Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32372e302f32342d3234203d3e203238313635.roa
File:                     3137372e3232322e32372e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier:          VUSHXS26KwpY4UrzL0Y/ro/5NU44vrJDEUkptIzzkzk=
Subject key identifier:   44:CF:FF:96:94:40:1F:5C:4B:2B:EF:16:9A:B5:79:47:3D:8F:A0:C5
Certificate issuer:       /CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
Certificate serial:       54D6C22DC355E6924AF08564D562F965767AC56E
Authority key identifier: 80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32372e302f32342d3234203d3e203238313635.roa
Signing time:             Tue 30 Jun 2026 14:12:45 +0000
ROA not before:           Tue 30 Jun 2026 14:07:45 +0000
ROA not after:            Tue 29 Jun 2027 14:12:45 +0000
asID:                     28165
IP address blocks:        177.222.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl
                          rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 22:20:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d6:c2:2d:c3:55:e6:92:4a:f0:85:64:d5:62:f9:65:76:7a:c5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77
        Validity
            Not Before: Jun 30 14:07:45 2026 GMT
            Not After : Jun 29 14:12:45 2027 GMT
        Subject: CN=44CFFF9694401F5C4B2BEF169AB579473D8FA0C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:d8:05:f0:91:bd:27:d5:72:3a:84:8d:4f:
                    9f:7e:95:50:a8:45:f0:43:5d:8c:b8:b2:9d:09:79:
                    b1:5a:dc:ee:f2:62:c6:a5:44:ff:bb:c6:94:7d:de:
                    7e:0f:9c:f5:1d:1d:d1:13:b4:ec:51:60:32:eb:f5:
                    8f:73:b0:d2:29:d1:83:17:7b:a6:58:49:8f:6d:a8:
                    92:e4:73:74:b3:28:b3:24:de:aa:8d:e5:d6:d6:0a:
                    b5:74:fb:b1:01:9e:10:7b:97:c4:3f:f9:11:27:3e:
                    bc:b9:38:d0:eb:af:b8:1b:77:e3:66:e1:2f:3b:0f:
                    65:7b:e4:60:b3:bc:12:c9:2b:7c:7d:25:c8:87:2d:
                    e6:f8:09:0e:35:8b:34:a1:63:9d:26:a1:da:2e:2f:
                    3d:5b:c7:c3:ab:3d:b4:b9:64:6a:d7:36:ec:25:78:
                    e9:9c:f6:21:8b:b9:c8:74:78:9a:87:91:8c:5c:8d:
                    b9:03:2d:0a:b4:e0:72:9f:c7:dd:70:6e:68:bf:0f:
                    71:c7:63:7c:fa:14:ad:1d:f4:77:e8:f7:e8:0c:c5:
                    17:ed:cd:51:ca:03:e7:5c:55:35:5e:1b:34:9e:87:
                    91:d1:39:6b:4a:35:5d:bb:11:c6:2b:2e:c5:aa:a3:
                    0a:4d:bd:f0:7b:ca:69:01:73:bf:8d:09:12:11:da:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CF:FF:96:94:40:1F:5C:4B:2B:EF:16:9A:B5:79:47:3D:8F:A0:C5
            X509v3 Authority Key Identifier:
                keyid:80:D1:2B:8D:1F:C4:93:DC:78:D6:A6:D2:3E:94:B6:8D:9D:AC:6A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D12B8D1FC493DC78D6A6D23E94B68D9DAC6A77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/3/3137372e3232322e32372e302f32342d3234203d3e203238313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:e1:2b:a6:2b:53:02:ca:31:07:54:9f:cd:90:2f:11:ed:
         ad:ab:eb:71:1c:1d:5e:09:c5:9d:73:49:70:f1:4d:3a:f6:03:
         e4:33:40:ff:6e:93:05:15:bc:d4:a7:79:8b:59:77:0c:e7:76:
         bc:c0:21:7e:91:15:6c:53:f8:a1:5b:66:66:b2:eb:25:85:74:
         29:ae:7f:ed:31:f6:c7:3e:9b:07:79:a1:ad:09:e9:f7:14:a4:
         5e:14:b4:81:bd:8f:39:88:20:43:5d:c0:e8:6a:35:2c:fd:93:
         7f:0b:6f:2e:8c:b6:32:2d:a5:c7:a4:4e:76:a4:9a:a5:55:e4:
         81:1e:fd:0f:d5:8c:dd:c2:34:00:47:bf:ed:b6:f8:5b:5d:81:
         22:ea:8d:23:87:11:fc:f2:2a:4a:16:81:98:94:10:8b:99:35:
         da:f8:f8:fe:25:fb:8a:12:69:af:41:e3:22:2a:e2:2c:0a:45:
         5d:5f:b8:c2:09:f3:ae:45:3a:3a:7e:dc:89:15:87:37:5a:f2:
         d1:33:9f:98:ca:22:b7:0f:0d:1c:03:6d:65:3a:bd:6b:a1:c2:
         46:90:07:88:cf:2f:35:60:83:bf:5a:6f:c8:0e:db:2b:dd:71:
         7c:86:b3:fe:a8:61:c4:46:18:b9:f0:c0:0c:79:15:7d:8d:65:
         5a:86:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:05:30 2026 by rpki-client