Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa
File:                     3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa (raw, json)
Hash identifier:          NaSOFGhAJmMEVEBV/BJ9mtTt61ddJ/xj68VIIZgYvzQ=
Subject key identifier:   B9:FB:4B:A4:AA:C0:73:84:2D:40:A3:BB:4A:FB:35:67:B6:3A:A0:DE
Certificate issuer:       /CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
Certificate serial:       1D907C29A08CF3C1B558172A7A83C0A866818328
Authority key identifier: 65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa
Signing time:             Sun 12 Jul 2026 20:29:41 +0000
ROA not before:           Sun 12 Jul 2026 20:24:41 +0000
ROA not after:            Sun 11 Jul 2027 20:29:41 +0000
asID:                     269182
IP address blocks:        179.63.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl
                          rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:90:7c:29:a0:8c:f3:c1:b5:58:17:2a:7a:83:c0:a8:66:81:83:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6571B526A451E2EEFF0FFCACF46BBC2BC74D8906
        Validity
            Not Before: Jul 12 20:24:41 2026 GMT
            Not After : Jul 11 20:29:41 2027 GMT
        Subject: CN=B9FB4BA4AAC073842D40A3BB4AFB3567B63AA0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:64:2c:6a:7c:15:32:93:4a:ea:26:5c:96:
                    59:f0:3d:d1:ed:18:8b:0e:2c:df:0d:e7:70:21:fa:
                    f6:f8:fc:b0:98:bf:b4:14:62:22:2f:61:ab:69:57:
                    bb:47:63:27:13:36:87:37:ab:48:e0:17:44:33:b2:
                    82:27:ff:ee:a4:f9:03:da:11:5c:c1:b7:b0:b4:ea:
                    9c:3c:ca:02:12:38:cc:f8:16:78:c7:2b:ab:af:04:
                    36:7f:de:6c:34:24:4b:11:18:06:25:3d:63:6f:a3:
                    d9:b9:10:82:01:4f:ea:7d:a7:02:c2:92:bc:c3:87:
                    e3:bc:22:67:0d:e2:d3:0a:4e:73:1e:7e:e4:99:37:
                    50:d4:e8:16:ba:45:ca:85:63:7b:ff:d0:32:3f:f0:
                    bd:ba:78:b2:cd:7c:63:7f:9a:db:1e:66:ba:12:f9:
                    c5:54:0a:4a:b1:05:28:a4:ee:fb:b4:63:27:c0:7e:
                    cb:ca:ac:d0:ab:69:89:74:9a:61:99:1d:56:eb:67:
                    82:cd:e0:57:47:8a:97:ff:4a:07:7d:32:54:09:b2:
                    f9:b4:f9:e1:9e:82:dc:88:2a:1b:e4:6e:31:5b:a3:
                    b6:ed:a2:c4:c2:3e:9e:3f:0c:3f:b1:12:04:16:99:
                    03:38:99:fd:0a:f7:c6:b7:b3:50:11:3b:bb:2e:7a:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FB:4B:A4:AA:C0:73:84:2D:40:A3:BB:4A:FB:35:67:B6:3A:A0:DE
            X509v3 Authority Key Identifier:
                keyid:65:71:B5:26:A4:51:E2:EE:FF:0F:FC:AC:F4:6B:BC:2B:C7:4D:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6571B526A451E2EEFF0FFCACF46BBC2BC74D8906.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85xM3eig4eAcZMiU1k6RMbEBeHsWdHdCQiDeX1xeRYqa/0/3137392e36332e3136362e302f32342d3234203d3e20323639313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:7b:e2:73:a2:ce:bb:c4:e8:bc:33:d4:56:8a:85:f4:34:
         c4:0a:95:55:33:79:a2:c1:ab:33:da:29:35:8b:05:43:b7:9e:
         d1:35:d6:a0:de:a0:a5:ed:5d:e8:95:c8:a7:9b:3d:c9:4b:7c:
         28:6d:52:d2:32:68:d0:33:e7:db:19:ef:48:e9:4c:5f:c5:54:
         fd:2b:bd:7d:c9:d3:ae:3f:7a:02:c9:97:25:63:81:5b:30:ef:
         c4:fb:27:cf:b2:19:87:7b:30:59:43:b6:47:08:c2:49:3a:00:
         9d:e9:ed:89:83:2b:2a:fa:fa:5f:33:7b:b0:9b:be:57:d4:5e:
         a0:86:a6:39:77:79:21:10:61:12:a0:91:cb:96:24:e4:a8:b6:
         38:c3:8d:c9:7a:d2:cb:b9:76:83:fc:0f:77:7d:32:45:07:d7:
         f0:67:21:e9:8c:ac:5d:ed:5d:34:2e:f0:c2:89:49:ca:d5:d4:
         90:48:ba:5f:70:a2:e3:67:7f:d8:67:b2:ba:55:9d:5f:30:3f:
         67:18:40:57:e1:9f:64:fd:7e:7f:25:08:d5:ce:60:b1:fc:ca:
         f8:ae:c7:95:9c:fe:a7:21:a9:7a:fa:43:10:95:f1:5b:0b:c1:
         9d:ff:02:73:5b:67:0d:0c:40:ce:7d:d6:7c:c0:03:7b:32:db:
         28:04:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:44:51 2026 by rpki-client