Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3234203d3e20323633353230.roa
File:                     3137372e3132362e3135322e302f32312d3234203d3e20323633353230.roa (raw, json)
Hash identifier:          9WF9WksOETuzjWaGONBAIu7ZLPIO6eL/RV7mF9Kjt8A=
Subject key identifier:   08:82:7D:11:3E:8F:32:C9:06:21:36:58:F1:E3:4A:97:FD:89:22:4F
Certificate issuer:       /CN=909B7902EFDB474E879A547BABF2F4F66286C655
Certificate serial:       4E2E52496C69233EFFB5B29A15AEEB37FD2B2A02
Authority key identifier: 90:9B:79:02:EF:DB:47:4E:87:9A:54:7B:AB:F2:F4:F6:62:86:C6:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3234203d3e20323633353230.roa
Signing time:             Thu 02 Jul 2026 18:08:54 +0000
ROA not before:           Thu 02 Jul 2026 18:03:54 +0000
ROA not after:            Thu 01 Jul 2027 18:08:54 +0000
asID:                     263520
IP address blocks:        177.126.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.crl
                          rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 21:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:52:49:6c:69:23:3e:ff:b5:b2:9a:15:ae:eb:37:fd:2b:2a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909B7902EFDB474E879A547BABF2F4F66286C655
        Validity
            Not Before: Jul  2 18:03:54 2026 GMT
            Not After : Jul  1 18:08:54 2027 GMT
        Subject: CN=08827D113E8F32C906213658F1E34A97FD89224F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:1a:40:31:9d:66:47:55:03:b2:4f:b3:20:
                    87:eb:06:53:ec:c4:fc:ae:27:52:07:27:26:35:9d:
                    6e:19:84:3b:95:80:ac:88:77:54:d8:f1:b2:ed:f1:
                    30:e7:a5:7a:a6:5c:7f:a1:d2:65:fa:67:11:60:cf:
                    1e:87:91:94:cb:f5:fd:88:b9:f5:4f:93:b8:b7:d8:
                    d5:0c:de:c4:d7:d8:1e:f6:b8:a3:e7:ae:52:5d:17:
                    46:e7:59:3e:4d:3b:02:d7:80:c0:ce:b5:f4:8b:96:
                    1e:a5:e4:c9:4f:59:16:ca:1f:96:72:46:27:f2:5a:
                    7b:be:b9:5c:c3:d4:f1:b2:98:5a:14:ba:07:49:c7:
                    49:ee:57:0e:79:4c:ac:21:45:55:e4:5d:03:52:54:
                    17:95:a3:ee:7c:e9:ed:3e:7d:78:56:02:7e:f7:7e:
                    ea:25:3c:32:8e:7f:0b:d8:92:9c:32:19:88:19:db:
                    0c:82:48:3f:3a:45:72:52:af:45:10:64:0d:04:e4:
                    66:72:a9:42:19:c6:8a:a1:f5:05:60:5a:30:29:b1:
                    37:56:03:c9:bc:f1:df:81:e2:54:33:b0:59:fc:a7:
                    c7:0a:c4:6a:7a:1d:59:e6:d4:c3:63:1f:71:a4:da:
                    80:8b:70:7b:63:95:f4:d5:1b:0f:ed:13:de:16:c6:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:7D:11:3E:8F:32:C9:06:21:36:58:F1:E3:4A:97:FD:89:22:4F
            X509v3 Authority Key Identifier:
                keyid:90:9B:79:02:EF:DB:47:4E:87:9A:54:7B:AB:F2:F4:F6:62:86:C6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/909B7902EFDB474E879A547BABF2F4F66286C655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909B7902EFDB474E879A547BABF2F4F66286C655.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9tZwypyEDvEyXJkGWxbTNUHrvbgi3hGpCLqqpTH6rey/0/3137372e3132362e3135322e302f32312d3234203d3e20323633353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:1a:26:e7:c2:6c:97:28:69:cb:07:f9:d6:3f:47:70:46:05:
         f6:79:f2:90:54:80:21:52:b1:b1:1f:c3:bb:bd:bf:83:91:a9:
         9f:19:f6:52:e5:78:b3:aa:df:05:75:6a:2c:32:f5:b1:43:8c:
         52:64:a7:f8:6d:c3:78:be:fc:af:8c:ba:60:d0:f1:33:65:d2:
         4e:01:fd:a2:39:b1:25:c7:c0:52:c7:3a:51:f4:f6:44:f5:ab:
         7e:48:06:ee:4f:a0:04:4a:8f:a0:d0:ef:ea:c8:58:7b:9a:2e:
         3d:32:3a:ff:84:72:12:45:53:3f:b0:64:1b:3e:05:76:26:68:
         e3:20:b2:86:5e:47:e5:a2:99:72:62:8c:18:0c:4d:10:e8:50:
         10:2b:56:35:1c:92:39:19:9b:9b:36:52:07:3a:0c:96:8d:b3:
         84:69:2d:84:7d:20:0b:e7:3f:dd:59:06:e3:72:b6:e8:26:9e:
         81:db:9a:33:86:5d:08:9e:34:a1:96:ae:f9:ad:79:63:47:08:
         04:94:ca:8f:7f:5a:80:bf:dd:88:8f:e4:cd:0c:84:7d:f9:f0:
         35:a8:0a:57:2c:12:4a:32:33:76:a0:9a:50:8f:68:31:ef:34:
         91:9b:cf:1c:d1:02:6a:d6:5c:38:59:6c:88:fc:6b:15:63:5c:
         78:40:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 22:10:53 2026 by rpki-client