Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          xLRSOOk6Efe3ikp4dPwnCOAIZxqoZsUlyTJhx8b0Gcc=
Subject key identifier:   C4:D2:2C:C8:68:2A:04:F6:F6:2F:C7:F8:FD:D9:5E:B2:73:0D:B2:21
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       1747C607FD05E55673D38998366025D18CEFA915
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:13 +0000
ROA not before:           Mon 02 Mar 2026 18:30:13 +0000
ROA not after:            Mon 01 Mar 2027 18:35:13 +0000
asID:                     262296
IP address blocks:        177.11.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:47:c6:07:fd:05:e5:56:73:d3:89:98:36:60:25:d1:8c:ef:a9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:13 2026 GMT
            Not After : Mar  1 18:35:13 2027 GMT
        Subject: CN=C4D22CC8682A04F6F62FC7F8FDD95EB2730DB221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:d4:2d:94:3f:6c:75:83:c3:75:eb:a5:63:
                    7d:2d:28:6b:45:2a:6a:0c:46:cc:7c:ac:9d:4b:6f:
                    e1:85:dc:ef:36:a5:d4:d7:d3:51:96:30:41:98:f7:
                    55:77:61:00:76:8f:48:11:61:91:6f:e3:f1:58:80:
                    87:54:c6:30:7a:4e:f9:0d:86:cf:dd:d5:03:9b:de:
                    d7:23:e5:33:3f:06:64:ff:8b:17:e9:ce:4d:8b:b3:
                    64:74:61:11:55:72:81:05:50:32:b2:0e:40:3b:01:
                    20:f0:88:18:7b:1a:b8:b8:d6:1c:e6:63:a4:97:11:
                    17:0a:57:ec:7a:95:88:17:7a:da:12:a3:5d:b7:bd:
                    1b:be:15:b0:97:57:4f:bf:15:c7:86:b3:9d:dd:63:
                    82:c4:af:6b:dd:c8:d6:dd:b6:b4:ec:ae:09:16:dd:
                    47:3e:d2:51:7a:97:16:12:ad:bd:d5:3f:21:00:d6:
                    89:fb:cc:ca:6b:fd:45:2c:e5:f1:6a:08:c4:95:fb:
                    2b:e0:61:4e:54:54:41:1c:cd:34:6e:57:c3:f8:0e:
                    1f:33:22:28:eb:4d:a3:81:f6:ac:3f:47:02:10:59:
                    a9:fc:30:e3:ed:4b:76:a6:dd:01:56:d4:ed:9f:ba:
                    f7:22:06:2c:69:6b:01:57:8c:31:3b:80:35:11:1e:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D2:2C:C8:68:2A:04:F6:F6:2F:C7:F8:FD:D9:5E:B2:73:0D:B2:21
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:d3:c5:bc:d8:16:2d:1c:e9:0e:f9:a7:50:a5:f5:52:9f:e0:
         14:bf:64:6b:6b:e6:d7:25:c1:88:d9:28:03:1c:d9:d5:19:b9:
         63:ba:0b:0c:04:3f:1a:99:60:e5:74:ad:58:62:cf:18:73:21:
         e9:c5:66:cd:e8:74:8d:aa:ad:8c:b7:3b:76:df:98:f3:27:bb:
         50:59:5a:af:4e:70:01:fc:33:21:80:37:71:34:7b:e8:97:0f:
         66:be:0d:24:4a:e7:14:4a:fd:cd:89:ba:1a:e6:45:8b:c6:0c:
         f6:3c:1b:f6:56:ec:20:9f:a8:c9:b5:79:c9:9d:63:d2:d5:ac:
         98:70:df:28:cc:0a:e9:97:a4:07:f1:d6:9e:21:fa:96:4f:2f:
         82:6e:56:0f:4c:23:89:fd:ef:18:19:a8:67:69:24:30:b7:5d:
         78:a5:30:9d:a3:4d:11:77:08:34:66:da:d4:6c:77:51:1f:f2:
         bb:8b:2b:66:d7:4d:5c:79:cc:50:dd:97:50:d7:3b:59:c4:d2:
         68:56:00:5f:4f:63:75:2c:28:57:3a:a4:9f:f7:38:74:66:f9:
         5e:94:15:50:14:db:8f:db:ed:3d:fa:36:89:c3:16:ca:fa:23:
         0c:e5:4a:51:cb:ee:bb:b2:07:96:42:23:8d:7e:a1:9a:85:f4:
         85:3a:24:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:38:59 2026 by rpki-client