Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
File:                     3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa (raw, json)
Hash identifier:          8J4SN6PjJvhNLLkRXZOTfenVC5JP8GVfiyZynSYL78Q=
Subject key identifier:   EC:E6:B5:F7:73:EC:5F:1D:36:A9:40:B0:89:47:D1:08:6F:EC:D6:1F
Certificate issuer:       /CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
Certificate serial:       775B457D2BD551D4E46AB710391B3659DEA19C25
Authority key identifier: 3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa
Signing time:             Wed 17 Jun 2026 21:34:54 +0000
ROA not before:           Wed 17 Jun 2026 21:29:54 +0000
ROA not after:            Wed 16 Jun 2027 21:34:54 +0000
asID:                     270630
IP address blocks:        177.70.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl
                          rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:45:7d:2b:d5:51:d4:e4:6a:b7:10:39:1b:36:59:de:a1:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F7549EDF416F00B8C66D00FDF39133770716DFF
        Validity
            Not Before: Jun 17 21:29:54 2026 GMT
            Not After : Jun 16 21:34:54 2027 GMT
        Subject: CN=ECE6B5F773EC5F1D36A940B08947D1086FECD61F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:70:fa:3d:74:88:58:06:8e:32:d7:7b:9d:
                    ef:a4:71:bb:50:f0:b7:1c:7b:ce:b9:06:4c:7f:41:
                    a3:e8:56:ec:d1:5f:88:d5:1f:51:d1:94:60:27:7a:
                    39:b6:44:42:37:18:1f:bd:73:6c:d1:83:48:69:9a:
                    8f:fa:12:22:9f:e1:7d:32:97:e5:98:d1:d4:a9:a0:
                    8b:1e:ed:1b:1d:59:66:7e:5e:01:f3:fa:6f:db:75:
                    9d:cc:86:04:60:d5:45:67:be:27:66:ea:20:99:79:
                    e2:f8:6f:95:b4:66:ab:32:8c:ec:bc:9d:84:e6:b0:
                    e3:29:12:6c:c3:0c:cc:ce:ac:7e:3d:df:d5:a7:53:
                    0e:35:07:20:5e:13:31:2d:5c:d6:a2:fb:56:93:98:
                    09:dd:69:50:d9:4c:b6:71:71:5d:1c:1a:d9:5d:3c:
                    ff:8b:77:21:1a:70:8c:71:35:1e:b8:b1:71:65:d5:
                    13:f7:82:bb:37:ec:77:b0:0b:b1:d3:3c:d5:de:65:
                    df:0f:71:d1:d2:fd:97:5f:33:23:b5:e4:d0:4e:3c:
                    30:87:85:4e:93:e8:3e:32:06:17:74:c0:bb:e3:51:
                    27:05:b0:03:e5:e1:2e:3f:47:e5:91:cb:cf:a7:70:
                    da:6e:eb:9f:b4:5a:b5:15:94:ae:fe:14:60:8e:22:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E6:B5:F7:73:EC:5F:1D:36:A9:40:B0:89:47:D1:08:6F:EC:D6:1F
            X509v3 Authority Key Identifier:
                keyid:3F:75:49:ED:F4:16:F0:0B:8C:66:D0:0F:DF:39:13:37:70:71:6D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3F7549EDF416F00B8C66D00FDF39133770716DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F7549EDF416F00B8C66D00FDF39133770716DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/3137372e37302e3234342e302f32342d3234203d3e20323730363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:3b:37:f6:83:01:68:18:14:65:97:b7:b1:43:d4:e0:60:e4:
         e4:73:00:10:02:e4:88:10:0e:6a:1f:7c:77:17:93:c4:b4:ce:
         c6:0c:ea:54:1e:cf:c3:c0:84:b4:b9:fd:4a:e6:a2:25:a1:34:
         7e:d0:4a:61:07:4d:23:2a:ad:ec:b8:3a:a1:60:ea:c4:b9:94:
         fe:86:c6:a2:9b:18:ca:63:de:51:f3:2a:d3:0a:0b:7f:64:2a:
         48:2e:88:95:f0:b0:60:0f:e2:8b:7c:49:e7:41:3e:09:96:a3:
         52:0b:76:f8:79:a3:46:a5:ac:cb:fa:0a:e6:cb:e6:ec:55:56:
         ef:90:6b:2b:85:57:2d:6e:d8:c7:f2:56:fb:d1:cd:a2:5f:68:
         47:6a:68:64:2d:59:93:6f:7e:a3:22:92:0c:b4:58:6b:e6:30:
         36:f7:9c:e9:3b:01:f8:1c:3c:15:86:1a:4e:f4:59:d9:bc:2d:
         3a:3f:6b:cb:43:43:d8:6e:59:6d:51:98:3a:86:1d:b1:c2:07:
         58:67:f3:ba:84:cf:e8:44:1d:49:bd:cb:40:bd:b1:a5:34:ad:
         cc:8b:81:c7:aa:84:d9:0f:fd:3e:5e:0d:aa:67:82:24:2e:71:
         5e:9b:cd:07:0d:c0:05:92:96:3d:64:0d:69:f9:32:fb:eb:6c:
         20:93:1b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:29:22 2026 by rpki-client