Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa
File:                     3137372e37342e3137342e302f32332d3233203d3e203631393030.roa (raw, json)
Hash identifier:          H9dacuO7b8HCyKCijqijaYraXtbLaivcJPvO2Srik20=
Subject key identifier:   4B:5A:E2:C9:91:67:7B:7C:78:C7:69:FA:85:3B:B3:8F:BD:A6:6C:0B
Certificate issuer:       /CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
Certificate serial:       169B80EC2FF797D28EA24F733B294298620B30AC
Authority key identifier: 5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa
Signing time:             Tue 06 Oct 2026 23:14:10 +0000
ROA not before:           Tue 06 Oct 2026 23:09:10 +0000
ROA not after:            Tue 05 Oct 2027 23:14:10 +0000
asID:                     61900
IP address blocks:        177.74.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9b:80:ec:2f:f7:97:d2:8e:a2:4f:73:3b:29:42:98:62:0b:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5
        Validity
            Not Before: Oct  6 23:09:10 2026 GMT
            Not After : Oct  5 23:14:10 2027 GMT
        Subject: CN=4B5AE2C991677B7C78C769FA853BB38FBDA66C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:da:32:13:31:6e:e0:d0:bc:9d:8d:3d:e2:05:
                    72:07:8b:3d:c7:aa:83:a6:83:2d:26:0e:5c:c8:68:
                    66:25:50:6a:45:e8:9c:ec:31:d0:8d:94:12:71:6d:
                    06:5f:c3:5b:d3:93:32:54:67:74:73:82:00:1b:6d:
                    02:52:fd:aa:c7:26:9f:9c:e1:e6:33:6f:68:bb:24:
                    df:51:88:5b:4b:06:d2:cc:0d:74:57:51:5d:58:0a:
                    ea:44:6a:90:c7:15:df:57:1b:2b:01:e2:51:87:25:
                    00:b2:4e:e2:77:92:b2:67:f2:f8:52:27:26:29:22:
                    9b:be:93:c7:fe:81:18:cf:f6:50:64:f5:e4:a1:f8:
                    c8:ec:6e:bb:7e:ac:59:34:16:ec:54:9a:63:e2:83:
                    10:2b:f3:9f:30:80:5d:be:74:cc:23:7c:12:b2:ca:
                    7f:14:83:c2:7e:53:73:41:51:d3:bd:95:c7:60:4a:
                    cc:a6:54:58:5a:3a:45:1e:da:d4:07:04:e8:48:78:
                    2e:f8:b5:ec:ed:2e:0f:0d:1a:7a:c3:07:3d:23:f3:
                    86:e6:08:47:1a:e7:3a:2c:af:3b:dc:cb:7a:c8:24:
                    03:ef:b6:34:60:1f:c6:75:24:ce:b5:86:89:6c:a7:
                    6f:eb:6d:93:42:c2:e7:d4:09:de:4f:56:ff:fe:8b:
                    ac:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5A:E2:C9:91:67:7B:7C:78:C7:69:FA:85:3B:B3:8F:BD:A6:6C:0B
            X509v3 Authority Key Identifier:
                keyid:5D:DD:C0:E6:E0:1F:32:79:E7:95:CF:35:CD:48:AC:94:DD:42:E7:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DDDC0E6E01F3279E795CF35CD48AC94DD42E7B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/3137372e37342e3137342e302f32332d3233203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e4:51:69:33:ac:c8:e6:b8:00:28:f2:64:31:ac:3f:82:2f:
         d4:81:dc:b4:60:48:2a:b1:10:1e:ad:f7:65:e0:0b:01:09:7c:
         03:07:eb:87:b5:c2:93:82:6a:b2:05:16:c8:2d:9a:e6:c9:51:
         a0:a4:af:a6:02:18:9f:e2:27:f8:17:26:67:01:34:00:41:ed:
         41:1d:3f:28:72:ad:d5:3a:8b:3b:02:52:9e:bc:83:82:85:d5:
         c5:7a:d4:53:90:d1:f3:44:c0:70:07:bf:c6:c6:12:33:22:1a:
         d2:91:42:c4:d5:92:02:a1:7a:86:d7:df:f7:52:74:ec:0e:19:
         66:e3:80:3d:ec:ff:de:93:7d:6d:d2:ca:d3:fd:9f:ac:9d:ed:
         ab:5b:8d:88:53:b3:9b:c4:5e:e2:08:16:eb:96:d7:bc:3c:39:
         d1:88:2a:93:80:48:49:b5:b2:51:36:ad:47:19:19:62:1f:28:
         73:a5:31:0c:df:37:b1:3a:da:90:f0:8c:d8:a6:7e:45:a8:99:
         7d:5d:95:4e:b0:e4:2b:54:f9:0c:c4:25:ab:37:de:7e:dc:26:
         cc:09:74:91:3c:f3:81:89:71:e7:f7:5c:39:bc:8c:9c:1f:e0:
         62:94:66:c8:d7:43:08:8f:5d:95:c1:9f:80:fd:c4:56:f5:51:
         36:a5:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:24:03 2026 by rpki-client