Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa
File:                     3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          i67yTYKVENmCGT0seV7AWDYzi/IKsf91x2Hri1TUFhw=
Subject key identifier:   1F:98:F9:76:9A:DA:C1:F8:05:5B:BC:A8:3D:20:7F:4A:91:F1:5B:67
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       7BE6A44C00092F00E0281E84B380D374BDE060E0
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:21 +0000
ROA not before:           Wed 10 Jun 2026 14:22:21 +0000
ROA not after:            Wed 09 Jun 2027 14:27:21 +0000
asID:                     262444
IP address blocks:        177.128.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e6:a4:4c:00:09:2f:00:e0:28:1e:84:b3:80:d3:74:bd:e0:60:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:21 2026 GMT
            Not After : Jun  9 14:27:21 2027 GMT
        Subject: CN=1F98F9769ADAC1F8055BBCA83D207F4A91F15B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6b:10:ae:27:bc:31:d9:37:44:3b:c6:ba:87:
                    98:79:15:64:de:2f:b4:34:be:ff:85:ba:4d:80:4f:
                    20:c6:6d:6a:04:f4:ed:0b:67:f5:91:dd:05:74:81:
                    7f:f7:a6:29:db:23:73:7b:fe:91:5c:59:9c:d6:d4:
                    67:26:2a:54:47:4c:4a:37:64:3a:5f:d1:c2:23:b7:
                    67:e6:c4:9b:21:9a:9f:4b:f8:48:b8:05:7d:5a:58:
                    8f:1a:bd:97:ee:c0:65:dc:9a:36:d9:d3:a8:58:28:
                    c7:68:5f:17:e7:53:70:ba:09:d2:5c:9c:a7:25:3a:
                    b3:27:39:a6:c4:f1:e0:94:13:94:d2:8f:ab:7e:51:
                    b2:84:51:0d:86:ce:b9:d8:4e:19:8f:b0:07:a4:e2:
                    b0:bb:52:e2:86:ed:ea:c9:6b:fa:25:5b:e2:a3:65:
                    f2:04:fc:ab:9b:77:18:1b:4b:99:38:a4:11:97:f8:
                    d3:ad:50:45:f7:79:09:c9:08:d6:74:93:2c:6d:b8:
                    08:3b:07:54:65:61:c2:f1:59:5f:22:b7:42:30:06:
                    f7:31:7b:1c:21:c9:1f:aa:ac:96:46:da:cf:af:04:
                    b3:e8:92:29:f4:d3:10:2f:2e:9d:ee:81:2f:a1:87:
                    b9:66:9f:df:15:ab:6f:23:46:91:08:69:3f:2f:e8:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:98:F9:76:9A:DA:C1:F8:05:5B:BC:A8:3D:20:7F:4A:91:F1:5B:67
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e3132382e31322e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:57:80:5e:16:a9:e2:f6:0b:54:9c:45:87:68:56:6d:e7:66:
         3b:cf:aa:89:b9:16:91:e0:a6:79:d1:9d:0f:a9:27:7f:9d:3d:
         0d:67:d2:89:b0:79:87:ff:d9:a3:8c:98:bc:27:50:44:7c:50:
         fc:1a:c9:9c:02:cf:55:be:b3:85:a8:6c:b4:d2:9c:83:8b:ba:
         fa:fd:81:d8:f6:e8:72:cd:a7:de:1a:84:48:33:e9:7b:7b:a0:
         78:8c:4f:f5:b2:ec:20:3b:e0:3a:dd:26:3a:dc:e7:32:31:b1:
         aa:33:03:f2:1b:b4:e5:bf:2c:91:27:b6:94:df:a9:9d:a4:dd:
         b1:8d:5d:1b:f6:7c:68:36:ca:e5:99:44:bb:83:81:81:e8:5c:
         e5:f5:ad:63:07:da:4b:e0:ec:c3:88:79:0d:74:0b:8d:86:80:
         8d:a3:9a:32:52:1c:6e:05:15:69:32:e0:33:21:8f:d3:62:5e:
         0a:01:1f:d3:03:e3:5e:7a:26:c2:7b:db:59:40:81:92:ba:26:
         0e:d5:51:0f:2b:4e:86:ed:a1:de:91:81:16:75:31:11:b6:19:
         fc:de:2f:ae:82:e5:be:88:8f:eb:95:a0:31:a4:ab:6b:1f:23:
         4d:c5:93:30:65:61:ac:76:81:0f:89:23:ce:91:89:7d:c5:c0:
         f0:19:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:37 2026 by rpki-client