Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32322d3232203d3e20323632343434.roa
File:                     3137372e35322e3130382e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          yomLid/qBpemMQsC53tTl+klhHgRu7u5bkRjxQdQ5HA=
Subject key identifier:   73:E1:E2:C9:D7:59:46:7B:BC:7B:AF:52:02:00:1A:70:7E:09:4C:E8
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       2BFECD54072A35DDE1B698A116A844D73C0CBC0D
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:20 +0000
ROA not before:           Wed 10 Jun 2026 14:22:20 +0000
ROA not after:            Wed 09 Jun 2027 14:27:20 +0000
asID:                     262444
IP address blocks:        177.52.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fe:cd:54:07:2a:35:dd:e1:b6:98:a1:16:a8:44:d7:3c:0c:bc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:20 2026 GMT
            Not After : Jun  9 14:27:20 2027 GMT
        Subject: CN=73E1E2C9D759467BBC7BAF5202001A707E094CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:72:56:9e:ce:e5:4b:62:2d:58:36:d7:dc:90:
                    63:10:5f:45:77:94:72:24:74:37:43:e3:2b:91:77:
                    fd:33:e4:dc:68:7c:8c:2a:12:0c:a5:b0:26:8a:35:
                    ce:51:a6:30:bd:94:8f:b4:ad:31:04:6d:d2:89:34:
                    01:d8:44:d6:ec:9e:a8:58:5d:7a:e9:8f:51:f4:65:
                    6b:72:d5:d5:d2:39:87:74:cb:db:f6:d7:07:08:29:
                    a4:0a:10:27:63:e1:24:bf:57:2b:6c:11:d0:5c:d2:
                    42:f5:7e:d2:5d:63:04:7c:38:18:39:54:51:6f:80:
                    c7:3f:fa:8e:62:07:20:91:da:e3:a2:88:86:67:68:
                    da:9f:71:da:68:be:58:c8:7a:32:ab:29:ac:70:4e:
                    62:09:ce:12:e6:ad:8e:9d:f9:13:b1:2b:95:d8:3d:
                    23:71:3a:96:5c:11:89:7c:c9:6e:f9:b3:aa:a6:ad:
                    3d:eb:f6:33:a6:2c:17:f1:bc:2f:0d:4b:50:49:a4:
                    82:ee:d6:60:73:d8:92:be:8e:ed:51:c7:d6:a1:30:
                    3d:bd:4e:6e:bc:aa:44:7f:c9:1e:ac:70:6a:d5:3c:
                    6e:f0:9d:5f:f6:d6:7b:f1:d8:74:03:a8:55:96:b8:
                    5c:a4:67:94:ce:53:28:49:bb:b5:e7:6f:49:4f:03:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E1:E2:C9:D7:59:46:7B:BC:7B:AF:52:02:00:1A:70:7E:09:4C:E8
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130382e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:eb:5c:ff:84:43:31:c3:d3:21:ec:fa:ab:5c:20:45:fd:ea:
         88:8f:05:06:3f:e9:9a:a2:1c:01:0d:65:37:74:40:4b:88:7c:
         79:f5:79:fb:bb:47:33:18:89:52:96:92:18:ff:c5:f2:de:a2:
         44:43:2e:48:3a:4a:d6:da:d8:64:90:63:a5:ae:a0:35:b5:47:
         01:72:8e:ad:df:bf:54:9b:b5:c5:f1:b2:12:af:02:53:76:4b:
         54:c2:3e:ea:d5:89:4d:bb:ac:e5:0e:39:a0:37:08:03:91:1e:
         05:c3:1e:e9:d4:2d:67:7e:6a:a0:d4:2f:c8:20:f6:e6:9f:9c:
         cd:18:7c:0a:09:2f:ed:7d:6d:6a:61:b6:f4:03:6d:97:57:af:
         06:e7:8f:80:85:7b:29:e1:73:2c:73:30:ee:a2:96:30:9d:fa:
         8d:be:dc:a5:fc:95:31:6c:73:ea:6d:87:93:f6:ed:82:d2:62:
         a9:40:5f:8a:69:bd:a6:cb:48:d7:87:cc:65:84:5c:d1:50:5f:
         7f:73:18:e3:31:c6:78:32:f6:c5:4a:ff:1b:3f:14:2b:cf:a0:
         16:ef:5d:b0:ac:32:41:57:86:e0:23:9b:20:28:de:c7:12:cf:
         86:db:d4:3c:3c:3c:bf:e7:ca:55:75:b4:a8:bd:6e:d2:94:1a:
         11:e7:e1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:44:01 2026 by rpki-client