Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230312e302f32342d3234203d3e203532353736.roa
File:                     3137372e38362e3230312e302f32342d3234203d3e203532353736.roa (raw, json)
Hash identifier:          LxgBc6wh2tN5JV4gsjyrT2f8MIBcQMOWEfFPqlExXKc=
Subject key identifier:   7C:01:1A:6C:95:C9:2F:0E:86:A5:2A:87:D9:B8:43:BB:F9:5A:F5:F9
Certificate issuer:       /CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
Certificate serial:       6745C4045195513C9AA09F5D714A85B100A08CC8
Authority key identifier: 69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230312e302f32342d3234203d3e203532353736.roa
Signing time:             Wed 24 Jun 2026 04:00:14 +0000
ROA not before:           Wed 24 Jun 2026 03:55:14 +0000
ROA not after:            Wed 23 Jun 2027 04:00:14 +0000
asID:                     52576
IP address blocks:        177.86.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 15:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:45:c4:04:51:95:51:3c:9a:a0:9f:5d:71:4a:85:b1:00:a0:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Validity
            Not Before: Jun 24 03:55:14 2026 GMT
            Not After : Jun 23 04:00:14 2027 GMT
        Subject: CN=7C011A6C95C92F0E86A52A87D9B843BBF95AF5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:49:89:fe:30:8f:bd:10:58:70:99:9c:48:ad:
                    bf:24:4c:86:45:3a:a9:de:33:03:22:b3:18:ce:0e:
                    e6:b6:fa:c0:6e:7a:28:8e:51:86:8b:e1:34:35:21:
                    f0:12:51:45:4c:88:e0:75:e1:09:26:e8:79:cd:c7:
                    69:7e:ad:15:5a:1a:fc:de:aa:44:cd:66:f2:ac:73:
                    fa:23:44:45:29:b8:16:5d:59:ba:67:52:c9:59:38:
                    76:50:f0:63:71:75:42:f0:61:85:96:35:38:01:52:
                    2b:79:dd:f2:33:c8:16:c0:00:3b:ba:32:b0:cc:a1:
                    e3:1f:a3:44:ba:d8:c7:57:f7:1b:54:2f:54:db:8b:
                    4f:5b:03:c2:17:ae:3b:9b:fc:b3:3c:73:9e:ed:3c:
                    a4:41:cd:8d:71:5b:ce:cb:c6:a1:d2:85:7b:5a:f1:
                    68:ae:57:51:81:a5:a7:fe:92:68:86:24:1d:b9:1b:
                    40:a2:a2:c7:54:5b:27:6c:c6:84:9a:37:47:9c:b9:
                    d4:c8:f4:8b:6e:30:1b:be:88:4f:35:c3:4e:a5:85:
                    51:0c:e3:20:45:e6:1e:92:30:f8:29:44:98:1b:9c:
                    e5:b6:8d:1d:d5:78:63:45:01:f1:d9:3a:3a:e0:48:
                    c8:79:ed:20:77:cf:3d:b0:e4:5b:17:e3:f4:c2:4e:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:1A:6C:95:C9:2F:0E:86:A5:2A:87:D9:B8:43:BB:F9:5A:F5:F9
            X509v3 Authority Key Identifier:
                keyid:69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230312e302f32342d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:01:74:ec:48:fc:76:eb:ee:04:e0:b2:08:cc:d2:65:dc:c1:
         6d:17:34:61:f9:20:b2:14:73:b1:0c:ca:44:0c:5a:42:bd:2b:
         cc:02:dd:3d:ce:29:d1:29:96:5e:fc:76:a4:9d:16:a8:00:4c:
         53:a7:f7:a6:5f:e9:8a:41:ab:73:1d:ec:19:a2:46:12:1f:fe:
         14:ca:59:00:14:d3:53:84:27:af:85:d1:7f:dc:b4:92:6a:52:
         f6:7f:f6:9a:fa:c5:3c:bb:6a:99:dc:22:1c:fc:80:5f:17:9a:
         26:8d:b7:af:86:b2:f5:76:6f:46:01:96:df:cf:7c:79:9f:98:
         81:5c:4c:e2:b4:4e:00:4d:46:33:5b:26:63:9b:5b:a8:6d:db:
         4b:1d:f9:5e:f7:a6:19:a6:03:23:30:82:24:36:81:44:19:4a:
         8c:0f:63:f9:15:ce:2a:eb:3d:6e:e5:78:d7:56:a9:b2:e5:b6:
         f3:c7:da:e2:c9:e8:42:51:e7:d0:21:2c:4b:0d:af:0a:cd:a8:
         0d:fd:b6:95:7b:1e:a6:15:f2:44:e9:38:80:b9:90:4d:33:d9:
         17:ca:f5:f4:59:36:f8:5e:2f:e8:da:16:dd:81:e6:ab:b9:1e:
         08:5b:58:98:71:26:3d:1e:82:b8:94:b0:f1:4b:fd:c0:89:e6:
         8f:3d:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:38:01 2026 by rpki-client