Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32322d3234203d3e20323731363234.roa
File:                     3137372e37332e3132382e302f32322d3234203d3e20323731363234.roa (raw, json)
Hash identifier:          YUetXiRHQqGQACBZgP6gVjeSogPvWVP2jBt5NdTlgak=
Subject key identifier:   E6:D6:3E:D0:05:FF:F7:DA:7B:77:09:89:54:74:4F:04:64:D4:22:C6
Certificate issuer:       /CN=306F285229CADF2A417F8D22C75886C83340CA85
Certificate serial:       46F091E7BF4662ACB911A005BE00ACA81D156870
Authority key identifier: 30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32322d3234203d3e20323731363234.roa
Signing time:             Tue 04 Aug 2026 17:36:38 +0000
ROA not before:           Tue 04 Aug 2026 17:31:38 +0000
ROA not after:            Tue 03 Aug 2027 17:36:38 +0000
asID:                     271624
IP address blocks:        177.73.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 05:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:91:e7:bf:46:62:ac:b9:11:a0:05:be:00:ac:a8:1d:15:68:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=306F285229CADF2A417F8D22C75886C83340CA85
        Validity
            Not Before: Aug  4 17:31:38 2026 GMT
            Not After : Aug  3 17:36:38 2027 GMT
        Subject: CN=E6D63ED005FFF7DA7B77098954744F0464D422C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:5b:99:70:c1:0e:69:4e:1f:c3:9e:bf:ae:
                    9b:16:73:2f:f4:1f:dc:d6:6a:49:11:85:d4:80:b9:
                    28:b8:4f:f0:72:f0:22:7c:d1:36:86:eb:cb:95:79:
                    86:9f:1a:43:5c:05:25:fc:bf:94:f3:e1:62:5c:13:
                    41:e7:2c:89:46:e2:08:36:de:1b:25:08:40:08:05:
                    68:ef:17:2f:f2:a0:06:4a:4a:c8:2e:15:26:7e:0a:
                    77:33:48:33:c9:97:3c:60:c7:e9:b1:aa:96:31:fd:
                    a3:e2:ba:37:d8:1d:d0:71:fb:82:e7:fb:f2:48:ae:
                    f0:cd:d2:c7:c4:d2:47:7c:c4:d2:0f:df:57:41:8b:
                    d0:0b:32:2e:42:ae:07:7d:d2:4a:49:a0:21:bb:f6:
                    28:85:ac:f5:3c:5b:ba:08:6b:41:3c:1b:64:2c:9e:
                    04:6a:66:f0:ec:46:e9:d7:1d:ee:5d:6e:5a:40:3e:
                    a4:9a:9b:29:51:82:f9:0e:a4:fb:59:11:2a:f6:b4:
                    ba:60:fa:47:75:bb:f7:48:60:57:f9:29:52:f1:5a:
                    53:8d:62:8a:2e:84:be:89:e9:75:3b:1f:bf:b4:52:
                    90:19:21:cc:4d:d0:22:40:c1:59:97:b7:24:82:5d:
                    5c:e6:3e:08:76:e4:95:4b:8a:b3:5a:2e:38:76:11:
                    f0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:3E:D0:05:FF:F7:DA:7B:77:09:89:54:74:4F:04:64:D4:22:C6
            X509v3 Authority Key Identifier:
                keyid:30:6F:28:52:29:CA:DF:2A:41:7F:8D:22:C7:58:86:C8:33:40:CA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/306F285229CADF2A417F8D22C75886C83340CA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/306F285229CADF2A417F8D22C75886C83340CA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/3137372e37332e3132382e302f32322d3234203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:f5:18:6c:65:63:f3:2e:bd:bc:15:1a:9d:c0:e7:5c:56:36:
         84:e0:5c:84:95:1e:13:7d:d1:68:c5:a6:68:82:41:98:3c:40:
         dc:7e:7b:1e:a4:13:63:5c:ed:f9:25:db:73:c4:51:bf:c9:2c:
         db:84:f6:b5:3b:f9:d2:3f:66:14:7b:28:19:ed:d0:b3:7c:0e:
         9c:6d:66:31:d8:d0:11:b9:d9:85:be:d1:f4:61:18:26:cd:b3:
         b2:f7:d3:a8:29:80:e9:c0:1a:b9:27:85:a2:01:93:5e:b8:b3:
         4c:79:62:db:bd:df:46:bc:70:81:96:72:bd:55:ed:41:80:01:
         1a:05:6c:6b:ad:d8:be:cb:56:3a:18:0e:51:36:10:c6:f7:5d:
         8b:c8:6d:20:77:f3:75:9d:64:49:42:23:3b:73:20:f6:3d:03:
         3b:27:3c:cf:90:91:ea:96:54:e3:7e:5b:4d:54:28:2c:08:df:
         0a:1b:c2:7a:c8:bf:c8:eb:74:44:c2:a5:0f:53:6e:ef:87:09:
         ba:5e:f8:5e:4d:10:35:a7:f2:63:f9:dd:f1:ac:97:21:22:50:
         b2:bd:52:a6:dc:7a:2e:c5:7b:75:33:fd:f3:f7:54:df:c5:58:
         15:f2:df:42:76:c1:ae:98:a9:27:5a:f8:d6:c7:92:f4:3a:93:
         b0:78:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 11:42:40 2026 by rpki-client