Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32322d3234203d3e20323731363330.roa
File:                     3137392e36332e3134302e302f32322d3234203d3e20323731363330.roa (raw, json)
Hash identifier:          dHCZCIgKEyNk64/EUGPY4cHijGgYhJ+3Z4mGtnwsgHI=
Subject key identifier:   95:88:73:96:52:15:12:CF:CE:C4:D9:25:BB:87:B6:00:8A:1C:59:45
Certificate issuer:       /CN=5949359D07B59DE3F46B3E00A9402993AD3B7780
Certificate serial:       7AF3CB209D201AAF4BCDAD5AFB0D3BAEEECDE661
Authority key identifier: 59:49:35:9D:07:B5:9D:E3:F4:6B:3E:00:A9:40:29:93:AD:3B:77:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5949359D07B59DE3F46B3E00A9402993AD3B7780.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32322d3234203d3e20323731363330.roa
Signing time:             Wed 24 Jun 2026 12:42:06 +0000
ROA not before:           Wed 24 Jun 2026 12:37:06 +0000
ROA not after:            Wed 23 Jun 2027 12:42:06 +0000
asID:                     271630
IP address blocks:        179.63.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/5949359D07B59DE3F46B3E00A9402993AD3B7780.crl
                          rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/5949359D07B59DE3F46B3E00A9402993AD3B7780.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5949359D07B59DE3F46B3E00A9402993AD3B7780.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f3:cb:20:9d:20:1a:af:4b:cd:ad:5a:fb:0d:3b:ae:ee:cd:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949359D07B59DE3F46B3E00A9402993AD3B7780
        Validity
            Not Before: Jun 24 12:37:06 2026 GMT
            Not After : Jun 23 12:42:06 2027 GMT
        Subject: CN=95887396521512CFCEC4D925BB87B6008A1C5945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:b1:81:f2:29:b6:aa:c1:d7:5a:5b:d5:f7:
                    ea:5e:e0:58:34:bf:ee:fc:8f:86:2c:f2:65:11:85:
                    50:ff:62:ea:99:1f:29:f1:00:e0:21:b2:3b:bd:d3:
                    89:3a:75:6c:ec:91:42:52:a8:0f:9e:09:a5:95:7a:
                    49:fd:f2:6a:43:29:08:53:82:7c:ae:65:8f:5d:fc:
                    d5:c4:4b:14:72:52:b1:65:29:51:06:0d:00:ae:53:
                    2d:ed:5f:fa:33:67:69:6e:35:b5:df:35:26:85:3d:
                    9e:56:8f:af:95:6f:be:82:34:83:46:ef:00:66:8b:
                    32:68:9d:ca:18:38:31:97:84:40:a4:c1:84:1f:07:
                    b6:16:f2:47:62:b1:9c:55:1f:08:bc:db:77:af:9b:
                    b1:4d:81:3f:05:92:15:e2:7b:05:71:b8:29:08:df:
                    91:86:46:8b:97:11:6a:cd:45:73:b6:f0:c1:4d:b4:
                    39:49:aa:f7:62:95:c2:fb:a6:a7:b4:56:e1:2a:7d:
                    fe:43:9a:f0:82:67:57:aa:8a:2f:65:74:30:e1:05:
                    f0:da:a4:f8:e1:05:39:1e:cc:dd:ce:29:06:50:49:
                    a3:d3:41:8b:48:2b:40:f2:51:0c:91:56:ed:49:fc:
                    4d:02:69:18:e3:f3:89:7e:d1:97:c0:64:3b:61:46:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:88:73:96:52:15:12:CF:CE:C4:D9:25:BB:87:B6:00:8A:1C:59:45
            X509v3 Authority Key Identifier:
                keyid:59:49:35:9D:07:B5:9D:E3:F4:6B:3E:00:A9:40:29:93:AD:3B:77:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/5949359D07B59DE3F46B3E00A9402993AD3B7780.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5949359D07B59DE3F46B3E00A9402993AD3B7780.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CDEmGUydzttovZj1sWpowz92stkCY5HcQxu2DGnZr2rx/0/3137392e36332e3134302e302f32322d3234203d3e20323731363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:c0:a5:bf:7f:12:02:e8:04:a5:25:68:a0:97:43:3b:ef:
         b2:f8:3b:86:6a:33:82:a7:d0:04:10:f7:c4:b7:4d:08:13:47:
         e3:56:d1:e5:1d:da:c7:40:95:e1:19:e5:2d:2e:24:59:8b:34:
         bb:41:f9:bd:ea:34:a3:fa:76:22:74:7b:51:48:cb:8b:8e:b1:
         ba:e0:4b:2e:0c:7d:a8:d4:59:4f:bd:1c:4d:cd:6b:3a:80:51:
         19:ba:4d:5a:5b:32:8b:75:5b:05:a4:60:c3:6c:40:02:85:a7:
         0e:cb:13:39:98:59:f8:5c:a8:62:2b:95:a5:4b:de:86:de:ca:
         64:b1:6c:a2:ed:7b:e5:15:a4:2f:47:87:6e:bd:f9:1a:f4:61:
         22:11:2f:a0:75:d6:61:bf:b3:bb:43:7f:20:4d:06:61:31:e5:
         7d:07:0c:fe:06:c1:0e:f4:a1:20:d0:1f:4e:e2:32:97:bc:19:
         b1:2a:07:1c:29:54:a9:b1:af:00:22:d3:b3:75:6e:85:8d:fa:
         d6:45:5e:a1:0a:b7:44:b0:fc:b6:6a:80:4d:94:51:79:e5:4b:
         ac:0d:a3:e5:c4:7f:39:17:01:13:87:48:c3:2b:f1:a7:a7:31:
         18:95:98:88:34:93:89:ca:fd:f9:5d:05:40:57:6c:0b:c6:e4:
         8b:6e:64:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:44:47 2026 by rpki-client