Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa
File:                     3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa (raw, json)
Hash identifier:          xUn7OKmP1LHxL5kqc4e9kHdYhYrztvulrcLJMW8jTBM=
Subject key identifier:   DC:48:9B:34:75:A0:BB:D2:CF:CE:FC:01:87:34:5A:35:5E:59:57:41
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       23074DE74E0949FF9F12BCE883926497973034B4
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa
Signing time:             Mon 27 Jul 2026 20:24:28 +0000
ROA not before:           Mon 27 Jul 2026 20:19:28 +0000
ROA not after:            Mon 26 Jul 2027 20:24:28 +0000
asID:                     269182
IP address blocks:        179.63.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:07:4d:e7:4e:09:49:ff:9f:12:bc:e8:83:92:64:97:97:30:34:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul 27 20:19:28 2026 GMT
            Not After : Jul 26 20:24:28 2027 GMT
        Subject: CN=DC489B3475A0BBD2CFCEFC0187345A355E595741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:72:60:40:56:5e:16:0e:75:53:af:6d:7a:
                    0a:a2:a9:d6:3c:27:a7:ce:d7:9f:e0:72:95:98:95:
                    34:c0:33:2b:af:64:33:1c:18:b7:d2:c5:b4:ee:4b:
                    7f:41:37:37:58:13:66:15:c5:6e:80:c4:5f:0b:90:
                    b4:ff:cf:2a:e2:ab:30:f4:b4:89:8e:9d:4a:54:1b:
                    1d:c6:df:fa:85:ca:50:9b:b5:7c:cf:60:22:77:a7:
                    c7:6d:0d:e7:ab:ae:14:4b:b7:66:99:71:97:86:82:
                    30:77:0e:f4:c5:f7:89:86:75:d9:b9:10:5d:13:b4:
                    df:5c:2e:1d:83:65:55:ba:a4:7a:6c:64:10:74:5a:
                    15:b1:8b:91:34:e6:1d:d7:53:b1:47:64:10:bf:88:
                    ac:e3:81:19:a4:5b:10:96:59:62:e4:90:de:f8:06:
                    a2:d1:ef:56:6d:89:20:19:20:c4:b7:90:30:79:01:
                    3c:da:89:39:7b:af:52:0a:30:b9:e3:90:a8:b9:62:
                    a8:f5:c2:8c:14:ca:4b:42:ed:89:97:ce:ce:5d:87:
                    ec:2d:70:dd:df:c2:43:14:1f:9d:85:ef:1c:e7:f7:
                    8a:d9:40:ea:04:b4:9b:44:56:08:68:9a:cd:c3:f4:
                    db:e0:37:ec:c2:77:83:39:90:03:6b:f9:a2:ee:a6:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:9B:34:75:A0:BB:D2:CF:CE:FC:01:87:34:5A:35:5E:59:57:41
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32332d3233203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:ae:39:8a:14:c2:20:d1:8d:94:75:c5:bb:63:f4:56:51:
         cd:75:da:55:ad:e3:11:ec:c3:cb:d9:6f:93:85:89:e6:ad:6a:
         f4:67:fe:4f:98:79:18:45:c0:29:1d:40:8a:d5:2c:c8:c4:2c:
         86:6c:7a:d3:47:c6:e6:03:ba:f1:8e:30:3a:56:89:3e:f1:23:
         d3:a3:3b:25:41:0a:fc:6c:98:c4:12:5e:80:96:52:da:3e:43:
         36:37:c7:71:39:d2:2f:ba:d3:78:ba:a3:1a:7d:d1:1c:c4:f4:
         e3:68:22:c5:24:df:04:49:55:ba:a2:e6:45:9d:72:ae:67:7b:
         6f:fd:6e:09:48:c3:e0:4c:73:b9:60:ae:17:8a:42:58:e6:1d:
         ef:03:61:38:f6:75:27:e1:5b:25:34:ac:93:2d:b4:bc:d8:7a:
         97:b4:8f:6b:3b:17:cb:b9:30:0a:3b:03:3e:76:54:a7:30:05:
         ca:9a:75:3b:fc:7d:fb:3f:2e:e0:e0:eb:fb:60:3b:89:71:ac:
         4b:53:a4:ef:bd:a8:7a:11:03:b9:d6:7b:7f:3d:b7:12:da:55:
         c9:ba:09:14:b5:53:e3:53:ec:49:69:24:f3:99:ce:5e:6d:6b:
         ea:0f:bd:45:db:e0:84:ac:a1:6c:ea:99:a1:87:d2:e1:da:a1:
         72:a1:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 15:05:55 2026 by rpki-client