Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
File:                     3137372e36362e322e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          j+xYUKVC3J4qOR6T1bGI77j0qyFkTiNAaxLtLmdElR8=
Subject key identifier:   0F:1D:20:EA:1D:02:DF:D2:2E:47:DF:CD:70:F4:70:77:C7:D9:EA:AF
Certificate issuer:       /CN=4774D086E10F29F42B699F993DE4061E0FDF8862
Certificate serial:       35FCC564D2D3BE01F357A984F4C203EBB9007107
Authority key identifier: 47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa
Signing time:             Sat 30 May 2026 21:56:51 +0000
ROA not before:           Sat 30 May 2026 21:51:51 +0000
ROA not after:            Sat 29 May 2027 21:56:51 +0000
asID:                     262485
IP address blocks:        177.66.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl
                          rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fc:c5:64:d2:d3:be:01:f3:57:a9:84:f4:c2:03:eb:b9:00:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4774D086E10F29F42B699F993DE4061E0FDF8862
        Validity
            Not Before: May 30 21:51:51 2026 GMT
            Not After : May 29 21:56:51 2027 GMT
        Subject: CN=0F1D20EA1D02DFD22E47DFCD70F47077C7D9EAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8e:91:59:bc:a4:d4:2b:c4:6c:3a:65:00:4b:
                    72:8a:65:b1:5e:52:87:a0:c4:c3:06:c3:eb:ec:ff:
                    dd:17:bc:29:e7:6e:7e:e1:5e:66:93:49:aa:79:ff:
                    10:10:4f:a2:04:7f:9d:91:ca:2b:8e:4b:7d:e2:b2:
                    f2:93:aa:e2:f6:8e:3d:32:1e:18:0b:47:d6:a0:b4:
                    f4:b8:be:5c:ce:93:5f:5e:a4:49:9e:ae:d4:be:9d:
                    32:d7:fa:2b:79:eb:c2:aa:0a:47:83:33:2f:40:69:
                    c8:02:24:3e:6c:7a:78:19:57:62:53:e4:cc:26:02:
                    13:90:23:4c:4d:74:7d:54:9f:d3:af:4d:43:b0:f1:
                    e1:80:e7:b7:32:bd:fc:aa:90:12:6f:ca:9c:be:2c:
                    ed:37:62:bd:0e:38:6c:87:2f:f3:42:aa:2b:82:52:
                    a0:65:2d:42:25:d4:c2:56:06:66:5c:7d:df:3d:ed:
                    2f:f6:9c:83:df:31:94:9d:17:2a:dd:3e:c4:d8:ae:
                    47:28:80:38:7a:05:92:0b:49:64:63:de:83:b5:14:
                    8c:e0:d3:29:f6:e1:29:2d:56:a7:9d:c7:b0:9a:45:
                    7f:1c:30:f9:4f:ae:c0:42:37:01:a6:17:50:2a:dd:
                    46:48:f7:c3:37:f7:d6:38:a0:64:f6:1e:36:b7:5f:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1D:20:EA:1D:02:DF:D2:2E:47:DF:CD:70:F4:70:77:C7:D9:EA:AF
            X509v3 Authority Key Identifier:
                keyid:47:74:D0:86:E1:0F:29:F4:2B:69:9F:99:3D:E4:06:1E:0F:DF:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/4774D086E10F29F42B699F993DE4061E0FDF8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4774D086E10F29F42B699F993DE4061E0FDF8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3137372e36362e322e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:05:bf:88:58:83:d8:92:40:4f:01:29:13:ab:53:a0:96:58:
         49:5d:87:65:5e:53:34:7a:5b:f7:7e:dd:51:01:29:af:ec:3b:
         48:8b:d5:26:a3:de:52:09:de:2d:b1:b0:43:2e:69:60:f5:06:
         45:b5:1b:26:b6:7e:6b:b7:27:bd:ab:f7:7c:6d:e1:5b:29:32:
         47:e6:8c:17:8d:8f:f9:4d:96:f6:c0:c9:b6:3e:40:0c:1c:e1:
         49:e2:e0:16:cb:bd:ea:c4:7c:50:8e:2f:d4:d8:19:3e:ff:a5:
         64:4a:4d:4b:64:39:59:f3:0a:37:c0:6d:53:ba:26:28:e8:68:
         cd:3a:9b:5d:9b:e3:2e:79:6a:47:c5:c7:fb:72:5a:43:47:45:
         1a:9e:cb:88:07:a8:c3:50:aa:42:61:6f:9b:6c:16:73:73:e4:
         62:35:0a:2d:8f:76:27:39:28:f5:a2:92:31:ba:35:4a:78:65:
         21:49:89:ae:fa:90:29:ee:b3:5e:a9:cc:c3:d7:bd:06:6a:e1:
         4e:90:80:09:ec:0f:c9:9f:ae:b3:e3:7e:36:a7:ba:25:5e:5a:
         26:34:0c:60:d8:e3:e7:9f:9e:36:9f:d8:df:e8:6c:7b:82:9a:
         eb:83:55:48:b1:d6:cc:59:31:71:cd:16:02:a3:d2:40:a7:90:
         ff:0c:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:39:29 2026 by rpki-client