Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e38362e3234302e302f32322d3233203d3e203134383638.roa
File:                     3137372e38362e3234302e302f32322d3233203d3e203134383638.roa (raw, json)
Hash identifier:          LO3oHjHwugYBcxsBGm5zC0KSx2sG9g/pcffaqP2S1Fg=
Subject key identifier:   E6:8E:CB:4A:9C:CE:45:0C:72:58:C6:15:B3:54:DE:02:BE:63:20:96
Certificate issuer:       /CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
Certificate serial:       59EAAAEBF134A76F53B67F29F861CA5FC7661AD0
Authority key identifier: 1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e38362e3234302e302f32322d3233203d3e203134383638.roa
Signing time:             Mon 25 May 2026 17:37:43 +0000
ROA not before:           Mon 25 May 2026 17:32:43 +0000
ROA not after:            Mon 24 May 2027 17:37:43 +0000
asID:                     14868
IP address blocks:        177.86.240.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl
                          rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ea:aa:eb:f1:34:a7:6f:53:b6:7f:29:f8:61:ca:5f:c7:66:1a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB2349FFA9FD9E14A0EA6DD15A903829B22479C
        Validity
            Not Before: May 25 17:32:43 2026 GMT
            Not After : May 24 17:37:43 2027 GMT
        Subject: CN=E68ECB4A9CCE450C7258C615B354DE02BE632096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:17:1d:af:bc:f5:31:38:10:5d:cc:26:d3:
                    1b:ae:a6:e0:cd:d7:c1:4e:45:08:94:e0:0e:63:3f:
                    32:20:04:ac:bb:8d:d1:39:a2:45:06:5b:91:da:8c:
                    8f:bb:4d:07:af:22:7a:6d:da:80:c9:07:2f:6c:09:
                    66:bf:9d:0f:06:1f:00:4d:bd:19:47:df:17:05:46:
                    54:c2:19:27:c0:44:25:5f:5d:c8:f5:51:ed:f8:b8:
                    a9:65:3c:00:c4:e0:9e:b9:ed:a2:27:b2:37:b5:84:
                    d1:22:7f:e0:36:46:86:6d:43:a9:6c:52:c6:03:8a:
                    dd:fa:f7:79:1b:b9:28:82:34:d6:bf:32:7f:97:57:
                    24:ed:3d:d9:af:86:3e:23:4b:1b:e3:40:64:7b:64:
                    a5:7b:7a:48:78:e0:47:54:4c:04:f5:d5:c3:a9:25:
                    c6:d6:60:79:e3:6f:bb:cc:ef:99:f5:a5:59:0b:1d:
                    cb:e4:f3:6e:65:da:6f:e7:7a:ef:c8:54:d1:0a:7b:
                    68:a7:7d:ca:a4:10:3b:3b:14:27:0c:08:b1:b4:c0:
                    b0:b9:db:96:c0:e9:16:05:6e:3d:f8:d4:ba:ff:5c:
                    af:41:37:c9:2b:95:38:ed:f0:97:20:78:c4:d2:b7:
                    f7:b6:5a:ee:57:14:58:65:d2:82:a9:54:c5:db:ea:
                    b8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:CB:4A:9C:CE:45:0C:72:58:C6:15:B3:54:DE:02:BE:63:20:96
            X509v3 Authority Key Identifier:
                keyid:1B:B2:34:9F:FA:9F:D9:E1:4A:0E:A6:DD:15:A9:03:82:9B:22:47:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BB2349FFA9FD9E14A0EA6DD15A903829B22479C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoTSvvcQBWeAJErD85HGPGed4ZYzEXz61Y1976hkqXL2/0/3137372e38362e3234302e302f32322d3233203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:54:9b:af:5f:9a:3b:cf:1e:bb:00:35:c2:d7:cf:4f:85:d9:
         71:d6:61:e1:6f:04:f2:4e:e6:f4:ac:8c:22:a5:84:6e:f8:a4:
         02:12:e6:34:06:98:c7:4d:59:a3:33:85:5e:97:ae:97:c5:b8:
         a6:f4:df:84:2d:71:af:3f:f5:93:e9:40:9c:45:f3:c8:c3:ee:
         da:f2:26:01:3b:07:72:d9:f7:36:6a:8d:ac:52:dd:ca:71:80:
         fb:45:f8:12:00:a4:0a:c3:27:fc:a4:01:2f:0d:8c:9e:b4:c8:
         3b:90:b8:d2:fe:8a:8d:82:ba:fd:d9:6d:c0:c5:41:21:45:1b:
         59:9b:26:84:4b:a7:24:bc:fe:b7:20:fd:88:2b:cd:28:16:e9:
         83:2b:01:c9:56:15:de:d5:7a:d1:11:68:13:ba:71:1d:c2:26:
         ad:60:64:7f:95:39:89:42:67:53:1c:5a:6c:b5:37:7c:cc:48:
         e7:1b:18:77:f7:48:73:69:27:33:53:08:29:ba:e2:7f:b1:7c:
         f8:ef:98:7e:dc:49:d1:22:d7:7a:03:13:49:c8:55:67:16:c6:
         a7:77:fc:9e:6c:a4:54:61:d0:6b:0d:6d:28:0c:76:ec:d4:4c:
         d5:1e:e9:d2:47:20:cb:9d:50:55:40:d7:dd:f0:f7:11:98:01:
         d8:05:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:07:41 2026 by rpki-client