Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa
File:                     3137372e36362e3137342e302f32342d3234203d3e203532363539.roa (raw, json)
Hash identifier:          G1SspWKS9o3zuqkUDox93Esnk7pBTZHo1FTViLp09vw=
Subject key identifier:   CE:C1:5B:82:1E:DA:E9:9E:28:25:34:72:79:87:92:60:2F:CF:8D:D3
Certificate issuer:       /CN=466AC99EB96A2394E9F37004FC90EDDA6A379739
Certificate serial:       331F838B0F546331DA07730A92B69DCB92FEF6B8
Authority key identifier: 46:6A:C9:9E:B9:6A:23:94:E9:F3:70:04:FC:90:ED:DA:6A:37:97:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa
Signing time:             Fri 14 Aug 2026 19:23:59 +0000
ROA not before:           Fri 14 Aug 2026 19:18:59 +0000
ROA not after:            Fri 13 Aug 2027 19:23:59 +0000
asID:                     52659
IP address blocks:        177.66.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 03:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1f:83:8b:0f:54:63:31:da:07:73:0a:92:b6:9d:cb:92:fe:f6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466AC99EB96A2394E9F37004FC90EDDA6A379739
        Validity
            Not Before: Aug 14 19:18:59 2026 GMT
            Not After : Aug 13 19:23:59 2027 GMT
        Subject: CN=CEC15B821EDAE99E28253472798792602FCF8DD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:40:77:8e:76:74:fc:11:af:19:2e:3e:6e:d0:
                    2c:80:17:07:00:00:62:0f:ad:3f:8e:17:ce:f7:c8:
                    46:a4:ee:a1:d5:b0:fe:7b:88:2a:e5:da:3f:3e:b6:
                    4c:44:43:d3:f3:02:81:37:8a:99:29:3a:b4:12:fc:
                    1c:96:cf:25:df:c5:5f:a3:d7:2d:16:5f:a2:29:af:
                    99:45:d0:49:89:cc:56:0d:cd:79:17:59:09:64:fd:
                    9b:05:21:05:01:ee:1d:05:9c:ec:f2:0f:9f:6c:d0:
                    a9:e2:33:cb:1d:8c:ad:49:50:86:b0:16:33:f2:2c:
                    d9:3a:7b:70:16:c1:b5:62:90:01:e1:74:41:ca:21:
                    a4:5c:60:f0:7b:40:bb:f4:66:f9:7a:f9:d2:a8:16:
                    4b:9f:23:6b:45:06:7a:72:19:de:7f:4e:95:32:f7:
                    78:cf:22:41:4c:9e:65:5c:ca:14:cf:5f:0b:d3:44:
                    1f:75:3c:4e:61:d1:44:d4:e7:4b:b3:d8:b4:32:bb:
                    91:0e:40:8b:13:58:30:8c:64:9b:fa:47:c1:a8:e8:
                    49:1f:a2:f8:06:2c:8f:b2:db:e0:b3:20:4c:c9:77:
                    2a:bb:aa:86:a8:e4:33:49:52:ac:c3:43:5b:b5:a6:
                    d5:cd:e1:e0:fc:66:bd:4d:6c:4b:8e:c5:84:cd:a6:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C1:5B:82:1E:DA:E9:9E:28:25:34:72:79:87:92:60:2F:CF:8D:D3
            X509v3 Authority Key Identifier:
                keyid:46:6A:C9:9E:B9:6A:23:94:E9:F3:70:04:FC:90:ED:DA:6A:37:97:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e9:cf:b5:70:b6:3a:0b:21:89:dc:e8:f6:ca:4a:31:7a:28:
         59:5e:58:47:d0:0f:01:ad:5b:f4:77:02:b1:f1:da:d7:f9:e7:
         3e:39:76:4b:b2:3f:b4:70:7e:05:02:34:27:87:52:6a:2f:5c:
         48:0c:98:e8:93:f0:ae:a7:2e:b4:04:36:7e:ff:29:c6:0b:5d:
         53:72:f6:08:01:33:d1:0f:29:23:00:f8:d4:aa:a1:38:66:20:
         96:54:7c:6b:ed:94:b1:89:7d:01:79:8f:5f:7b:69:79:df:a1:
         c7:b1:dc:1b:9c:2e:b5:08:db:77:09:59:51:0a:47:88:50:ca:
         9b:b4:d8:fd:df:e6:e2:6b:c0:11:68:6d:ec:89:30:74:76:ee:
         f5:67:50:3b:11:14:08:71:14:5c:8b:e2:f9:c1:e1:65:a9:a1:
         70:c3:da:3e:05:a4:bd:cc:3b:5f:43:f1:d1:a9:36:2e:12:ed:
         11:5c:63:25:d3:75:ea:9f:36:07:91:c2:de:76:55:0d:2a:91:
         59:e7:a0:f4:bf:e3:b4:ec:ff:c1:7a:01:33:c4:a8:6e:65:ab:
         44:d7:54:fb:1f:94:cd:bc:ea:46:ca:1d:02:e7:1a:90:4d:ff:
         6a:f3:92:d8:e6:fe:f6:db:f3:b0:6b:a3:59:b4:68:22:3a:db:
         db:5a:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:34:24 2026 by rpki-client