Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
File:                     3137372e38362e37362e302f32322d3332203d3e203532353631.roa (raw, json)
Hash identifier:          WfkFEoDiX0lOXxmJ8ToAbUwbhppMnqz4cVyEKxjk7h8=
Subject key identifier:   4D:03:55:8C:18:A8:65:2E:7A:18:14:8C:D4:E2:03:FC:B1:81:BD:63
Certificate issuer:       /CN=4B9D71384EB8CCDB232D031F652F5DD81A47DC24
Certificate serial:       21A62883D6A284008F6563EE8C3335AF91AF6131
Authority key identifier: 4B:9D:71:38:4E:B8:CC:DB:23:2D:03:1F:65:2F:5D:D8:1A:47:DC:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa
Signing time:             Wed 10 Jun 2026 12:34:55 +0000
ROA not before:           Wed 10 Jun 2026 12:29:55 +0000
ROA not after:            Wed 09 Jun 2027 12:34:55 +0000
asID:                     52561
IP address blocks:        177.86.76.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.crl
                          rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a6:28:83:d6:a2:84:00:8f:65:63:ee:8c:33:35:af:91:af:61:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9D71384EB8CCDB232D031F652F5DD81A47DC24
        Validity
            Not Before: Jun 10 12:29:55 2026 GMT
            Not After : Jun  9 12:34:55 2027 GMT
        Subject: CN=4D03558C18A8652E7A18148CD4E203FCB181BD63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:06:3a:73:2a:a0:db:d1:a2:d6:04:82:4a:
                    d4:50:df:3d:86:9c:48:c0:ed:f9:13:35:1a:9b:c1:
                    c4:72:41:5b:ea:70:cc:de:a1:3f:79:76:4e:d0:53:
                    63:5c:e1:0a:56:b1:50:0c:aa:09:d1:33:18:5e:3e:
                    3b:7a:0c:92:55:5f:55:47:61:ce:ae:5c:55:ce:40:
                    ca:d0:5f:48:de:58:02:39:cc:2a:37:ae:4a:25:1d:
                    ab:18:7d:d5:3a:fc:f0:01:c5:cd:08:90:f0:70:6a:
                    a8:c5:a9:98:34:06:93:1f:2d:e8:a2:4e:e3:63:6f:
                    5c:f0:5f:a0:cc:0f:d7:09:52:d6:16:24:3d:98:3a:
                    a9:72:d5:54:9b:85:d5:da:d1:ba:47:b1:1b:4e:8e:
                    d4:4e:2a:dd:33:71:1f:76:b3:64:24:6e:ac:63:72:
                    7b:04:91:d3:50:de:6f:c6:82:b5:e4:ca:08:27:f1:
                    d8:76:b3:71:d1:36:ca:fe:62:22:62:36:40:c5:ed:
                    63:98:5e:3e:52:67:99:05:f2:8d:04:d5:b7:51:45:
                    90:12:9f:1e:a7:56:19:49:64:2c:b3:0f:91:90:32:
                    cc:e0:5d:19:36:a5:3e:9d:cf:53:7d:e3:59:a2:4a:
                    d6:0a:a2:f9:22:4b:37:08:9d:81:9f:fd:ef:21:2f:
                    76:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:03:55:8C:18:A8:65:2E:7A:18:14:8C:D4:E2:03:FC:B1:81:BD:63
            X509v3 Authority Key Identifier:
                keyid:4B:9D:71:38:4E:B8:CC:DB:23:2D:03:1F:65:2F:5D:D8:1A:47:DC:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9D71384EB8CCDB232D031F652F5DD81A47DC24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/3137372e38362e37362e302f32322d3332203d3e203532353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:e6:7c:6d:ab:73:90:59:66:c7:ea:51:63:a8:77:5d:8a:6e:
         58:7d:97:81:54:08:9b:97:ed:9a:34:12:6b:87:7b:e5:bd:0f:
         46:95:12:52:f5:70:c4:74:d8:f8:d9:ae:ec:19:50:d4:69:50:
         56:2e:ed:8e:8a:ae:ef:99:08:bb:14:f5:17:ad:6f:0a:1a:2c:
         9f:e3:a3:60:27:94:6c:b1:6b:76:11:1e:f4:69:fc:c4:9b:46:
         49:eb:81:b5:09:96:8b:58:e1:5e:0a:22:fa:21:06:fe:66:40:
         78:7c:16:4d:20:10:83:b1:7a:a2:53:86:2f:b8:36:15:36:a5:
         b3:74:d9:0b:ac:9b:18:f1:71:ec:ae:18:bc:9c:18:d7:fb:3a:
         4f:07:9e:6d:af:9a:12:a3:ec:ae:e4:53:6e:bb:38:73:c6:d3:
         aa:9d:01:0b:2b:f9:12:b4:0b:a0:bc:27:33:cb:84:ce:42:97:
         fd:64:35:11:9f:f5:4f:70:3f:ee:9f:75:ef:91:df:95:a9:9b:
         e3:13:82:50:19:3c:3f:e6:72:9e:90:43:86:38:3b:8f:92:a9:
         3f:7a:32:68:64:15:33:17:32:c3:99:1f:34:79:db:69:6c:9e:
         43:5d:b7:b8:79:6c:2a:3d:e6:5d:cf:36:e9:a6:28:8c:26:c1:
         f7:e5:11:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:14:50 2026 by rpki-client