Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
File:                     3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          aY6rYKQj0/Eu57jC5p/xH5VAx8VM7IUl1fQj1ENDb48=
Subject key identifier:   7F:7C:49:8C:8C:83:54:0F:AF:44:C5:68:40:D8:F5:9D:BA:37:68:D0
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       41755089D13870C4AB73BB32940F9B8F21C3829C
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:35 +0000
ROA not before:           Tue 11 Aug 2026 12:20:35 +0000
ROA not after:            Tue 10 Aug 2027 12:25:35 +0000
asID:                     262352
IP address blocks:        170.246.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:50:89:d1:38:70:c4:ab:73:bb:32:94:0f:9b:8f:21:c3:82:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:35 2026 GMT
            Not After : Aug 10 12:25:35 2027 GMT
        Subject: CN=7F7C498C8C83540FAF44C56840D8F59DBA3768D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:fe:c1:78:2b:43:1b:dd:d7:01:b7:34:9d:
                    71:20:3f:6d:d4:61:84:a0:24:54:64:86:ac:b3:ed:
                    8b:d6:90:70:e3:e6:f0:11:25:02:cd:f3:2e:7e:3a:
                    32:80:30:71:06:ad:2d:dc:d9:fc:f6:db:21:51:50:
                    83:55:68:ce:d4:9a:54:b0:65:d5:15:e1:9a:29:94:
                    0f:5e:fc:9c:68:16:be:b8:14:d5:ee:09:02:02:7f:
                    43:d3:2e:c8:cb:f0:a7:8a:b2:73:5f:49:75:14:94:
                    d0:8f:5b:34:4b:08:32:f6:a3:0a:12:f6:36:65:53:
                    1d:06:3e:52:c1:be:28:7c:df:0d:78:4c:fb:b4:79:
                    7c:ef:19:98:a6:d6:7a:53:f4:57:45:f6:34:a8:2f:
                    f4:1b:2b:a7:2d:85:45:d1:b1:f7:84:e9:86:45:8f:
                    c4:79:99:b7:4e:22:00:54:37:90:54:55:bb:26:bd:
                    42:8c:1a:ae:6d:24:cb:52:6a:ed:b3:f7:58:81:59:
                    3b:ef:33:92:50:e5:b9:85:f8:db:94:73:ad:60:cc:
                    28:91:52:a1:07:7f:a4:2a:d6:e6:1c:bf:36:09:a4:
                    07:89:d3:17:17:74:c4:64:17:ad:73:02:c6:62:54:
                    28:9c:e8:fb:c3:bd:ce:ba:72:c7:03:bf:e7:b3:e5:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7C:49:8C:8C:83:54:0F:AF:44:C5:68:40:D8:F5:9D:BA:37:68:D0
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137302e3234362e3130342e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:6d:c3:bb:37:ed:79:8f:75:f3:a9:11:9c:af:4d:ac:2f:
         c8:16:41:0e:29:35:e5:79:dc:cf:e0:49:b5:0f:4f:99:1b:fd:
         e4:9f:57:d4:4e:8d:1a:c9:fd:84:07:b9:0e:fa:f9:2a:78:34:
         22:23:9c:d0:bf:0c:5e:fd:6c:1a:74:db:22:ec:cd:fe:2b:a9:
         03:19:59:ac:98:a6:a0:c9:63:82:0a:04:ec:d9:8b:c6:63:b6:
         de:49:58:35:bc:2e:5a:8a:66:ce:03:3e:5e:9f:1b:24:d8:4c:
         37:a6:bd:97:b9:7d:60:4d:1b:ce:df:38:bc:1e:37:4e:de:31:
         34:af:26:ba:48:64:61:8d:bf:7e:5c:de:45:34:f7:80:d9:98:
         4f:0a:a3:15:5f:7b:1c:e4:32:e1:ae:7e:40:b1:de:d0:2e:00:
         89:df:c5:47:e2:68:92:75:74:ca:ab:79:66:1c:7e:72:20:8d:
         f9:66:d9:c9:a4:d8:d4:95:6b:28:cd:43:80:e5:bd:52:98:63:
         72:3e:31:5f:ad:86:7c:8c:ad:35:7e:96:50:4e:a4:5f:d2:3b:
         26:c9:e3:6d:e4:be:f6:5b:ec:41:11:f1:be:4b:62:e3:a9:b2:
         1d:64:dd:a4:61:84:a5:13:d1:2a:a0:cf:76:0f:a9:88:aa:27:
         3d:63:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:20:10 2026 by rpki-client