Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/3137372e3230302e3233322e302f32332d3234203d3e20323730363835.roa
File:                     3137372e3230302e3233322e302f32332d3234203d3e20323730363835.roa (raw, json)
Hash identifier:          yCfTSHpPmZXBHHMVNqT6eAoIK/XMa2rg/wzOcJAeBFg=
Subject key identifier:   4C:6D:87:3C:90:3C:1F:4B:A0:2A:32:B2:BF:2D:93:11:B0:51:E3:B8
Certificate issuer:       /CN=D8C07BB7266D94D0DB181F628FE72576B90AC6EC
Certificate serial:       1290C064A6CF98D9BE30D7D88B95DAB1CD91693E
Authority key identifier: D8:C0:7B:B7:26:6D:94:D0:DB:18:1F:62:8F:E7:25:76:B9:0A:C6:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/3137372e3230302e3233322e302f32332d3234203d3e20323730363835.roa
Signing time:             Tue 07 Jul 2026 16:53:27 +0000
ROA not before:           Tue 07 Jul 2026 16:48:27 +0000
ROA not after:            Tue 06 Jul 2027 16:53:27 +0000
asID:                     270685
IP address blocks:        177.200.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.crl
                          rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:90:c0:64:a6:cf:98:d9:be:30:d7:d8:8b:95:da:b1:cd:91:69:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8C07BB7266D94D0DB181F628FE72576B90AC6EC
        Validity
            Not Before: Jul  7 16:48:27 2026 GMT
            Not After : Jul  6 16:53:27 2027 GMT
        Subject: CN=4C6D873C903C1F4BA02A32B2BF2D9311B051E3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:cc:74:cb:ff:30:9c:21:0c:4e:34:35:68:
                    64:de:ef:9a:52:2f:ed:47:b4:fe:7a:a4:a8:2f:7f:
                    af:96:57:61:54:ee:41:38:8e:78:1e:b0:ed:44:50:
                    27:f1:7e:1e:68:b3:23:db:86:c4:f9:51:ba:ab:f2:
                    ce:e9:5b:17:5f:d1:1e:8a:43:cc:56:31:ef:6a:2c:
                    0d:47:ad:dd:9f:5b:af:1d:19:91:fa:f6:66:46:1b:
                    24:9e:b1:bb:56:24:56:9e:59:50:de:a6:7b:6b:b2:
                    eb:a2:60:66:62:de:8a:bf:ad:29:12:fd:ec:ad:9c:
                    11:6c:fe:e1:d2:74:9e:ee:d3:c3:79:bb:5a:8c:e4:
                    16:e4:ac:c0:f6:49:bd:53:bb:c6:83:2d:e0:a8:b8:
                    19:58:8c:6c:d7:d9:00:5d:f7:4d:1e:41:4f:73:d1:
                    3e:f8:84:1e:37:11:2b:71:8a:b9:fc:80:db:a5:59:
                    86:54:18:83:fe:72:81:7d:0d:84:78:4c:5b:f5:29:
                    15:4c:6e:e8:ff:5a:10:34:46:cf:b9:d8:77:81:e6:
                    5f:fb:cb:0c:65:66:7c:59:08:37:d8:e2:88:d7:db:
                    6e:6b:ed:cd:56:01:01:1b:3d:96:bf:36:95:1e:15:
                    48:ce:15:4e:30:95:78:a7:c4:9d:3b:93:d3:23:38:
                    99:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6D:87:3C:90:3C:1F:4B:A0:2A:32:B2:BF:2D:93:11:B0:51:E3:B8
            X509v3 Authority Key Identifier:
                keyid:D8:C0:7B:B7:26:6D:94:D0:DB:18:1F:62:8F:E7:25:76:B9:0A:C6:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C07BB7266D94D0DB181F628FE72576B90AC6EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7oppaaCMH37cQZUxmxUHN1VmoZHphF6oosepCgbA7zPC/0/3137372e3230302e3233322e302f32332d3234203d3e20323730363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:23:b6:a5:34:3d:c8:bd:3f:1a:f7:75:58:29:19:f7:08:
         4c:e4:64:5c:c1:8b:6b:90:91:1b:be:60:50:69:8f:9e:f0:19:
         e0:bc:00:e5:04:69:25:f4:54:b0:e2:bf:43:4d:9a:d5:7c:e8:
         eb:82:7a:b8:c7:fb:a0:de:4f:b7:e8:92:71:44:26:f3:a2:ad:
         05:46:50:ef:3b:d0:8c:b4:61:73:c9:a9:b4:74:15:af:5a:76:
         61:39:17:98:fa:e3:71:f0:14:55:36:a8:c5:2c:ce:18:de:d7:
         fd:52:14:a3:1b:5f:aa:9f:83:16:a2:5b:27:30:5c:ed:ad:93:
         cc:7c:c8:71:ef:40:30:9e:2a:48:76:0e:17:25:1c:95:c1:8e:
         e2:f5:66:10:91:25:37:62:13:f9:5c:05:ff:9b:fc:ed:b4:b2:
         d9:b3:a4:2b:f1:46:fe:81:e2:1e:58:90:8d:04:2d:6a:59:46:
         ac:ef:dc:80:12:a4:27:87:fd:ea:5c:ec:e1:d0:a2:87:12:30:
         a2:7a:c9:ca:8e:6b:ad:f0:61:a5:1d:d8:cd:9f:37:ce:80:50:
         fc:88:cd:81:05:d6:d9:e3:f7:6f:5a:69:a5:0b:ac:fe:cb:39:
         50:5a:20:ea:d1:5a:71:ad:e6:19:a2:51:0f:e0:98:49:06:62:
         25:5d:92:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:02:14 2026 by rpki-client