Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32332d3233203d3e20323632383234.roa
File:                     3137372e35322e36302e302f32332d3233203d3e20323632383234.roa (raw, json)
Hash identifier:          OkIHLwBCg0Wa6FyieFf4PuGVXihCuwKR/jIFa1cMSnc=
Subject key identifier:   14:E7:8E:AC:BE:80:AB:63:4C:E9:28:8E:9C:07:0F:4E:7A:E0:96:FE
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       44A20459E28D3F3753FD556F3CA5100927C51F
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32332d3233203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:56:21 +0000
ROA not before:           Sun 05 Jul 2026 23:51:21 +0000
ROA not after:            Sun 04 Jul 2027 23:56:21 +0000
asID:                     262824
IP address blocks:        177.52.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a2:04:59:e2:8d:3f:37:53:fd:55:6f:3c:a5:10:09:27:c5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:51:21 2026 GMT
            Not After : Jul  4 23:56:21 2027 GMT
        Subject: CN=14E78EACBE80AB634CE9288E9C070F4E7AE096FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:4f:5c:e5:80:4b:5d:0b:18:b9:d0:33:0a:
                    c3:a6:6f:8c:8c:7e:2c:79:7b:08:c6:a5:5c:37:64:
                    1d:0a:d9:a3:91:ff:dd:97:40:3f:08:2a:60:da:5d:
                    6e:f5:fa:27:e5:99:77:23:a9:f9:45:f5:f2:94:bd:
                    03:d0:ee:ed:4e:d1:15:bd:55:46:a7:bc:f2:09:b2:
                    4f:3b:60:3d:86:52:1a:2a:7d:7f:10:58:4e:32:68:
                    cf:90:32:09:b0:06:34:31:ca:8f:7b:c4:a4:57:90:
                    f9:a1:12:89:5d:29:b4:e9:b4:f6:5d:3f:36:77:e6:
                    24:3a:79:8f:f3:84:11:13:ed:6f:b7:ba:60:8d:4d:
                    0c:fc:0c:36:61:39:0e:dd:b8:66:8f:1b:c8:94:ae:
                    68:51:85:53:85:42:c5:9f:21:cb:73:1d:ce:e7:1e:
                    ba:d8:98:89:fb:fa:f6:7e:cf:b3:ca:45:5a:4f:69:
                    90:ac:bd:12:86:41:b7:aa:a3:9b:b1:0c:85:ad:cc:
                    a9:3f:29:d3:4f:1b:d9:74:1e:1e:03:7b:53:c2:48:
                    fa:df:df:6d:ea:db:8c:0f:f5:25:8a:66:6d:24:f3:
                    bb:46:f3:68:30:13:99:e7:9d:ba:22:01:92:ca:5b:
                    5d:0f:d4:f5:0b:01:76:57:c0:67:90:f2:53:11:62:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E7:8E:AC:BE:80:AB:63:4C:E9:28:8E:9C:07:0F:4E:7A:E0:96:FE
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3137372e35322e36302e302f32332d3233203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:da:7b:54:72:07:f4:de:02:ba:51:ba:2e:5c:3d:fa:01:aa:
         41:bc:88:bf:fd:9e:66:45:c4:ab:8d:a6:97:7d:7a:15:73:07:
         fe:de:70:7f:cc:0c:bf:0c:33:5a:9e:8e:9b:dd:a9:fa:04:e9:
         b4:fc:34:03:36:24:85:74:bb:59:e8:5c:73:f4:17:6e:50:0f:
         dd:26:ba:85:e8:b5:36:58:a5:1d:9b:ae:6d:4a:b1:0c:f0:86:
         c7:81:14:08:a2:ee:5c:25:aa:b3:8c:d0:0e:f8:f2:3c:d7:fd:
         03:9f:fc:6f:a3:d5:c1:1b:3e:26:dc:ec:da:56:67:d2:cf:2e:
         97:59:b0:86:3b:ac:0d:d4:b5:db:69:25:f3:63:e9:c7:b1:c4:
         34:35:33:9e:6f:8d:91:29:fa:ba:9a:ce:f7:be:be:de:50:0c:
         64:51:dc:7c:e4:23:82:de:9e:ec:f7:0c:29:f2:ad:1c:ad:4d:
         d0:ce:17:fc:1a:d1:4a:23:1c:6f:d6:3d:ed:0a:80:56:48:c3:
         29:7c:62:d6:8c:08:10:4b:6e:e2:7f:7e:ea:f3:b7:fe:70:9b:
         c2:de:38:2d:74:64:0a:22:14:a1:84:61:34:0a:d7:67:92:5a:
         69:4a:62:9a:76:44:61:01:e9:aa:20:03:9d:28:b0:98:1d:38:
         64:9c:1a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:56 2026 by rpki-client