Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32332d3233203d3e20323730393433.roa
File:                     3137392e3138392e38322e302f32332d3233203d3e20323730393433.roa (raw, json)
Hash identifier:          m2mntO97zQRxGwhZvZ7ZgH7bMRAYfmPz50asxBEZm1A=
Subject key identifier:   88:BC:14:A3:E2:89:08:6B:B0:B6:61:D0:83:03:F8:FD:46:DF:BF:E4
Certificate issuer:       /CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
Certificate serial:       79D4164C5FFB8DC015BE6C923B66385103CD231C
Authority key identifier: 47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32332d3233203d3e20323730393433.roa
Signing time:             Mon 23 Feb 2026 20:57:17 +0000
ROA not before:           Mon 23 Feb 2026 20:52:17 +0000
ROA not after:            Mon 22 Feb 2027 20:57:17 +0000
asID:                     270943
IP address blocks:        179.189.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl
                          rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:d4:16:4c:5f:fb:8d:c0:15:be:6c:92:3b:66:38:51:03:cd:23:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42
        Validity
            Not Before: Feb 23 20:52:17 2026 GMT
            Not After : Feb 22 20:57:17 2027 GMT
        Subject: CN=88BC14A3E289086BB0B661D08303F8FD46DFBFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:ce:2d:76:e0:45:5a:53:0b:e9:da:65:ff:
                    3f:9b:98:0b:81:46:67:e5:88:3c:44:78:dc:de:36:
                    9f:f4:08:1a:43:4f:b2:6a:4f:7c:e6:88:f3:1f:aa:
                    32:d9:ca:5f:1c:db:a0:24:72:d6:c4:ba:a0:d6:c8:
                    ae:f5:5f:60:58:41:e8:13:e7:e7:4f:ad:d9:51:54:
                    11:fe:e9:e5:39:c7:50:bb:0b:c8:e9:e5:c9:31:82:
                    b3:7e:c0:a1:78:f0:0b:5c:b9:f3:96:b6:9e:19:7e:
                    d5:b1:63:1a:23:6f:50:1f:7b:c6:f3:f9:3b:5c:d0:
                    7c:4c:d2:78:c6:98:61:3e:75:a4:f7:0b:6e:7c:2b:
                    ac:ba:7f:0e:e9:c1:70:62:32:50:1d:df:32:7c:94:
                    07:12:cd:6a:ee:fd:e1:f8:77:d0:52:4b:41:74:5c:
                    7e:38:fb:af:fb:35:96:e2:5c:d4:df:b6:ce:e0:ee:
                    fd:39:1e:cf:e2:0c:92:78:a9:78:08:b7:ae:45:4d:
                    f1:00:dd:66:ad:bd:f0:62:f9:ea:b2:34:f0:36:77:
                    9d:a4:bd:18:97:36:9e:05:84:97:13:3d:4e:a7:73:
                    cd:b6:23:15:7a:4b:a3:bc:2a:89:2a:65:56:dd:82:
                    b7:7d:26:8e:63:a7:d2:fb:d6:f5:44:08:62:d0:30:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BC:14:A3:E2:89:08:6B:B0:B6:61:D0:83:03:F8:FD:46:DF:BF:E4
            X509v3 Authority Key Identifier:
                keyid:47:66:C7:63:F2:D7:5E:ED:38:DD:E9:DA:FB:A5:F1:DC:0E:30:9D:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766C763F2D75EED38DDE9DAFBA5F1DC0E309D42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C8kkc49Qsi3sWuD9PD7UAYm5PxkfBAAkdpXwVd6CPhE/0/3137392e3138392e38322e302f32332d3233203d3e20323730393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:e6:82:78:05:b1:c4:dd:f5:8a:fe:18:04:bb:6b:7d:3b:0b:
         23:4f:bd:f8:65:54:67:66:37:d1:15:5c:00:2f:cc:68:6c:ce:
         88:f0:bb:44:4a:65:7a:13:93:f0:02:47:61:67:a2:64:23:a8:
         0c:66:09:c0:6c:76:08:e3:9e:04:b4:89:5f:23:05:30:86:9a:
         31:74:7a:74:37:ef:8d:26:7d:ce:58:d3:ef:6b:24:a7:70:2d:
         0d:ef:94:d2:98:d8:15:1f:d6:e8:57:72:72:f3:99:fc:8c:eb:
         ac:1f:7e:de:97:71:5a:24:a6:bc:3a:fc:6a:db:00:66:17:5c:
         ce:50:66:95:ac:cc:bc:1e:98:30:4a:39:78:6a:d9:31:5d:40:
         f2:39:bb:d2:b3:9a:86:16:eb:a7:3b:ab:6d:0c:b5:c4:fd:65:
         c8:a9:64:48:e2:74:33:2f:b3:fe:f1:06:15:5a:d0:87:39:bf:
         8f:2d:56:d6:39:33:6d:cb:53:18:de:09:06:05:c0:54:43:81:
         e5:29:57:ff:b1:9d:a5:d6:54:3f:9f:9a:a6:2b:30:45:39:c3:
         e8:e9:af:c9:b7:a3:8e:2f:35:e7:6a:ba:63:75:e7:8d:5e:cd:
         c3:5e:40:de:93:e1:24:ad:55:fa:a0:c4:d0:9b:f6:4d:b3:44:
         ae:5c:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:42 2026 by rpki-client