Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
File:                     3137372e37332e38342e302f32332d3233203d3e203532373030.roa (raw, json)
Hash identifier:          73DhO7RjcYABdgh3miJHDbAUBNf9LaZDrxl9ZxUKstw=
Subject key identifier:   1C:15:AF:4D:5F:F0:F9:20:C2:75:EF:0A:FF:9D:4F:4B:EA:82:B4:6B
Certificate issuer:       /CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
Certificate serial:       1D98C17AEFF03CF219CDA4DE7251885501B18682
Authority key identifier: 65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa
Signing time:             Wed 06 May 2026 12:23:12 +0000
ROA not before:           Wed 06 May 2026 12:18:12 +0000
ROA not after:            Wed 05 May 2027 12:23:12 +0000
asID:                     52700
IP address blocks:        177.73.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl
                          rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:98:c1:7a:ef:f0:3c:f2:19:cd:a4:de:72:51:88:55:01:b1:86:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65F3CDB8B2C1A309B5522539AA0030CB2F76B29A
        Validity
            Not Before: May  6 12:18:12 2026 GMT
            Not After : May  5 12:23:12 2027 GMT
        Subject: CN=1C15AF4D5FF0F920C275EF0AFF9D4F4BEA82B46B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:4e:52:aa:39:4b:c0:61:e1:ca:54:7b:5b:
                    db:17:f0:4f:72:16:bd:1a:e8:84:59:07:b4:11:17:
                    00:63:88:c8:04:c2:c1:12:a1:7b:34:39:08:43:cb:
                    69:d6:1b:ed:a1:0e:97:5a:ff:e9:08:a7:4f:04:60:
                    51:cd:07:a8:92:22:c0:0c:5c:bf:87:e5:3b:b4:1c:
                    8a:01:16:6f:6f:34:e1:ee:d9:68:1e:68:8c:7a:73:
                    87:f1:1b:93:a0:d4:f6:02:78:ca:e9:ed:44:ef:1e:
                    cc:70:e8:ce:23:5f:29:ca:61:87:fe:4c:88:fd:9c:
                    21:55:53:b1:75:09:3b:bc:34:f7:e6:e5:46:3b:d4:
                    02:fb:79:5c:f8:28:72:8c:80:c0:70:6f:1d:08:e4:
                    fd:bf:35:ad:9f:8d:b5:bb:97:84:d8:0b:65:bd:65:
                    27:aa:bc:93:1a:cd:b9:94:49:cd:54:0f:ef:28:fd:
                    43:cc:ab:8e:b2:bd:9c:8d:45:07:f8:e0:4d:af:02:
                    3b:c1:a4:52:8f:cf:ad:d3:e5:43:96:17:3f:ec:a9:
                    ac:4c:fb:38:2d:4d:8b:f5:76:62:c3:08:33:12:e6:
                    a1:42:24:03:3a:99:d4:51:1a:b1:6f:c3:d4:bd:88:
                    7e:eb:ef:89:4f:a1:1f:40:e8:24:df:bd:1b:73:ec:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:15:AF:4D:5F:F0:F9:20:C2:75:EF:0A:FF:9D:4F:4B:EA:82:B4:6B
            X509v3 Authority Key Identifier:
                keyid:65:F3:CD:B8:B2:C1:A3:09:B5:52:25:39:AA:00:30:CB:2F:76:B2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65F3CDB8B2C1A309B5522539AA0030CB2F76B29A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69UzC9meuhSgwRhPgyGY4vBJ7KYPeUjVxVuVvoPJDHoZ/0/3137372e37332e38342e302f32332d3233203d3e203532373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:98:a8:30:35:a1:0a:4a:cd:99:9c:39:d9:d0:87:a1:51:45:
         81:29:d4:c4:23:f5:0c:da:7e:b1:f2:39:a5:34:44:c9:47:20:
         f1:03:1e:80:28:67:02:65:96:64:9c:04:af:df:10:60:1a:19:
         b3:22:c0:5b:d7:74:64:63:e5:e1:47:22:20:48:2b:6e:ac:5b:
         7e:b3:85:81:b1:4c:04:ac:4e:3c:5f:b7:90:f2:fe:52:0e:52:
         ca:ac:29:b6:84:9f:17:0f:06:2d:71:57:15:a0:82:bb:3f:5e:
         5e:20:20:02:9c:36:9a:31:76:09:2e:6f:fb:95:39:6d:0d:44:
         df:d1:cc:2c:b0:d0:56:21:60:61:c4:20:0e:b3:4f:e8:8b:eb:
         67:df:4c:da:2a:f5:d3:67:0c:1e:bb:61:c6:bb:c0:9a:99:1c:
         11:a2:7c:dc:f8:93:22:60:4c:42:79:b1:0b:8f:7b:28:84:13:
         b4:b0:9c:d4:b2:5d:2f:2a:2b:55:96:4f:69:c3:5c:6f:d7:60:
         df:29:a8:c1:70:80:5e:ef:62:28:5e:6a:e5:7d:10:e0:92:6a:
         ad:0d:a8:63:4c:79:0f:cf:4b:81:16:64:a0:a3:f6:c1:4f:08:
         47:17:c1:cf:c4:29:ea:fc:81:92:9d:72:36:a3:10:ae:ce:6a:
         0a:e3:20:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:39:26 2026 by rpki-client