Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235312e302f32342d3234203d3e20323632343738.roa
File:                     3137372e34372e3235312e302f32342d3234203d3e20323632343738.roa (raw, json)
Hash identifier:          T/oh2ENMurCvEvxyV35Kw1EvYfGPJE/+hNr1AJWIUto=
Subject key identifier:   16:18:12:49:E7:6B:C6:8B:E2:2D:9C:7B:50:1C:CD:54:F8:43:C1:45
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       0414F64BDE21BB5FA929216EEB236C02760791A4
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235312e302f32342d3234203d3e20323632343738.roa
Signing time:             Thu 11 Jun 2026 23:05:08 +0000
ROA not before:           Thu 11 Jun 2026 23:00:08 +0000
ROA not after:            Thu 10 Jun 2027 23:05:08 +0000
asID:                     262478
IP address blocks:        177.47.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:f6:4b:de:21:bb:5f:a9:29:21:6e:eb:23:6c:02:76:07:91:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Jun 11 23:00:08 2026 GMT
            Not After : Jun 10 23:05:08 2027 GMT
        Subject: CN=16181249E76BC68BE22D9C7B501CCD54F843C145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:21:2c:1e:f3:90:6e:f9:b6:f5:30:d5:21:
                    ad:e0:23:1e:fc:ca:1f:55:f2:a2:b6:e2:e6:55:40:
                    c4:31:34:79:0f:85:5d:f1:5c:ca:79:14:3e:05:16:
                    6f:30:e5:03:16:2e:d2:e9:1f:b6:82:63:ba:33:12:
                    f8:ab:d6:4f:6a:f3:13:97:0e:fc:2d:97:99:b7:9d:
                    f1:5c:a1:95:6c:2b:41:ca:db:3a:f6:1c:62:54:b2:
                    91:64:8e:cf:3d:c4:0f:c8:12:b1:eb:0e:95:ab:69:
                    3e:b7:70:11:6d:76:ba:74:dd:a4:28:c3:ec:1d:f4:
                    76:be:d0:02:0d:4c:87:4a:11:43:67:a2:ef:67:c6:
                    ae:39:af:5d:c9:0c:2e:91:7b:46:38:1d:72:8c:7e:
                    33:29:be:af:94:7a:1a:76:8b:0c:9e:ae:96:b4:3d:
                    a8:f5:53:e7:30:32:b9:f5:8b:06:88:8e:12:1f:21:
                    df:b2:7f:2c:84:71:0a:83:73:40:76:5e:ee:6b:e7:
                    b5:dd:71:88:7a:ed:c7:6b:72:2b:6b:37:0a:a3:af:
                    46:1c:d3:43:c4:d6:c1:e9:8d:3d:69:32:a1:83:7b:
                    c7:b6:4d:6f:21:56:ac:ad:f7:00:b4:31:51:77:38:
                    29:53:f3:ec:98:ac:54:f8:e7:a5:ba:97:d3:70:88:
                    9a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:12:49:E7:6B:C6:8B:E2:2D:9C:7B:50:1C:CD:54:F8:43:C1:45
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3235312e302f32342d3234203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:65:9c:1f:aa:39:7a:98:bc:2e:d7:0a:d1:0b:e3:33:7c:46:
         d9:4a:c7:68:a8:d3:e3:46:d0:21:bc:81:4d:4c:cd:67:87:2f:
         20:3b:3f:60:23:e1:d6:5a:65:ed:82:f4:e2:c1:e9:66:ac:d5:
         bc:de:bc:ab:41:df:71:b4:41:1e:f0:6d:f8:58:ac:2f:80:ae:
         dd:53:e8:bf:7c:67:75:5e:4c:82:b6:cd:b2:24:49:b6:f1:85:
         00:32:04:0d:73:73:d7:38:96:17:cd:9d:84:5b:6a:c7:0c:07:
         a0:5c:b9:89:a3:77:aa:0d:2d:ee:71:55:c9:6f:66:f9:e2:5a:
         db:d9:44:84:4e:61:d4:5e:3d:93:63:e6:7b:28:06:e3:27:41:
         f0:0b:d5:e4:35:e3:45:2d:28:43:b5:9b:55:04:20:5f:1f:5a:
         30:6b:5e:f5:f4:b7:e3:25:36:07:95:58:2e:d0:15:69:25:38:
         78:77:1b:af:91:ae:78:71:7a:a9:45:5b:53:b0:3e:f9:e2:67:
         eb:49:ec:18:47:e7:a2:4d:27:12:38:10:73:56:0a:e5:2c:df:
         e0:8b:27:2c:1e:50:06:4b:fa:19:b9:af:ae:7b:16:b0:a0:da:
         f6:61:b9:5d:05:55:2e:5b:4a:8d:66:83:9f:64:b1:28:b7:92:
         38:f1:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:02:56 2026 by rpki-client