Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3234203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32312d3234203d3e203532363630.roa (raw, json)
Hash identifier:          xN3bu+hrUsdVdbix70SKkWGQ41cVVH+XPWAkjFYhZWM=
Subject key identifier:   F6:35:38:4F:0A:A0:3F:0D:B3:15:1D:0D:0B:01:6A:6F:56:9E:BF:84
Certificate issuer:       /CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
Certificate serial:       61AFFB43F153636AF8621C7711E1A43B009EDB37
Authority key identifier: 89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3234203d3e203532363630.roa
Signing time:             Mon 24 Aug 2026 18:00:16 +0000
ROA not before:           Mon 24 Aug 2026 17:55:16 +0000
ROA not after:            Mon 23 Aug 2027 18:00:16 +0000
asID:                     52660
IP address blocks:        177.66.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 16:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:af:fb:43:f1:53:63:6a:f8:62:1c:77:11:e1:a4:3b:00:9e:db:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89830CB9E3952EBB88DDE1B63707527D62F7AB63
        Validity
            Not Before: Aug 24 17:55:16 2026 GMT
            Not After : Aug 23 18:00:16 2027 GMT
        Subject: CN=F635384F0AA03F0DB3151D0D0B016A6F569EBF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:2e:95:2d:7f:ae:ed:80:9d:c3:cf:e1:76:
                    b6:1b:e4:37:7d:f1:3d:1c:71:0f:61:c3:81:c8:1c:
                    34:f3:63:48:3d:60:c9:ad:9a:c0:bc:27:43:f4:aa:
                    e3:a4:60:6e:ab:cd:0e:f3:47:11:46:d4:28:7a:b5:
                    02:6b:81:4a:3b:d5:f9:41:be:06:26:f9:fc:51:1d:
                    c7:33:9c:28:ca:e4:89:05:84:a7:f9:e3:6f:c3:1d:
                    1f:06:ea:37:a5:43:85:2a:a9:2d:14:15:60:6d:96:
                    f1:21:a6:46:d4:fb:15:b8:41:1d:f1:a4:f2:b6:a6:
                    95:26:60:31:83:2d:8a:75:24:52:10:ae:e5:38:28:
                    12:cc:73:fa:35:9b:62:be:d6:8b:53:26:e8:6b:a6:
                    60:2f:ce:ed:70:2b:ff:d8:34:19:ca:9f:cd:2e:83:
                    59:6b:23:fe:fe:e5:af:43:07:54:76:3c:89:e3:9d:
                    5a:79:b2:71:15:d5:55:9f:d7:8a:1b:26:f4:f2:90:
                    99:90:42:58:f5:69:8b:27:0e:1a:96:06:4d:de:b8:
                    85:17:89:b9:65:68:a3:16:4f:19:da:4b:34:03:a0:
                    a6:f8:30:cb:3c:55:e1:dc:17:a8:f4:54:44:89:f3:
                    e6:5e:51:38:eb:d8:37:b3:22:88:e7:bd:16:6d:8c:
                    54:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:35:38:4F:0A:A0:3F:0D:B3:15:1D:0D:0B:01:6A:6F:56:9E:BF:84
            X509v3 Authority Key Identifier:
                keyid:89:83:0C:B9:E3:95:2E:BB:88:DD:E1:B6:37:07:52:7D:62:F7:AB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/89830CB9E3952EBB88DDE1B63707527D62F7AB63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89830CB9E3952EBB88DDE1B63707527D62F7AB63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3234203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:22:7f:05:9b:4f:02:ca:4a:3a:82:cd:93:86:01:7e:b7:9e:
         9b:2b:f7:7e:0c:18:25:e5:c7:c9:20:2e:ab:34:98:e8:1d:4f:
         bc:47:9e:a4:26:92:72:d2:6f:56:78:03:f2:8c:8a:a1:01:e3:
         78:97:40:e3:ac:c0:05:37:4c:8b:4c:22:a1:4b:f2:94:7b:af:
         f0:36:8d:2a:8c:31:37:1f:6f:db:11:0f:8b:98:36:d1:59:ae:
         92:27:5b:74:ef:3f:6e:ad:7d:d0:a6:86:ef:21:85:22:f0:82:
         01:62:25:62:3e:09:6e:1f:32:ab:74:2b:2a:34:49:6b:74:c1:
         0b:79:ea:90:3e:17:ea:49:9d:97:90:6c:27:c7:3f:8e:52:dd:
         4d:72:d6:85:d1:f2:7c:44:92:da:62:45:55:48:0f:9c:2f:a0:
         fe:a7:07:96:6f:7c:47:ee:ab:80:12:71:e4:93:ae:b9:e1:43:
         89:63:3a:f4:ba:0b:46:38:0e:a6:d9:f6:66:29:4b:4c:e6:7c:
         27:6a:3b:bc:f9:31:b2:a0:06:ed:f4:17:05:e5:c1:77:99:44:
         5e:32:ab:f5:3b:55:6f:d9:ff:79:c9:85:26:89:cd:79:34:ea:
         d8:78:3f:01:22:85:8a:ed:9e:8f:6b:a2:5d:82:c4:3f:69:1d:
         13:b9:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 17:33:22 2026 by rpki-client