Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
File:                     3137372e36362e302e302f32322d3232203d3e20323632343835.roa (raw, json)
Hash identifier:          7NrpHvb+WH3z4dNZ6kpbHVEOLFtgrg3ZRyi1CqDcwYo=
Subject key identifier:   90:02:01:0D:D2:DD:CA:42:AB:B6:8E:36:E0:20:07:7B:8E:C5:9A:BC
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       6A126883F28521EB6AEE644B38112C8B87C01D5E
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:53 +0000
ROA not before:           Sat 30 May 2026 21:51:53 +0000
ROA not after:            Sat 29 May 2027 21:56:53 +0000
asID:                     262485
IP address blocks:        177.66.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:12:68:83:f2:85:21:eb:6a:ee:64:4b:38:11:2c:8b:87:c0:1d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:53 2026 GMT
            Not After : May 29 21:56:53 2027 GMT
        Subject: CN=9002010DD2DDCA42ABB68E36E020077B8EC59ABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:d1:38:f2:0c:ad:65:02:a0:ac:46:3f:cf:
                    32:ac:24:64:39:a8:21:30:85:7e:39:c1:46:2b:ba:
                    d8:4b:62:cf:71:cb:90:69:e7:39:3e:fc:46:c1:8f:
                    48:08:03:42:39:0f:d0:a1:a4:63:a3:9f:fb:96:e6:
                    84:25:f0:38:3e:67:d0:5a:0c:3a:28:6d:ff:2c:33:
                    de:16:fd:a5:d4:2b:e3:06:d6:48:b4:e0:0b:f8:71:
                    be:c6:0e:bd:ac:08:70:b1:d1:10:32:e0:65:10:39:
                    ad:61:9c:54:26:38:d2:6e:19:07:12:65:7c:8e:38:
                    60:11:ec:64:d4:01:10:a6:cc:b0:bc:c9:82:b9:b5:
                    cc:fa:88:df:4e:bc:e4:5e:6b:c4:59:0d:01:43:c8:
                    54:b6:af:e0:44:9b:ee:cf:03:45:41:ab:f9:16:c0:
                    ce:0f:29:b7:ad:96:73:73:50:20:76:56:60:98:04:
                    28:55:9c:0a:42:2f:12:8d:eb:ec:36:cc:14:e0:0e:
                    c0:22:d4:73:68:d6:c5:65:3e:b1:08:a6:f5:c9:3b:
                    15:05:27:bb:ba:a1:ce:0a:41:6e:13:49:cd:4d:85:
                    fc:1d:66:44:78:5e:33:20:88:11:7f:34:82:10:65:
                    b4:7b:45:98:04:a3:39:d7:cc:6b:3f:31:b7:8d:c3:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:01:0D:D2:DD:CA:42:AB:B6:8E:36:E0:20:07:7B:8E:C5:9A:BC
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e302e302f32322d3232203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:19:de:da:2a:e5:f1:b3:76:5a:e8:58:3e:ee:a9:81:21:
         39:12:a5:b9:45:87:54:fb:c6:e3:29:ff:cd:e3:d9:db:95:25:
         49:f2:5c:67:56:2f:76:06:bc:d8:76:4b:68:2f:2c:a0:37:b7:
         26:d3:fe:c6:83:7a:c8:04:42:0f:2c:a4:a3:2f:82:e0:f8:09:
         5b:75:9b:61:46:1a:f8:d9:0d:53:83:be:dc:b1:11:ec:ec:f5:
         39:5e:06:19:a2:b0:47:db:ad:6f:61:4f:a5:f4:ee:34:1c:e2:
         9d:13:34:01:01:c1:3f:62:63:32:7f:d4:83:db:d8:03:df:12:
         7b:31:0a:fb:ca:92:9e:5e:e9:fa:70:2d:94:fb:9d:c2:3e:55:
         06:3a:04:3d:01:cc:9c:9f:74:9f:65:b7:2c:5f:c6:b4:95:bf:
         ae:29:06:3c:8f:9e:2d:f8:be:c0:b5:a8:7b:ca:1b:60:b6:2f:
         33:dc:b4:5c:2f:5c:df:a4:26:12:d1:8d:85:60:6b:22:76:ca:
         1f:63:be:eb:cc:bf:b4:85:4d:af:21:65:23:f2:be:f5:2e:b0:
         f3:a5:1e:88:46:b5:7a:bf:56:9a:c6:33:d7:0f:01:f9:84:05:
         99:0a:84:34:ab:84:21:99:a0:70:39:fa:7c:86:ee:46:5c:bb:
         a2:d2:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:37:01 2026 by rpki-client