Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37332e302f32342d3234203d3e20323633343135.roa
File:                     3137392e3130362e37332e302f32342d3234203d3e20323633343135.roa (raw, json)
Hash identifier:          La3+RoYLEDUmnlROC4WwZMGyLR8mUZqPc93OOU6Zw24=
Subject key identifier:   7A:9B:68:FC:94:8E:3E:EA:9E:0B:FB:2A:78:2F:B9:EA:55:52:7C:0A
Certificate issuer:       /CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
Certificate serial:       60017A9D61B72B8B1F8A94FD280331F56DD48F02
Authority key identifier: 04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37332e302f32342d3234203d3e20323633343135.roa
Signing time:             Tue 11 Aug 2026 17:29:07 +0000
ROA not before:           Tue 11 Aug 2026 17:24:07 +0000
ROA not after:            Tue 10 Aug 2027 17:29:07 +0000
asID:                     263415
IP address blocks:        179.106.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl
                          rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 01:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:01:7a:9d:61:b7:2b:8b:1f:8a:94:fd:28:03:31:f5:6d:d4:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04AB90797AE9DE69FBC4F57A12AB8CB92133ED01
        Validity
            Not Before: Aug 11 17:24:07 2026 GMT
            Not After : Aug 10 17:29:07 2027 GMT
        Subject: CN=7A9B68FC948E3EEA9E0BFB2A782FB9EA55527C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:3e:09:74:18:db:14:52:8e:48:8b:6b:d8:
                    de:ab:d7:c4:a2:06:71:a2:b9:bf:61:53:1d:49:dc:
                    03:69:98:3a:d1:47:cb:91:bd:e7:8b:b8:43:9f:f8:
                    e5:2e:9b:eb:61:f3:34:e9:84:6d:d7:a1:c2:ad:d6:
                    50:bf:b0:68:b3:fb:b5:1a:6f:23:9b:be:59:2d:2d:
                    60:4d:7d:b7:a0:82:3d:8b:98:fe:bf:4b:f2:56:29:
                    21:8b:0f:c0:a4:c0:d2:40:c5:aa:57:72:45:a0:ce:
                    2e:d8:bd:b6:f4:09:1c:6a:74:6e:ad:a2:08:28:8a:
                    af:e5:27:df:c6:7a:60:73:8e:9d:b3:d1:49:02:cc:
                    4c:2b:1a:81:80:57:29:b4:8f:1f:29:2b:e7:b9:5a:
                    85:6d:42:c8:de:3b:13:93:f7:63:1c:ac:96:d7:41:
                    2f:b5:d4:11:73:7e:40:11:2e:cc:56:6e:ba:03:3b:
                    ac:35:51:78:52:38:a7:ae:8c:a2:e3:e9:97:1f:3f:
                    a5:36:56:41:fb:19:0b:62:8e:d6:48:41:5a:68:d0:
                    ac:a4:2f:d7:fd:37:0e:8f:19:0b:9a:07:8c:6c:32:
                    37:74:02:64:b3:f1:cd:ee:70:af:14:43:5e:12:e1:
                    91:78:05:75:c3:5d:7b:82:99:85:db:dc:68:53:01:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9B:68:FC:94:8E:3E:EA:9E:0B:FB:2A:78:2F:B9:EA:55:52:7C:0A
            X509v3 Authority Key Identifier:
                keyid:04:AB:90:79:7A:E9:DE:69:FB:C4:F5:7A:12:AB:8C:B9:21:33:ED:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04AB90797AE9DE69FBC4F57A12AB8CB92133ED01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/3137392e3130362e37332e302f32342d3234203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:06:86:91:4a:59:06:00:84:80:0d:29:be:65:b0:5a:c2:
         98:64:7d:ea:ef:ef:f6:63:dc:01:d4:53:f7:72:9f:85:a6:83:
         4e:db:b5:be:a4:93:07:be:6d:b2:4c:5f:50:24:54:f5:16:a1:
         88:53:47:d6:86:96:a5:85:b5:71:2e:77:60:c3:68:38:af:f2:
         70:80:00:f9:3e:9e:6c:46:91:d6:0f:b3:e1:46:30:80:7c:b3:
         48:83:2a:6f:81:64:c4:f3:97:9c:38:21:51:75:60:94:5b:76:
         4e:d6:b3:cb:c1:68:79:1b:cf:eb:e5:83:e8:50:a5:6f:15:e4:
         dc:07:75:46:e2:69:08:cd:5e:b6:50:82:c2:37:3d:42:2a:f2:
         33:c3:35:10:d7:60:04:3a:38:cb:9a:8c:7a:01:d0:59:7b:4c:
         1a:aa:68:80:17:2b:0c:80:6e:c0:24:f0:b4:90:eb:e2:30:24:
         40:4b:e3:39:00:55:82:01:65:db:61:b0:3a:8b:59:59:73:82:
         50:e3:e7:08:83:ae:cd:4c:5a:1f:12:51:5e:b8:f9:c2:10:9b:
         39:73:ac:e5:3c:97:43:b4:02:47:c5:05:71:12:2e:1a:4a:ab:
         e4:ca:4c:1b:e2:64:a0:04:a3:e2:fc:32:7b:da:3e:6e:e3:27:
         47:f9:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:54 2026 by rpki-client