Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35362e302f32322d3232203d3e20323632353132.roa
File:                     3137372e36372e35362e302f32322d3232203d3e20323632353132.roa (raw, json)
Hash identifier:          0k/40Xn171vOdcMcF74Q9e3ynA28/zOXPfh68Lt1ZAw=
Subject key identifier:   E7:71:FB:45:66:B9:5B:5E:87:F4:29:B3:92:03:BE:32:0A:2A:BA:93
Certificate issuer:       /CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
Certificate serial:       673BA2F0F99D49CF9182BA846B4A4DDA874821D4
Authority key identifier: 58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35362e302f32322d3232203d3e20323632353132.roa
Signing time:             Thu 01 Oct 2026 13:21:10 +0000
ROA not before:           Thu 01 Oct 2026 13:16:10 +0000
ROA not after:            Thu 30 Sep 2027 13:21:10 +0000
asID:                     262512
IP address blocks:        177.67.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl
                          rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3b:a2:f0:f9:9d:49:cf:91:82:ba:84:6b:4a:4d:da:87:48:21:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
        Validity
            Not Before: Oct  1 13:16:10 2026 GMT
            Not After : Sep 30 13:21:10 2027 GMT
        Subject: CN=E771FB4566B95B5E87F429B39203BE320A2ABA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:a6:43:39:f5:83:6a:e5:b8:ac:58:6e:a7:
                    17:d6:da:1a:4a:63:d7:44:76:6c:2b:dd:08:ca:00:
                    6d:ca:26:a9:ad:e0:4e:f3:98:62:bb:84:a0:df:50:
                    cf:b6:25:e1:d6:38:28:65:74:08:c2:ca:78:11:04:
                    f7:b0:c7:04:9b:6f:a8:89:27:5d:42:a1:ad:a1:a9:
                    37:49:01:23:0b:ac:55:d8:6d:6b:39:90:4b:24:b5:
                    9f:40:b1:18:93:23:4d:34:09:98:77:bc:0c:04:99:
                    c8:ac:6e:d0:be:c0:8b:10:78:25:4b:a9:b2:ed:e8:
                    b1:4a:1d:e1:26:b0:cd:6c:a3:13:3e:d0:d8:5c:65:
                    73:64:b2:ca:cc:9b:8d:ac:a8:7f:e2:7f:47:e0:7d:
                    2e:8b:3a:1f:af:ed:3f:1f:58:89:d5:7e:b2:e0:0c:
                    98:74:2a:8e:ca:20:42:b7:17:7b:b3:ae:b1:41:b2:
                    f5:f9:cb:d3:f6:3c:a8:a1:e5:4a:20:54:f8:1f:e0:
                    07:de:65:60:0c:e2:a0:ac:70:21:7f:fe:7a:27:29:
                    eb:5c:19:41:db:1c:3a:26:70:95:63:73:50:dc:8d:
                    bf:3f:d3:e1:d9:fb:52:9e:21:32:12:4f:43:35:20:
                    20:f4:26:39:bb:47:ea:f7:50:ef:5d:ea:21:d9:4f:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:71:FB:45:66:B9:5B:5E:87:F4:29:B3:92:03:BE:32:0A:2A:BA:93
            X509v3 Authority Key Identifier:
                keyid:58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35362e302f32322d3232203d3e20323632353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:59:b3:ba:7e:ef:36:9f:e3:94:6d:08:b4:02:9e:78:00:
         0b:11:c2:d2:cf:bf:c7:d0:c0:6f:b7:79:b0:d3:17:3e:58:43:
         49:34:15:7b:1f:ba:5e:e5:b4:19:7a:87:02:11:8a:e0:87:0a:
         4e:13:03:dc:a8:86:3a:af:0d:eb:05:97:f9:97:18:95:6f:3c:
         db:13:01:2e:5f:d2:49:56:46:39:ea:0b:41:5a:a3:c3:12:f9:
         12:a1:6e:d1:51:9c:00:cd:d5:ca:09:2e:f8:30:d3:2b:b5:e2:
         e9:74:43:1a:54:0b:50:6f:95:bc:68:fa:5e:9d:9d:69:70:64:
         21:3d:e0:c4:ab:22:2c:92:52:70:1d:6e:5f:e7:df:b7:22:16:
         db:3f:5d:51:93:d3:ec:84:54:01:16:44:0a:14:22:ad:23:c6:
         41:f6:37:96:c2:13:7d:1d:9a:83:51:b2:f8:52:2b:64:63:3c:
         06:f8:f0:f4:c3:e2:cb:6e:c0:94:96:73:e8:75:4c:b8:ee:60:
         71:fb:89:12:41:e2:db:7e:ff:92:bd:ac:9e:06:6c:1c:24:0a:
         c4:bd:95:80:1f:21:fc:98:b7:a5:df:56:50:64:02:8e:3d:81:
         58:82:51:5d:f4:5c:73:e1:81:98:43:b9:4d:d2:9c:3e:f8:da:
         01:cd:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:11:44 2026 by rpki-client