Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137352e302f32342d3234203d3e203532363539.roa
File:                     3137372e36362e3137352e302f32342d3234203d3e203532363539.roa (raw, json)
Hash identifier:          BRSsMWiIc1L6KL9EcyZm7wCvqPD/G6uHJoCXKEAZ0jI=
Subject key identifier:   56:E3:25:11:7C:82:D6:EC:81:A2:43:D2:CE:5E:82:79:F5:21:78:09
Certificate issuer:       /CN=466AC99EB96A2394E9F37004FC90EDDA6A379739
Certificate serial:       349CF34AAA67B1DD53C6702BE87A602E9D9E8256
Authority key identifier: 46:6A:C9:9E:B9:6A:23:94:E9:F3:70:04:FC:90:ED:DA:6A:37:97:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137352e302f32342d3234203d3e203532363539.roa
Signing time:             Fri 14 Aug 2026 19:24:01 +0000
ROA not before:           Fri 14 Aug 2026 19:19:01 +0000
ROA not after:            Fri 13 Aug 2027 19:24:01 +0000
asID:                     52659
IP address blocks:        177.66.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9c:f3:4a:aa:67:b1:dd:53:c6:70:2b:e8:7a:60:2e:9d:9e:82:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466AC99EB96A2394E9F37004FC90EDDA6A379739
        Validity
            Not Before: Aug 14 19:19:01 2026 GMT
            Not After : Aug 13 19:24:01 2027 GMT
        Subject: CN=56E325117C82D6EC81A243D2CE5E8279F5217809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:6c:e6:68:d4:ba:a6:fc:91:a5:7e:af:99:
                    ba:95:ee:5c:e4:c4:f6:6c:d6:5c:4f:f5:8f:18:e5:
                    f9:54:f5:6d:96:b1:7d:8b:3c:b4:1d:27:90:50:b9:
                    29:62:99:78:11:fe:a2:65:28:a1:97:62:34:c2:d5:
                    ee:9e:3d:8b:d8:df:80:62:15:b4:40:55:ee:2d:9d:
                    15:80:13:7d:b4:cf:e6:ae:2c:08:d4:e3:c7:d2:a0:
                    9a:e0:3c:d9:fc:fb:a7:4f:5e:a6:6c:18:ad:5a:0e:
                    7b:df:7c:5f:7b:94:da:11:ab:3a:f0:4a:8e:b0:d7:
                    a9:cc:f6:a6:af:37:14:7c:8d:31:e3:a3:7e:60:ab:
                    07:46:2a:a6:69:2a:13:71:e7:e2:06:e1:3c:b8:f2:
                    3a:6f:d8:66:e5:92:1a:e1:90:b3:72:21:9b:f5:df:
                    d9:c6:55:21:0b:53:33:9b:69:66:db:df:d1:9d:50:
                    ae:39:1b:7d:40:35:0e:48:d9:ec:59:5c:29:e5:d9:
                    a1:84:11:97:78:77:8e:92:08:c4:c6:cf:5c:21:99:
                    bc:c8:3a:0f:e7:f3:03:27:3e:de:38:95:6f:18:a8:
                    f5:12:69:59:11:aa:79:f4:81:f1:ea:0d:ee:13:bc:
                    fb:05:de:0f:c2:57:a7:a7:96:d0:f8:3f:b2:f5:df:
                    06:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E3:25:11:7C:82:D6:EC:81:A2:43:D2:CE:5E:82:79:F5:21:78:09
            X509v3 Authority Key Identifier:
                keyid:46:6A:C9:9E:B9:6A:23:94:E9:F3:70:04:FC:90:ED:DA:6A:37:97:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/466AC99EB96A2394E9F37004FC90EDDA6A379739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466AC99EB96A2394E9F37004FC90EDDA6A379739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137352e302f32342d3234203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:05:5f:26:9a:07:9c:52:d4:8f:c2:e9:45:ea:25:51:f8:40:
         64:73:0d:09:f1:6f:cd:cb:d9:be:f0:af:df:f0:2e:ae:1f:f7:
         0d:e8:31:4a:1a:bf:c2:da:c2:7e:5f:9c:08:be:67:e2:8d:b3:
         3e:80:dc:8a:4b:7a:4b:37:1e:a8:5d:bf:64:32:df:74:28:cf:
         e1:15:6c:63:90:08:54:66:b6:a9:ca:b9:79:f4:02:b6:32:c9:
         30:68:66:a6:68:70:76:28:6d:73:ca:8a:83:73:8c:5e:a0:1c:
         5f:28:13:37:cb:24:b5:fc:52:ea:21:66:38:a6:1f:70:21:6a:
         81:b3:db:46:c9:6b:33:ba:50:33:29:67:a7:c1:51:27:92:5c:
         05:27:52:64:8c:65:ed:5c:e9:84:9b:e7:ec:d0:1f:25:fe:ba:
         92:0f:0a:03:78:21:db:ef:3d:c7:48:7c:90:c0:02:2b:09:58:
         99:de:b0:da:cf:69:b4:ef:b1:72:8f:d0:47:7f:47:44:8d:cd:
         9c:db:05:e7:3c:fb:f5:4b:1e:86:3f:2d:60:a8:8a:ff:0c:1f:
         02:b2:23:23:2a:10:ee:1d:03:f4:69:87:8d:cc:18:61:ef:b2:
         a6:50:41:a6:e9:a1:4e:0b:4a:fa:58:f0:99:b6:2c:23:df:01:
         f9:a1:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:49:05 2026 by rpki-client