Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa
File:                     3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          z8UgfNWVPnWFtq4oedliuu1XIkouKUlx0hldIK8cUdc=
Subject key identifier:   B8:B4:84:94:FD:86:57:95:A0:2F:D6:F6:98:36:A1:2A:B5:7A:FE:E3
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       777DAE8DFED0BDACFD8E0B646EBB5720CFD6A07E
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 30 Jun 2026 14:12:43 +0000
ROA not before:           Tue 30 Jun 2026 14:07:43 +0000
ROA not after:            Tue 29 Jun 2027 14:12:43 +0000
asID:                     28165
IP address blocks:        177.184.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 22:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7d:ae:8d:fe:d0:bd:ac:fd:8e:0b:64:6e:bb:57:20:cf:d6:a0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jun 30 14:07:43 2026 GMT
            Not After : Jun 29 14:12:43 2027 GMT
        Subject: CN=B8B48494FD865795A02FD6F69836A12AB57AFEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:09:36:67:3c:e0:62:c5:9e:78:5c:80:e5:
                    a9:6b:4a:f0:e9:bd:06:00:9d:2f:e0:df:cf:35:aa:
                    b6:81:3d:d4:7c:68:ad:8a:55:fe:98:64:14:4e:33:
                    07:a9:ce:da:7b:08:57:2b:bc:62:45:90:bb:5c:f0:
                    5e:dd:cf:76:e1:c1:f8:16:01:98:34:d8:c5:fd:76:
                    bb:db:0f:6a:9e:99:4a:29:0e:8b:e2:3b:21:87:24:
                    fa:a9:e1:c5:da:a0:c0:6a:47:93:e3:66:41:ea:f3:
                    c8:5d:78:94:8d:9f:33:e2:80:aa:21:93:b3:ca:1f:
                    10:d6:61:3e:9d:32:0a:31:dc:8a:bc:13:ed:02:e5:
                    35:ed:28:f6:4e:aa:f7:4a:35:14:31:9c:a9:09:a6:
                    eb:d4:b2:71:81:d9:5a:fc:e6:a0:39:e9:7f:20:4e:
                    47:d6:f7:ec:12:b5:61:b0:67:c3:87:55:3c:f0:23:
                    84:8d:ca:61:fc:1b:c4:26:30:8c:94:ca:77:e6:5c:
                    3f:ac:a3:32:4d:96:8f:09:1d:0f:18:5c:66:b9:a1:
                    04:0c:77:8a:de:5a:ae:3c:3e:12:5d:05:a1:9f:52:
                    f2:2b:21:d5:94:29:c8:cd:ba:64:b0:46:8a:cc:cf:
                    4a:de:ab:00:e1:14:14:51:ec:43:a5:b1:c2:86:5a:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:84:94:FD:86:57:95:A0:2F:D6:F6:98:36:A1:2A:B5:7A:FE:E3
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230352e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:53:d2:1e:62:61:fe:a9:ad:fb:0e:60:58:54:c3:9f:a1:
         a2:37:13:b7:4f:47:33:ec:4a:08:98:f7:e5:b9:8b:a9:45:8a:
         c3:f1:49:fc:b2:7e:2f:26:45:b5:bb:56:ad:f7:53:22:f8:84:
         55:17:c9:cc:0b:ed:32:73:36:67:a4:f0:31:70:03:9e:29:76:
         4d:45:9f:d3:80:d3:e5:c1:47:43:10:c0:57:9a:d2:36:1f:3f:
         29:8a:48:77:4c:ca:82:8e:e7:ff:24:11:85:db:75:a6:f0:ab:
         ea:a0:3a:ea:67:37:90:52:4e:11:d5:cf:b2:80:83:dd:3a:b9:
         d5:b0:78:3f:c1:ba:22:2b:76:04:15:97:38:a0:ea:b2:5a:ba:
         e4:3a:10:84:6f:8b:ae:be:ba:d2:9d:16:c4:7b:ac:74:88:a0:
         06:11:ae:e6:be:9d:59:3f:a1:a5:f2:76:00:88:bb:bc:fb:a6:
         80:8f:ed:a0:f1:7f:c2:99:fd:3d:83:51:97:0c:97:51:39:ce:
         16:c0:9c:d2:79:2a:4a:4b:25:cd:0e:ce:49:a6:1d:1d:38:d0:
         a2:87:98:52:14:5a:13:a4:ab:94:b0:20:78:72:f0:7b:6f:58:
         a3:bf:3c:ca:37:a7:a4:2e:ad:96:b9:cc:2f:be:c3:2d:b1:7f:
         d4:4e:fc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:05:30 2026 by rpki-client