Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230342e302f32342d3234203d3e203532353736.roa
File:                     3137372e38362e3230342e302f32342d3234203d3e203532353736.roa (raw, json)
Hash identifier:          RCprkeQ+ympVEXVdOci4Q1Y22/SqRgt6qb1qwgMfiiQ=
Subject key identifier:   84:F2:F0:68:91:19:81:55:13:39:F1:C1:7F:A0:B3:05:17:C6:C4:13
Certificate issuer:       /CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
Certificate serial:       7366CF0B6B58744D94D2012E05E3A9D460FCDCD8
Authority key identifier: 69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230342e302f32342d3234203d3e203532353736.roa
Signing time:             Wed 24 Jun 2026 04:01:02 +0000
ROA not before:           Wed 24 Jun 2026 03:56:02 +0000
ROA not after:            Wed 23 Jun 2027 04:01:02 +0000
asID:                     52576
IP address blocks:        177.86.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl
                          rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:cf:0b:6b:58:74:4d:94:d2:01:2e:05:e3:a9:d4:60:fc:dc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2
        Validity
            Not Before: Jun 24 03:56:02 2026 GMT
            Not After : Jun 23 04:01:02 2027 GMT
        Subject: CN=84F2F068911981551339F1C17FA0B30517C6C413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:11:64:0b:e1:ca:c8:ab:2b:51:ba:23:65:
                    39:01:79:9d:f1:11:d5:e8:59:8a:ca:9c:de:e4:33:
                    14:bc:7e:1d:9b:12:22:bc:cb:46:ad:cd:f8:cd:3a:
                    8b:48:ac:55:4a:d9:04:16:8a:74:7d:fe:ff:b0:d7:
                    1a:f3:65:d0:d2:53:7d:99:03:ae:9a:95:b5:01:88:
                    d0:49:36:ca:6e:f8:60:c3:6e:f1:d7:ef:5f:c0:d0:
                    14:78:4c:a4:58:34:dc:f2:84:61:66:3d:25:71:d7:
                    f7:f8:75:eb:22:9b:6b:72:df:54:da:e1:39:12:05:
                    49:e2:d3:be:33:f9:62:6a:9f:d4:2c:43:e0:ea:77:
                    c1:ef:41:0b:94:dd:0e:1d:80:48:53:79:0f:75:cf:
                    1a:70:1c:97:d7:c4:0d:7d:32:d0:b3:f3:a5:ea:29:
                    eb:fd:5e:91:3e:e6:95:db:af:51:a7:31:e0:64:86:
                    79:da:30:19:15:e5:ab:28:57:6e:15:20:b0:74:73:
                    9f:25:70:a5:f0:07:cb:eb:b0:e2:92:4e:2d:0b:9f:
                    37:30:10:b2:f6:01:e4:49:cb:63:53:dd:12:ee:b0:
                    64:10:33:9b:b3:52:ec:3a:de:06:da:1a:e6:a6:16:
                    32:b3:7d:7e:2d:c3:b1:ef:54:78:3f:66:b4:1e:49:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F2:F0:68:91:19:81:55:13:39:F1:C1:7F:A0:B3:05:17:C6:C4:13
            X509v3 Authority Key Identifier:
                keyid:69:93:AF:0D:5F:AD:E2:F1:33:50:44:BE:3A:BC:2A:EA:EC:C9:5A:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6993AF0D5FADE2F1335044BE3ABC2AEAECC95AB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/0/3137372e38362e3230342e302f32342d3234203d3e203532353736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:66:be:8f:2e:44:03:4b:0e:1a:69:29:d2:2d:83:d6:72:1a:
