Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
File:                     3137372e36372e3134382e302f32322d3332203d3e203533323233.roa (raw, json)
Hash identifier:          kc/Ebgn0LloxXbLwjAb9fgeI3iX089gfODNaSTY7Z0I=
Subject key identifier:   9B:3B:59:88:86:E1:91:46:DD:93:B8:97:0B:B3:47:69:1D:BE:7B:7F
Certificate issuer:       /CN=3332A8C3B68FE79476953E58B1857203FA676F0F
Certificate serial:       23AD91AA1AA9D1EEBC29944DA663A67416033CB6
Authority key identifier: 33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa
Signing time:             Mon 18 May 2026 18:01:53 +0000
ROA not before:           Mon 18 May 2026 17:56:53 +0000
ROA not after:            Mon 17 May 2027 18:01:53 +0000
asID:                     53223
IP address blocks:        177.67.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl
                          rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ad:91:aa:1a:a9:d1:ee:bc:29:94:4d:a6:63:a6:74:16:03:3c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3332A8C3B68FE79476953E58B1857203FA676F0F
        Validity
            Not Before: May 18 17:56:53 2026 GMT
            Not After : May 17 18:01:53 2027 GMT
        Subject: CN=9B3B598886E19146DD93B8970BB347691DBE7B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:70:13:4d:95:20:f6:72:ba:9a:df:df:84:
                    87:d0:82:f9:f6:8f:6d:d9:80:a4:15:57:61:8f:51:
                    bc:2c:e8:0f:bf:0c:f5:c1:3e:79:e1:a7:24:4c:e7:
                    ac:56:a7:11:3b:0e:96:8f:54:d3:ce:1b:42:90:d3:
                    85:58:e3:52:55:d6:35:2e:85:a0:90:cb:49:e5:14:
                    5a:07:a3:cd:1e:1e:17:87:77:82:94:1e:d1:fd:9e:
                    a1:f5:26:2e:f8:31:54:96:1a:2c:9d:03:61:40:02:
                    d1:36:3b:94:ae:49:17:2f:fa:9b:ed:81:29:79:b7:
                    9f:52:17:3f:80:9d:33:7f:af:28:57:8c:5c:70:13:
                    4f:5f:3a:5b:50:56:91:a9:71:7d:ad:66:45:c9:ff:
                    66:38:ce:44:f8:e6:d5:80:ad:54:82:f7:4a:5f:fb:
                    3a:d7:ab:8d:93:59:58:53:8e:f3:99:17:c5:3e:ec:
                    c0:28:31:b9:c7:c1:cc:31:a3:e0:60:70:e8:75:36:
                    fe:29:b0:b2:d0:7e:f2:41:dc:dd:54:7b:1a:01:d5:
                    66:6e:52:0e:cb:fd:71:b5:fc:e1:a2:29:e0:8e:84:
                    9a:42:29:09:c9:92:b4:46:23:36:be:ae:f7:d3:65:
                    e2:b4:f3:b3:8c:80:9d:fe:33:54:35:8c:2b:29:ee:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3B:59:88:86:E1:91:46:DD:93:B8:97:0B:B3:47:69:1D:BE:7B:7F
            X509v3 Authority Key Identifier:
                keyid:33:32:A8:C3:B6:8F:E7:94:76:95:3E:58:B1:85:72:03:FA:67:6F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3332A8C3B68FE79476953E58B1857203FA676F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3332A8C3B68FE79476953E58B1857203FA676F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HagAqRKuGXxtQczz2mUQQWgYDHTP6Hkm3dtshSzW6Q53/0/3137372e36372e3134382e302f32322d3332203d3e203533323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:bf:98:a3:85:d5:2b:70:c6:a1:79:7b:56:83:26:12:1f:9e:
         2a:01:51:9d:43:e2:bb:67:81:11:51:a0:40:03:32:17:b3:04:
         99:c1:b5:98:89:25:f7:ad:24:de:9b:04:46:79:07:48:21:47:
         c4:5e:ec:17:5f:1f:6e:4e:1a:f3:84:37:26:ea:e2:15:8f:fb:
         36:7a:ef:0b:e3:fc:75:be:70:4a:21:20:8e:62:69:1d:8e:40:
         1f:c7:fa:03:bc:c6:1f:af:b2:a3:bc:7f:66:7c:92:33:56:83:
         32:01:55:f5:f3:53:6b:95:99:e0:9a:64:b7:02:84:95:b3:85:
         2e:df:ef:fe:20:a6:d6:b6:dc:72:41:ce:9f:32:fd:6c:c4:60:
         9b:b8:f3:1a:3d:df:70:19:48:83:09:bf:51:30:2a:b5:65:eb:
         86:8a:cc:99:36:53:23:9d:ae:80:3e:da:40:7d:95:63:91:db:
         48:59:0a:b7:db:63:82:88:30:36:e7:62:28:08:04:fd:99:a1:
         b9:04:08:b9:a2:ac:e8:88:80:58:4a:d1:7b:76:82:bd:c9:e6:
         b0:7e:62:08:69:60:a9:0b:82:ad:5c:4b:ee:fe:f5:3c:a2:16:
         49:63:b1:b7:f8:29:f6:ac:c6:74:a2:76:bb:2b:9f:a3:8e:7b:
         e7:f3:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:35:31 2026 by rpki-client