Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/3137372e3132392e39362e302f32322d3234203d3e20323632333935.roa
File:                     3137372e3132392e39362e302f32322d3234203d3e20323632333935.roa (raw, json)
Hash identifier:          ed2eN6wiqUzgaWZhWz9RfmSpFGjg/Ni5sasRZ9vxirI=
Subject key identifier:   CD:45:61:95:B5:D8:B8:9B:DB:A1:60:F3:D7:1A:24:81:B8:57:A2:C8
Certificate issuer:       /CN=A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7
Certificate serial:       78C675CDA8A5684939A67704D41889A2A8FAF575
Authority key identifier: A4:4F:5B:72:C1:20:18:CD:D9:EF:99:AB:3E:C5:B2:72:BF:D0:38:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/3137372e3132392e39362e302f32322d3234203d3e20323632333935.roa
Signing time:             Wed 17 Jun 2026 14:05:01 +0000
ROA not before:           Wed 17 Jun 2026 14:00:01 +0000
ROA not after:            Wed 16 Jun 2027 14:05:01 +0000
asID:                     262395
IP address blocks:        177.129.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.crl
                          rsync://rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 10:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c6:75:cd:a8:a5:68:49:39:a6:77:04:d4:18:89:a2:a8:fa:f5:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7
        Validity
            Not Before: Jun 17 14:00:01 2026 GMT
            Not After : Jun 16 14:05:01 2027 GMT
        Subject: CN=CD456195B5D8B89BDBA160F3D71A2481B857A2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6e:a1:9b:b4:e1:e6:22:d3:89:77:8f:29:9a:
                    34:64:67:7b:bb:52:f1:22:87:26:6d:05:f0:c0:28:
                    95:40:99:75:66:57:5a:92:c7:d0:cb:86:3f:95:23:
                    d6:2a:29:0a:5a:2e:39:87:18:5e:19:19:18:6d:24:
                    99:f0:23:fe:63:01:70:b8:38:fb:60:3c:f7:86:11:
                    58:e2:ec:75:f9:6d:7d:46:44:a2:8c:8e:6e:91:6e:
                    34:a4:f2:35:77:2f:f8:c8:96:87:8b:2e:49:21:97:
                    1f:d8:e0:4e:5f:fd:43:0b:dc:48:51:81:ca:c8:71:
                    21:70:df:f8:42:04:be:b2:bb:fd:02:a1:5e:0a:f4:
                    c8:ca:2a:9a:bc:db:f5:6d:19:54:7d:bb:13:9b:19:
                    5d:37:89:3a:10:c0:2a:88:43:4c:38:84:c6:4e:1d:
                    af:a2:b2:0b:ca:fe:7a:14:43:8f:21:8f:4a:39:5a:
                    98:61:1a:f7:ff:13:08:b2:a4:ac:b2:33:99:b4:22:
                    0e:04:8b:b7:41:95:af:02:64:75:97:e7:3b:09:3f:
                    7d:84:57:7a:17:0e:68:d7:b9:1f:12:c2:04:06:ce:
                    88:34:35:21:06:6e:80:08:c4:b5:ec:3a:ab:ad:08:
                    94:8f:b1:da:8c:8c:15:86:28:ec:db:aa:8c:93:75:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:45:61:95:B5:D8:B8:9B:DB:A1:60:F3:D7:1A:24:81:B8:57:A2:C8
            X509v3 Authority Key Identifier:
                keyid:A4:4F:5B:72:C1:20:18:CD:D9:EF:99:AB:3E:C5:B2:72:BF:D0:38:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A44F5B72C12018CDD9EF99AB3EC5B272BFD038E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cvuwNhv6U5c6eEDaBX58RixD81AkdHLGi1ZS9JGP6kj/0/3137372e3132392e39362e302f32322d3234203d3e20323632333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:76:ea:f6:4e:eb:3f:12:9b:46:e6:36:68:6a:24:00:6b:
         14:8f:ba:8b:f7:8f:45:9a:e3:0a:47:2e:b9:ab:be:ca:12:16:
         06:30:cf:90:39:2e:2f:4c:8a:75:ac:29:b8:91:34:b8:9f:fc:
         81:7f:a5:33:06:3c:f1:90:4e:9a:c0:74:bd:77:93:a2:99:a6:
         85:d1:60:6c:c5:78:57:7f:57:75:3b:c0:c3:d9:26:57:57:2e:
         bb:da:24:ce:c8:e4:fd:df:82:6b:7e:a5:20:c4:18:13:40:72:
         72:ce:f7:d4:90:dc:bb:aa:95:42:05:ea:3e:bf:08:97:cf:1d:
         d9:2c:73:31:e9:7c:9b:e2:fb:b2:be:f7:91:19:71:45:00:bc:
         4e:20:30:d0:1e:0f:2f:10:fc:d8:14:69:ac:98:dc:df:9b:d2:
         1d:bc:de:60:ab:91:50:32:a1:a1:0c:cb:2f:84:a7:92:6e:4b:
         41:29:68:fa:60:cd:7d:36:0b:46:9d:d4:e2:79:28:26:42:9e:
         62:7a:36:b0:a3:44:4e:63:9e:c8:5f:78:06:42:31:15:1a:76:
         41:90:3f:cf:1b:6b:85:4d:8f:39:e2:3a:6b:c2:c5:b8:ed:bc:
         37:5c:e3:4c:6f:af:4a:21:5a:5d:9b:02:0b:03:93:b2:e6:e0:
         46:23:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 13:26:36 2026 by rpki-client