         20:f9:f4:b1:b3:c9:35:d8:9b:45:70:37:c8:40:aa:23:69:09:
         db:c4:b8:20:09:8c:1d:6e:64:6a:29:a6:3c:78:fb:08:f1:65:
         6f:cd:de:aa:01:d8:0d:e7:e4:4d:b7:cd:e6:ec:87:b9:97:68:
         8e:50:5f:56:51:6f:16:1a:02:bb:b4:3b:d5:8e:08:67:22:be:
         bb:a5:a9:39:0b:6d:12:94:31:cc:1d:5c:19:aa:5e:94:cf:72:
         97:cd:34:55:4d:80:59:bd:c9:83:3d:a6:b2:d8:80:a1:f7:e0:
         bd:0d:c6:56:bb:32:de:c0:30:ab:ce:46:64:04:9b:04:ff:b9:
         19:06:1d:fe:45:f0:fb:67:2c:88:59:a7:49:1c:31:a5:f5:b2:
         13:0b:10:2a:92:8a:bf:a4:75:d5:42:f7:2f:e4:da:2f:09:41:
         43:88:72:48:37:b4:2a:99:39:1b:09:3a:35:8c:74:bd:c2:dd:
         7e:4b:30:6b:fb:73:47:17:e9:70:09:7d:49:dc:07:19:41:2a:
         93:4e:58:e7:36:16:08:ff:60:e1:0a:bf:d4:12:28:0a:2d:f4:
         9f:ff:1c:7d:65:a3:f4:4b:56:78:81:9a:2c:17:38:f5:07:49:
         36:f5:ac:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc2bPC2tYdE2U0gEuBeOp1GD83NgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk5M0FGMEQ1RkFERTJGMTMzNTA0NEJFM0FCQzJBRUFF
Q0M5NUFCMjAeFw0yNjA2MjQwMzU2MDJaFw0yNzA2MjMwNDAxMDJaMDMxMTAvBgNV
BAMTKDg0RjJGMDY4OTExOTgxNTUxMzM5RjFDMTdGQTBCMzA1MTdDNkM0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWdBFkC+HKyKsrUbojZTkBeZ3x
EdXoWYrKnN7kMxS8fh2bEiK8y0atzfjNOotIrFVK2QQWinR9/v+w1xrzZdDSU32Z
A66albUBiNBJNspu+GDDbvHX71/A0BR4TKRYNNzyhGFmPSVx1/f4desim2ty31Ta
4TkSBUni074z+WJqn9QsQ+Dqd8HvQQuU3Q4dgEhTeQ91zxpwHJfXxA19MtCz86Xq
Kev9XpE+5pXbr1GnMeBkhnnaMBkV5asoV24VILB0c58lcKXwB8vrsOKSTi0Lnzcw
ELL2AeRJy2NT3RLusGQQM5uzUuw63gbaGuamFjKzfX4tw7HvVHg/ZrQeSdblAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhPLwaJEZgVUTOfHBf6CzBRfGxBMwHwYDVR0j
BBgwFoAUaZOvDV+t4vEzUES+Orwq6uzJWrIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWNuYTZlUk05VHNXZ3JjMnZTeGU3QTRMM2piZ0pIam9OWEVVSjZDTUdK
WFIvMC82OTkzQUYwRDVGQURFMkYxMzM1MDQ0QkUzQUJDMkFFQUVDQzk1QUIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5OTNBRjBENUZBREUyRjEz
MzUwNDRCRTNBQkMyQUVBRUNDOTVBQjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVjbmE2ZVJNOVRzV2dyYzJ2U3hlN0E0TDNqYmdKSGpvTlhFVUo2Q01HSlhSLzAv
MzEzNzM3MmUzODM2MmUzMjMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVbMMA0GCSqGSIb3DQEBCwUAA4IBAQAZZr6PLkQD
Sw4aaSnSLYPWchog+fSxs8k12JtFcDfIQKojaQnbxLggCYwdbmRqKaY8ePsI8WVv
zd6qAdgN5+RNt83m7Ie5l2iOUF9WUW8WGgK7tDvVjghnIr67pak5C20SlDHMHVwZ
ql6Uz3KXzTRVTYBZvcmDPaay2ICh9+C9DcZWuzLewDCrzkZkBJsE/7kZBh3+RfD7
ZyyIWadJHDGl9bITCxAqkoq/pHXVQvcv5NovCUFDiHJIN7QqmTkbCTo1jHS9wt1+
SzBr+3NHF+lwCX1J3AcZQSqTTljnNhYI/2DhCr/UEigKLfSf/xx9ZaP0S1Z4gZos
Fzj1B0k29azW
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:17 2026 by rpki-client