Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa
File:                     3137372e36362e3137342e302f32342d3234203d3e203532363539.roa (raw, json)
Hash identifier:          dHCfYjKtp6bs7LTpeQpIQl2ysBrBThIquf6USS3Tj4g=
Subject key identifier:   CE:27:66:34:9D:59:16:42:EE:30:68:26:9C:73:66:6E:DD:13:3C:29
Certificate issuer:       /CN=1FB1A6C0F66618524659E333CFAC3A5DA4E6855E
Certificate serial:       565437C5B93681E32B45F33B779635337A87784B
Authority key identifier: 1F:B1:A6:C0:F6:66:18:52:46:59:E3:33:CF:AC:3A:5D:A4:E6:85:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa
Signing time:             Thu 09 Jul 2026 20:12:01 +0000
ROA not before:           Thu 09 Jul 2026 20:07:01 +0000
ROA not after:            Thu 08 Jul 2027 20:12:01 +0000
asID:                     52659
IP address blocks:        177.66.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.crl
                          rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 13:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:54:37:c5:b9:36:81:e3:2b:45:f3:3b:77:96:35:33:7a:87:78:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB1A6C0F66618524659E333CFAC3A5DA4E6855E
        Validity
            Not Before: Jul  9 20:07:01 2026 GMT
            Not After : Jul  8 20:12:01 2027 GMT
        Subject: CN=CE2766349D591642EE3068269C73666EDD133C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:26:bd:2a:c3:4e:1b:bf:10:d5:6d:6b:90:
                    02:17:36:2d:75:71:63:d6:02:d9:b8:ef:ac:dd:19:
                    ba:0b:23:85:2c:de:af:87:ea:a5:8c:bd:b5:a5:1f:
                    ca:57:a0:ff:d2:fb:09:c7:7d:ec:2a:51:6b:00:56:
                    35:aa:eb:60:80:2f:e9:9d:db:bd:36:3a:3b:bb:18:
                    4a:aa:0b:40:0e:30:34:cd:7f:e9:b5:5d:be:fd:ef:
                    26:8b:74:e2:ef:f3:d8:50:52:31:44:ee:3a:90:1f:
                    0c:2c:82:49:fb:b2:ce:fd:36:cb:a9:b9:91:b6:3b:
                    d2:85:ad:60:33:a4:f1:e3:3e:8b:dc:c2:05:f8:39:
                    06:51:0f:06:6d:8e:51:9a:1d:7b:cc:93:43:d4:d8:
                    3d:1b:ac:9d:5f:66:61:0f:e8:46:c6:87:01:36:7b:
                    76:cd:d0:cf:de:ff:1c:0c:af:8f:bc:ed:9e:1e:c5:
                    d2:3a:97:c1:c8:23:65:8c:48:78:6e:e9:de:57:09:
                    42:25:0b:a8:5e:db:90:1a:81:32:e3:e8:a8:89:a5:
                    6d:a0:a5:6a:24:96:a7:a7:ee:63:8f:4b:74:a1:c6:
                    97:2a:05:01:dd:2b:4c:68:e0:84:ce:11:4b:bd:9b:
                    3f:0e:5e:13:a8:c3:07:d3:f5:43:c8:d2:b9:27:57:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:66:34:9D:59:16:42:EE:30:68:26:9C:73:66:6E:DD:13:3C:29
            X509v3 Authority Key Identifier:
                keyid:1F:B1:A6:C0:F6:66:18:52:46:59:E3:33:CF:AC:3A:5D:A4:E6:85:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FB1A6C0F66618524659E333CFAC3A5DA4E6855E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVqSy9h7nCzjMvKfrCnL6gq7PzDKuoFGQAm3wkgMDNge/0/3137372e36362e3137342e302f32342d3234203d3e203532363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:65:43:1d:be:1f:32:0f:80:92:8d:7d:a7:5c:04:1a:0e:cf:
         b9:84:b2:27:07:1e:64:a7:58:41:d0:82:46:64:a5:44:6f:05:
         c4:84:3d:37:da:bd:12:3d:ab:0b:50:d3:fb:6c:8f:7e:dc:ad:
         70:13:b6:9c:a3:4f:55:50:35:b3:6c:86:2f:18:57:95:9b:0a:
         b5:0c:d3:0c:ef:d2:92:d4:d6:65:98:a7:bd:b2:63:e6:a4:80:
         57:2e:16:2e:7e:33:49:49:b2:18:38:83:69:39:00:8d:71:65:
         ea:67:4e:58:b5:da:c8:cd:78:6f:04:8f:ea:41:a5:bc:84:9b:
         16:52:b6:ce:e7:28:1c:e7:ce:77:7f:b9:40:09:92:7a:e5:f2:
         e1:28:f4:8a:db:3c:54:19:cc:63:50:2b:fb:a4:b7:a7:5a:b9:
         d0:0c:70:51:09:ab:47:16:40:e0:4d:bc:95:38:67:dc:c6:7e:
         ef:7c:f7:6b:44:b9:70:bf:5b:84:57:fd:9e:58:64:9d:c2:b3:
         77:65:2a:15:b5:41:48:bb:f5:d8:d3:40:3f:e3:da:8c:d1:38:
         d7:1d:09:97:e3:58:a1:ab:41:a4:e0:73:69:68:9b:72:0c:c4:
         15:43:e7:e7:31:c6:75:48:e5:8f:dd:37:05:fe:71:8e:e9:13:
         5e:1c:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:27 2026 by rpki-client