Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e39302e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          r6VRIGrvrCwYqd1UY+2D0brq2QAx5Jg+0bAixsR0KgU=
Subject key identifier:   EF:E2:C2:C5:79:19:9F:9A:3A:07:4F:5B:FD:C0:23:77:D2:03:21:58
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       6A286FBB523EF915F39C411A6FDECB1A57076D79
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:44 +0000
ROA not before:           Thu 08 Oct 2026 13:34:44 +0000
ROA not after:            Thu 07 Oct 2027 13:39:44 +0000
asID:                     53047
IP address blocks:        177.101.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 11:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:28:6f:bb:52:3e:f9:15:f3:9c:41:1a:6f:de:cb:1a:57:07:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:44 2026 GMT
            Not After : Oct  7 13:39:44 2027 GMT
        Subject: CN=EFE2C2C579199F9A3A074F5BFDC02377D2032158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:9e:df:5b:7e:ae:02:3f:2a:ff:3d:14:f4:
                    49:f3:6c:5d:2d:1b:45:df:21:03:9e:bb:31:8d:b0:
                    52:65:7a:62:0a:da:1e:2d:35:59:49:5c:12:d5:4e:
                    8b:a2:6d:04:44:56:38:74:5c:1e:da:cd:83:62:07:
                    d6:04:21:fb:3c:d5:fb:4b:5a:71:ee:5e:24:04:e5:
                    9c:be:42:dd:bb:93:ba:af:16:c8:2c:86:41:c6:53:
                    51:f2:2d:e1:e0:7c:9a:35:98:d1:dc:09:6c:72:8a:
                    15:f7:05:bf:88:10:c0:d1:b7:aa:19:2f:a6:6f:dd:
                    40:66:aa:e1:23:7e:f2:e2:4c:2e:8e:0d:29:70:93:
                    46:55:48:0f:a3:1b:0d:ad:f2:cd:dd:f4:11:ee:24:
                    22:89:2f:d4:b5:02:d2:4d:c8:65:48:62:fd:cc:5f:
                    e4:57:c3:44:1d:c2:30:05:bd:45:26:8e:07:cc:07:
                    bf:64:dd:ff:b9:9c:5f:68:39:c1:44:4e:f1:ee:d9:
                    24:35:29:9b:09:05:16:10:f8:3f:bf:af:a8:83:96:
                    c3:d1:3c:56:33:48:e8:62:a1:53:bb:9d:69:e6:df:
                    6c:f0:18:57:6b:e3:86:12:1f:bc:59:fb:00:e0:dd:
                    1c:1b:b8:c0:22:97:ce:0b:28:16:94:a7:c7:bf:2e:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E2:C2:C5:79:19:9F:9A:3A:07:4F:5B:FD:C0:23:77:D2:03:21:58
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e39302e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:36:2e:5f:5c:0f:83:5a:10:64:9f:3d:ed:2c:2d:32:db:08:
         45:16:63:70:0a:9d:68:cf:dd:3d:78:cf:3c:c6:68:46:22:ae:
         f4:27:a5:96:33:c2:90:bb:b8:be:38:29:e6:19:db:df:c9:03:
         05:bb:3b:c6:ed:0f:fc:9a:a5:a3:39:8c:46:22:c9:9e:13:37:
         3e:f4:ed:58:7c:61:fa:ed:f0:f6:be:69:bc:94:fa:d2:51:f7:
         81:71:19:36:a1:6c:48:22:2b:ba:6f:92:27:af:d9:dd:f2:69:
         5b:16:f4:06:ae:7c:0a:11:f1:ce:c8:b1:02:71:1c:17:e6:4c:
         7f:00:40:6a:2a:d6:3f:5b:ac:b9:07:51:59:ff:58:5a:88:cd:
         79:fb:f2:46:7a:79:19:cc:7d:9d:15:c1:01:6a:8a:60:33:46:
         26:06:b1:2c:15:fd:8d:9a:b5:82:3a:4a:7e:cc:b4:ed:9a:26:
         92:e2:64:c8:26:7c:e6:ef:c5:47:2f:e0:36:b6:4c:da:93:04:
         8c:87:42:a5:f3:8b:0f:75:d0:b2:79:e6:a0:50:87:04:53:6b:
         ff:b7:82:f9:2b:f1:9c:be:6f:f8:d9:68:a2:2d:e9:6c:b1:e0:
         45:1f:bc:dc:b5:66:97:5a:9f:81:cb:9e:d4:18:8f:0c:9c:6e:
         11:e6:a9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:59:44 2026 by rpki-client