Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32342d3234203d3e203533323339.roa
File:                     3137372e32302e302e302f32342d3234203d3e203533323339.roa (raw, json)
Hash identifier:          VkMMdg2I3TkW7fzRo1M7nJN0ujWov3xMpVOlP7p2kbI=
Subject key identifier:   1B:47:F9:84:59:55:7C:F4:77:E7:4A:4C:41:D1:AB:B3:18:FC:27:B1
Certificate issuer:       /CN=B67EED1070B137A0ECAE6D13ADD58515E2FC72DB
Certificate serial:       36EEA4B9E6959311D51EB3C15DE821658F488F7C
Authority key identifier: B6:7E:ED:10:70:B1:37:A0:EC:AE:6D:13:AD:D5:85:15:E2:FC:72:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32342d3234203d3e203533323339.roa
Signing time:             Mon 01 Jun 2026 15:27:39 +0000
ROA not before:           Mon 01 Jun 2026 15:22:39 +0000
ROA not after:            Mon 31 May 2027 15:27:39 +0000
asID:                     53239
IP address blocks:        177.20.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.crl
                          rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ee:a4:b9:e6:95:93:11:d5:1e:b3:c1:5d:e8:21:65:8f:48:8f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B67EED1070B137A0ECAE6D13ADD58515E2FC72DB
        Validity
            Not Before: Jun  1 15:22:39 2026 GMT
            Not After : May 31 15:27:39 2027 GMT
        Subject: CN=1B47F98459557CF477E74A4C41D1ABB318FC27B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:71:fb:fe:bf:93:50:17:4b:99:89:09:a9:
                    13:80:8d:3c:81:1a:5c:ca:8e:b7:1b:46:40:7a:a4:
                    8d:29:85:f6:10:4b:20:bb:e9:8f:93:a7:ec:c8:bf:
                    51:d1:d1:e8:2b:e4:ff:b8:99:f7:2d:5f:58:2c:b6:
                    a8:93:51:9a:bd:ea:bc:f0:58:b3:55:a3:94:d6:25:
                    65:1e:1b:ec:88:23:cc:c1:52:52:ac:8d:4f:44:c9:
                    d0:21:c8:e6:b5:6f:0e:db:b5:0f:b5:1d:db:c3:48:
                    46:f6:a1:48:ab:8a:8e:81:2c:7c:c4:9b:cc:34:25:
                    4c:3e:71:18:12:98:53:e1:4f:1a:9b:62:07:13:5b:
                    18:eb:44:60:3b:dd:09:d8:59:8d:b2:d1:31:c8:eb:
                    19:b0:cf:aa:e2:86:6d:f4:29:f5:fc:b4:28:74:ae:
                    88:37:93:a7:8a:c8:a2:34:22:94:de:7b:53:99:fd:
                    82:1c:e5:49:d8:ae:5c:a9:dd:5c:5b:3f:3a:34:ef:
                    f2:6f:8d:f9:2c:62:bb:f2:1e:b2:73:5e:dd:be:98:
                    92:41:34:70:1e:09:c9:a9:ad:6b:88:46:5a:bd:9f:
                    54:48:ba:03:e0:de:9c:67:d4:20:34:19:54:65:f2:
                    39:55:33:3e:c1:62:03:3a:94:0c:ca:9f:3c:e9:21:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:47:F9:84:59:55:7C:F4:77:E7:4A:4C:41:D1:AB:B3:18:FC:27:B1
            X509v3 Authority Key Identifier:
                keyid:B6:7E:ED:10:70:B1:37:A0:EC:AE:6D:13:AD:D5:85:15:E2:FC:72:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B67EED1070B137A0ECAE6D13ADD58515E2FC72DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3dbh4Bq7z5dxqyhkbqoZCM5YMRoB5cFiZFRjj5QDBVJ/0/3137372e32302e302e302f32342d3234203d3e203533323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.20.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:f1:68:68:3c:88:b7:0a:47:6f:59:09:f6:ca:8a:35:c2:
         8a:2d:42:14:6f:7a:34:e7:4c:23:80:4e:cc:9f:a7:e4:3c:18:
         99:9e:f8:25:53:22:66:8c:6a:d8:5a:0c:6f:56:c6:4d:60:8b:
         4e:35:80:0d:8f:fa:44:d8:25:ba:07:d6:fe:78:11:d4:61:6a:
         63:66:a5:bf:03:b0:11:af:67:4f:06:d0:a2:18:c4:78:cc:ec:
         d6:07:78:b1:96:98:27:c0:ef:f8:ef:35:98:d2:2a:08:cb:b1:
         d1:28:5d:1a:8e:aa:0a:30:31:bd:8c:fb:62:6c:83:4b:f5:d1:
         37:e2:d9:30:bb:9d:15:6e:5e:90:51:85:b1:3f:39:6c:1e:aa:
         59:4e:51:2c:f5:8b:61:d2:31:a4:91:76:30:01:1b:67:df:c6:
         a1:81:9a:99:63:d0:5e:e8:64:58:ef:78:25:08:60:7e:64:1a:
         c3:fb:57:63:7f:ad:95:be:28:5b:fc:d7:12:f4:6a:e8:6d:f3:
         c8:3a:e9:bb:51:c8:10:f1:e4:49:60:73:1d:0b:37:49:31:c5:
         b2:1a:01:62:9d:c3:81:fd:e0:35:d1:e1:9e:6d:b9:c4:11:f2:
         f1:51:07:45:6f:70:b9:66:95:de:50:9b:52:fb:c8:b2:66:9d:
         61:df:15:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:39:29 2026 by rpki-client