Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3136382e3233322e3137362e302f32322d3234203d3e20323633363236.roa
File:                     3136382e3233322e3137362e302f32322d3234203d3e20323633363236.roa (raw, json)
Hash identifier:          uyO1QgnT+7/JhHWwwLIBW7LRkhT5a1uLXh3maEWBePs=
Subject key identifier:   77:B9:83:D6:72:30:79:7C:0A:FA:8D:CB:C5:E6:E7:11:AE:D6:E3:DA
Certificate issuer:       /CN=EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B
Certificate serial:       448E896676F7BD0968262EE31B4CB51D262A503A
Authority key identifier: EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3136382e3233322e3137362e302f32322d3234203d3e20323633363236.roa
Signing time:             Sun 05 Jul 2026 21:54:43 +0000
ROA not before:           Sun 05 Jul 2026 21:49:43 +0000
ROA not after:            Sun 04 Jul 2027 21:54:43 +0000
asID:                     263626
IP address blocks:        168.232.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.crl
                          rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8e:89:66:76:f7:bd:09:68:26:2e:e3:1b:4c:b5:1d:26:2a:50:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B
        Validity
            Not Before: Jul  5 21:49:43 2026 GMT
            Not After : Jul  4 21:54:43 2027 GMT
        Subject: CN=77B983D67230797C0AFA8DCBC5E6E711AED6E3DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:c2:15:5d:d3:54:54:5c:0f:1e:c5:38:2e:
                    23:52:59:44:11:56:79:76:53:c0:c9:f9:66:6d:02:
                    6b:2b:8b:7b:37:15:51:6b:d7:1a:56:cb:95:5b:c7:
                    75:78:bd:42:b8:f7:00:77:42:c9:ca:82:8d:0b:9e:
                    cb:1d:ad:22:f0:e0:a5:da:a5:2c:be:cd:9f:84:b2:
                    9d:f9:a1:c2:1f:d5:76:9a:af:01:94:64:f9:9f:ff:
                    b5:fd:ca:d1:e8:21:d6:17:6c:33:6f:9f:ff:9a:3f:
                    57:21:73:d3:94:dc:f6:29:c6:94:fa:49:92:c0:f8:
                    d1:93:a7:5f:cd:7f:e6:ec:c6:27:5e:f8:fd:9f:b1:
                    f6:b3:73:b4:87:a9:7c:e4:6c:6b:ea:b7:fa:cc:3d:
                    9d:88:b1:8b:ed:14:5c:4e:a2:56:18:d5:11:f1:c3:
                    59:86:bd:3a:da:f9:a5:e5:2c:57:0e:ea:09:e8:4d:
                    75:ea:d0:84:27:2a:4f:7f:b7:68:ac:58:38:64:cf:
                    43:c6:d8:24:79:9a:01:46:8d:6e:30:11:7f:2d:07:
                    81:6a:cf:d2:95:f9:ae:5e:a4:91:51:75:ae:12:ee:
                    dc:11:40:a4:47:e5:b5:29:33:d2:1d:4f:33:73:50:
                    af:21:46:a1:d1:ca:c2:5c:53:eb:88:1f:c5:6d:c0:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:83:D6:72:30:79:7C:0A:FA:8D:CB:C5:E6:E7:11:AE:D6:E3:DA
            X509v3 Authority Key Identifier:
                keyid:EF:A5:0C:F8:65:26:9F:F6:55:BF:D3:F1:34:B3:BB:4F:1A:C2:DC:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EFA50CF865269FF655BFD3F134B3BB4F1AC2DC9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56y5yLyVhfSsUkTV7mY5Hbv7UqooFmERDXsqk5Q1q81W/0/3136382e3233322e3137362e302f32322d3234203d3e20323633363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:c8:bb:c7:51:63:c1:e2:19:a5:89:cd:65:58:03:8c:af:40:
         cb:1f:86:52:a2:7e:93:4a:57:dc:63:ca:43:68:a0:4a:df:ee:
         ee:1e:cb:8a:2a:3c:29:ce:9c:a7:fa:b8:37:e2:ee:27:c4:e5:
         99:22:5b:9a:e4:7e:bb:f4:88:b9:a5:de:8e:dc:e3:49:4a:49:
         d8:81:2d:e0:cd:37:82:89:cc:ff:7a:12:b2:9e:b2:48:07:4c:
         ca:a4:06:29:d7:16:a1:6b:a3:f9:9d:8c:57:56:51:a7:27:61:
         38:f2:86:25:3a:da:c6:03:ba:d6:62:fd:bb:71:bc:41:15:d4:
         f6:90:ea:f0:79:ae:05:78:d8:7d:e2:2f:f8:c7:38:fb:b2:84:
         d5:c9:43:10:ea:b9:dc:fd:e4:68:5b:13:af:25:97:01:8e:91:
         66:6a:ed:61:cd:a5:a3:cb:27:d1:e0:22:3d:d6:a8:fd:ac:70:
         af:b8:2c:f6:1c:85:62:a7:4b:4a:67:1b:38:a2:20:c2:de:33:
         69:01:55:cb:4b:af:7e:0d:85:56:86:cb:38:79:1e:0d:7c:f8:
         09:ab:e3:13:b6:fa:e0:e3:20:f8:18:73:3c:e9:82:57:9d:11:
         8b:6b:b8:5f:c1:36:c7:c1:09:de:a5:7e:34:67:e3:84:9b:f0:
         fd:e5:ac:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:09 2026 by rpki-client