Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32342d3234203d3e20323633363134.roa
File:                     3137372e32332e3131302e302f32342d3234203d3e20323633363134.roa (raw, json)
Hash identifier:          aMBrZN/DS4RehzacGxrpwjPw0m9px/d9wL7csN2SweY=
Subject key identifier:   22:F7:B0:65:13:E1:28:05:20:06:8E:5F:7C:A2:B8:6F:87:6B:41:F1
Certificate issuer:       /CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
Certificate serial:       748562FC540DABFD79D4AB62E31DAD49A14A83B6
Authority key identifier: E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32342d3234203d3e20323633363134.roa
Signing time:             Wed 20 May 2026 13:31:08 +0000
ROA not before:           Wed 20 May 2026 13:26:08 +0000
ROA not after:            Wed 19 May 2027 13:31:08 +0000
asID:                     263614
IP address blocks:        177.23.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl
                          rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:85:62:fc:54:0d:ab:fd:79:d4:ab:62:e3:1d:ad:49:a1:4a:83:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E453E20A56024AF3442573067B74ACA8B5BA9A21
        Validity
            Not Before: May 20 13:26:08 2026 GMT
            Not After : May 19 13:31:08 2027 GMT
        Subject: CN=22F7B06513E1280520068E5F7CA2B86F876B41F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:0f:a2:15:40:fd:01:e0:e7:b8:07:33:b9:
                    68:9c:c0:cf:24:53:a8:56:57:9d:57:3e:23:30:f0:
                    a5:2e:99:6d:ac:c7:20:a1:37:f1:15:46:f3:e6:3f:
                    3a:f7:f5:27:54:1a:fb:df:6c:ae:ad:8b:30:c0:31:
                    24:3c:de:14:00:1c:e2:53:0f:5f:3f:54:66:7f:c3:
                    7d:3f:36:ec:e0:7b:08:e5:9b:e1:f5:5a:df:79:7c:
                    4b:39:7d:5a:72:2a:20:f8:20:2b:b4:f0:ca:19:be:
                    f9:ba:fc:ab:8d:26:49:93:16:c9:44:6e:75:3c:44:
                    fc:bc:44:db:94:c1:9d:79:65:13:f4:30:76:59:be:
                    d4:7f:6e:f8:fc:02:5d:4f:ee:f8:90:fb:fa:93:dc:
                    78:55:86:8f:3e:40:6d:47:5f:f1:3d:a9:2e:b2:1f:
                    b7:e1:5f:e4:83:1c:8d:41:a4:4d:6a:15:08:72:8d:
                    53:5f:d5:71:73:62:00:a2:fc:f8:37:5f:ac:ff:f9:
                    0f:d2:7a:0a:ef:21:36:e0:83:ee:8c:4b:09:59:96:
                    64:dc:64:44:ee:3e:ee:cd:14:ff:90:fb:a2:a9:e3:
                    dc:91:ea:34:b8:e3:cc:2c:6d:50:92:f8:b5:20:08:
                    7f:9f:02:e5:31:df:ff:b9:af:1e:69:dd:ef:5f:30:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F7:B0:65:13:E1:28:05:20:06:8E:5F:7C:A2:B8:6F:87:6B:41:F1
            X509v3 Authority Key Identifier:
                keyid:E4:53:E2:0A:56:02:4A:F3:44:25:73:06:7B:74:AC:A8:B5:BA:9A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/E453E20A56024AF3442573067B74ACA8B5BA9A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E453E20A56024AF3442573067B74ACA8B5BA9A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/3137372e32332e3131302e302f32342d3234203d3e20323633363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:16:f3:33:42:22:a5:86:b5:28:77:90:20:43:18:cd:25:53:
         f8:b3:d4:48:04:a0:18:3f:ab:11:81:ef:a5:4c:f1:a4:6a:96:
         80:7a:c2:97:af:a1:86:5f:6f:8d:90:f4:9e:fb:03:2e:1e:6a:
         3b:e2:f0:b5:c3:02:f9:c6:51:c4:d8:26:6e:20:c2:f9:3f:90:
         f0:4d:2c:28:9f:7d:ee:c6:ad:06:95:55:03:5f:3a:a5:fe:00:
         eb:60:24:23:c9:30:6e:17:bf:41:d9:eb:38:0b:51:78:2f:01:
         2b:f8:14:8f:77:a6:32:4b:32:9f:3e:8f:70:6d:f5:84:c3:01:
         c3:41:fc:d3:be:95:44:bd:d5:7e:9b:7f:12:d3:e7:84:45:c0:
         a1:67:35:39:bf:2c:08:8b:b2:08:ad:18:48:3e:b1:70:f2:15:
         43:7f:51:8d:cd:61:28:f9:72:4c:bd:e0:b7:52:b6:1f:96:39:
         22:8b:51:da:fa:5f:59:43:50:2d:1a:e5:22:f0:20:89:78:b5:
         92:fb:20:38:e3:cd:c7:d9:ef:b9:84:db:6a:be:07:21:d5:37:
         58:8a:32:35:93:d9:3b:ed:97:3a:1f:fa:99:2c:03:b6:c8:76:
         cb:a1:f0:d5:26:bf:31:77:22:bc:4f:6d:89:be:20:b6:94:e2:
         e8:9c:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:54:26 2026 by rpki-client