Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          9YPBcEc8NsIZt0veYKlEtHdDzQP/DU3lWgR2XCGrkCM=
Subject key identifier:   4E:17:00:17:61:7B:70:D1:E9:16:F7:4C:87:34:96:F5:F4:66:73:44
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       4A26C2D1AA79483FD68E994A9DDC2B11C09A8550
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:13 +0000
ROA not before:           Mon 02 Mar 2026 18:30:13 +0000
ROA not after:            Mon 01 Mar 2027 18:35:13 +0000
asID:                     262296
IP address blocks:        177.11.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:26:c2:d1:aa:79:48:3f:d6:8e:99:4a:9d:dc:2b:11:c0:9a:85:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:13 2026 GMT
            Not After : Mar  1 18:35:13 2027 GMT
        Subject: CN=4E170017617B70D1E916F74C873496F5F4667344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:66:60:07:ed:86:c3:d4:18:64:59:52:fe:
                    b8:20:3f:8c:d0:1b:73:69:98:d5:ba:38:f9:b8:2f:
                    1c:cf:c2:eb:d2:2b:bf:ca:3e:e9:f8:dc:91:e8:60:
                    99:ac:41:71:75:f2:6d:8b:e2:b4:3c:cd:9b:93:22:
                    b4:9a:69:1c:f1:82:2d:b4:83:67:32:75:0a:db:b6:
                    36:ad:81:10:30:29:51:61:50:a8:3b:83:95:0f:bf:
                    67:dc:88:85:8d:e9:18:b4:e8:d2:cc:fe:58:37:1a:
                    91:45:e0:01:32:f2:71:39:ad:9e:fa:66:3d:7b:45:
                    03:58:c8:56:7a:a8:86:79:b6:3a:aa:79:65:bd:12:
                    56:75:6a:b1:7c:93:89:84:3d:3d:d5:a3:0e:65:97:
                    1b:46:03:eb:79:07:4b:f0:c8:3b:90:57:96:80:53:
                    f3:c9:ba:ae:40:5b:0a:db:33:d4:21:46:82:7b:3f:
                    e7:0b:b2:04:f5:2a:51:a8:8c:4b:9d:d2:63:0c:46:
                    d5:b3:4f:ae:27:09:37:6d:8d:0d:7c:1a:7c:4e:38:
                    47:74:91:a4:d4:ca:81:48:fb:9c:3d:9d:a0:f9:ba:
                    9d:dd:ed:48:0b:5f:7d:3a:4e:66:bb:95:6c:6f:0c:
                    b9:06:56:0e:de:98:01:55:ef:a6:fd:14:c8:ee:eb:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:17:00:17:61:7B:70:D1:E9:16:F7:4C:87:34:96:F5:F4:66:73:44
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132342e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:dc:48:69:bb:74:5d:6e:47:02:ab:ff:82:90:f3:0f:dd:3c:
         50:78:18:5d:f3:14:04:3e:25:da:cd:32:20:d0:19:da:5d:0c:
         e7:a3:ec:c8:67:cb:9e:69:18:da:58:54:fa:36:5c:30:8f:18:
         65:4e:55:04:c9:ba:9f:ff:a3:75:d2:53:f8:bc:2f:2f:ff:d3:
         3c:df:ef:f9:82:fe:07:2e:a5:0e:a1:86:b2:22:fa:b6:3a:26:
         4a:45:2d:7f:86:3d:5f:0f:ab:c6:47:35:30:85:92:80:c2:45:
         17:1d:1d:01:c5:46:40:56:1d:7e:71:96:d5:e4:31:12:89:41:
         88:7f:30:aa:25:70:05:2c:67:da:2b:08:71:5f:24:48:cc:bb:
         b6:4e:68:09:7f:27:fc:fd:6f:8f:44:ed:e7:8c:23:63:5a:ec:
         c1:95:7b:b0:06:1d:d4:1c:de:1f:a1:74:01:27:c7:a7:f0:61:
         26:4b:18:7b:bb:63:65:b7:0c:04:17:47:fe:7b:d9:5d:86:bb:
         45:2a:e3:7e:ee:c9:c5:f0:9b:71:c6:b4:2a:aa:ac:58:7d:0e:
         1e:cf:01:9b:9a:85:ce:5e:12:0a:2c:81:9d:ca:0c:17:75:34:
         99:a7:4b:15:8f:52:cc:79:61:e0:50:7a:ad:bd:8d:d4:b2:68:
         b6:2c:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:49:08 2026 by rpki-client