Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38362e302f32332d3233203d3e20323633343333.roa
File:                     3137372e39312e38362e302f32332d3233203d3e20323633343333.roa (raw, json)
Hash identifier:          b6eX5uacQm4wcCY73wIDQnLXAWdtzEJs80xZkcLJ0xk=
Subject key identifier:   42:8F:F2:FA:A6:AE:4D:1F:5B:63:A3:19:15:A4:F7:05:FA:1B:D8:16
Certificate issuer:       /CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
Certificate serial:       0A7E45C31233C07D4A30560A11D64094C38E034F
Authority key identifier: E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38362e302f32332d3233203d3e20323633343333.roa
Signing time:             Wed 10 Jun 2026 11:40:53 +0000
ROA not before:           Wed 10 Jun 2026 11:35:53 +0000
ROA not after:            Wed 09 Jun 2027 11:40:53 +0000
asID:                     263433
IP address blocks:        177.91.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl
                          rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7e:45:c3:12:33:c0:7d:4a:30:56:0a:11:d6:40:94:c3:8e:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
        Validity
            Not Before: Jun 10 11:35:53 2026 GMT
            Not After : Jun  9 11:40:53 2027 GMT
        Subject: CN=428FF2FAA6AE4D1F5B63A31915A4F705FA1BD816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:74:68:f6:5c:fc:b4:7d:2b:2c:a0:76:3a:4e:
                    a3:05:6d:01:48:50:ef:42:55:34:19:7f:28:7f:e4:
                    84:88:68:f7:88:c8:cd:fe:15:fc:e8:c0:c7:76:3b:
                    aa:46:15:0b:f3:c8:e4:77:3f:ff:6a:34:f6:b1:c8:
                    27:dc:4d:14:e6:0d:56:8e:d1:e9:76:fe:26:06:dc:
                    d1:e6:06:53:4f:8b:c1:0e:4e:bb:9c:93:bd:e9:4e:
                    58:fc:9c:59:51:27:65:87:4b:c2:55:73:4a:91:b0:
                    fd:c1:b8:21:4a:46:72:21:de:04:8f:0e:f8:f1:c9:
                    a0:75:f6:27:60:7a:77:2f:1b:9e:7c:c9:b7:15:55:
                    2b:e8:0e:4f:a1:b9:84:b4:95:18:3a:31:0c:76:9f:
                    c6:7f:48:15:0b:35:17:fa:7c:2e:7b:00:e0:eb:4f:
                    67:43:7c:d2:ba:76:79:95:ea:25:d0:af:b5:c0:c6:
                    fc:5a:c0:05:de:6f:36:db:e1:e1:31:2f:75:74:39:
                    d4:dc:1c:19:fc:5b:91:43:bc:fc:78:66:b5:c4:c3:
                    53:c8:60:f2:4e:66:47:8b:e8:b7:3a:c6:be:2e:89:
                    7d:66:63:1f:37:3a:02:61:65:22:f3:97:9a:b3:43:
                    42:80:96:b8:11:00:f9:57:23:16:2d:f8:9d:ad:db:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:8F:F2:FA:A6:AE:4D:1F:5B:63:A3:19:15:A4:F7:05:FA:1B:D8:16
            X509v3 Authority Key Identifier:
                keyid:E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38362e302f32332d3233203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:f5:1f:80:9e:d6:43:a1:26:00:0b:1b:c1:72:e0:22:db:d6:
         ad:0e:2b:6b:78:22:25:b1:55:37:97:b4:d2:68:95:d6:dd:2a:
         40:9a:fd:bd:e4:0a:b4:fd:cf:4b:43:4e:51:e2:7f:2e:b4:4b:
         ed:c2:ff:6b:56:6f:26:2b:fb:03:fa:a7:f8:77:58:a0:e6:60:
         a4:61:89:26:9d:67:8a:c1:ae:75:95:14:2a:c5:d7:10:ff:87:
         24:ca:b4:7a:06:00:8d:7c:74:2a:80:dd:77:bd:88:c9:4b:b2:
         66:0b:76:e7:0c:b3:f3:7b:1a:99:a1:95:a3:e7:ac:52:f8:4c:
         01:50:ff:0b:26:49:98:18:54:77:13:83:ef:be:31:1e:bd:3a:
         27:ed:2d:43:3d:aa:f1:52:4a:a2:a7:ad:d3:29:e6:49:38:9d:
         ad:ca:a9:2a:6d:92:bf:53:a8:49:11:5d:62:b7:1e:46:b8:67:
         ac:e8:7b:2a:df:47:93:54:a5:0a:11:26:1a:88:cf:82:81:9d:
         56:1f:ce:cf:26:3a:42:b1:f6:91:37:05:d4:26:cd:3f:c7:4a:
         1b:d9:c2:c3:0f:21:4d:42:56:62:a9:b0:33:c2:51:0e:90:82:
         82:5a:ba:bf:69:55:b1:5e:ad:56:ab:54:10:73:ba:db:86:ba:
         d5:19:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:49:46 2026 by rpki-client