Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e322e302f32342d3234203d3e20323733333731.roa
File:                     3137372e39312e322e302f32342d3234203d3e20323733333731.roa (raw, json)
Hash identifier:          3uxyq/H6+IL4AqA8WdQh52Drrhs8STO5IL5xDQRr1PY=
Subject key identifier:   7F:1D:B1:99:FE:A1:A4:75:DE:48:C6:00:DF:02:16:12:2F:DB:7E:B2
Certificate issuer:       /CN=44AA67B8361484903B52C5717C3AC07266651DDA
Certificate serial:       298FCD2A6741E961E24AD39A8E8F6544ED90A950
Authority key identifier: 44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e322e302f32342d3234203d3e20323733333731.roa
Signing time:             Tue 26 May 2026 14:23:39 +0000
ROA not before:           Tue 26 May 2026 14:18:39 +0000
ROA not after:            Tue 25 May 2027 14:23:39 +0000
asID:                     273371
IP address blocks:        177.91.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl
                          rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8f:cd:2a:67:41:e9:61:e2:4a:d3:9a:8e:8f:65:44:ed:90:a9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44AA67B8361484903B52C5717C3AC07266651DDA
        Validity
            Not Before: May 26 14:18:39 2026 GMT
            Not After : May 25 14:23:39 2027 GMT
        Subject: CN=7F1DB199FEA1A475DE48C600DF0216122FDB7EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:7f:cf:3d:3d:20:de:33:0b:51:78:75:2b:
                    07:31:e4:de:1a:a5:49:60:8c:e3:92:3d:da:61:ab:
                    75:4f:ee:aa:45:21:bd:50:73:83:a4:e5:18:89:dd:
                    2f:4c:26:de:5f:47:f4:32:0f:10:94:3e:ec:ec:20:
                    62:11:12:5f:92:a3:25:b6:2b:99:aa:0d:f5:55:50:
                    94:41:4d:5f:eb:c1:d4:6a:df:5f:12:c4:e2:0e:61:
                    e4:f0:e9:85:1b:90:d0:a3:f4:71:05:58:eb:d0:28:
                    3c:4f:ed:d9:53:d6:fc:c1:9a:f7:8b:36:3d:ef:86:
                    94:fd:cc:9e:38:0d:71:2f:de:1e:05:79:d5:73:43:
                    32:8b:40:23:0c:34:26:eb:5e:a5:25:2c:fa:d9:07:
                    5b:5c:c0:35:65:c4:1f:dc:bc:bb:0b:a4:ad:6e:b6:
                    10:16:4e:c3:81:47:37:fb:29:4c:6b:0a:0f:84:78:
                    71:43:a7:22:ec:79:fa:be:80:5d:52:fa:d3:1a:6d:
                    b7:cd:5c:a4:b2:30:35:48:5f:8e:f1:ba:e3:ae:e5:
                    73:8b:21:f7:ae:d6:4d:01:be:c4:a3:2b:02:7c:0e:
                    54:4d:43:f6:4b:73:7f:3e:d3:2d:d2:6a:2b:e3:2e:
                    ef:0c:d7:c7:af:3a:e1:c9:44:90:91:ac:32:ff:43:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1D:B1:99:FE:A1:A4:75:DE:48:C6:00:DF:02:16:12:2F:DB:7E:B2
            X509v3 Authority Key Identifier:
                keyid:44:AA:67:B8:36:14:84:90:3B:52:C5:71:7C:3A:C0:72:66:65:1D:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/44AA67B8361484903B52C5717C3AC07266651DDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44AA67B8361484903B52C5717C3AC07266651DDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5YNaAuts3DuZd2n3bps9ausCi4pCDoxNB35R3aCtptFH/0/3137372e39312e322e302f32342d3234203d3e20323733333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:17:8f:85:d3:2d:b8:cc:5a:c3:6b:02:be:eb:ba:4a:1c:ee:
         ca:90:c6:7a:32:58:2e:18:c2:a5:ce:69:8f:1a:62:79:c2:6e:
         82:2c:76:50:7e:b8:90:c4:7a:fc:b8:7c:04:a6:94:39:cd:22:
         25:25:33:69:f0:f8:55:58:8a:d4:d0:d2:68:a1:32:d7:0a:bc:
         87:da:ee:e9:68:94:e0:05:4c:bd:e6:df:d3:45:9e:07:28:b0:
         6d:14:a0:33:39:15:d5:71:d3:f6:41:96:a9:9a:89:90:b1:2e:
         74:20:26:4a:10:42:00:39:3c:f0:8a:e4:c3:4b:a6:3e:7b:af:
         46:a0:e9:27:db:45:cb:29:7e:36:44:dd:bd:68:62:45:ff:0e:
         85:04:e5:fb:f8:ac:87:33:ba:ff:05:f0:0a:5a:23:6d:60:44:
         01:73:8f:0c:b5:9f:68:03:06:82:03:95:be:60:22:ef:bf:80:
         ab:81:55:57:58:f3:18:2c:25:26:8d:19:d4:8c:97:dc:48:94:
         25:a3:3d:ce:3a:af:c6:c2:34:b7:82:ea:fc:76:18:14:20:ca:
         91:b4:fc:9b:cd:bd:5f:2d:ea:5a:62:16:dd:25:ca:d3:55:46:
         65:ef:ff:ee:4c:47:a5:5c:a5:60:0d:30:e2:38:09:c2:0a:0c:
         0e:bd:db:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:57:37 2026 by rpki-client