Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
File:                     3137372e32332e3139322e302f32312d3234203d3e203238313538.roa (raw, json)
Hash identifier:          XAWcaH+5t+dq9xCla84lgJ6gRE9bDAUEizFOz851TgM=
Subject key identifier:   45:CB:D7:38:42:88:C1:80:72:FB:90:6E:61:06:55:D4:6E:33:B1:83
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       6A6DD1AD1544B99A5E8041E43F485FF4B565D345
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     28158
IP address blocks:        177.23.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6d:d1:ad:15:44:b9:9a:5e:80:41:e4:3f:48:5f:f4:b5:65:d3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=45CBD7384288C18072FB906E610655D46E33B183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:a6:7b:c7:03:9d:4f:04:a6:dd:e6:29:8b:
                    a3:1d:13:2b:35:fe:a3:21:04:3c:6b:44:ce:be:85:
                    b2:5f:3b:c3:af:f8:c4:f6:28:c5:a0:eb:ae:15:3e:
                    31:32:db:2c:56:84:b4:be:4c:5e:66:01:58:44:d5:
                    a5:e1:5d:33:cc:6d:42:64:b2:cc:49:2e:09:e8:b0:
                    78:9b:57:90:d6:c5:28:fe:36:3c:12:ca:ee:d6:d5:
                    39:be:31:c8:a6:ff:db:82:83:bb:6b:6a:d8:80:d7:
                    63:79:ae:02:f9:d2:ae:c4:5a:67:e8:89:ca:c9:b8:
                    2b:7f:4c:43:13:b6:67:08:23:dc:0d:36:29:17:ea:
                    47:e8:5a:d4:32:b2:f2:ed:19:11:7b:e9:52:90:b5:
                    80:2e:e0:03:fe:38:d4:4d:bb:26:c7:b8:ac:b9:b6:
                    3d:39:cc:8e:d0:13:ac:13:3c:20:dc:28:71:5a:25:
                    a5:69:96:86:96:50:52:98:6e:6c:b4:22:12:cd:1f:
                    cb:5f:f3:5b:90:9d:20:c5:15:56:2b:25:23:a4:8e:
                    81:91:dd:da:e5:b3:24:ae:da:73:f0:c9:05:ad:e7:
                    15:64:14:88:ce:0f:ff:d7:b9:3c:de:aa:da:d4:d6:
                    6e:d8:d0:92:83:95:92:8e:8e:a8:53:ba:d2:df:9a:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CB:D7:38:42:88:C1:80:72:FB:90:6E:61:06:55:D4:6E:33:B1:83
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3137372e32332e3139322e302f32312d3234203d3e203238313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:b4:9a:be:ce:78:74:94:f8:55:64:35:61:af:0d:c5:68:
         8c:6d:3c:2f:99:1f:dd:76:e0:89:ea:5e:78:2c:48:10:a8:61:
         bb:b0:8a:61:ab:27:99:7d:97:56:89:cc:54:b7:5f:f4:1a:23:
         06:fc:d7:6f:2f:c0:13:9f:54:07:ee:98:29:d1:48:53:37:e0:
         25:94:3e:be:d4:8c:bf:01:d6:3b:95:9c:1f:fa:65:53:61:38:
         d8:5b:8a:b5:6b:25:31:6b:d9:60:b9:ac:1f:0f:de:e8:52:7c:
         00:b3:40:57:5b:35:f9:99:75:db:6e:32:c2:38:e6:45:b6:ff:
         70:d9:fa:32:d7:9b:f6:27:85:1c:0d:99:8a:74:39:3a:74:f2:
         e8:b4:7c:fb:87:24:0a:59:24:e3:d7:27:a1:9b:65:75:f3:a9:
         51:59:90:b0:44:0f:01:d8:f3:64:5c:93:80:b3:dd:bb:a0:c0:
         73:eb:ae:ed:99:db:43:c0:f9:1e:d4:b3:7f:0b:1c:95:a2:72:
         7d:11:5f:5d:a5:36:70:c3:37:5b:4d:9d:34:a6:ed:04:db:4e:
         61:f3:b9:fe:53:bd:ce:e9:9b:3c:e5:43:4e:9e:01:b9:33:74:
         07:00:85:fa:c0:57:40:67:45:74:b2:22:f1:f9:9c:5c:bb:f1:
         31:2c:58:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:37 2026 by rpki-client