Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/3137302e3234342e36382e302f32322d3234203d3e20323636353137.roa
File:                     3137302e3234342e36382e302f32322d3234203d3e20323636353137.roa (raw, json)
Hash identifier:          vwpc/cnktXzLMQEj7h1xavAZcgMaKMErWJkjVm6Fcho=
Subject key identifier:   47:E6:B0:61:F8:9C:1D:70:00:39:13:E8:42:44:4B:66:C0:CF:ED:8C
Certificate issuer:       /CN=E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835
Certificate serial:       5B68406CCE7EE2BC8F43DD1206C2812AF4638714
Authority key identifier: E8:C7:4B:48:60:1A:5A:E8:1E:DF:93:8F:3B:96:DA:3E:C2:AE:48:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/3137302e3234342e36382e302f32322d3234203d3e20323636353137.roa
Signing time:             Mon 13 Jul 2026 14:14:49 +0000
ROA not before:           Mon 13 Jul 2026 14:09:49 +0000
ROA not after:            Mon 12 Jul 2027 14:14:49 +0000
asID:                     266517
IP address blocks:        170.244.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.crl
                          rsync://rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 14:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:68:40:6c:ce:7e:e2:bc:8f:43:dd:12:06:c2:81:2a:f4:63:87:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835
        Validity
            Not Before: Jul 13 14:09:49 2026 GMT
            Not After : Jul 12 14:14:49 2027 GMT
        Subject: CN=47E6B061F89C1D70003913E842444B66C0CFED8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a7:bb:ac:31:17:3a:9e:4f:f0:c8:6b:77:8c:
                    ce:94:d5:78:af:79:97:68:5e:1a:52:73:b5:e5:a0:
                    05:23:aa:69:be:5c:04:02:d6:00:1b:88:f0:43:6a:
                    b3:2a:ef:5f:0c:35:c6:a3:b3:55:f7:c2:0e:3d:d9:
                    f9:11:ab:b8:11:3c:c8:ed:1b:a5:53:aa:fa:1d:e6:
                    04:a8:ad:ec:4a:27:15:bb:27:14:ab:7b:27:08:80:
                    db:af:f3:2b:92:b8:00:4c:7c:09:ec:db:d2:01:5b:
                    0f:be:e1:09:4d:f2:f3:54:14:80:ac:bc:e0:06:fd:
                    a3:91:cf:77:a9:90:51:a8:ea:75:cf:a6:b4:f3:cf:
                    ba:df:e5:07:d6:70:67:23:6d:f9:50:ef:ad:2f:3e:
                    ca:ea:fd:cd:af:dc:26:c5:20:fd:fe:22:61:af:01:
                    c3:bb:03:56:c3:44:ac:64:bf:60:f7:ef:70:b3:c5:
                    32:53:f4:3c:be:09:cb:06:81:5e:d6:91:aa:89:d7:
                    80:ea:7e:28:ea:be:fc:68:b7:5b:dd:d6:a6:8d:e7:
                    be:18:03:28:fc:d9:1f:6d:da:c6:c3:4b:9b:58:cb:
                    dc:28:8e:35:d1:dc:ba:b9:46:4f:90:a0:f8:61:fc:
                    1f:b5:67:40:f8:ca:51:8f:28:fa:d9:27:ff:19:d5:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E6:B0:61:F8:9C:1D:70:00:39:13:E8:42:44:4B:66:C0:CF:ED:8C
            X509v3 Authority Key Identifier:
                keyid:E8:C7:4B:48:60:1A:5A:E8:1E:DF:93:8F:3B:96:DA:3E:C2:AE:48:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8C74B48601A5AE81EDF938F3B96DA3EC2AE4835.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GibKrCzpDZ2RcsobeqGhayNRfBZwMykdW5zBsVMVALvP/0/3137302e3234342e36382e302f32322d3234203d3e20323636353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:e4:92:48:0d:fd:1d:a1:4d:81:ac:1b:7c:ff:67:94:de:f0:
         c3:7c:47:53:f2:28:36:d9:fb:2c:a4:69:2e:83:c0:25:c5:f6:
         5a:8a:b8:cc:4d:3e:de:72:c0:d7:fe:41:aa:ab:f5:ef:88:a5:
         d3:d2:06:60:bb:52:4d:96:97:17:a8:87:7f:55:c0:56:2d:ff:
         dd:56:60:54:aa:f7:db:7f:40:ba:aa:4e:82:63:d5:d7:4c:a5:
         8a:4d:1b:e6:4c:9d:b6:f6:2a:5c:ba:6d:37:98:df:4f:6e:09:
         fa:fb:b5:63:10:e0:01:77:ce:88:37:a1:68:0b:b2:ae:31:39:
         20:a4:17:f6:e1:8d:86:75:a9:ae:fb:59:8d:1e:cf:27:d5:8c:
         79:7e:1d:30:b3:38:a6:45:ab:7e:5c:d4:3f:09:cd:1e:2a:52:
         0f:83:06:20:e1:5f:de:29:b3:d3:9d:f7:0b:a6:e9:03:0e:77:
         5a:5d:cc:80:c3:05:b4:ad:70:fa:03:ad:11:07:78:5f:2e:ba:
         2c:4d:dc:86:e0:ee:e3:ad:ed:b3:43:8e:86:4c:a4:bb:6d:83:
         d2:40:80:d6:98:02:e3:01:4a:8d:bd:b7:d3:e9:92:33:37:a3:
         47:b9:f4:6f:e5:65:c3:c7:d3:50:d0:db:7c:95:73:14:41:c2:
         e3:3a:38:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:34:26 2026 by rpki-client