Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa
File:                     3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa (raw, json)
Hash identifier:          XMEj3Oy31APoilbZuv4ioaHphEzByLHf1HhZJ5XeAUE=
Subject key identifier:   33:53:5A:62:97:A4:2E:59:45:DF:4C:4F:55:92:78:6C:09:CE:EF:94
Certificate issuer:       /CN=C8933D664404FFC675DB40D35A340222CB57C872
Certificate serial:       551D0213F177F97300F418FC56448980765F5B2A
Authority key identifier: C8:93:3D:66:44:04:FF:C6:75:DB:40:D3:5A:34:02:22:CB:57:C8:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8933D664404FFC675DB40D35A340222CB57C872.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa
Signing time:             Sun 05 Jul 2026 17:32:40 +0000
ROA not before:           Sun 05 Jul 2026 17:27:40 +0000
ROA not after:            Sun 04 Jul 2027 17:32:40 +0000
asID:                     271150
IP address blocks:        179.42.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/C8933D664404FFC675DB40D35A340222CB57C872.crl
                          rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/C8933D664404FFC675DB40D35A340222CB57C872.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8933D664404FFC675DB40D35A340222CB57C872.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1d:02:13:f1:77:f9:73:00:f4:18:fc:56:44:89:80:76:5f:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8933D664404FFC675DB40D35A340222CB57C872
        Validity
            Not Before: Jul  5 17:27:40 2026 GMT
            Not After : Jul  4 17:32:40 2027 GMT
        Subject: CN=33535A6297A42E5945DF4C4F5592786C09CEEF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:d5:c0:94:01:95:89:e4:d6:0a:7c:66:89:
                    a9:72:87:f8:99:18:85:32:fe:0f:c2:e6:32:fd:1e:
                    3d:24:20:81:2b:f4:2b:94:fd:f6:87:39:a6:e4:ba:
                    d4:34:84:24:bb:ac:01:e0:37:9f:8b:0e:d2:80:ce:
                    4f:5c:2b:08:56:78:a8:0f:4f:a5:19:f8:77:0e:fd:
                    0f:b7:0e:8b:48:e9:b6:46:20:a8:84:ce:a6:d3:20:
                    91:82:09:1a:e4:a9:d1:e2:16:c1:03:81:15:3b:99:
                    c7:e3:74:60:7f:eb:17:30:7b:b9:16:85:db:3a:33:
                    25:43:ef:e1:10:16:9b:01:92:d5:40:75:54:3f:a5:
                    14:40:ac:a4:af:18:51:fd:fa:b2:7d:a8:6d:34:91:
                    48:29:77:25:39:45:78:6f:57:fb:26:e7:72:70:7d:
                    b8:e5:6b:7c:3f:b8:89:62:e7:25:8d:04:4c:df:e1:
                    eb:58:c8:c9:ae:d4:5f:5a:d9:39:8c:7b:15:ba:39:
                    43:10:a7:38:7a:05:04:ec:fa:9f:cf:c2:19:69:f9:
                    4d:d6:ee:ae:7d:4b:79:58:7e:d8:86:94:27:31:4a:
                    71:d4:97:6e:d6:3e:a3:a8:92:d6:97:d3:6d:80:36:
                    58:db:13:82:8a:5c:63:7a:36:a0:38:93:7b:13:c5:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:5A:62:97:A4:2E:59:45:DF:4C:4F:55:92:78:6C:09:CE:EF:94
            X509v3 Authority Key Identifier:
                keyid:C8:93:3D:66:44:04:FF:C6:75:DB:40:D3:5A:34:02:22:CB:57:C8:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/C8933D664404FFC675DB40D35A340222CB57C872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8933D664404FFC675DB40D35A340222CB57C872.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/1/3137392e34322e3130382e302f32322d3232203d3e20323731313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         de:e8:55:99:18:46:ad:44:8e:da:50:25:30:85:81:9f:48:a0:
         f8:36:67:0c:f3:28:4c:9f:69:83:d0:cf:a9:da:63:83:9c:3f:
         b5:bb:08:09:35:ff:5a:13:b4:38:72:df:49:84:2d:85:5d:53:
         29:86:a8:e4:15:a2:5a:44:c6:08:9e:69:a7:56:17:6a:ad:c5:
         f5:0c:8e:65:e0:d2:05:16:1a:a2:38:e1:cb:93:5e:33:de:eb:
         73:4a:3a:30:2f:d9:a4:e1:9d:ae:5e:d2:32:9c:9c:01:b2:88:
         4c:c4:72:ce:d5:de:79:6f:40:9b:54:a6:37:a1:1c:a6:bf:f8:
         4d:48:cc:3a:d7:82:fa:f0:58:50:de:93:46:f9:16:03:d6:2b:
         15:dd:e3:07:6e:aa:c6:25:7a:0b:25:6d:59:f2:c3:10:1e:b9:
         a9:0e:25:9d:d2:ad:e9:bd:a8:3a:0f:14:3e:0b:21:41:61:cd:
         cb:d6:71:f9:d4:60:95:e1:c8:eb:f8:9b:95:25:f3:e6:46:69:
         b9:57:b1:63:55:46:d5:25:aa:ea:53:9b:5a:02:49:6b:78:b0:
         5e:95:be:e7:83:d4:a5:15:b5:30:17:d7:d6:13:b2:e8:d1:01:
         b5:e2:ef:f7:9e:c1:17:f3:fc:74:8f:8c:02:c3:36:a1:8b:e7:
         ee:28:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:56:54 2026 by rpki-client