Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3137372e37342e3130342e302f32322d3332203d3e20323637353735.roa
File:                     3137372e37342e3130342e302f32322d3332203d3e20323637353735.roa (raw, json)
Hash identifier:          Yo+6xDHBA+/w+iP1ceFRgA3G5W6SWiF0U5kbIDkQ9Ro=
Subject key identifier:   2F:E8:DE:43:1F:37:62:44:7A:77:CE:5C:B5:1C:26:29:01:3F:C0:03
Certificate issuer:       /CN=0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A
Certificate serial:       1E6D1A412195F319CD6DC78B740557647313FD66
Authority key identifier: 0A:2F:98:94:26:CC:DF:33:E6:9A:F9:38:E5:6D:7C:D9:3B:3B:DC:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3137372e37342e3130342e302f32322d3332203d3e20323637353735.roa
Signing time:             Fri 31 Jul 2026 12:24:49 +0000
ROA not before:           Fri 31 Jul 2026 12:19:49 +0000
ROA not after:            Fri 30 Jul 2027 12:24:49 +0000
asID:                     267575
IP address blocks:        177.74.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.crl
                          rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:6d:1a:41:21:95:f3:19:cd:6d:c7:8b:74:05:57:64:73:13:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A
        Validity
            Not Before: Jul 31 12:19:49 2026 GMT
            Not After : Jul 30 12:24:49 2027 GMT
        Subject: CN=2FE8DE431F3762447A77CE5CB51C2629013FC003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:03:43:a3:05:63:82:2c:2d:f3:8b:29:3a:
                    be:34:db:5c:31:d9:74:ec:06:4f:dd:9f:bf:88:4b:
                    0c:0a:8b:6d:bb:25:38:8b:9f:77:ed:a5:3e:5d:08:
                    b4:89:0d:56:7f:6f:f8:d3:a2:4a:6e:f3:bf:49:51:
                    73:fa:a5:fb:e7:4e:d4:ad:a6:39:d0:53:d8:42:8f:
                    2f:1a:4b:43:fd:5b:4f:d7:e4:c1:72:73:5b:63:a8:
                    b6:e2:39:4e:c1:2e:23:d1:57:46:b4:4d:b1:78:51:
                    97:7b:52:60:18:1e:3a:fa:6c:d0:7a:ac:22:2e:ad:
                    4b:2b:0b:77:77:8f:71:64:ff:42:0d:e3:1f:96:7a:
                    82:a3:65:d6:1e:3a:24:b1:cd:a7:9e:f4:37:5f:b2:
                    41:91:61:cc:8f:d3:af:2f:a2:99:38:26:6f:ff:76:
                    8e:71:ba:50:d0:00:c3:ce:f3:4b:cc:66:8b:fc:1c:
                    3b:5b:97:1a:93:5b:55:b3:34:61:8a:e0:e6:e7:8c:
                    fb:62:6e:41:68:b1:77:57:67:e6:06:5f:77:90:1f:
                    15:08:53:7e:6e:c2:8e:6c:7c:b9:d5:e7:48:7d:07:
                    2c:9b:e6:d2:5f:a6:6e:d2:74:9b:cb:f7:d9:6f:76:
                    d4:ae:c6:ba:55:86:9e:91:bc:3f:f8:a8:62:e8:2f:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:DE:43:1F:37:62:44:7A:77:CE:5C:B5:1C:26:29:01:3F:C0:03
            X509v3 Authority Key Identifier:
                keyid:0A:2F:98:94:26:CC:DF:33:E6:9A:F9:38:E5:6D:7C:D9:3B:3B:DC:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F989426CCDF33E69AF938E56D7CD93B3BDC3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/3137372e37342e3130342e302f32322d3332203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:72:cf:be:1f:85:45:3d:2f:c3:d7:0a:5f:d7:27:c8:5c:
         b7:b0:a8:0e:56:c7:8a:2a:9f:64:91:b5:26:a2:84:86:e0:d2:
         39:6e:f5:bc:6f:3b:07:18:ad:61:5c:8c:87:6a:b9:b6:f7:b2:
         19:3b:39:b0:7a:7a:1a:82:fe:e3:95:ea:0b:39:6d:a9:af:30:
         8e:8c:f1:93:a4:44:84:38:1b:ca:40:5c:65:19:8b:66:0a:96:
         c9:a3:69:7c:1f:60:f7:ac:cb:20:40:7a:6f:ec:9b:7c:df:00:
         3d:f7:6a:46:3f:44:47:7a:03:e1:84:c3:c1:40:47:b9:28:62:
         58:8b:4d:34:29:a8:b6:7a:e3:41:ec:c6:de:dc:b3:3a:1e:1f:
         0c:fb:04:4d:7e:a5:bc:06:cb:a9:3e:40:4e:08:ab:41:34:10:
         40:c4:d3:58:66:97:89:f8:73:16:3d:24:9a:d7:8c:dd:08:43:
         e6:5a:03:4a:49:70:90:26:2e:46:84:85:c1:a7:39:cf:8c:8f:
         52:46:03:d9:d9:47:3d:76:50:a6:25:31:57:dd:8b:f8:bf:07:
         1f:df:91:b8:07:1d:71:4c:60:b5:30:9a:ba:ba:53:53:f5:32:
         3e:04:c2:a4:84:a9:93:c9:18:e6:c4:9c:33:51:fd:1d:e5:24:
         32:ff:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:30:22 2026 by rpki-client