Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
File:                     3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          QmJaEnjCxJrE+3PBwRA9JcIVFO3S8pp/eGYKny3+2ww=
Subject key identifier:   6E:5E:7B:15:E1:CA:4D:A6:06:2D:8E:87:86:D9:80:F3:CF:B5:2E:5E
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       50937F77A4F8A67724626753021F6685D8D4E523
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:54 +0000
ROA not before:           Sat 30 May 2026 21:51:54 +0000
ROA not after:            Sat 29 May 2027 21:56:54 +0000
asID:                     262485
IP address blocks:        170.238.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:93:7f:77:a4:f8:a6:77:24:62:67:53:02:1f:66:85:d8:d4:e5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:54 2026 GMT
            Not After : May 29 21:56:54 2027 GMT
        Subject: CN=6E5E7B15E1CA4DA6062D8E8786D980F3CFB52E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:ab:74:23:f1:11:93:04:fc:90:83:77:1e:
                    5b:87:09:b8:54:99:4c:08:70:68:c6:a0:ec:ff:0f:
                    10:98:1e:f1:aa:99:77:48:6e:af:c8:ba:c1:f6:fd:
                    50:3b:ff:2b:ca:d8:bb:f7:99:51:1c:6c:09:46:d0:
                    12:6a:80:79:d3:48:ac:08:40:d7:5e:01:d0:57:82:
                    d3:52:09:1c:06:67:47:05:6c:56:77:0d:7d:88:cb:
                    b3:1d:5f:e4:60:46:2c:cd:5a:3f:f3:50:ea:d2:3c:
                    01:27:d3:87:bf:0f:c7:ba:5d:5b:71:50:41:c6:84:
                    96:d7:90:b6:60:75:16:d1:46:d2:5d:c8:d2:4d:eb:
                    44:ee:8e:28:47:13:6a:83:d6:f3:17:f4:8b:4f:b1:
                    2a:8b:8b:e1:7a:9c:b6:74:e3:3c:16:d9:de:c6:1e:
                    f6:2e:65:cb:55:eb:fa:7b:4b:12:aa:1f:4f:43:30:
                    a5:b0:8c:ae:4c:c8:15:d1:e5:5b:a6:d5:a5:04:cc:
                    8f:0a:0c:01:50:83:4c:08:da:9d:6c:05:d4:38:c1:
                    4b:1a:53:35:4e:75:5c:9a:c8:5d:e2:1b:c3:dd:6b:
                    eb:75:87:25:64:d7:04:0a:0c:79:4e:93:38:e4:92:
                    13:ca:c2:40:fd:4b:35:f1:2a:02:26:30:31:33:0d:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5E:7B:15:E1:CA:4D:A6:06:2D:8E:87:86:D9:80:F3:CF:B5:2E:5E
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137302e3233382e3137352e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:70:cb:60:af:db:6d:6f:97:69:20:92:fc:46:c8:c8:96:52:
         14:25:a7:fd:6a:aa:d9:45:36:9b:89:91:16:e9:e9:4a:57:36:
         bc:05:b6:26:e5:a7:58:cd:ce:8b:1b:c4:7a:8a:e2:f2:8a:0e:
         20:21:57:ac:49:90:a3:70:7a:2c:fd:89:20:c1:1c:00:60:76:
         c0:4e:0b:26:eb:05:6a:f8:4c:ef:fb:4e:0f:7f:75:08:5f:22:
         64:11:00:46:f3:77:5f:35:bb:b0:89:cb:a3:43:3c:be:9d:29:
         3b:6b:33:74:85:5e:0d:32:be:b8:f1:a1:7b:e6:4d:49:30:26:
         85:30:6b:32:1f:56:1e:10:d2:93:8a:cf:20:b6:8b:97:8f:f8:
         05:26:96:dd:94:4d:66:a3:a8:ae:39:5f:92:f4:ea:0f:7e:26:
         0b:30:4d:07:bf:e8:fe:ae:23:67:bb:a7:f4:46:1f:1a:82:07:
         60:fc:19:0b:07:00:98:a9:07:d5:43:a5:9e:55:fe:e3:0a:f4:
         54:fc:9c:6c:5f:6d:a2:41:7c:82:1c:59:92:27:f8:82:e4:1c:
         9b:48:b0:aa:51:0e:76:24:29:3a:c4:a3:bd:d8:7f:c2:7a:e1:
         b8:cf:a4:d0:16:f6:ad:46:77:dc:96:1e:21:eb:f0:79:67:6c:
         ba:99:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:07:03 2026 by rpki-client