Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32332d3233203d3e203532373632.roa
File:                     3137372e32332e33302e302f32332d3233203d3e203532373632.roa (raw, json)
Hash identifier:          jTnTh3tvFb/8PMrmrgZ9cWPIwi5n5s99HweBxqALzYM=
Subject key identifier:   69:05:89:A7:E6:63:68:A0:10:2A:06:29:0F:D5:A2:3D:85:05:77:44
Certificate issuer:       /CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
Certificate serial:       0F55CA4ACF6C18AB3266AB0A86006FB84A82CCAB
Authority key identifier: 8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32332d3233203d3e203532373632.roa
Signing time:             Thu 06 Aug 2026 13:36:33 +0000
ROA not before:           Thu 06 Aug 2026 13:31:33 +0000
ROA not after:            Thu 05 Aug 2027 13:36:33 +0000
asID:                     52762
IP address blocks:        177.23.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl
                          rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:55:ca:4a:cf:6c:18:ab:32:66:ab:0a:86:00:6f:b8:4a:82:cc:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A131171592800AE6D9AD4CFF3FC8120EAF1920B
        Validity
            Not Before: Aug  6 13:31:33 2026 GMT
            Not After : Aug  5 13:36:33 2027 GMT
        Subject: CN=690589A7E66368A0102A06290FD5A23D85057744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fc:0f:3b:eb:f3:06:16:9f:24:b1:8b:cd:c3:
                    84:36:d3:80:b1:73:33:44:87:00:da:e5:08:de:31:
                    a8:b2:12:58:20:59:f2:95:ec:eb:3a:ac:2f:23:51:
                    19:8d:d7:72:2a:19:73:ca:7e:5a:9f:1a:6b:c3:82:
                    7d:18:42:99:9d:2b:42:09:16:1b:ed:cc:3d:e7:f9:
                    0e:94:5a:3a:81:e0:0b:49:c8:36:db:82:19:b1:34:
                    cf:1d:29:41:4e:70:c1:70:71:74:39:fd:a7:f5:cc:
                    ea:69:03:35:02:26:e4:e6:cb:78:52:b4:09:da:2d:
                    87:3f:81:3c:1e:38:b1:05:da:dd:d8:d8:5f:ff:bd:
                    10:d7:e2:31:5f:25:bf:a7:2c:44:14:7f:02:d2:0f:
                    3f:bc:18:84:50:cf:66:f3:a9:20:50:eb:8b:37:bd:
                    52:ef:7c:9e:66:d7:27:72:e5:4f:0e:46:7e:67:78:
                    7b:91:51:d1:c3:bf:34:bf:bc:22:2b:d2:33:21:53:
                    69:ae:cc:d1:58:8e:f9:29:33:51:1c:f6:9b:47:67:
                    4f:8a:7a:f2:65:91:bb:4f:4c:09:e4:3f:d4:25:7b:
                    45:7d:3a:d5:4d:e4:95:36:03:71:83:90:6a:52:78:
                    df:8c:66:b3:18:63:fa:3b:21:c1:b5:98:a2:1a:cb:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:05:89:A7:E6:63:68:A0:10:2A:06:29:0F:D5:A2:3D:85:05:77:44
            X509v3 Authority Key Identifier:
                keyid:8A:13:11:71:59:28:00:AE:6D:9A:D4:CF:F3:FC:81:20:EA:F1:92:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A131171592800AE6D9AD4CFF3FC8120EAF1920B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QeaQeYjuaACSAuMyxgbMW9E8i1CA9NWGBJw2srsn826/0/3137372e32332e33302e302f32332d3233203d3e203532373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:02:14:59:24:66:a6:fe:97:d6:12:c0:04:67:43:04:fa:5d:
         27:1d:22:76:f0:c3:6a:8c:40:d6:c0:53:87:85:6f:3f:9e:20:
         ae:6e:9d:d4:92:a0:e7:0a:42:d2:a0:e6:1d:36:ab:ee:df:07:
         d7:92:d0:21:76:12:e5:e8:50:1a:e7:1a:de:f6:aa:50:11:3f:
         41:91:32:b7:2a:7e:57:80:61:ec:0e:f5:0a:4f:92:d4:80:4b:
         8c:0b:01:99:b7:db:32:77:fb:1b:08:8d:04:54:fb:91:74:9d:
         a0:7e:2a:fe:ff:81:48:a3:b2:2f:cb:cc:3a:56:a5:5d:55:59:
         a2:53:31:42:84:f4:30:6a:77:41:5f:31:56:6a:08:19:8a:0d:
         a6:cf:1f:57:4e:b2:95:7f:00:de:07:94:93:bd:3d:56:99:c3:
         77:30:ca:c7:82:48:79:32:26:ee:16:0a:19:c3:3e:49:ae:2b:
         26:06:e0:fd:7d:76:1d:8d:06:18:0a:41:05:69:76:94:d3:eb:
         ac:6f:26:b2:dc:ae:6d:ad:3f:02:96:cd:06:20:91:e8:75:56:
         cd:9f:67:83:d6:2e:0e:ec:5a:f6:fc:40:14:04:ee:d7:6e:33:
         44:0b:ee:71:6b:5e:bd:cf:7b:b3:79:d9:18:5a:62:1b:f7:27:
         18:53:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 10:03:58 2026 by rpki-client