Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa
File:                     3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa (raw, json)
Hash identifier:          MXExFDK6p6KQ3pZHdfmZnsWBG94xHABb0qmYjt1C9tc=
Subject key identifier:   15:9B:B4:C5:11:F5:98:18:94:42:19:7D:6E:E8:67:C0:44:4E:32:B4
Certificate issuer:       /CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
Certificate serial:       491D9F01D2869ECC202966E0F11DCFF58A6ED7B8
Authority key identifier: 77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa
Signing time:             Wed 09 Sep 2026 19:40:03 +0000
ROA not before:           Wed 09 Sep 2026 19:35:03 +0000
ROA not after:            Wed 08 Sep 2027 19:40:03 +0000
asID:                     266301
IP address blocks:        170.79.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl
                          rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:9f:01:d2:86:9e:cc:20:29:66:e0:f1:1d:cf:f5:8a:6e:d7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774CB762631C4ECCE6178AC72CD05509DDA606A3
        Validity
            Not Before: Sep  9 19:35:03 2026 GMT
            Not After : Sep  8 19:40:03 2027 GMT
        Subject: CN=159BB4C511F598189442197D6EE867C0444E32B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:4c:7f:d9:49:dc:13:39:bb:38:1e:2a:14:
                    02:0c:22:24:7c:d5:66:4e:39:3c:ef:4b:66:99:d0:
                    cf:cd:eb:92:3d:2e:53:70:de:63:be:88:68:ac:21:
                    a7:a3:1f:17:f2:e3:03:53:3f:d5:3e:fc:67:d8:7b:
                    78:43:0c:d5:97:a6:7c:c6:0c:2d:b7:19:d1:21:fb:
                    22:fa:24:2f:2a:31:2a:c0:bc:de:50:cf:61:eb:2d:
                    3e:b1:3c:14:19:f2:52:4a:33:53:43:1b:79:16:b1:
                    a1:b2:85:25:34:fa:04:ef:e6:54:fd:13:c0:32:1c:
                    ca:06:cf:a2:cd:70:fa:76:2a:64:3c:a8:1b:ef:23:
                    e9:f9:66:c6:ac:e3:c2:d5:cb:ba:2a:cc:03:88:99:
                    21:a0:0e:21:7a:a7:12:63:81:31:59:d0:91:0f:cf:
                    38:7e:33:5b:71:97:a7:b6:72:6b:d0:20:f6:c2:1d:
                    54:58:46:38:a9:05:19:98:49:a6:93:2f:03:04:29:
                    78:71:cf:73:24:e9:96:e7:4e:d4:c2:91:00:91:b5:
                    35:b3:2d:d4:d7:35:38:93:cb:9c:84:6a:b4:42:3b:
                    1f:6c:51:ec:d7:bc:ae:5c:74:af:53:e2:04:c0:f8:
                    c8:39:f5:71:24:3d:18:38:58:6c:99:47:a1:8f:f7:
                    a8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:B4:C5:11:F5:98:18:94:42:19:7D:6E:E8:67:C0:44:4E:32:B4
            X509v3 Authority Key Identifier:
                keyid:77:4C:B7:62:63:1C:4E:CC:E6:17:8A:C7:2C:D0:55:09:DD:A6:06:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/774CB762631C4ECCE6178AC72CD05509DDA606A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/774CB762631C4ECCE6178AC72CD05509DDA606A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3EHP6a39roizdy5wHJuE1njHit38zPsNzoBTDJMtrFnC/0/3137302e37392e3133362e302f32332d3233203d3e20323636333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:78:55:43:dc:77:64:56:c4:9a:55:db:58:a9:11:a6:e3:3c:
         cd:8d:21:16:10:25:37:19:a6:ce:92:4f:06:a8:dd:22:bf:b8:
         8f:3c:99:15:ad:f9:b6:7b:f7:8b:13:20:10:7c:5c:c0:9a:84:
         0a:f1:a4:07:74:f4:8e:ad:6b:59:f7:4c:58:34:c4:d3:15:5e:
         26:c9:07:75:b9:2e:82:77:46:f5:95:ba:37:3e:be:2b:bb:1c:
         93:61:a0:24:40:ce:e1:03:92:32:96:66:d1:d7:ca:08:e0:02:
         e2:94:18:9f:44:60:b2:f5:04:d1:2a:89:f8:4b:31:29:ea:9b:
         29:2b:af:6b:99:6e:92:ac:af:b1:4a:2b:f1:40:0d:2c:78:91:
         53:c7:b3:45:99:6f:9a:27:10:89:cb:f9:21:e0:1f:82:20:67:
         a1:28:a0:b1:bd:4c:28:a1:d2:53:e7:62:6b:7e:19:af:36:92:
         00:5c:4f:06:53:4e:bc:25:10:fd:a1:b7:fc:63:3e:1d:af:6c:
         3a:82:05:c6:e5:9b:5f:03:42:97:89:88:63:5f:0b:b0:41:4d:
         c5:15:dd:26:f1:c6:45:50:8c:40:a6:64:99:17:88:57:1b:98:
         db:b2:83:06:71:dc:84:fc:45:9f:f8:b7:74:98:81:98:83:aa:
         19:bd:b8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:06:47 2026 by rpki-client