Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa
File:                     3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier:          JvOp9ENcpTCesNtJxAga6VcoQU/fbnvomdkJLJ7Fqfg=
Subject key identifier:   DB:33:90:4B:92:89:94:60:C8:9B:02:0F:67:97:64:49:91:2A:8A:67
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       29DFEFD8F5D3B2B31FEF8056D2E230AFE83EE32A
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa
Signing time:             Tue 30 Jun 2026 14:12:39 +0000
ROA not before:           Tue 30 Jun 2026 14:07:39 +0000
ROA not after:            Tue 29 Jun 2027 14:12:39 +0000
asID:                     28165
IP address blocks:        177.184.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 03:36:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:df:ef:d8:f5:d3:b2:b3:1f:ef:80:56:d2:e2:30:af:e8:3e:e3:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jun 30 14:07:39 2026 GMT
            Not After : Jun 29 14:12:39 2027 GMT
        Subject: CN=DB33904B92899460C89B020F67976449912A8A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5e:d1:f0:cc:d8:d9:a3:c5:06:62:1b:ff:ee:
                    d7:cc:77:98:8e:5c:bd:55:56:57:a8:c5:49:ad:ef:
                    c8:df:8e:61:73:06:ec:c1:a1:b3:f0:ab:26:02:b7:
                    49:77:43:f5:53:a9:1b:22:77:76:9c:8b:ad:9b:2d:
                    ce:a7:40:fb:eb:f9:88:a6:eb:dd:ad:7a:e7:04:bf:
                    ce:86:c2:55:9c:ea:cd:ed:3e:41:c5:d8:c2:29:d1:
                    45:d2:b5:4c:50:9c:9e:9e:8e:37:79:df:fe:8c:07:
                    a6:7e:47:e3:d6:63:a8:62:46:8f:17:4f:be:fb:05:
                    fd:6a:ee:ce:ef:f4:39:16:9f:a2:ad:a3:52:70:c1:
                    11:25:63:5c:32:ca:7e:cb:88:1c:15:4a:dc:56:a5:
                    46:81:fc:dc:2f:7a:a5:3a:dd:e2:a9:32:c5:f3:b6:
                    96:ca:ec:dc:2b:db:fa:e8:b2:fd:61:72:aa:79:6d:
                    e2:92:1d:d7:bb:47:ca:6a:b7:78:ba:53:38:df:94:
                    b9:ee:5b:45:a2:b6:c8:5c:a2:9f:54:67:09:3a:e4:
                    6e:2a:0f:9b:3f:b8:0a:e7:a0:3b:69:87:7b:50:c5:
                    44:26:3b:ff:77:17:68:9b:a3:73:df:df:e7:c2:ff:
                    20:8e:dc:83:ce:fe:e5:36:57:a9:e4:4d:05:8d:19:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:90:4B:92:89:94:60:C8:9B:02:0F:67:97:64:49:91:2A:8A:67
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3138342e3230362e302f32332d3233203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:ff:39:73:16:2d:29:5f:e8:7b:74:aa:bd:a8:a3:69:db:
         1f:fa:7e:70:a0:42:83:8f:0a:66:9c:13:9b:b1:3b:e1:12:e5:
         44:bf:54:9d:8c:28:7c:5b:cd:5b:7f:48:31:80:d4:6c:9d:18:
         21:54:79:78:0f:0f:79:c6:4c:b6:c3:a4:cc:74:43:f6:9b:6d:
         53:3d:c1:4d:6e:bd:d4:9a:9f:88:e6:aa:4b:b9:44:ef:fb:74:
         fc:47:28:66:56:e2:18:dd:7b:5f:e0:b9:c0:02:e9:bf:ba:b4:
         a0:47:be:36:49:aa:99:47:eb:80:27:6b:b0:e0:fa:bd:49:d1:
         2e:25:7e:4d:54:f6:88:9f:2e:ce:82:9c:b7:99:db:9e:76:fa:
         48:91:aa:2e:f9:d1:02:c4:c4:c7:e0:6f:8a:c0:6e:6c:a3:13:
         cf:2a:0e:d7:b8:3a:6d:d5:ae:df:0b:5f:92:cf:b7:55:19:ea:
         fd:de:89:50:81:13:99:8c:5e:64:0d:d3:4c:d1:1d:a9:41:22:
         45:9e:38:18:b1:16:1c:88:23:be:8f:30:bb:99:aa:f9:51:34:
         f3:fa:2d:a3:11:5d:fb:70:35:c1:d3:5f:9f:fa:e0:8b:51:ce:
         f8:e2:d5:4d:4c:9a:52:de:ae:35:10:88:23:d0:e7:f4:eb:31:
         9f:ba:31:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:05:41 2026 by rpki-client