3e:40:69:ac:a2:8a:
                    e0:34:fc:68:5d:95:2c:01:4d:27:3e:24:91:50:53:
                    5a:cf:18:b2:1d:a7:67:ee:8b:de:e1:47:7e:fb:b0:
                    66:13:c0:08:54:64:d8:42:6a:4a:e5:9a:7a:f3:31:
                    0a:e0:38:29:cf:a1:38:72:6d:db:fc:c9:6a:50:79:
                    23:86:96:3d:d3:af:7a:b6:98:40:f0:b1:01:95:77:
                    53:7c:bd:ea:22:f0:d7:8f:cf:ac:cc:bb:a8:26:3a:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:1B:72:7B:B2:C5:69:7B:2D:F1:F0:12:76:23:8E:FF:F2:D8:84
            X509v3 Authority Key Identifier:
                keyid:EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3137372e37332e3230382e302f32312d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:aa:56:13:20:f6:d4:62:38:f3:31:55:b0:e2:a5:d1:dc:f5:
         99:ca:44:75:9e:fe:0f:f6:83:c1:12:37:c6:fb:20:7b:9e:52:
         df:85:43:95:46:e7:67:b8:8a:ef:12:d8:a1:df:8a:67:09:fe:
         76:72:d9:98:20:6f:c1:ec:e3:cc:00:39:0c:da:cc:f6:3c:b2:
         b1:f1:a6:08:0d:b8:73:e2:76:44:45:6a:18:7f:c6:1a:04:17:
         f8:f5:e7:54:59:3a:8f:0f:17:22:b9:5b:22:fb:16:0d:3f:d1:
         38:fb:5b:22:6b:1f:f5:5e:9b:7e:e9:b0:51:a1:48:ff:f9:a8:
         0e:68:48:f8:75:c9:16:a0:aa:b7:49:b4:d9:19:b8:16:45:23:
         93:a3:09:f2:85:b8:a4:cb:9a:cd:e8:bf:b1:67:d1:e8:fd:e3:
         ad:73:08:9b:4f:68:f0:bc:4d:b8:4b:c5:a2:89:36:00:f9:2e:
         3e:8b:6d:c7:0e:ae:b6:1a:83:18:74:5e:c9:c9:6f:74:ac:b5:
         8f:a3:f9:8a:ab:8b:e5:e9:dc:0a:52:19:a4:16:1a:72:51:f1:
         19:8d:60:86:b2:dd:37:97:65:f7:b3:eb:26:07:28:f2:4b:2d:
         a3:9d:d7:16:c4:a9:f0:1d:44:9f:4a:85:fc:e0:f8:e0:98:26:
         79:e1:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:31 2026 by rpki-client