Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3234203d3e203532353736.roa
File:                     3137372e38362e3230332e302f32342d3234203d3e203532353736.roa (raw, json)
Hash identifier:          hFp63ur7Q2VLnnFQDsJgeYhI95hC+y5jjgOl9ht8xxI=
Subject key identifier:   69:1A:4D:72:83:AE:61:A1:5E:C9:C1:6F:33:0B:42:28:D0:EC:22:E3
Certificate issuer:       /CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
Certificate serial:       77D0C33F9B9820E37356950077683381AD76D319
Authority key identifier: 69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3234203d3e203532353736.roa
Signing time:             Wed 24 Jun 2026 04:00:50 +0000
ROA not before:           Wed 24 Jun 2026 03:55:50 +0000
ROA not after:            Wed 23 Jun 2027 04:00:50 +0000
asID:                     52576
IP address blocks:        177.86.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d0:c3:3f:9b:98:20:e3:73:56:95:00:77:68:33:81:ad:76:d3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Validity
            Not Before: Jun 24 03:55:50 2026 GMT
            Not After : Jun 23 04:00:50 2027 GMT
        Subject: CN=691A4D7283AE61A15EC9C16F330B4228D0EC22E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:29:51:39:9c:bc:85:46:95:32:11:ef:b6:
                    dc:45:29:9e:bc:14:c4:cd:28:d5:b0:ff:ca:e5:05:
                    fe:c6:9b:3b:a2:03:20:34:f4:1b:6d:02:aa:c4:18:
                    e9:4f:0a:71:2c:c0:f7:94:60:61:c7:04:11:d3:2b:
                    db:5e:98:b2:21:6d:b8:9b:dd:43:2a:39:64:33:6f:
                    11:b2:84:60:dd:0b:68:e0:ca:d1:1f:19:38:51:17:
                    fe:19:0f:f1:bc:d8:e1:60:26:2a:b9:fc:8f:a6:ac:
                    4e:40:9b:b3:53:15:06:1a:4b:3f:64:e8:54:1f:90:
                    62:d3:4d:14:d9:72:ce:90:4e:4e:f9:22:b5:d4:40:
                    05:7c:ba:0d:25:b6:66:cf:dc:45:66:fa:5f:1b:7a:
                    62:3c:c4:f8:73:45:60:48:72:14:72:24:3e:3e:f4:
                    17:62:85:22:0b:00:5c:ee:e8:45:20:a7:b1:76:41:
                    e5:6d:87:ff:6c:78:3d:70:85:53:c5:bb:3b:aa:98:
                    6b:df:35:4b:80:ef:e4:c7:ba:14:83:d7:ab:74:20:
                    bd:97:22:e1:11:b6:1a:66:58:df:ed:99:54:21:ab:
                    c1:02:7d:bd:6d:9d:33:a4:71:59:e0:e5:c1:c4:f6:
                    5b:02:d7:b4:42:c6:3a:d5:16:3f:3f:7d:60:6f:66:
                    77:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1A:4D:72:83:AE:61:A1:5E:C9:C1:6F:33:0B:42:28:D0:EC:22:E3
            X509v3 Authority Key Identifier:
                keyid:69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230332e302f32342d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:c3:52:45:24:8c:cd:b4:ac:81:94:fc:34:81:fa:6d:d7:5a:
         e2:3b:cc:6e:1e:bf:4f:cd:92:89:f4:51:66:e0:ce:02:1b:dc:
         e0:09:f2:f3:db:8c:ab:13:d5:75:2f:9f:5a:f8:fe:a1:86:f4:
         dd:f2:c9:c7:d3:fb:38:cf:2b:ae:c0:54:2e:2c:0e:04:e2:13:
         fa:23:da:1d:59:d5:37:24:9f:cd:88:fd:c1:91:7b:a1:b5:45:
         92:ad:e9:17:29:3d:ab:84:03:4b:3c:77:03:65:46:2b:ae:bf:
         50:dc:85:a1:c1:4c:f1:d4:dc:eb:25:78:23:70:c7:ad:4c:b6:
         6a:57:95:3e:e5:87:bc:ed:3b:ce:44:a7:ab:96:c3:f6:ec:19:
         5f:67:1f:ef:b4:14:68:a5:60:dc:02:fd:f1:67:d0:aa:a8:21:
         3a:fc:91:ba:c7:f5:30:94:bc:d1:3c:51:74:dd:fa:6a:9d:85:
         87:f4:ea:ea:44:08:5d:0a:44:35:76:de:bf:89:4f:9e:b3:5d:
         77:ec:26:fc:ee:19:81:06:46:b5:d0:59:a1:92:42:be:25:09:
         04:20:fb:67:03:dc:32:f5:cd:18:d7:cc:29:f9:7b:bf:0e:f5:
         59:43:1c:72:05:f3:61:c4:05:ce:96:56:9a:1a:7c:a4:ae:17:
         2b:fd:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:11 2026 by rpki-client