Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
File:                     3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa (raw, json)
Hash identifier:          H6YDxyZun1Vme1+8TRDg9vOegSUrlYmIdlq8TZl6WTo=
Subject key identifier:   44:4C:FB:E2:BD:6B:6C:30:B2:1A:86:3A:68:D6:10:A7:AF:C6:B9:81
Certificate issuer:       /CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
Certificate serial:       600902072AC3B768E1564604E727793F2EEE526D
Authority key identifier: 08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa
Signing time:             Thu 21 May 2026 15:04:00 +0000
ROA not before:           Thu 21 May 2026 14:59:00 +0000
ROA not after:            Thu 20 May 2027 15:04:00 +0000
asID:                     262653
IP address blocks:        177.105.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 17:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:09:02:07:2a:c3:b7:68:e1:56:46:04:e7:27:79:3f:2e:ee:52:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4
        Validity
            Not Before: May 21 14:59:00 2026 GMT
            Not After : May 20 15:04:00 2027 GMT
        Subject: CN=444CFBE2BD6B6C30B21A863A68D610A7AFC6B981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:53:f7:fd:47:87:a3:d5:ee:27:1d:43:2d:
                    88:3f:dd:84:ab:2b:9e:2b:c5:c2:5d:83:e2:09:c6:
                    21:68:ce:51:16:85:12:aa:e2:c2:91:68:63:51:dd:
                    24:de:3b:4c:d4:31:33:09:75:54:b7:47:3a:50:03:
                    24:83:aa:34:ad:0c:1e:aa:35:c6:57:2d:a5:46:75:
                    2a:1d:2e:58:3c:92:87:88:0f:4a:25:23:2c:90:05:
                    46:10:43:18:4d:4b:56:46:67:5b:f5:9b:b7:2b:7e:
                    e0:26:85:f0:50:91:23:17:2f:f9:c1:2b:a9:75:0d:
                    f5:eb:86:a7:17:e8:ab:a8:b4:d2:39:93:8a:1c:59:
                    6e:a9:27:6c:10:39:19:c1:e6:5a:40:2e:66:f5:87:
                    97:05:51:1e:19:3c:de:d0:eb:9a:2b:5b:83:d0:0e:
                    11:8f:c4:21:d5:ec:5a:31:d9:c3:3b:ae:82:ae:fb:
                    e5:50:17:6b:f5:10:1a:42:93:85:71:fb:f2:39:8f:
                    28:e2:dd:6c:a9:66:bf:0a:c1:24:d8:b3:87:e0:d6:
                    6e:13:fe:1b:12:2b:5f:f8:dc:8d:72:d2:3f:96:20:
                    fd:40:0f:6b:dc:7b:76:2c:f3:b1:c0:00:65:f2:5e:
                    6d:cf:8e:55:de:cb:ee:20:04:ad:c4:01:06:30:80:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:FB:E2:BD:6B:6C:30:B2:1A:86:3A:68:D6:10:A7:AF:C6:B9:81
            X509v3 Authority Key Identifier:
                keyid:08:5F:34:3B:59:C5:C3:03:7B:5F:0E:E0:26:0F:D6:D5:EB:7C:AC:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/085F343B59C5C3037B5F0EE0260FD6D5EB7CACB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3230382e302f32322d3232203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:89:88:22:b0:82:ac:0f:00:18:58:19:97:f0:03:79:88:
         51:cb:29:08:c1:ab:51:3d:4a:44:0d:c8:2e:d1:dd:e2:ab:bb:
         22:ca:e8:45:6f:8d:19:39:9d:fc:06:3a:25:44:ba:87:28:55:
         c7:fa:dc:b6:df:68:5a:a7:66:b7:19:e4:62:43:e7:1f:55:14:
         77:f4:83:c4:0f:08:92:aa:58:3a:0a:47:80:42:b8:53:61:16:
         e2:c0:ad:25:08:de:c7:c7:7b:e6:cf:a8:1d:9d:a2:ee:75:a5:
         5a:e3:03:18:3d:8d:2d:cf:94:1f:96:4f:b3:a8:9e:08:de:6e:
         1d:e9:ae:f6:17:89:e5:43:67:e2:e3:08:b0:67:9a:12:3a:5c:
         f6:17:15:f0:c2:33:bd:b3:41:27:af:a8:b6:d8:c7:76:2f:cf:
         65:88:e0:28:24:35:92:e0:b7:f7:78:70:7f:27:0d:37:78:17:
         b8:46:b5:33:b3:27:25:58:b8:2c:f5:d6:2a:63:45:c7:30:e6:
         17:70:b1:93:e2:4f:a4:b4:2e:d0:c4:43:3a:53:bb:22:9b:aa:
         9b:fa:34:41:a7:39:55:44:17:1d:8a:0e:5c:9d:4a:c9:d5:44:
         a3:10:5e:80:bb:b8:42:29:63:62:81:17:08:6b:ae:c4:40:fb:
         68:08:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 20:15:33 2026 by rpki-client