Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37322e302f32342d3234203d3e20323633343135.roa
File:                     3137392e3130362e37322e302f32342d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          cZaMNdByM79eIsfF+Ls6iv24HZXpLDKGQZELx1YsarI=
Subject key identifier:   95:26:8B:92:94:84:5B:9A:66:E3:15:70:DB:3C:F3:90:11:0C:19:8D
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       7EEB4CED91BFB1D737AC87C8C176459526A6EC29
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37322e302f32342d3234203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 17:29:08 +0000
ROA not before:           Tue 11 Aug 2026 17:24:08 +0000
ROA not after:            Tue 10 Aug 2027 17:29:08 +0000
asID:                     263415
IP address blocks:        179.106.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:4c:ed:91:bf:b1:d7:37:ac:87:c8:c1:76:45:95:26:a6:ec:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 17:24:08 2026 GMT
            Not After : Aug 10 17:29:08 2027 GMT
        Subject: CN=95268B9294845B9A66E31570DB3CF390110C198D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:f0:56:bd:68:7b:16:65:d4:7b:5f:e7:38:
                    3d:54:35:9a:6d:52:b3:9b:54:ea:d0:01:35:e4:90:
                    64:29:55:fe:1a:90:94:b1:4c:2b:f3:3d:78:08:f9:
                    37:c4:ed:f7:2d:75:bf:84:a8:cb:86:8a:c6:ee:b3:
                    b2:50:49:36:f7:db:25:79:c7:b9:e5:a9:75:9f:be:
                    4e:8a:b6:65:ef:b9:74:cc:34:19:94:f3:16:87:86:
                    e7:a8:0f:0d:fd:b5:65:26:41:87:b3:15:60:1b:4c:
                    57:99:85:f2:1a:62:b1:6e:72:8a:f8:00:62:ef:95:
                    c3:f5:8e:e8:79:ea:79:47:43:b0:98:72:68:fd:e2:
                    f6:2b:19:7c:21:f8:d9:25:d8:70:05:b8:8c:dd:35:
                    da:c7:ba:4f:e9:e2:16:76:be:5b:8f:6c:37:d7:7b:
                    0f:27:85:d0:6e:2e:75:7d:96:6f:a2:9a:d5:79:11:
                    33:a3:c7:53:97:e3:5d:52:16:e4:32:db:7a:76:6e:
                    5c:84:a9:2c:5a:87:67:61:ab:93:7a:31:a6:23:d8:
                    d5:a1:6f:95:cf:d7:78:51:28:80:2d:5d:f7:1a:ed:
                    8a:34:fa:9a:2c:c5:da:6b:76:e0:f8:f9:4a:bb:41:
                    6c:17:e4:7e:a9:02:8e:89:0f:f1:37:c3:97:58:35:
                    3d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:8B:92:94:84:5B:9A:66:E3:15:70:DB:3C:F3:90:11:0C:19:8D
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37322e302f32342d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:10:32:70:e9:d1:d1:40:76:78:35:e4:90:a2:50:05:77:
         45:eb:b7:37:73:e1:03:ce:81:48:c6:0d:b7:fa:a3:df:88:6c:
         ca:13:3e:35:15:d8:e0:0e:84:7b:1d:0e:8d:52:82:ce:ba:e7:
         60:0c:03:d4:64:10:d3:46:d1:8b:ee:bf:34:30:f9:69:15:67:
         64:e3:94:1f:42:32:3c:26:e9:8d:c7:cf:a1:bb:0e:90:fd:0f:
         c2:e3:c7:f4:40:3b:c7:fd:69:c6:50:73:aa:d4:0b:05:3c:8b:
         27:ca:bd:d3:c7:13:20:91:f3:36:a3:ea:b9:0e:fd:0e:fd:3e:
         eb:49:f6:d7:fa:71:e6:28:5a:5e:70:c1:ed:6f:88:bb:1a:d6:
         3a:a9:5a:f0:a1:38:a5:47:83:af:cb:4e:f3:b4:61:68:86:22:
         4a:12:70:68:8b:df:c6:1e:e3:35:1c:77:34:64:f8:fd:79:ca:
         a7:ee:10:66:4e:e2:2f:1b:fd:51:95:d2:73:81:1f:f7:40:bd:
         65:6a:57:4e:99:65:1b:7b:5f:02:dd:fe:83:75:8e:f6:3d:3c:
         3b:88:ad:58:d0:73:61:aa:07:24:09:9f:49:5d:28:9c:1c:ef:
         8f:97:61:2d:e3:f9:15:8d:e5:74:2c:8f:16:e0:05:6a:76:84:
         ac:88:f6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 19:16:10 2026 by rpki-client