Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
File:                     3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa (raw, json)
Hash identifier:          2/7XU6oT/G0Z6Ins7u4byOBiv7loizE+gV0EAvaYZHU=
Subject key identifier:   9B:61:FB:46:44:20:B3:2C:5A:0C:6B:0A:85:D7:79:42:A3:B5:70:11
Certificate issuer:       /CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837
Certificate serial:       46AD60958B3FEF65CD34E3D1FDA19944EA96C9B8
Authority key identifier: 0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
Signing time:             Thu 09 Jul 2026 20:11:08 +0000
ROA not before:           Thu 09 Jul 2026 20:06:08 +0000
ROA not after:            Thu 08 Jul 2027 20:11:08 +0000
asID:                     263324
IP address blocks:        177.86.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ad:60:95:8b:3f:ef:65:cd:34:e3:d1:fd:a1:99:44:ea:96:c9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E1B21C62DBFAE7BD33B349D9657A3C90147B837
        Validity
            Not Before: Jul  9 20:06:08 2026 GMT
            Not After : Jul  8 20:11:08 2027 GMT
        Subject: CN=9B61FB464420B32C5A0C6B0A85D77942A3B57011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6c:80:ea:f3:ab:c9:f8:2f:c0:e9:56:30:61:
                    70:37:87:ef:88:6f:ff:e2:81:27:90:4d:d8:fc:99:
                    27:c0:d4:f3:b3:3c:8c:aa:fb:bf:ee:9e:6d:9c:e5:
                    c0:9c:19:a1:06:0a:18:dd:cc:7f:cc:df:9d:95:29:
                    b7:f8:06:b9:9d:ac:45:88:b5:5e:3c:29:b2:2f:64:
                    17:4b:30:26:89:4f:0c:19:ed:07:3d:27:14:c6:6e:
                    2a:f3:fe:b3:05:af:11:b5:d4:68:d8:8f:38:c0:72:
                    0b:09:20:4b:c5:e0:cb:9c:5a:77:23:f0:e8:40:d8:
                    a9:05:0c:d5:77:16:eb:e5:4c:dd:09:f7:eb:5b:cb:
                    1f:c7:eb:e2:76:18:17:a8:1b:d6:b0:f7:a7:bd:b9:
                    a4:d0:19:21:b3:86:eb:17:c1:0b:2b:75:2b:a6:37:
                    d9:fc:ad:b0:5d:60:8f:71:4a:dd:04:30:b4:f1:63:
                    6c:15:23:16:64:78:e7:98:6b:3c:bc:c2:d4:73:dc:
                    c5:3b:51:a7:c6:f3:17:65:ff:5e:d8:b2:f2:dc:00:
                    a8:75:84:99:aa:94:70:71:3c:e6:16:06:35:df:03:
                    50:f6:d7:4b:1e:fb:1c:fd:a5:45:25:49:7a:87:7b:
                    d6:53:7d:f5:c3:26:67:8f:a9:97:76:0c:84:d0:af:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:61:FB:46:44:20:B3:2C:5A:0C:6B:0A:85:D7:79:42:A3:B5:70:11
            X509v3 Authority Key Identifier:
                keyid:0E:1B:21:C6:2D:BF:AE:7B:D3:3B:34:9D:96:57:A3:C9:01:47:B8:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E1B21C62DBFAE7BD33B349D9657A3C90147B837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:84:be:56:54:7d:75:2d:9c:68:16:38:e5:cf:5b:c7:4b:
         1b:67:d8:e2:19:da:8c:65:a2:ee:68:3f:8e:ed:1b:a6:dc:eb:
         2f:00:6c:29:51:d6:77:0b:9f:f3:62:71:96:50:51:91:94:bb:
         5c:fa:09:f6:56:27:80:5b:7f:33:5d:8d:bf:57:cc:d7:af:8b:
         d7:58:a8:40:a2:09:a4:23:e1:28:79:44:a3:f3:98:b6:ba:2c:
         38:76:a8:a5:42:c3:79:b5:84:3b:3c:6b:ed:ba:5c:c3:38:e5:
         ec:a3:a6:1c:68:70:d9:c1:c7:2b:2a:65:45:fd:33:e3:39:33:
         c2:53:3c:aa:83:94:45:4f:9b:55:9f:ca:2a:8c:90:34:60:a4:
         af:df:59:82:ee:56:ea:55:82:1b:3b:36:36:90:fa:c0:5a:e8:
         91:37:1f:3f:8c:23:ad:a1:eb:c9:81:e4:53:a2:69:dd:b9:a4:
         4f:8b:85:a8:e1:1e:51:45:b6:f2:a7:e8:ac:62:ec:86:3d:08:
         cc:d0:69:2f:a8:b5:d5:d7:d8:60:b6:c3:01:59:a2:9a:b3:9f:
         bc:ad:21:3e:96:a6:62:93:de:10:e1:21:07:65:01:65:45:9b:
         0d:26:a0:aa:b3:f7:2c:03:88:53:e4:1f:17:0f:1e:00:ad:9c:
         d1:77:f1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:52:24 2026 by rpki-client