Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa
File:                     3137372e33362e32352e302f32342d3234203d3e20323731303532.roa (raw, json)
Hash identifier:          X/2d/t0KK+iHoU9WQ/dTVvfLHfq+B7fx9dxqpjmxMVw=
Subject key identifier:   44:EC:36:59:4F:D4:90:43:51:68:4C:A6:C3:7E:72:3C:05:52:7D:20
Certificate issuer:       /CN=066DBB582BB21BC0F1C511FEEA1ECC231456F390
Certificate serial:       0AF0F4CA290F32DBF0AA42DB4410ABC84465F766
Authority key identifier: 06:6D:BB:58:2B:B2:1B:C0:F1:C5:11:FE:EA:1E:CC:23:14:56:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa
Signing time:             Tue 08 Sep 2026 00:10:36 +0000
ROA not before:           Tue 08 Sep 2026 00:05:36 +0000
ROA not after:            Tue 07 Sep 2027 00:10:36 +0000
asID:                     271052
IP address blocks:        177.36.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.crl
                          rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 06:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:f0:f4:ca:29:0f:32:db:f0:aa:42:db:44:10:ab:c8:44:65:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066DBB582BB21BC0F1C511FEEA1ECC231456F390
        Validity
            Not Before: Sep  8 00:05:36 2026 GMT
            Not After : Sep  7 00:10:36 2027 GMT
        Subject: CN=44EC36594FD4904351684CA6C37E723C05527D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:4e:6e:db:0e:85:5c:24:69:47:72:28:f8:
                    ec:b3:f8:ff:40:2b:e0:84:69:e3:48:37:6d:fc:e0:
                    06:7c:68:8c:a1:13:e1:1b:bc:13:14:b7:3d:91:ab:
                    b8:8d:ef:be:13:a9:e3:5f:6a:fc:2d:ec:7c:2a:e1:
                    6e:a7:3c:78:55:91:12:50:97:67:92:42:e7:4a:94:
                    59:6d:b3:01:39:ec:88:23:26:f9:57:71:ae:dc:2a:
                    e5:f1:18:0d:54:3c:e8:d9:a4:22:b4:ea:b7:dd:62:
                    d3:b1:2b:5b:af:2a:c6:23:bf:98:d1:f1:a7:ca:2a:
                    87:e1:b3:82:02:c7:bf:e2:26:fb:94:ff:e5:cb:15:
                    1b:05:a1:2d:75:a2:91:6b:dd:97:90:ba:30:e5:19:
                    ce:db:52:2e:31:e9:d2:83:17:64:e4:c6:ed:c8:98:
                    45:7f:c5:84:43:a7:06:b6:aa:58:58:56:1c:0c:76:
                    18:01:5c:a3:e4:d0:49:c3:38:97:2f:d2:6f:2d:a0:
                    fb:27:a0:b5:75:24:c5:df:c3:a1:06:70:6d:1e:eb:
                    76:ca:2b:3d:c1:62:ac:b4:24:96:53:ed:d9:f0:1c:
                    f7:a9:97:6e:b6:57:af:1d:38:a1:83:ad:a5:d4:4f:
                    93:ac:51:33:48:8f:63:a8:67:f8:59:32:7b:ae:e9:
                    23:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EC:36:59:4F:D4:90:43:51:68:4C:A6:C3:7E:72:3C:05:52:7D:20
            X509v3 Authority Key Identifier:
                keyid:06:6D:BB:58:2B:B2:1B:C0:F1:C5:11:FE:EA:1E:CC:23:14:56:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/066DBB582BB21BC0F1C511FEEA1ECC231456F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/066DBB582BB21BC0F1C511FEEA1ECC231456F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkoiudMWC9CHUx4WTAQKU56CJvGPW9G2Jy4ASQHD93MJ/0/3137372e33362e32352e302f32342d3234203d3e20323731303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:76:00:50:1b:2a:f4:51:b0:b8:f2:b4:ba:c4:1f:98:ab:
         b3:4d:40:55:05:68:ba:ec:12:6d:4a:66:14:5a:97:73:e9:db:
         8c:e5:57:5d:5e:ef:13:8a:db:35:2a:44:33:45:ac:a0:82:4c:
         d9:a6:d4:77:cc:a7:1d:fd:bc:5a:b8:31:53:df:da:f3:3a:f3:
         59:de:84:3d:b8:a2:b7:61:b9:94:c3:f2:55:1d:e4:07:50:9e:
         54:91:66:77:2e:d3:05:3e:a8:4a:3a:be:30:fa:ef:29:47:2c:
         d0:d7:d7:bc:dc:ec:af:67:8b:5f:9c:cb:1c:7a:dd:43:36:b0:
         71:66:0b:3f:dd:16:60:d0:8c:c7:f2:d4:a7:cd:21:b5:22:8b:
         b1:f6:8b:68:87:39:14:fb:01:10:ca:8d:06:99:9b:48:d0:fe:
         cc:26:c9:35:2b:5d:69:44:d9:63:55:53:9d:41:88:94:fd:35:
         2a:0e:12:a0:b9:3c:50:f7:cb:42:01:30:b1:6a:2b:ed:4e:29:
         b4:ad:70:08:16:35:3c:b1:32:78:2e:3f:be:9c:f5:fb:0e:00:
         9f:5b:3a:05:c5:7a:cb:6a:d8:f6:7a:fa:aa:30:5c:79:af:79:
         ee:fd:91:a2:f4:76:cd:95:12:03:d0:77:21:04:27:62:ae:8c:
         19:43:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:22:34 2026 by rpki-client