Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e352e302f32342d3234203d3e20323730373039.roa
File:                     3230312e37372e352e302f32342d3234203d3e20323730373039.roa (raw, json)
Hash identifier:          /I1rUP5p/gDHBbmZGawT0AoHwlBph+EdO2RPjQhDdWU=
Subject key identifier:   65:D6:98:F0:83:21:24:27:AD:36:64:95:8E:21:50:25:64:09:9E:5F
Certificate issuer:       /CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
Certificate serial:       6DA778ECDE7904B67F03962E81694C0041BB7B06
Authority key identifier: CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e352e302f32342d3234203d3e20323730373039.roa
Signing time:             Sat 27 Jun 2026 02:33:52 +0000
ROA not before:           Sat 27 Jun 2026 02:28:52 +0000
ROA not after:            Sat 26 Jun 2027 02:33:52 +0000
asID:                     270709
IP address blocks:        201.77.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl
                          rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:a7:78:ec:de:79:04:b6:7f:03:96:2e:81:69:4c:00:41:bb:7b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC
        Validity
            Not Before: Jun 27 02:28:52 2026 GMT
            Not After : Jun 26 02:33:52 2027 GMT
        Subject: CN=65D698F083212427AD3664958E21502564099E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:10:3b:8c:e5:4b:b4:89:c9:06:c0:b7:9e:
                    cc:bc:08:02:11:0f:6c:5e:16:cc:d5:bd:0f:1d:1f:
                    cf:f5:00:85:d8:46:71:53:88:f2:a9:2e:50:0f:19:
                    74:c0:2d:ef:cf:77:2f:f8:11:73:e5:83:74:f5:3e:
                    86:eb:78:fb:40:81:6c:2c:5d:fe:0a:be:60:65:a3:
                    67:e8:50:85:ac:bf:91:76:35:2e:91:f5:23:80:e5:
                    62:ec:22:92:fe:3c:7e:d8:a1:6e:80:3b:af:64:15:
                    39:5d:e5:c1:23:b5:35:dd:49:9a:98:e6:4e:e5:20:
                    26:ce:e2:e5:b7:7a:21:65:a8:23:98:a5:29:58:53:
                    8f:9e:8b:ba:d1:ec:5c:39:18:42:31:41:cb:68:e5:
                    cf:3e:cb:a8:cd:e9:52:41:6e:db:74:aa:18:bc:9f:
                    5d:48:f7:e4:ca:9c:98:83:9e:ec:18:1a:68:07:fd:
                    2f:23:c6:7b:85:b5:38:e4:6d:a2:8d:11:1d:ef:21:
                    33:2c:29:04:34:41:83:a7:a4:d8:4e:98:8c:67:f2:
                    f9:88:bd:ca:e4:dc:a3:c0:bf:fc:6c:70:23:9a:69:
                    ad:fd:eb:ea:db:9a:12:fc:28:73:e6:3e:3e:ef:8e:
                    4f:02:68:1a:f3:f9:9d:b3:b2:00:16:0d:c0:46:73:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D6:98:F0:83:21:24:27:AD:36:64:95:8E:21:50:25:64:09:9E:5F
            X509v3 Authority Key Identifier:
                keyid:CD:7C:B2:18:56:F8:D7:11:EE:A9:E8:6C:F9:7C:CF:1B:5A:1E:C3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD7CB21856F8D711EEA9E86CF97CCF1B5A1EC3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/teNGAVSippQcwF5FmmYaeFH8HtM4mYudyVwbFGf4qFC/0/3230312e37372e352e302f32342d3234203d3e20323730373039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:a1:8c:25:52:3b:f0:8c:36:51:a1:17:e7:88:21:70:98:
         c1:6a:57:4d:71:64:58:e1:c6:38:a0:dc:63:14:41:eb:8d:79:
         d6:43:e2:d0:96:45:66:a6:87:be:77:30:5f:76:6c:a0:b7:d3:
         a8:a2:46:54:b9:75:c8:c7:c3:19:09:d5:70:49:8d:ba:db:28:
         4c:ec:df:31:e0:d5:02:80:1a:be:4c:a3:52:dc:c9:0d:3f:1a:
         0a:18:dc:a4:9f:e2:db:18:37:9a:4e:5d:f6:1a:b4:5f:32:e2:
         f2:5d:90:73:0f:29:6a:64:26:b1:e9:56:64:ba:5e:8a:76:ad:
         c3:60:cc:58:71:5b:fc:98:a2:b2:0b:29:e0:8e:c4:73:4f:a1:
         c7:14:19:0c:70:66:86:ef:3a:cd:8f:f0:b1:03:e8:f2:59:ba:
         28:e7:d1:50:1c:b4:8b:c8:c0:f6:69:90:d9:80:dc:d2:6a:ee:
         14:32:18:b3:4d:8d:5d:77:16:55:e0:9c:4b:3d:43:37:3b:07:
         c2:84:f5:82:0d:3c:96:21:0e:1b:7e:00:31:01:1d:b2:78:19:
         7c:71:ee:90:65:b7:10:c3:d9:1b:3a:7f:ca:1b:ce:0c:ed:fa:
         82:18:02:42:c0:c7:f4:20:54:c3:22:a6:e6:3e:d9:ec:88:de:
         be:94:31:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:43 2026 by rpki-client