Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/3137372e35322e3230382e302f32322d3232203d3e203532393836.roa
File:                     3137372e35322e3230382e302f32322d3232203d3e203532393836.roa (raw, json)
Hash identifier:          yFyHY8p9/sKuUlKzs99Uvmuw0ynNNybXCBAjcixEcWU=
Subject key identifier:   DD:06:1C:2F:10:39:EB:1E:E3:E3:35:98:01:0A:AB:2A:E7:26:75:B4
Certificate issuer:       /CN=AE66FA9D553C702EC907E7167C265671D18C3133
Certificate serial:       33EEEF028D01FD39EA421FD649C416339C3C0E13
Authority key identifier: AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/3137372e35322e3230382e302f32322d3232203d3e203532393836.roa
Signing time:             Tue 19 May 2026 13:42:01 +0000
ROA not before:           Tue 19 May 2026 13:37:01 +0000
ROA not after:            Tue 18 May 2027 13:42:01 +0000
asID:                     52986
IP address blocks:        177.52.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl
                          rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ee:ef:02:8d:01:fd:39:ea:42:1f:d6:49:c4:16:33:9c:3c:0e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE66FA9D553C702EC907E7167C265671D18C3133
        Validity
            Not Before: May 19 13:37:01 2026 GMT
            Not After : May 18 13:42:01 2027 GMT
        Subject: CN=DD061C2F1039EB1EE3E33598010AAB2AE72675B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:f0:6a:01:d9:0e:86:55:ea:92:6b:fe:27:
                    e9:83:e2:ef:b5:ee:1f:ac:e1:3f:20:1f:d0:19:2d:
                    29:85:0f:40:44:dc:7d:fe:9b:ff:58:71:a0:fe:8d:
                    bd:19:2c:9f:66:38:af:72:f6:cc:1e:77:b4:68:18:
                    8d:86:02:34:cc:f6:05:e0:34:8c:00:70:47:63:9d:
                    e4:8a:4b:86:b4:0b:6f:28:ad:dc:9f:5b:9b:38:f9:
                    2f:2d:47:17:90:14:ce:aa:dd:0f:62:8a:0d:14:cc:
                    5b:f5:15:89:55:68:1f:46:b5:d5:42:54:dc:a3:16:
                    3f:bc:21:9f:55:1a:fe:a6:7e:41:02:20:1d:50:d4:
                    29:ff:aa:a8:31:e8:30:4c:4e:62:24:05:ce:77:8a:
                    bb:1c:21:f7:88:8c:e4:21:e8:ae:23:f1:64:a4:05:
                    dc:4e:c2:1a:c2:dd:de:19:1b:76:f0:b2:94:bf:dc:
                    f3:a4:fc:18:73:e1:48:91:a6:ad:58:4d:e9:08:f3:
                    e4:a3:1b:cd:44:fa:a9:a4:a7:83:37:28:5d:f8:b6:
                    c4:87:f6:a1:b0:23:7e:69:40:87:3e:f5:1d:f3:54:
                    5c:6f:b4:b7:2f:93:fa:04:3b:96:1f:04:63:53:db:
                    52:20:61:1f:fe:8c:8b:2e:bf:68:8b:1d:0b:26:76:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:06:1C:2F:10:39:EB:1E:E3:E3:35:98:01:0A:AB:2A:E7:26:75:B4
            X509v3 Authority Key Identifier:
                keyid:AE:66:FA:9D:55:3C:70:2E:C9:07:E7:16:7C:26:56:71:D1:8C:31:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/AE66FA9D553C702EC907E7167C265671D18C3133.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE66FA9D553C702EC907E7167C265671D18C3133.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cGACwsQcCAskickBUmwiupeZpYrejmFMxv2Gc3wWRZs/0/3137372e35322e3230382e302f32322d3232203d3e203532393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:3e:02:74:4e:f7:ca:eb:2d:38:fd:34:38:e0:67:2a:12:
         99:b1:e5:2a:0a:5c:46:10:b3:94:f5:f5:83:a3:ca:ca:65:87:
         7d:e8:a9:ec:54:58:35:b1:73:75:f1:36:cf:f4:54:6d:71:7d:
         08:7a:16:ee:53:f1:32:68:03:6b:81:f6:44:b8:0d:ed:f4:22:
         71:be:e7:5b:70:ad:ef:62:0e:23:db:07:72:9f:22:3f:bd:ef:
         18:c5:06:d6:36:d6:7a:ff:5c:7e:e8:a3:1e:84:ce:f7:11:44:
         92:05:82:05:b0:22:0e:1d:c2:03:84:13:ad:ea:35:93:92:09:
         d4:77:2e:e2:5f:43:a6:ef:80:d5:92:d3:5e:d1:88:7b:76:34:
         d0:ec:df:e7:85:a4:ff:48:c2:48:8c:e6:d5:41:3d:70:da:2f:
         97:8f:1f:3b:ff:a9:cc:27:20:0e:30:26:9e:09:8f:05:2c:69:
         c9:29:2f:2c:64:5f:3e:2c:0e:4b:ac:d9:6c:67:e0:1c:b9:79:
         46:cd:e7:57:86:6b:0b:62:46:55:7a:53:fe:b4:77:7f:5b:38:
         b1:bb:d5:7b:7f:f7:95:7c:28:b9:44:61:51:27:41:9a:dd:29:
         cf:9d:46:60:bf:65:6e:4f:20:c0:81:bd:f5:58:cc:7d:f4:ed:
         e8:bf:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:49:32 2026 by rpki-client