Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131362e302f32332d3233203d3e20323633333331.roa
File:                     3137372e32322e3131362e302f32332d3233203d3e20323633333331.roa (raw, json)
Hash identifier:          tNh4dph5BNCZCUNZ8RnJs7jZ6ENWtqbQycacflq0WIc=
Subject key identifier:   FE:FE:2A:01:60:6C:B6:C0:8B:09:5C:C9:14:AF:C5:50:1F:19:D6:B1
Certificate issuer:       /CN=F149A7E125960441F6C2F9B7CB15B330C6679BB0
Certificate serial:       4F97833FC1F16F45247B1425D2FF7F359DFDC156
Authority key identifier: F1:49:A7:E1:25:96:04:41:F6:C2:F9:B7:CB:15:B3:30:C6:67:9B:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131362e302f32332d3233203d3e20323633333331.roa
Signing time:             Thu 06 Aug 2026 21:09:23 +0000
ROA not before:           Thu 06 Aug 2026 21:04:23 +0000
ROA not after:            Thu 05 Aug 2027 21:09:23 +0000
asID:                     263331
IP address blocks:        177.22.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.crl
                          rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 13 Aug 2026 23:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:97:83:3f:c1:f1:6f:45:24:7b:14:25:d2:ff:7f:35:9d:fd:c1:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F149A7E125960441F6C2F9B7CB15B330C6679BB0
        Validity
            Not Before: Aug  6 21:04:23 2026 GMT
            Not After : Aug  5 21:09:23 2027 GMT
        Subject: CN=FEFE2A01606CB6C08B095CC914AFC5501F19D6B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:72:e7:fd:ba:94:ef:42:84:27:86:29:80:e9:
                    26:1c:1d:30:f8:38:c6:26:a5:14:9f:c9:a3:6e:0d:
                    c6:06:f8:69:97:bd:f4:35:39:2e:bb:7a:ae:a6:18:
                    4f:2f:38:53:62:51:e1:e6:30:0d:54:c2:2c:60:ad:
                    9c:99:f9:d0:46:e1:a1:43:9d:66:99:6a:2b:9b:1d:
                    38:4f:49:1c:a0:4a:d7:43:e8:91:a8:ac:8a:96:52:
                    d7:a9:0f:37:a0:c3:e9:98:02:66:38:19:68:df:a1:
                    33:92:6f:50:2f:99:28:41:aa:c6:0c:f0:fe:ea:ec:
                    a9:74:62:2b:fc:f4:a5:16:a4:66:92:a5:55:16:f9:
                    dc:34:a9:a3:36:5b:3c:f6:5f:1f:f2:49:10:ca:a5:
                    5f:1b:64:e1:33:ba:e1:e0:21:cd:fc:b2:f2:8a:6e:
                    e8:ff:c2:69:d8:17:fb:d8:52:f4:45:4c:89:7a:1f:
                    50:e4:06:bb:d5:32:c3:67:71:8e:74:78:12:89:6b:
                    1c:9f:a7:a0:c5:5e:0f:54:1d:03:c4:a5:03:8e:c4:
                    d8:64:db:65:32:a9:33:74:e5:d8:35:a0:4b:ba:a1:
                    76:1d:60:64:43:b8:68:7d:bb:7c:24:a7:7a:53:c6:
                    64:6b:73:7f:83:af:95:74:fd:12:e4:58:47:a9:07:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FE:2A:01:60:6C:B6:C0:8B:09:5C:C9:14:AF:C5:50:1F:19:D6:B1
            X509v3 Authority Key Identifier:
                keyid:F1:49:A7:E1:25:96:04:41:F6:C2:F9:B7:CB:15:B3:30:C6:67:9B:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/F149A7E125960441F6C2F9B7CB15B330C6679BB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F149A7E125960441F6C2F9B7CB15B330C6679BB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnY3AF56h6HejYCqmRiuuTen6iUhUkNC82Cj3XXJqnWw/0/3137372e32322e3131362e302f32332d3233203d3e20323633333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:98:c7:26:7b:5c:0d:fd:fc:9f:38:1d:9e:04:6b:92:fd:
         93:5e:fd:7f:3c:43:3a:8e:af:38:77:38:d5:74:91:45:ae:7b:
         19:49:60:e3:1b:7e:de:8b:76:55:fa:75:cd:0a:4c:02:55:f9:
         a1:6b:d2:ea:da:30:eb:fd:22:4a:a4:fd:33:d7:bb:11:8f:f8:
         8c:10:ac:2c:46:3f:a6:d9:fc:42:2c:5b:77:66:43:8c:ab:59:
         d1:b4:93:f6:c1:4c:cf:b9:b1:e6:d4:5c:72:6e:d8:32:97:cb:
         d3:25:ee:82:70:70:b1:8f:3a:96:77:9f:c2:57:da:d9:20:0b:
         89:f4:c1:08:f6:c6:af:8b:62:6e:9b:47:dc:d4:3f:72:23:54:
         62:ec:a9:ba:f9:3c:b3:06:fb:f5:37:8f:50:a0:90:b8:5a:5e:
         0d:73:b5:7b:2f:1e:0b:17:a7:e3:63:91:46:17:31:ce:c0:61:
         e4:e0:29:44:5d:9e:9a:de:1a:0f:47:2e:52:8c:de:0c:28:38:
         41:c0:2d:cc:fc:18:09:17:92:54:95:b3:13:ad:e2:6e:b5:85:
         a2:66:73:39:f3:18:63:0e:97:2d:d2:81:2a:e5:bc:8d:03:56:
         ca:b8:f4:4a:7c:fd:4a:c7:b1:ed:17:80:88:bc:82:1a:71:a1:
         0d:00:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:48:35 2026 by rpki-client