Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e302e302f32322d3232203d3e20323733333731.roa
File:                     3137372e39312e302e302f32322d3232203d3e20323733333731.roa (raw, json)
Hash identifier:          FJNudzw+KP3HO+d7mgZJJmAc6MZm7EnyiN6jQ/uu1fQ=
Subject key identifier:   12:F7:4D:3A:C6:8C:AF:97:B9:BF:F2:21:E7:BB:75:DD:B5:73:5D:07
Certificate issuer:       /CN=44AA67B8361484903B52C5717C3AC07266651DDA
Certificate serial:       5F45BA918A8DE56A53A816B718A8104A7EE6916D
Authority key identifier: 44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e302e302f32322d3232203d3e20323733333731.roa
Signing time:             Tue 26 May 2026 14:23:39 +0000
ROA not before:           Tue 26 May 2026 14:18:39 +0000
ROA not after:            Tue 25 May 2027 14:23:39 +0000
asID:                     273371
IP address blocks:        177.91.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl
                          rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:45:ba:91:8a:8d:e5:6a:53:a8:16:b7:18:a8:10:4a:7e:e6:91:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Validity
            Not Before: May 26 14:18:39 2026 GMT
            Not After : May 25 14:23:39 2027 GMT
        Subject: CN=12F74D3AC68CAF97B9BFF221E7BB75DDB5735D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:da:03:34:e6:49:a4:bb:8a:e3:7a:56:6a:65:
                    78:eb:23:8c:ea:e2:c1:e0:cb:1f:73:ee:eb:f2:49:
                    bf:99:69:4c:8d:74:44:06:30:87:7d:66:1c:75:8b:
                    49:d5:8d:bc:3d:c3:2a:3d:fa:72:98:37:59:3f:37:
                    85:6d:57:91:c2:96:d2:76:1b:7f:7c:24:c8:05:86:
                    dc:66:ca:67:66:3e:44:da:49:96:2d:aa:3b:0d:b9:
                    e8:fc:0b:2e:40:00:ea:a9:ac:e7:6a:87:37:ee:d9:
                    d1:d7:1c:cd:5d:13:ee:c8:09:c1:ef:2f:8f:6f:a4:
                    bb:bf:59:23:b3:63:bd:e4:42:d3:ee:c8:33:38:eb:
                    4c:00:0b:4c:11:a7:2e:63:94:f4:22:3c:ab:ee:61:
                    98:59:00:2e:34:12:83:4f:a4:3f:db:96:7b:43:0d:
                    3b:60:e1:14:39:b2:f3:17:27:9d:06:80:2d:85:72:
                    cb:fd:5a:6b:ab:8b:5e:3b:01:37:1d:b0:b4:74:2c:
                    0b:9d:8b:b5:1f:87:11:e5:a2:10:2c:2e:a1:2c:dd:
                    df:59:12:6a:17:04:aa:bb:95:2b:c4:31:6e:d3:10:
                    df:2c:44:b6:96:37:d9:3d:54:7e:a6:02:11:92:2f:
                    1b:fd:c2:9a:5f:e6:21:e5:ec:0d:dc:30:6e:07:25:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F7:4D:3A:C6:8C:AF:97:B9:BF:F2:21:E7:BB:75:DD:B5:73:5D:07
            X509v3 Authority Key Identifier:
                keyid:44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e302e302f32322d3232203d3e20323733333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:21:c4:ce:d5:21:1c:32:14:1b:22:2c:01:df:7e:d9:bb:05:
         80:86:80:d7:d4:22:39:69:d0:02:02:5f:5c:d8:9b:42:98:b4:
         86:1f:9a:2c:46:57:38:b4:32:0b:80:c4:a0:ca:32:2a:4c:09:
         26:76:9a:e7:0d:44:03:35:8a:a0:1a:8b:7d:30:36:e4:19:47:
         41:e2:88:0e:2e:29:9f:20:8d:74:e8:a4:80:31:50:b1:42:00:
         07:da:7e:57:55:e7:c6:1b:a6:ab:ee:9d:14:6b:60:99:50:59:
         d8:f6:c7:fc:c0:3d:4e:22:60:aa:8a:35:2d:fc:44:be:f8:8d:
         79:c3:f4:27:05:c4:a3:9b:aa:4e:ae:55:3c:50:aa:60:ea:89:
         41:33:8d:f4:5a:17:02:d5:ec:f3:59:90:9c:72:a6:40:6d:02:
         87:85:6c:d1:4d:88:3f:76:2b:ef:2e:cd:58:8c:01:3d:47:31:
         6a:56:3a:f3:30:6e:6c:da:7f:90:d9:85:7a:1c:df:85:65:60:
         f6:83:ce:a4:1a:67:c4:5a:50:4a:8f:29:26:87:a0:86:94:e3:
         52:5a:f0:93:79:f1:7a:e3:9c:b4:c7:53:28:48:93:c9:6c:a8:
         23:2d:9a:45:7c:c5:c9:61:f4:35:c3:21:be:7b:ce:64:c2:68:
         8e:95:93:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:01 2026 by rpki-client