Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa
File:                     3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          /JXihlmi5O6c9fPG6D2tJOF4Lq5pPqEdmuivX3mGgGI=
Subject key identifier:   3F:01:F8:C6:C8:E2:EB:53:5E:D5:E7:A1:5F:CF:2E:A8:97:1A:6B:48
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       2F0B1CA1E552A52DD463D8E0B893B9147566328E
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa
Signing time:             Mon 27 Jul 2026 20:24:31 +0000
ROA not before:           Mon 27 Jul 2026 20:19:31 +0000
ROA not after:            Mon 26 Jul 2027 20:24:31 +0000
asID:                     269182
IP address blocks:        179.63.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 15:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0b:1c:a1:e5:52:a5:2d:d4:63:d8:e0:b8:93:b9:14:75:66:32:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul 27 20:19:31 2026 GMT
            Not After : Jul 26 20:24:31 2027 GMT
        Subject: CN=3F01F8C6C8E2EB535ED5E7A15FCF2EA8971A6B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:30:cf:93:b1:00:ae:cc:4c:84:7c:93:da:
                    37:d1:f1:eb:92:90:99:f2:a3:f7:5b:53:fc:c7:81:
                    28:1f:35:34:bc:76:48:54:80:a6:30:93:9b:be:b4:
                    c6:6e:83:8a:7a:63:47:cd:49:ca:43:5f:55:41:36:
                    11:a2:0c:bd:dc:8e:08:2b:13:9d:51:d4:ff:ca:63:
                    7b:c0:dc:cf:47:d8:5b:8c:bf:7a:2c:a7:22:94:2e:
                    11:c0:d8:ba:8a:58:6b:43:61:b2:7b:b8:54:52:bb:
                    50:5a:48:15:40:52:30:92:92:5f:3c:d5:f6:70:79:
                    e9:5b:a9:57:68:e1:bc:aa:e6:39:fc:7f:6e:ef:63:
                    e7:5e:1f:0a:58:12:71:c7:e7:2d:73:ab:ed:f7:d6:
                    1e:c4:ac:df:c1:fe:11:17:c3:3c:68:c3:e7:b9:c9:
                    20:18:f5:27:10:32:c4:1a:bd:d9:60:a8:87:55:13:
                    c8:61:00:fc:6b:37:fc:ca:8e:0e:5f:e2:b5:24:17:
                    db:11:c6:f0:60:99:43:df:82:d7:93:a8:02:cf:62:
                    28:2b:1e:82:51:bb:99:92:9a:94:76:92:ed:db:ae:
                    43:1e:27:1d:5b:24:44:9d:7b:d3:0c:56:dc:c0:98:
                    a2:4c:76:ed:ea:c2:9a:55:f1:17:40:51:4a:fa:b2:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:01:F8:C6:C8:E2:EB:53:5E:D5:E7:A1:5F:CF:2E:A8:97:1A:6B:48
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:08:46:bf:a6:6b:7c:2c:5e:7a:a0:79:ea:e7:e3:3f:80:
         f8:ab:74:78:4c:be:07:3b:79:7f:4c:dd:cb:06:73:cd:7c:c5:
         f0:02:db:0e:09:a4:1d:25:52:f2:a0:3c:df:3e:5b:3d:50:d7:
         59:ad:3a:2e:4e:80:04:4b:f6:e5:be:7e:e1:d4:d3:7c:dd:99:
         06:93:a2:61:e8:63:3f:f4:f2:4a:fd:16:ac:1c:53:fa:f8:81:
         1e:ae:4d:71:5c:bd:6e:b6:a4:fd:d4:1c:00:73:1e:4f:c0:b5:
         e6:11:7b:8e:2b:1b:df:f8:9f:57:04:05:79:80:79:7b:5d:35:
         70:ff:37:69:42:96:9b:9d:ba:bc:e7:4d:ec:d1:41:2c:80:85:
         1b:28:c4:a0:66:4f:69:55:f7:ad:3d:dc:97:f5:c3:b5:e7:84:
         49:95:bd:43:f6:74:6f:aa:d5:3e:f0:3b:20:35:91:27:50:c0:
         95:ea:8d:ac:df:76:c4:1a:92:06:c8:cb:19:a4:a1:72:26:b7:
         6b:9c:5c:62:3a:5f:a7:98:bc:3d:6a:aa:ea:34:f8:8e:ab:5f:
         5f:04:ad:f8:f7:f3:71:ef:9c:ed:a3:58:d0:87:5d:87:41:59:
         a7:e9:18:0d:31:7a:29:0b:0f:26:55:33:8f:0b:de:79:93:d5:
         10:fa:35:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:59:40 2026 by rpki-client