Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32302d3332203d3e203533303338.roa
File:                     3137372e3135342e3137362e302f32302d3332203d3e203533303338.roa (raw, json)
Hash identifier:          Dg6+2LvQrZT9UliiJ6RK7RfF3pGb2UrTWMmuaRDJ7Tk=
Subject key identifier:   68:13:F8:99:1A:61:AC:CE:81:E6:3C:D7:C1:F7:1C:E3:BD:FF:83:6F
Certificate issuer:       /CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
Certificate serial:       196927FFA1A5D4F564AE4B4C816E3CC8B46BAACD
Authority key identifier: D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32302d3332203d3e203533303338.roa
Signing time:             Tue 28 Jul 2026 20:02:22 +0000
ROA not before:           Tue 28 Jul 2026 19:57:22 +0000
ROA not after:            Tue 27 Jul 2027 20:02:22 +0000
asID:                     53038
IP address blocks:        177.154.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl
                          rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:69:27:ff:a1:a5:d4:f5:64:ae:4b:4c:81:6e:3c:c8:b4:6b:aa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D351474FBDE03387D8C4C88D6E4862DB5248E4FE
        Validity
            Not Before: Jul 28 19:57:22 2026 GMT
            Not After : Jul 27 20:02:22 2027 GMT
        Subject: CN=6813F8991A61ACCE81E63CD7C1F71CE3BDFF836F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9d:8b:7a:01:53:90:b6:71:cf:81:b8:73:de:
                    7d:02:11:7f:91:88:e7:5d:52:f8:0d:d2:51:61:f5:
                    23:7a:84:59:97:22:4d:e5:38:8b:ec:19:4f:80:8f:
                    72:0e:a5:4f:48:98:c2:27:24:d1:08:b9:9b:5b:e2:
                    43:16:6d:8d:84:4d:fe:e6:74:09:85:7e:75:e4:a3:
                    cb:6c:8f:97:c1:31:c0:2e:37:0b:48:10:7d:9a:9c:
                    4f:5b:78:9b:0c:e8:0b:34:9d:07:a8:54:21:d6:23:
                    8d:95:34:82:3f:bd:6a:41:9e:0e:95:27:68:fe:a7:
                    a3:3b:80:ed:48:fc:d6:c7:e1:4f:69:ec:22:d9:96:
                    8a:f3:d8:52:72:4f:5a:04:6d:44:b2:c5:fa:95:77:
                    95:92:75:2e:df:ae:ef:68:6e:a4:d9:ee:f8:38:46:
                    18:29:d1:42:86:e2:47:84:d0:d0:a7:76:62:18:b4:
                    b0:0e:c7:fd:ab:fb:fb:7c:d3:13:e2:f8:c6:f1:19:
                    79:02:f0:92:e3:a4:be:a1:93:4c:af:09:f8:ff:de:
                    c2:d7:9b:7d:ee:2e:c4:8a:82:9f:bc:4e:8b:86:83:
                    9e:db:8c:04:e7:5a:ff:78:30:d3:80:99:a2:d6:91:
                    9d:37:82:cb:83:55:da:f6:7e:59:dc:4a:5c:f4:76:
                    f3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:13:F8:99:1A:61:AC:CE:81:E6:3C:D7:C1:F7:1C:E3:BD:FF:83:6F
            X509v3 Authority Key Identifier:
                keyid:D3:51:47:4F:BD:E0:33:87:D8:C4:C8:8D:6E:48:62:DB:52:48:E4:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D351474FBDE03387D8C4C88D6E4862DB5248E4FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/3137372e3135342e3137362e302f32302d3332203d3e203533303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:fc:d9:48:3b:c2:ca:61:4a:b2:d9:c6:9a:d4:fe:43:4d:
         9c:28:51:be:64:93:35:b9:95:d6:4c:ce:17:ad:10:01:85:76:
         fa:ac:38:cd:f6:15:3f:fe:6f:45:fd:13:3f:90:7c:b9:aa:2f:
         26:6f:8f:74:c9:b6:6e:8c:40:60:0c:dd:42:fa:8a:db:2f:db:
         0e:64:de:0a:1c:b1:9a:b0:37:16:ab:45:26:99:eb:e8:15:22:
         47:57:bc:01:54:64:26:a4:b5:fe:13:f0:f1:30:3b:be:2d:7d:
         f0:90:60:23:a7:42:42:fc:2c:46:27:53:a8:43:7d:ec:21:5b:
         ec:45:38:84:56:d0:58:72:4b:bd:a5:e5:4c:56:6c:2d:1d:3a:
         e8:ab:7b:1d:8b:0b:62:1a:2e:d5:74:23:c8:28:c7:6e:0f:27:
         bd:b4:e8:03:d9:db:4f:40:6b:3e:26:f3:b8:39:6e:d6:84:08:
         55:c6:8b:6d:53:13:e0:84:a7:c7:a6:00:db:1c:de:71:dd:17:
         8c:5a:09:d6:aa:61:5c:95:ad:2a:c0:b1:46:ae:42:a3:21:0e:
         d3:15:2b:4a:61:35:a6:44:13:52:3b:f6:68:10:83:f8:80:19:
         04:24:75:b2:c6:86:0e:25:b0:07:8c:dd:3e:e3:47:9d:73:e8:
         ea:0e:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:04:32 2026 by rpki-client