Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e32322e39362e302f32302d3332203d3e203532393536.roa
File:                     3137372e32322e39362e302f32302d3332203d3e203532393536.roa (raw, json)
Hash identifier:          ARjfuGGELdFIBoenHLLQIdkFrcB99eduVbGkOMwAYas=
Subject key identifier:   8F:13:65:4F:69:6A:86:F7:6A:60:CA:2A:93:18:23:58:A9:47:C6:FC
Certificate issuer:       /CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
Certificate serial:       5F5FBE03A5D3AD4E9047FA0B4845C70C4231E85B
Authority key identifier: E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e32322e39362e302f32302d3332203d3e203532393536.roa
Signing time:             Wed 06 May 2026 16:07:37 +0000
ROA not before:           Wed 06 May 2026 16:02:37 +0000
ROA not after:            Wed 05 May 2027 16:07:37 +0000
asID:                     52956
IP address blocks:        177.22.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl
                          rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 May 2026 23:45:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5f:be:03:a5:d3:ad:4e:90:47:fa:0b:48:45:c7:0c:42:31:e8:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E69EBBEF4F3EB2DE9A368F108A8194F2D4125979
        Validity
            Not Before: May  6 16:02:37 2026 GMT
            Not After : May  5 16:07:37 2027 GMT
        Subject: CN=8F13654F696A86F76A60CA2A93182358A947C6FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:56:a6:87:eb:a2:52:9c:2e:fc:36:1c:93:
                    44:04:6e:47:82:d3:60:f0:01:4d:c9:60:43:41:1c:
                    48:e1:27:1f:5c:bb:a3:4c:79:65:48:62:23:35:7e:
                    d3:86:79:8f:db:0d:0a:d4:3e:15:0a:0c:22:3d:81:
                    27:0c:62:75:e7:9d:02:15:74:bf:df:2a:8e:1e:4e:
                    eb:45:00:f2:c4:62:a2:fe:32:93:48:2b:3e:d6:2c:
                    6c:eb:e4:9b:e7:ac:4b:a4:e6:0c:d3:ba:f4:a1:59:
                    a3:65:8a:a3:c0:c8:11:80:9c:e3:29:f7:78:17:b1:
                    64:c4:16:19:8b:3c:f7:e6:cf:cf:4d:a5:18:c3:6d:
                    b8:87:87:15:6a:a1:2a:b5:7f:e3:59:4b:a5:ab:67:
                    7f:ec:e2:cb:b0:be:bb:45:dd:ed:3a:5b:86:bc:47:
                    f7:d5:35:51:0f:71:66:88:3e:d5:72:db:b6:e3:c1:
                    66:5b:03:86:8b:91:00:7c:1d:aa:d1:9e:af:70:47:
                    09:8d:44:5e:0f:63:01:3f:71:cd:9c:a0:ff:36:93:
                    8c:d7:46:7b:46:10:93:1b:52:7c:4a:24:21:d3:ea:
                    2c:f5:f8:10:61:1f:df:8b:f4:bc:31:3d:f2:88:12:
                    24:f3:e1:70:15:c3:5d:3e:1f:c2:a9:1b:08:91:68:
                    25:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:65:4F:69:6A:86:F7:6A:60:CA:2A:93:18:23:58:A9:47:C6:FC
            X509v3 Authority Key Identifier:
                keyid:E6:9E:BB:EF:4F:3E:B2:DE:9A:36:8F:10:8A:81:94:F2:D4:12:59:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E69EBBEF4F3EB2DE9A368F108A8194F2D4125979.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tt4reEWpiJsagsEJ3BD4ZZCfcY7ajzxLj6nb1eEW5fZ/0/3137372e32322e39362e302f32302d3332203d3e203532393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c8:5e:23:d4:f3:92:d3:88:99:ac:49:f1:e1:66:0a:37:78:fa:
         a9:8c:95:39:1f:be:45:d8:16:36:8b:8c:31:da:a8:dc:3f:ae:
         76:21:62:98:19:10:b8:0f:d9:ee:db:bb:f1:1d:e0:18:a1:d2:
         1d:ce:da:f5:9f:a8:cd:59:ca:6c:9e:78:be:60:70:b9:99:46:
         8a:25:bc:86:b1:7e:94:1a:b4:f9:3c:3d:47:9c:38:92:f3:49:
         05:15:98:cb:75:2d:3d:dc:c8:30:3d:d0:9d:5f:5c:b6:05:56:
         4b:d6:30:ce:39:2a:92:64:a7:a4:32:9a:d6:f1:70:64:dd:69:
         90:0b:a5:28:3f:ae:1f:dd:24:bb:ed:6f:80:41:a8:29:95:90:
         27:4c:a7:fb:2c:e5:7a:57:9f:a9:b5:3e:68:0b:08:dc:44:23:
         6f:6d:59:b3:63:00:8d:36:e5:cf:31:dd:90:86:9d:ff:8c:f6:
         ac:2b:50:48:7b:2c:2a:b9:83:4e:2c:41:6c:1f:2e:bb:82:51:
         61:1a:fa:c0:0a:d0:bf:18:12:51:fc:1f:fc:ac:0a:a5:9c:85:
         11:f0:74:01:88:13:af:1a:db:d8:55:36:6d:a9:45:1c:69:78:
         59:01:af:c1:89:54:4f:dd:e8:cf:77:de:48:e3:a4:a7:44:57:
         f1:b9:78:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:33:49 2026 by rpki-client