Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
File:                     3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa (raw, json)
Hash identifier:          tU+zn7VuMLbU8EW5FwLbyKit5yxxjmCJ1KzSTjm+dkk=
Subject key identifier:   3A:16:D5:69:90:50:91:07:27:AA:FA:A3:3C:19:02:91:B5:75:1F:E0
Certificate issuer:       /CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
Certificate serial:       0A1F6D6746763ECC330238E1511C2278B0F94610
Authority key identifier: 66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa
Signing time:             Tue 30 Jun 2026 19:11:39 +0000
ROA not before:           Tue 30 Jun 2026 19:06:39 +0000
ROA not after:            Tue 29 Jun 2027 19:11:39 +0000
asID:                     262893
IP address blocks:        177.23.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl
                          rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1f:6d:67:46:76:3e:cc:33:02:38:e1:51:1c:22:78:b0:f9:46:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665EFCBFABFCD6BCD560939857AA5CE775E9B630
        Validity
            Not Before: Jun 30 19:06:39 2026 GMT
            Not After : Jun 29 19:11:39 2027 GMT
        Subject: CN=3A16D5699050910727AAFAA33C190291B5751FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:ff:51:7d:9b:97:0b:93:9f:d5:ff:e5:b2:
                    88:61:d0:b1:6e:ed:ec:30:11:7d:05:43:f9:0f:da:
                    80:87:dd:b2:ac:2f:b3:45:f6:b1:cd:83:52:64:6e:
                    06:43:30:e1:5b:c9:a4:bf:96:78:ae:aa:7a:74:8f:
                    24:43:3e:56:76:2b:1b:64:1d:c2:15:9e:a2:20:dd:
                    df:f4:1f:61:7c:13:db:6b:7e:60:76:0c:03:a1:ea:
                    03:af:e7:1f:72:2f:a2:8a:d9:0a:ae:11:9b:51:77:
                    c7:70:e6:31:c5:41:c6:72:a3:a6:e2:4b:89:9e:4b:
                    10:61:e3:a9:c8:1c:3c:c1:f1:3c:05:de:74:55:9c:
                    5a:6e:46:ee:00:3d:f2:62:59:28:3a:52:26:7c:9a:
                    dd:1e:e0:66:34:fe:5f:d6:e2:e8:be:6a:84:96:2d:
                    78:39:64:7c:04:d5:6b:f9:fa:98:68:86:55:d3:3f:
                    64:d9:94:52:49:fe:55:c4:80:c3:e9:62:2f:18:f8:
                    fe:6c:92:86:78:30:2d:d9:59:8c:49:43:26:f2:ae:
                    3b:10:30:32:5d:c5:f4:ac:4b:21:b5:92:c1:92:ca:
                    81:5b:4e:c4:cb:53:83:80:ad:a2:57:19:2c:d4:1b:
                    ba:09:66:7b:0e:61:f7:84:35:41:bd:b1:9f:5a:43:
                    21:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:16:D5:69:90:50:91:07:27:AA:FA:A3:3C:19:02:91:B5:75:1F:E0
            X509v3 Authority Key Identifier:
                keyid:66:5E:FC:BF:AB:FC:D6:BC:D5:60:93:98:57:AA:5C:E7:75:E9:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/665EFCBFABFCD6BCD560939857AA5CE775E9B630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/665EFCBFABFCD6BCD560939857AA5CE775E9B630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/3137372e32332e3131322e302f32312d3332203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:7d:17:bc:90:e6:55:d9:ae:d7:f5:fc:8f:f0:57:0f:f7:
         4c:c1:fb:e4:b6:1c:84:2f:ab:c3:85:e7:c6:dc:a2:4c:dd:83:
         0b:51:72:ea:e6:46:5d:bb:b8:0e:ff:52:50:87:f4:7d:34:08:
         6e:2b:ff:6f:68:a5:f2:42:5c:9c:73:7f:53:63:cf:70:58:d2:
         4b:d9:45:4a:bb:44:24:f7:9b:a5:51:53:ed:e9:36:ae:dd:53:
         db:6e:8c:9b:c2:5e:ba:6c:54:dc:61:a1:11:ac:ef:95:ac:a4:
         d2:c6:9c:f0:f0:89:5c:a5:9a:6f:e9:f7:d9:f6:90:b0:76:d5:
         02:3e:57:2b:8f:20:74:a3:64:3e:1f:b1:3a:61:a6:70:f5:b1:
         d1:52:35:e0:dc:1c:38:fd:20:f0:5c:14:a9:fc:48:65:a0:a8:
         94:9c:82:e2:e8:70:a2:32:8c:cd:ad:3a:7d:80:f3:99:cb:cf:
         20:1a:65:f5:ce:5d:77:11:20:7c:e4:02:7a:3d:09:63:d0:36:
         54:1d:e6:2b:cf:51:07:ee:2d:d0:e8:ec:e6:1e:b0:93:40:97:
         c7:06:5a:3b:c9:8d:65:00:ad:a4:ef:26:61:f6:ae:c9:70:cb:
         c0:27:41:e8:ce:8f:06:fe:78:2a:83:d9:68:ff:c3:27:ca:60:
         db:6e:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:17:58 2026 by rpki-client