Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3137372e39302e302e302f31392d3139203d3e20323731373535.roa
File:                     3137372e39302e302e302f31392d3139203d3e20323731373535.roa (raw, json)
Hash identifier:          mQvfkQ6x0v5UQgO9lOhKyWzBbDJKAshZN92NOwBi06c=
Subject key identifier:   16:C7:F5:BD:36:7B:9C:69:AE:57:5C:68:F4:39:A9:9C:E2:0D:55:B3
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       410FFD89FB3E64678D746823A6610DD88AA35B74
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3137372e39302e302e302f31392d3139203d3e20323731373535.roa
Signing time:             Fri 15 May 2026 20:47:49 +0000
ROA not before:           Fri 15 May 2026 20:42:49 +0000
ROA not after:            Fri 14 May 2027 20:47:49 +0000
asID:                     271755
IP address blocks:        177.90.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0f:fd:89:fb:3e:64:67:8d:74:68:23:a6:61:0d:d8:8a:a3:5b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:49 2026 GMT
            Not After : May 14 20:47:49 2027 GMT
        Subject: CN=16C7F5BD367B9C69AE575C68F439A99CE20D55B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:a0:d0:1f:05:05:84:5b:6d:f7:2e:f6:0b:
                    2b:27:1e:d2:25:4f:07:72:32:35:5a:bf:93:7b:8e:
                    5b:a5:e5:fc:1a:10:6e:50:1c:04:c2:8c:80:0b:b1:
                    5a:6a:92:0e:d5:f2:0a:6b:12:2d:66:c7:19:72:e7:
                    a0:8c:80:29:46:71:ad:43:d5:37:28:2e:1a:d7:d3:
                    08:41:aa:38:cb:f3:cf:b4:b4:c0:d1:09:51:5c:d4:
                    01:69:3f:0d:7c:ae:4f:0f:5d:89:ab:af:5c:0c:af:
                    c4:6b:9a:eb:49:f7:9b:03:26:f3:b3:f0:42:f1:8a:
                    cf:66:05:37:0a:c3:01:2f:db:ee:38:7e:de:05:7e:
                    22:df:6d:e7:ce:61:33:c9:1b:5e:bb:33:30:a7:b5:
                    ab:65:00:69:28:3f:75:1e:ff:7c:9c:c6:cf:3a:e0:
                    d4:53:22:f3:a3:8c:24:e6:65:81:7a:6b:09:30:b2:
                    f5:ca:60:23:04:74:b2:b6:06:92:05:ee:e6:03:81:
                    fb:6e:70:8d:11:4f:f1:c9:3b:fb:3a:bd:56:86:88:
                    45:49:86:98:78:fa:9c:cc:39:1c:73:48:6e:c3:d9:
                    93:e6:a7:77:46:c6:c1:91:ab:8a:19:ea:c3:1a:db:
                    e4:64:a4:33:72:f7:83:58:ee:ba:6f:b7:bb:e5:b0:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C7:F5:BD:36:7B:9C:69:AE:57:5C:68:F4:39:A9:9C:E2:0D:55:B3
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3137372e39302e302e302f31392d3139203d3e20323731373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.90.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:a4:db:28:c2:be:e9:e7:06:3c:0f:fe:dc:0a:3d:d6:28:9d:
         08:99:bb:ff:06:77:51:1a:ed:6b:91:ab:b9:63:fc:56:03:33:
         00:a0:56:56:e4:16:a4:ee:fa:76:a3:91:5e:2a:21:52:9b:b2:
         36:cc:cf:5f:8d:fa:8d:38:bd:2a:57:1b:04:da:75:c9:92:a0:
         6f:96:c2:5f:bd:9d:b7:04:53:65:d1:ca:39:7a:32:f4:cc:aa:
         e5:fa:dd:a0:84:7e:0d:d5:0f:56:d4:ae:fb:0c:64:ab:a7:3a:
         1e:5b:79:8d:7a:90:1d:b6:19:6d:7e:a9:f5:f1:43:e3:c5:a4:
         33:a0:6d:d4:28:d2:b4:79:71:4e:e2:c8:ef:02:20:56:9d:af:
         c9:d1:01:1e:1b:89:e1:4d:be:4b:bc:f7:31:e6:23:8b:f7:02:
         f6:fc:ab:87:ff:5a:8b:e2:ac:7c:41:78:28:90:58:23:79:1c:
         d8:29:bc:ca:6c:52:ed:83:1d:35:7e:ae:af:a8:e4:4d:6f:60:
         a4:8a:d5:50:60:47:04:1f:62:9f:22:65:99:d8:95:54:aa:58:
         b5:c7:41:5c:da:18:4a:31:9c:5b:df:01:72:52:66:e2:fe:73:
         e3:d1:19:a5:db:08:14:48:bc:ef:98:00:63:c6:2b:44:6a:6c:
         f8:00:b3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:27:44 2026 by rpki-client