Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37312e302f32342d3234203d3e20323634343936.roa
File:                     3137372e35352e37312e302f32342d3234203d3e20323634343936.roa (raw, json)
Hash identifier:          DTFeXYd2fA4w4S3Gv90bc/boFi59Px9+ehxTze2kuIE=
Subject key identifier:   17:F3:D3:99:C9:DB:2D:F6:0D:5D:AB:74:7D:77:36:29:D5:89:D3:14
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       6AA878D1EC6126BB8F628F85273483BA1BB2F042
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37312e302f32342d3234203d3e20323634343936.roa
Signing time:             Mon 25 May 2026 19:17:11 +0000
ROA not before:           Mon 25 May 2026 19:12:11 +0000
ROA not after:            Mon 24 May 2027 19:17:11 +0000
asID:                     264496
IP address blocks:        177.55.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a8:78:d1:ec:61:26:bb:8f:62:8f:85:27:34:83:ba:1b:b2:f0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: May 25 19:12:11 2026 GMT
            Not After : May 24 19:17:11 2027 GMT
        Subject: CN=17F3D399C9DB2DF60D5DAB747D773629D589D314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:e3:82:d7:98:f9:cc:21:8d:e8:69:e0:d6:
                    98:62:8b:f1:f6:e4:7f:47:79:cb:91:36:9b:a9:9a:
                    bf:27:17:94:bc:49:5a:33:1a:e1:91:12:da:23:70:
                    23:21:d0:9c:21:27:9a:21:74:86:a3:d6:03:88:6b:
                    19:9c:2d:2d:7e:c6:11:84:cb:4e:53:0f:d4:dc:e2:
                    d4:d6:4d:84:ed:04:03:bf:fb:29:c4:59:ad:99:dc:
                    89:70:00:a8:05:ef:11:6b:ca:46:4b:68:c9:b0:0f:
                    bc:19:69:d8:3e:86:17:a5:ab:9e:68:30:f4:d3:83:
                    ec:99:4c:45:71:7d:b4:d9:db:19:21:b4:7e:50:df:
                    20:4f:98:10:eb:a6:d5:b7:f0:6d:f7:85:9f:9d:d5:
                    37:7c:ab:86:ff:a5:84:73:05:fd:51:c7:b0:4c:0c:
                    f7:c8:f7:53:03:43:0d:54:aa:84:42:28:52:2a:98:
                    6b:c1:cd:75:c7:ff:9c:5e:b1:ca:46:b4:93:ca:c9:
                    ab:4f:76:3f:73:17:e4:5e:5d:ea:60:e4:39:a5:90:
                    60:77:be:44:9c:b0:8e:b2:7a:0f:bb:27:86:a9:0a:
                    dd:16:91:8c:c4:ad:aa:6b:a4:3e:8f:f5:19:10:05:
                    8f:db:f9:5c:3c:af:1a:aa:5c:b5:c6:0c:62:8c:b8:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:D3:99:C9:DB:2D:F6:0D:5D:AB:74:7D:77:36:29:D5:89:D3:14
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3137372e35352e37312e302f32342d3234203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:fc:53:41:93:e5:61:d5:42:a9:37:53:d5:05:c4:9d:d4:56:
         1a:0c:18:6a:43:e7:d8:f1:df:8c:51:7c:ca:d6:df:82:b0:8b:
         a9:42:8f:cf:f0:d5:e1:f0:d2:27:16:58:65:fb:c5:f2:93:5f:
         fd:fc:2b:d1:ba:bb:64:fa:43:33:a3:35:9f:bb:53:7a:b7:ce:
         da:c1:25:7d:0d:37:c7:60:85:e7:93:0f:18:f6:b5:46:14:4b:
         73:b7:26:ac:4c:b7:5c:30:d5:a6:28:9c:c9:04:a6:aa:10:5a:
         d5:63:91:42:f6:f8:a1:a9:dc:71:87:31:ca:4d:96:67:0f:71:
         7b:6e:b9:5f:16:ca:cc:08:65:47:fe:c9:45:f2:5e:6f:c5:36:
         44:62:69:80:ef:af:80:e1:57:bb:55:2e:da:95:68:ff:15:53:
         5e:b1:01:09:c4:d8:7c:cf:d4:f1:dc:73:61:87:92:7b:64:45:
         c4:5a:97:f3:ad:78:3f:10:e3:88:06:f1:23:0e:ce:f0:d2:23:
         be:68:23:ff:6b:79:82:df:b9:93:53:a6:97:c8:fd:fb:42:33:
         49:47:c7:3c:50:fb:a9:41:87:6c:2b:49:cd:ea:3c:b9:76:4f:
         f5:f8:c4:fa:5e:e0:43:e9:9d:08:9a:2c:43:9f:56:6e:b6:b6:
         10:31:b2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:42:17 2026 by rpki-client