Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39352e302f32342d3234203d3e20323731333634.roa
File:                     3137392e302e39352e302f32342d3234203d3e20323731333634.roa (raw, json)
Hash identifier:          AlDdNbwYDcGdUHUsR7ol9f4gnXF8kWs8/44r6+FjmHQ=
Subject key identifier:   F8:2B:0C:E9:13:B9:15:7C:77:87:54:B4:71:9C:27:D7:17:10:9F:69
Certificate issuer:       /CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
Certificate serial:       7242A6D5C034CC0B531BFE432188D17146113D33
Authority key identifier: F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39352e302f32342d3234203d3e20323731333634.roa
Signing time:             Thu 30 Jul 2026 15:53:54 +0000
ROA not before:           Thu 30 Jul 2026 15:48:54 +0000
ROA not after:            Thu 29 Jul 2027 15:53:54 +0000
asID:                     271364
IP address blocks:        179.0.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl
                          rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:42:a6:d5:c0:34:cc:0b:53:1b:fe:43:21:88:d1:71:46:11:3d:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
        Validity
            Not Before: Jul 30 15:48:54 2026 GMT
            Not After : Jul 29 15:53:54 2027 GMT
        Subject: CN=F82B0CE913B9157C778754B4719C27D717109F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:53:6e:a3:91:6e:27:83:98:03:84:ff:3e:
                    b0:9a:de:d5:e7:cc:14:48:3f:a0:13:6b:01:0f:65:
                    f9:f9:2e:37:59:00:0f:74:ee:03:87:3b:6b:c2:d3:
                    ff:ef:ca:2f:33:42:69:e8:39:a1:d1:ca:0d:ef:c8:
                    c2:1a:16:a8:7b:64:0e:86:86:da:c6:92:16:92:ab:
                    45:1f:12:52:ec:e0:20:bb:c3:a4:22:73:a5:a1:18:
                    7d:f9:4d:b4:90:9f:3e:da:82:46:c2:07:a5:84:ad:
                    69:7c:09:44:a2:4f:f3:ff:bc:4c:2b:4f:30:09:66:
                    e5:f4:f5:9d:d1:c6:45:5d:f7:1a:9e:49:6b:ad:64:
                    65:e3:fd:c5:79:4c:cf:a0:a4:61:92:3b:b6:43:3f:
                    23:5c:76:5f:c3:25:93:39:ac:22:67:6e:df:d4:20:
                    52:96:1f:5c:07:ae:4c:bc:59:58:87:3c:02:7b:95:
                    bc:07:0e:b3:c3:ef:0b:85:c0:71:63:38:21:93:25:
                    ce:2d:93:96:21:4d:79:e3:81:34:7c:c4:fe:0e:de:
                    2d:21:df:32:9b:1d:69:9c:69:f6:4b:b1:09:ba:4e:
                    4e:d4:e0:d0:4e:f4:31:20:34:da:ae:3f:d4:c0:18:
                    ca:7c:df:85:28:ed:fb:f9:c2:4b:1e:19:0e:75:27:
                    1e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2B:0C:E9:13:B9:15:7C:77:87:54:B4:71:9C:27:D7:17:10:9F:69
            X509v3 Authority Key Identifier:
                keyid:F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39352e302f32342d3234203d3e20323731333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:f2:20:d1:47:fc:80:3a:7d:de:de:da:06:e0:48:cc:a4:
         c8:65:6a:62:ac:3c:74:d7:bc:dc:31:9e:30:d6:bf:46:85:cd:
         7c:cf:77:32:37:84:22:4f:db:eb:c4:c8:3e:7d:ec:ad:71:0b:
         04:49:80:eb:67:41:2c:09:51:be:5c:f3:3f:e5:71:fa:fa:18:
         60:df:da:bc:0f:ae:40:61:3c:8d:48:76:47:94:57:28:f4:1e:
         b7:ee:5b:a4:55:1a:e3:2d:65:df:47:c4:41:13:44:7f:02:5a:
         02:05:7d:91:af:d5:c5:53:54:1d:84:48:0e:8f:00:00:90:b4:
         3e:3b:6d:0e:53:8f:02:22:63:d0:d5:e6:8d:25:19:69:f3:da:
         be:42:82:a1:ca:4b:52:3a:f9:0f:9e:4b:e2:73:d3:a4:86:2c:
         5e:40:d7:3f:78:19:28:c2:a0:49:a2:3c:b7:47:5e:f3:4e:dd:
         3e:65:d6:04:f5:c0:99:87:52:c9:74:1f:ac:2a:e2:93:cf:12:
         2b:11:d1:47:99:13:0c:4f:a9:21:55:41:5b:df:f7:bc:3e:ee:
         7d:00:30:3b:1b:1a:87:a6:82:c9:9f:85:70:8c:79:55:2d:c1:
         83:4b:24:ba:b9:01:6b:ae:b4:fd:5e:d9:82:dd:7e:0e:d7:c6:
         95:63:15:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:01:32 2026 by rpki-client