Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa
File:                     3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa (raw, json)
Hash identifier:          uo/n+ScWO4fpCcNnW7lvyjjqRDIBCnlcJXXyQ4WN7Kk=
Subject key identifier:   5F:81:3D:C4:1B:1E:20:74:03:E5:B0:3F:ED:40:43:2A:36:DA:BB:3E
Certificate issuer:       /CN=57DB3581E707C22BBA17B8AD12B81942965761D7
Certificate serial:       72FF1EC87DE12A43A5C20FADBF1E52891543E7F9
Authority key identifier: 57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa
Signing time:             Wed 01 Jul 2026 14:04:40 +0000
ROA not before:           Wed 01 Jul 2026 13:59:40 +0000
ROA not after:            Wed 30 Jun 2027 14:04:40 +0000
asID:                     265973
IP address blocks:        177.221.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl
                          rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ff:1e:c8:7d:e1:2a:43:a5:c2:0f:ad:bf:1e:52:89:15:43:e7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57DB3581E707C22BBA17B8AD12B81942965761D7
        Validity
            Not Before: Jul  1 13:59:40 2026 GMT
            Not After : Jun 30 14:04:40 2027 GMT
        Subject: CN=5F813DC41B1E207403E5B03FED40432A36DABB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:5f:c7:f6:e1:ab:70:dd:c1:b0:2b:ea:aa:
                    05:61:55:0a:80:d0:af:bb:dd:0f:41:0e:5a:55:ef:
                    f2:16:00:ac:81:37:f4:dd:c1:aa:c7:72:df:87:9c:
                    64:e3:c5:38:d9:51:7e:63:29:25:cc:bf:1f:c3:42:
                    85:75:2b:fe:bd:ab:cd:c0:ab:07:cb:4e:b4:d5:85:
                    cd:16:d4:05:ea:08:07:29:e8:59:f3:e8:4a:b8:73:
                    58:c1:68:81:fc:03:0e:8c:05:1b:80:e4:a5:3f:bb:
                    34:30:c1:d2:e3:cc:70:0d:58:b7:98:35:83:79:76:
                    84:1c:94:1e:1e:35:e5:30:1d:58:28:dc:df:11:50:
                    4d:42:a8:aa:ad:64:fd:ca:1b:f0:db:cd:88:7e:e1:
                    bb:54:9d:c8:d0:ae:c5:c3:7a:67:b5:a1:c8:bb:1b:
                    5c:35:19:b6:9f:3f:13:f5:24:18:76:fd:30:17:19:
                    6b:13:85:94:80:70:93:a0:58:9b:6a:ca:e7:2a:c1:
                    03:f5:b2:37:d7:7a:45:1c:66:9e:f8:d4:b8:4f:78:
                    75:8f:90:c2:36:30:10:2f:eb:fc:40:44:f0:88:47:
                    7d:41:07:ee:41:bd:75:74:cf:0c:2b:45:e9:44:db:
                    7f:b8:64:d8:44:c4:5c:58:83:70:fa:b6:3c:48:bd:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:81:3D:C4:1B:1E:20:74:03:E5:B0:3F:ED:40:43:2A:36:DA:BB:3E
            X509v3 Authority Key Identifier:
                keyid:57:DB:35:81:E7:07:C2:2B:BA:17:B8:AD:12:B8:19:42:96:57:61:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/57DB3581E707C22BBA17B8AD12B81942965761D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57DB3581E707C22BBA17B8AD12B81942965761D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWUGxceWiyXbSwBbgnv5vDnS7pm4HhCnGJwf3b2eKze1/0/3137372e3232312e3132302e302f32312d3234203d3e20323635393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:fd:76:65:8f:c9:52:44:49:5c:6d:25:52:c6:ea:6d:46:
         45:8e:72:b6:a4:7d:93:96:67:db:c3:03:43:e5:3a:e7:1a:96:
         e1:aa:d3:f1:85:ba:bf:01:60:f2:a6:7f:80:18:b3:2e:39:a8:
         10:b0:85:67:ee:59:f5:b3:d6:73:2b:a0:95:d6:54:48:70:c5:
         a2:59:5e:22:40:12:2c:2e:f2:36:77:2e:32:28:d8:1f:c4:8a:
         b8:a8:33:8c:12:0c:b2:8b:c9:bf:be:71:e2:db:87:a9:5a:35:
         b8:50:28:49:6f:eb:5e:f1:37:f5:09:81:00:c4:11:57:39:d7:
         45:24:e4:31:dd:61:ff:29:3c:48:a2:3c:5b:a1:16:42:8c:d7:
         1b:2f:83:cc:c9:a1:3e:5e:0a:e2:e9:c5:87:ab:2b:f8:4e:34:
         41:dc:c7:15:6a:ff:23:33:05:b3:dd:67:65:69:d8:8a:c0:92:
         53:4f:04:4a:db:0a:0c:78:c2:fd:9e:86:61:4b:f7:6d:d5:a2:
         aa:85:8c:26:96:b9:7a:56:c1:a4:eb:62:87:6d:5f:37:26:37:
         1c:04:e8:72:e1:fa:a4:a9:4e:b2:7f:63:2e:35:42:24:cd:6a:
         ba:68:40:ee:3b:d3:3e:c2:48:bb:23:84:07:4a:3e:de:42:4c:
         74:f9:fe:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:11:16 2026 by rpki-client