Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
File:                     3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa (raw, json)
Hash identifier:          54CsS5U52QkhRkT2Z5ViSVqIy68Nl4IWKM1Cp8J9wuU=
Subject key identifier:   3D:87:A9:FC:5A:57:E6:10:A6:7D:2E:C7:60:76:93:BA:0D:25:F7:72
Certificate issuer:       /CN=02019A62F79DCB09B78EFEC12119E3A7C375C10C
Certificate serial:       08B747ABAB441032A3B9152533C38B58C359BBC2
Authority key identifier: 02:01:9A:62:F7:9D:CB:09:B7:8E:FE:C1:21:19:E3:A7:C3:75:C1:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02019A62F79DCB09B78EFEC12119E3A7C375C10C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa
Signing time:             Mon 13 Jul 2026 12:38:23 +0000
ROA not before:           Mon 13 Jul 2026 12:33:23 +0000
ROA not after:            Mon 12 Jul 2027 12:38:23 +0000
asID:                     271310
IP address blocks:        177.53.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/02019A62F79DCB09B78EFEC12119E3A7C375C10C.crl
                          rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/02019A62F79DCB09B78EFEC12119E3A7C375C10C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02019A62F79DCB09B78EFEC12119E3A7C375C10C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 02:36:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:47:ab:ab:44:10:32:a3:b9:15:25:33:c3:8b:58:c3:59:bb:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02019A62F79DCB09B78EFEC12119E3A7C375C10C
        Validity
            Not Before: Jul 13 12:33:23 2026 GMT
            Not After : Jul 12 12:38:23 2027 GMT
        Subject: CN=3D87A9FC5A57E610A67D2EC7607693BA0D25F772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:87:16:40:b2:bf:7d:49:4b:be:73:ad:de:
                    61:0c:2f:29:f1:8a:49:1a:e7:36:09:d1:ac:e8:0c:
                    70:4d:d1:10:10:76:33:6b:c0:1c:94:06:6e:9f:3e:
                    18:46:b8:44:b1:f8:41:2a:b0:48:33:eb:6f:1f:30:
                    f0:1a:62:b2:7f:a5:07:7b:c2:8f:09:78:51:a8:8b:
                    c1:e2:72:0e:3d:26:41:cf:87:8a:6f:7b:f0:0c:28:
                    a8:22:d7:86:09:2c:76:c8:9f:f4:0e:38:7c:22:8f:
                    e4:0d:7d:cf:93:29:e0:bb:cf:82:8d:2b:16:75:fd:
                    ed:6c:32:58:13:02:3d:09:8d:49:0b:2f:c6:15:9a:
                    2e:2b:c0:40:99:bd:55:11:04:f2:9c:c8:e3:dc:6d:
                    c7:59:89:e4:52:78:9b:ee:06:fe:ed:f0:ca:d9:9f:
                    5c:c6:f2:3d:6a:8f:d3:42:2e:ab:6b:d7:f2:00:97:
                    11:22:35:f4:8b:7c:0d:8a:42:76:0f:8b:e4:84:ea:
                    9a:a5:c0:09:a8:1f:7b:52:eb:52:76:1d:69:e1:d7:
                    ac:2a:4a:31:c6:ff:d8:71:a2:65:64:15:d3:ee:b3:
                    08:f1:ba:c2:c3:45:db:ed:39:ba:4a:0d:0f:ee:b5:
                    6b:75:f5:c8:fa:8b:3c:fa:19:9c:6e:99:5b:58:87:
                    67:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:87:A9:FC:5A:57:E6:10:A6:7D:2E:C7:60:76:93:BA:0D:25:F7:72
            X509v3 Authority Key Identifier:
                keyid:02:01:9A:62:F7:9D:CB:09:B7:8E:FE:C1:21:19:E3:A7:C3:75:C1:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/02019A62F79DCB09B78EFEC12119E3A7C375C10C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02019A62F79DCB09B78EFEC12119E3A7C375C10C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9vyUzuM2V1crowwRZwEEKiGDdofW7WQGyytbe53oMqwW/0/3137372e35332e3230382e302f32322d3234203d3e20323731333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:d5:95:87:aa:3a:0c:68:c9:70:7a:6b:16:1b:f4:12:c8:bb:
         44:22:6c:b3:e7:7f:6b:f4:06:1c:1c:52:9b:6d:c8:eb:4e:3d:
         59:b3:f8:73:dc:ed:da:de:2c:9b:f7:f1:45:ae:63:a4:4a:0a:
         a8:b4:49:d5:ba:66:3d:10:83:52:1f:d3:c6:2b:3e:28:0b:f9:
         b3:e5:6d:16:c3:6f:8f:b3:ae:0f:42:db:39:67:57:5f:53:b5:
         22:15:20:5a:d1:f1:93:cd:1d:fa:21:5c:5f:08:39:10:e0:cb:
         23:44:db:27:ce:4b:bf:04:23:ac:6b:60:d4:86:ea:79:86:d1:
         5e:83:59:a7:74:b9:36:db:09:cb:11:93:6a:da:d6:a0:43:61:
         ec:08:82:11:9d:64:ce:18:27:fe:9f:de:a3:c4:3b:ba:bf:e0:
         a3:95:77:52:03:5a:da:3d:98:aa:4d:ff:35:be:1d:36:32:7b:
         74:35:44:55:59:b7:01:e2:4a:fd:f0:bc:3e:50:8c:55:ed:1d:
         05:21:c2:ee:e5:83:f9:53:d5:a9:72:31:d6:cd:0b:82:b7:00:
         f8:20:11:91:fe:88:5b:81:4b:4b:2c:8a:f9:bd:1a:3a:2d:69:
         e1:69:66:b5:4c:86:be:19:4a:3a:e5:a2:f3:46:13:18:7b:52:
         14:f0:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:11:03 2026 by rpki-client