Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa
File:                     3137372e382e3134322e302f32332d3233203d3e20323730353833.roa (raw, json)
Hash identifier:          EHPvgbhbGSeyvfQsHEUIGYDmkd7jK2acJS5WOzsPvQ0=
Subject key identifier:   5F:76:3A:25:69:B5:C9:20:D3:A8:04:01:7B:8A:40:88:71:82:9A:66
Certificate issuer:       /CN=7BFA05BDBC4272262DF95AF94996A2187C1FD3AE
Certificate serial:       394259FC18656CDBDB5CE266AA965953E96F3CD9
Authority key identifier: 7B:FA:05:BD:BC:42:72:26:2D:F9:5A:F9:49:96:A2:18:7C:1F:D3:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa
Signing time:             Thu 28 May 2026 02:24:39 +0000
ROA not before:           Thu 28 May 2026 02:19:39 +0000
ROA not after:            Thu 27 May 2027 02:24:39 +0000
asID:                     270583
IP address blocks:        177.8.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.crl
                          rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:42:59:fc:18:65:6c:db:db:5c:e2:66:aa:96:59:53:e9:6f:3c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BFA05BDBC4272262DF95AF94996A2187C1FD3AE
        Validity
            Not Before: May 28 02:19:39 2026 GMT
            Not After : May 27 02:24:39 2027 GMT
        Subject: CN=5F763A2569B5C920D3A804017B8A408871829A66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:a3:9c:56:43:36:fa:04:26:4d:a6:80:23:
                    62:df:c9:6c:f0:52:c3:f7:c9:28:13:d3:e1:1e:64:
                    ae:5d:c5:14:fe:8b:a0:3b:9e:e8:a2:d3:5c:97:d0:
                    4c:01:00:15:a6:fc:61:4c:49:00:1e:26:b2:a7:ec:
                    79:b6:f6:c0:d4:4d:8f:17:f3:65:e4:a6:c5:6d:ba:
                    45:83:a4:03:21:22:05:c7:d5:e0:3e:98:2d:a5:c1:
                    70:0e:f6:bb:92:cf:bc:78:ef:12:14:d6:6b:22:fe:
                    dc:16:d5:8c:fa:a7:b4:84:bc:11:54:0e:a9:d6:27:
                    9f:9f:f6:3c:fa:b4:2d:a2:6e:af:cd:a2:2d:b2:a0:
                    af:37:d8:51:7c:6b:f9:e9:b0:ed:4a:b8:b8:79:ee:
                    76:24:20:87:2a:20:72:82:d5:9b:48:07:90:52:7e:
                    6c:3e:f6:93:5f:77:35:6a:1f:51:a5:05:67:75:91:
                    d8:ca:e0:f2:c5:f3:b9:f3:7d:01:c0:09:95:62:3a:
                    7b:98:56:09:14:c3:da:6e:cf:d9:6e:8a:47:64:fd:
                    f4:b7:ee:f0:55:fb:3b:0a:14:57:37:5f:1f:b2:0a:
                    ee:c6:a0:96:e2:cf:05:89:7f:2d:22:86:fb:42:5c:
                    eb:24:97:71:94:6a:53:2c:ce:0f:3b:7a:f5:29:87:
                    d6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:3A:25:69:B5:C9:20:D3:A8:04:01:7B:8A:40:88:71:82:9A:66
            X509v3 Authority Key Identifier:
                keyid:7B:FA:05:BD:BC:42:72:26:2D:F9:5A:F9:49:96:A2:18:7C:1F:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32332d3233203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:39:05:1b:92:d9:2a:ce:3c:6b:6b:18:83:ee:c0:db:ed:e2:
         a6:e0:f1:b1:de:f4:a2:14:11:a2:04:bd:f2:e3:ac:3e:56:18:
         0c:73:9e:39:59:bd:bf:ed:6a:5b:a0:b1:cc:3d:19:bd:de:ed:
         4e:22:6b:22:d2:90:88:c8:59:5d:d0:2a:e9:19:6e:b4:f0:b5:
         c8:e2:bc:56:4e:c4:77:4a:bb:8a:a4:ab:8d:43:53:35:97:e6:
         76:cc:07:3f:af:3c:60:82:ad:fe:80:f1:97:22:cb:50:0b:5c:
         52:92:2a:93:ce:b4:44:5d:15:68:f0:52:89:47:53:c6:0c:b4:
         22:77:eb:9f:0f:d0:84:d0:e5:bf:fb:09:c4:16:a2:a0:10:ec:
         77:3e:01:9d:58:fa:86:15:65:67:01:89:77:bb:8e:72:2b:3f:
         1d:c1:2f:d0:db:2c:33:ed:a5:9a:fc:8e:46:3f:c0:d5:31:2d:
         ab:7d:b2:59:6c:c1:89:2a:c1:f2:a9:12:db:3b:a7:56:fd:8a:
         4f:5c:52:01:f8:09:bb:80:f8:ca:7f:d0:19:08:06:6b:3b:34:
         42:b3:3b:b9:95:53:f4:24:29:14:f2:47:e2:1e:2f:00:f1:b9:
         c9:0a:d0:56:1d:65:91:d5:4c:e9:9c:8f:b4:0f:c7:16:82:4d:
         db:f8:17:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:25:23 2026 by rpki-client