Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e342e302f32332d3233203d3e20323730373039.roa
File:                     3230312e37372e342e302f32332d3233203d3e20323730373039.roa (raw, json)
Hash identifier:          re1GL3Vt2P1TiV7nyYy88ee0zD+uHz8ir7+GOVvpdpQ=
Subject key identifier:   EE:36:2A:35:ED:95:9F:2D:43:74:B1:75:44:A0:5D:26:68:56:15:2B
Certificate issuer:       /CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
Certificate serial:       44BFFE3884F8F484235A291892FE831BC854323B
Authority key identifier: CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e342e302f32332d3233203d3e20323730373039.roa
Signing time:             Sat 27 Jun 2026 02:33:51 +0000
ROA not before:           Sat 27 Jun 2026 02:28:51 +0000
ROA not after:            Sat 26 Jun 2027 02:33:51 +0000
asID:                     270709
IP address blocks:        201.77.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl
                          rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bf:fe:38:84:f8:f4:84:23:5a:29:18:92:fe:83:1b:c8:54:32:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
        Validity
            Not Before: Jun 27 02:28:51 2026 GMT
            Not After : Jun 26 02:33:51 2027 GMT
        Subject: CN=EE362A35ED959F2D4374B17544A05D266856152B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:64:69:23:01:05:b1:b1:42:f8:e0:75:d7:
                    eb:ec:5b:e2:41:16:9f:c8:aa:2d:d6:a7:93:00:be:
                    15:70:18:83:58:04:ef:56:af:fa:58:8a:b9:2b:6c:
                    06:73:46:84:c7:f5:91:38:82:6f:87:96:d8:ef:b2:
                    1a:c3:47:13:3a:be:d2:a4:bf:1b:ae:57:e3:b5:47:
                    9a:b2:d0:de:79:b7:a9:ef:0a:81:90:6f:42:ee:67:
                    60:76:94:c0:ab:30:fb:8e:e4:78:82:ed:5d:44:0c:
                    2f:e7:35:9c:ca:4c:a7:bc:5e:a5:b2:da:4f:08:35:
                    89:df:fb:ea:10:07:08:38:c1:26:21:53:a4:02:55:
                    be:f6:2b:f1:7a:f2:93:2a:93:8e:d1:c3:cb:57:8d:
                    bb:f2:bf:a7:8f:9b:5b:00:e0:61:11:5e:7c:11:62:
                    41:28:49:b6:ca:06:d2:ff:fa:12:6e:fc:84:ce:61:
                    69:de:10:e3:93:5b:6f:ab:f7:dc:d4:f9:5f:d4:ca:
                    ef:b3:78:86:a3:48:52:72:b5:80:d1:7d:94:d0:61:
                    c0:6f:74:9e:6f:35:59:ac:79:3c:dd:36:87:d5:97:
                    24:97:b6:7c:ef:da:d2:ec:1a:7b:a0:e3:90:c7:33:
                    a6:f7:22:4e:69:31:9a:82:99:99:d7:29:af:80:5c:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:2A:35:ED:95:9F:2D:43:74:B1:75:44:A0:5D:26:68:56:15:2B
            X509v3 Authority Key Identifier:
                keyid:CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e342e302f32332d3233203d3e20323730373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:61:1c:33:2a:33:a1:8e:99:11:d8:b2:17:66:6c:87:7a:
         a5:9e:f6:d5:3c:5a:4d:16:37:a1:7a:45:7d:db:e6:44:2f:d2:
         39:34:0f:93:05:6d:2e:3e:a9:d8:66:d3:2d:73:0f:d2:6e:e0:
         69:cd:ae:06:97:26:2a:90:4f:0c:a1:27:23:88:94:74:f6:4c:
         bd:3a:18:45:84:95:7d:a9:4f:51:81:ed:ba:c9:e5:93:39:6f:
         eb:3d:a5:f0:cd:47:0f:cd:37:43:13:4f:1a:71:6d:1d:43:2a:
         6a:96:fd:30:8e:27:f7:ae:21:a4:bf:d7:54:a2:fe:1b:ad:ff:
         17:6e:c6:43:00:a9:29:9a:ac:b0:ca:a5:c8:bb:0b:fa:16:bb:
         24:fe:46:64:5c:f0:5b:7f:4d:63:d1:75:24:d1:e6:19:d9:27:
         be:f2:d0:84:54:65:ac:80:27:e1:2b:4b:4e:dd:eb:0a:65:06:
         c7:65:a4:c8:43:af:bb:a1:fc:fe:f3:e1:15:00:1d:f0:93:c5:
         c0:a1:09:6b:17:24:c6:3d:8d:8f:e5:6a:eb:9f:af:87:3d:78:
         2e:c0:47:02:e9:3e:57:d2:eb:e2:db:1d:87:37:c0:bd:f2:f1:
         45:54:a7:75:48:38:7b:31:8a:b5:28:77:fd:f0:92:ab:ef:93:
         b3:b5:72:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:14 2026 by rpki-client