Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/3137372e37342e3136302e302f32322d3232203d3e20323731313336.roa
File:                     3137372e37342e3136302e302f32322d3232203d3e20323731313336.roa (raw, json)
Hash identifier:          NM2v11bFuRoonSP3e2Np+fyLCrOS1tOJCEXCj6qfnNk=
Subject key identifier:   CD:82:68:41:8C:A1:EB:10:D3:DD:EE:60:E3:D0:97:69:C0:D6:BA:3B
Certificate issuer:       /CN=C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56
Certificate serial:       598B8D46EFB13D48CAEA41ACD1C1C76F4BE102EA
Authority key identifier: C3:B0:DC:7E:3B:76:BA:CF:AA:14:54:39:4A:79:C0:FF:B6:40:4E:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/3137372e37342e3136302e302f32322d3232203d3e20323731313336.roa
Signing time:             Fri 15 May 2026 11:56:21 +0000
ROA not before:           Fri 15 May 2026 11:51:21 +0000
ROA not after:            Fri 14 May 2027 11:56:21 +0000
asID:                     271136
IP address blocks:        177.74.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.crl
                          rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 21:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8b:8d:46:ef:b1:3d:48:ca:ea:41:ac:d1:c1:c7:6f:4b:e1:02:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56
        Validity
            Not Before: May 15 11:51:21 2026 GMT
            Not After : May 14 11:56:21 2027 GMT
        Subject: CN=CD8268418CA1EB10D3DDEE60E3D09769C0D6BA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:51:ce:c9:73:05:c6:8b:a5:b9:93:48:20:5a:
                    6d:65:2a:c0:14:0a:8d:6a:0c:72:12:84:9d:a9:48:
                    e1:51:5c:92:ca:bf:4c:76:86:6e:7b:ea:96:a1:50:
                    21:60:56:90:63:72:0d:b1:5d:5e:63:6e:e8:76:99:
                    95:81:4c:b8:c2:56:55:22:27:65:37:73:a6:56:84:
                    f9:1e:68:3a:cc:6e:22:12:3d:0a:c4:fc:aa:2b:cd:
                    59:d1:32:93:53:b6:b4:97:32:d8:21:90:ec:ed:ca:
                    24:8a:35:57:d9:e2:6f:83:d7:23:27:c3:31:b5:23:
                    4d:86:68:27:80:02:c9:00:4a:f1:12:7e:81:55:39:
                    f3:9b:88:a0:db:e6:bc:b9:81:f7:52:28:39:9d:27:
                    08:76:4f:c6:a6:62:47:fa:f6:c6:96:a0:b6:42:2e:
                    d9:22:2e:ae:63:68:92:08:81:e9:7d:69:90:8d:23:
                    47:b5:92:f9:f6:bf:7a:bd:66:09:9d:8b:11:78:3d:
                    3c:77:a3:7a:73:02:f4:3f:2c:85:30:a7:42:8b:a1:
                    2d:7a:c8:7d:2d:14:7d:61:ff:ba:c6:e3:fd:b1:fc:
                    ec:9b:b7:4f:73:39:6b:a7:12:ce:a9:b1:91:ec:e8:
                    a5:e4:af:95:75:24:5c:b3:ea:c3:ca:3c:2e:96:c4:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:68:41:8C:A1:EB:10:D3:DD:EE:60:E3:D0:97:69:C0:D6:BA:3B
            X509v3 Authority Key Identifier:
                keyid:C3:B0:DC:7E:3B:76:BA:CF:AA:14:54:39:4A:79:C0:FF:B6:40:4E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B0DC7E3B76BACFAA1454394A79C0FFB6404E56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYNfcbc5AhsccNkQhPwxx436xBaZ29t5L44re75SsmY3/0/3137372e37342e3136302e302f32322d3232203d3e20323731313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:c8:cf:aa:cd:86:85:35:48:dc:5d:7b:de:15:1e:72:21:
         eb:38:28:7d:92:5c:c2:42:fa:dc:15:52:3d:b9:25:df:42:2f:
         e4:95:37:be:b4:d9:c2:e3:01:da:7b:de:72:88:0f:77:5a:8a:
         59:e2:b8:6d:04:a7:45:6d:81:1b:49:5c:12:c6:98:57:f9:d5:
         ce:09:6e:de:00:67:79:1d:f7:08:df:d0:bc:24:42:cb:b9:0b:
         e6:02:dc:92:d8:cc:df:d9:dc:e4:b8:91:52:ed:34:a1:f2:9b:
         cb:0d:e1:7c:69:09:47:4d:9c:60:78:40:0b:54:3b:27:de:7c:
         e6:88:48:3b:3c:27:03:4d:48:dd:c5:48:62:1d:9d:c3:29:e0:
         59:f9:16:67:da:44:d1:57:61:4e:6d:b2:57:da:4e:b7:68:b6:
         7f:0a:6e:ee:d8:d9:f8:fc:8c:2a:a3:4d:b8:c2:e9:61:82:af:
         3f:c3:e4:5f:56:58:22:56:1c:d2:fb:64:88:ca:08:91:e9:3e:
         ce:63:38:da:58:c6:32:fb:c0:a1:43:5a:fc:c2:79:c0:a1:a0:
         8d:7c:1a:3a:c0:54:ac:46:ee:b0:29:15:fc:1a:70:78:a5:e2:
         db:79:13:3c:21:42:b1:5f:c3:d2:f2:c3:d9:74:1b:4a:9f:72:
         27:6a:74:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:06:56 2026 by rpki-client