Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa
File:                     3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa (raw, json)
Hash identifier:          r1+H8IzgMnqeY8GsuG/yUWvxjGWwTyvjPsuP0YuDsPo=
Subject key identifier:   17:9A:29:51:22:00:37:D9:7C:34:5D:1D:AE:A2:10:56:DA:1E:6C:1C
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       1AF02466A04B1F68376428D6F9AE1FD48BA12769
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:13 +0000
ROA not before:           Mon 02 Mar 2026 18:30:13 +0000
ROA not after:            Mon 01 Mar 2027 18:35:13 +0000
asID:                     262296
IP address blocks:        177.11.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f0:24:66:a0:4b:1f:68:37:64:28:d6:f9:ae:1f:d4:8b:a1:27:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:13 2026 GMT
            Not After : Mar  1 18:35:13 2027 GMT
        Subject: CN=179A2951220037D97C345D1DAEA21056DA1E6C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:be:9c:52:03:2d:be:95:29:09:60:54:34:
                    a3:f9:46:fb:5c:48:ff:6a:fb:5c:e1:64:03:d1:b0:
                    b7:a3:5b:e0:ca:b7:15:01:8e:15:ba:34:6c:5a:05:
                    75:48:c7:f2:74:e2:4b:f9:64:4b:a0:34:e8:4f:20:
                    34:70:01:d1:45:f6:1e:5f:8e:15:24:69:fb:1d:fc:
                    f3:90:a8:ac:73:e5:6f:01:9f:e2:bb:14:90:35:68:
                    f6:9d:1d:f9:d1:d8:c0:f8:97:2c:37:4c:0a:6d:20:
                    b5:eb:1c:a6:33:a5:ed:40:49:3a:e9:89:83:94:47:
                    03:02:c7:e6:d4:89:01:be:08:34:c3:59:69:43:d1:
                    57:5f:2d:a3:24:39:4e:b2:e8:9e:5c:1e:09:c6:73:
                    9e:65:fb:d7:82:5e:3c:4f:81:16:f6:1e:22:f5:f7:
                    4e:e3:9e:3d:90:b9:07:0b:71:d7:70:7c:31:55:55:
                    e3:c0:aa:ef:8e:13:b6:55:8d:97:03:51:c9:8b:a2:
                    30:58:70:e1:55:9b:21:42:01:c0:9a:7b:89:11:39:
                    ef:83:b9:e4:03:1f:5e:fb:d4:84:92:14:71:2f:bc:
                    e3:7c:c5:cc:a0:5f:3d:76:f5:f1:d2:b6:30:03:3a:
                    24:ac:5a:8e:6b:1c:be:d5:11:f2:50:fb:e1:04:75:
                    86:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:29:51:22:00:37:D9:7C:34:5D:1D:AE:A2:10:56:DA:1E:6C:1C
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132322e302f32332d3233203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:7d:d5:1c:bb:b2:40:5c:0a:65:72:81:2c:ea:0c:a5:6e:
         26:c4:ce:4d:fd:3a:ed:40:14:0a:c7:52:ed:eb:d9:3c:1b:c0:
         8a:7c:7e:6b:c1:68:12:19:db:b0:62:57:7b:8b:a3:47:03:d6:
         70:b9:bb:5e:a7:17:a2:7f:52:f4:ce:36:a8:fc:68:17:4f:69:
         71:cd:57:f3:58:ef:1b:3b:d4:d9:cc:04:bd:07:fc:75:ee:57:
         e0:8f:6d:01:0f:08:39:95:6b:56:b8:eb:ca:be:70:b8:9a:60:
         66:d6:b5:1d:ba:1f:63:e3:14:d4:50:80:8a:fa:a4:c3:8f:a5:
         24:29:ca:e3:16:aa:bf:0d:f3:f4:36:7f:78:b2:22:32:40:0d:
         35:8e:aa:cb:4a:40:df:bd:08:6b:b5:c9:3a:57:f9:1a:51:9d:
         8f:4f:42:00:f4:97:a5:2f:23:7d:b7:fd:32:d5:7d:d3:bf:d1:
         0d:95:1f:92:88:61:94:9c:f8:9b:95:5e:f4:88:3c:0c:6e:ba:
         f8:c2:ab:80:49:f8:5b:4f:2b:d2:1f:7f:4e:6b:dd:11:63:fc:
         27:d6:7b:05:68:f3:ba:76:d5:b8:83:83:5b:95:9e:8c:19:13:
         04:19:b1:68:06:09:e3:51:f9:f7:bf:52:a5:34:f6:fe:74:56:
         e7:6d:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:37:28 2026 by rpki-client