Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e312e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          fy3Lijifq/ixpT3AGrg5FSvA4NlwQyLshwNDirzr1Io=
Subject key identifier:   E6:D0:D9:EA:A2:02:B2:D9:60:15:CC:F4:3A:2A:9A:C8:58:25:AE:76
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       3F95ABF7466C9F7BA06F79AEC9AA93B3ED2FABD1
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:56 +0000
ROA not before:           Sat 30 May 2026 21:51:56 +0000
ROA not after:            Sat 29 May 2027 21:56:56 +0000
asID:                     262485
IP address blocks:        177.66.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:95:ab:f7:46:6c:9f:7b:a0:6f:79:ae:c9:aa:93:b3:ed:2f:ab:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:56 2026 GMT
            Not After : May 29 21:56:56 2027 GMT
        Subject: CN=E6D0D9EAA202B2D96015CCF43A2A9AC85825AE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:f2:5f:00:0e:23:d1:3b:68:f0:a2:ab:e8:
                    a9:ef:2e:21:00:61:d4:00:36:48:f5:b6:ea:7d:2d:
                    ee:bb:b0:89:84:80:43:fe:4c:c0:db:2e:47:ce:8d:
                    f8:f5:70:eb:40:b7:95:36:b7:e6:37:b4:bd:14:f5:
                    5d:75:db:8e:a4:2a:7b:66:5e:56:9f:f6:7d:d2:a4:
                    fd:53:77:15:cb:99:a9:5f:85:f6:32:35:57:a0:37:
                    8f:64:32:be:42:33:c9:32:f1:fc:80:4a:db:92:f2:
                    29:c3:a7:e6:7d:86:12:e0:85:94:ad:0c:bb:8a:f6:
                    8e:0f:08:98:45:d6:ed:5e:e5:b9:16:96:40:4e:ad:
                    10:7d:22:3b:aa:be:57:94:9a:90:67:c2:9a:ae:30:
                    37:98:81:e5:34:5e:25:36:a9:1c:0f:a5:8a:4a:1d:
                    b1:3f:ee:a1:9c:4b:70:09:db:41:ba:b9:e0:f1:fe:
                    c6:7c:ce:85:53:c2:2b:3f:36:03:0c:55:2b:90:6b:
                    4f:92:95:d8:cd:2b:c7:29:8d:05:2f:24:89:42:49:
                    6a:57:ac:b7:6b:4b:ab:b4:9a:17:2a:d1:5f:ec:18:
                    79:4d:95:77:9b:92:b1:9b:7f:df:02:02:79:33:e4:
                    37:35:e9:75:a1:f5:41:59:49:0b:75:e3:7a:75:5a:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D0:D9:EA:A2:02:B2:D9:60:15:CC:F4:3A:2A:9A:C8:58:25:AE:76
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e312e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:62:fe:66:c6:1b:9c:92:64:5a:ef:c2:9b:ae:e3:2b:6b:
         d2:cf:6f:b3:0f:7d:d9:c7:7b:78:55:77:5f:89:81:4a:06:2e:
         42:fc:f3:46:44:6a:1d:16:9a:eb:f0:5a:89:a3:f5:95:24:53:
         81:6e:eb:48:b4:54:31:76:b1:d3:81:e7:f5:b4:b8:3e:16:0c:
         21:83:87:4e:b8:3a:84:95:d2:82:76:79:a8:2f:31:8d:d6:1b:
         d8:69:0e:10:20:fa:52:11:00:33:b4:11:30:06:fb:ae:62:95:
         75:c7:9b:b7:da:65:17:2d:17:ed:8a:c4:39:37:88:cc:67:8d:
         3c:dd:b5:08:4b:94:96:40:0d:f0:ed:7f:47:3e:fc:e6:02:68:
         90:55:ae:ab:96:7c:73:33:c7:2d:7d:6f:41:28:dd:fb:65:a6:
         cd:d0:91:d6:1b:f0:56:b7:4c:6f:41:a3:1d:ce:89:fa:92:05:
         15:65:37:61:2f:be:52:df:65:1c:35:a3:14:e7:b3:64:f3:9b:
         15:17:3d:88:20:e3:0b:e1:1b:2c:a7:62:84:99:62:15:a4:e2:
         e6:ed:fe:80:e7:0b:e6:84:ea:6f:60:12:3e:88:26:09:80:e4:
         e5:5f:04:46:c5:6b:99:c6:25:2d:9e:a5:0b:86:c9:0e:f9:a8:
         e4:1d:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:18:57 2026 by rpki-client