Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa
File:                     3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          VUCX++qr9KClpF1J2HCGyusb0ZlPlQTI0SCWxXTWVaA=
Subject key identifier:   EE:E7:08:F4:88:54:48:F4:9C:23:5E:A1:76:D9:76:22:39:84:90:4D
Certificate issuer:       /CN=EA761FA2871FFFD44557E40A3C25F810017487F2
Certificate serial:       7CC5DB0809CCACD50F652FB76DEED1148ED1E31A
Authority key identifier: EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 30 Jun 2026 14:22:03 +0000
ROA not before:           Tue 30 Jun 2026 14:17:03 +0000
ROA not after:            Tue 29 Jun 2027 14:22:03 +0000
asID:                     262417
IP address blocks:        177.200.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl
                          rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:db:08:09:cc:ac:d5:0f:65:2f:b7:6d:ee:d1:14:8e:d1:e3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA761FA2871FFFD44557E40A3C25F810017487F2
        Validity
            Not Before: Jun 30 14:17:03 2026 GMT
            Not After : Jun 29 14:22:03 2027 GMT
        Subject: CN=EEE708F4885448F49C235EA176D976223984904D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:f1:1f:b5:0b:fd:e3:35:68:1f:bd:db:2f:
                    da:63:b8:21:63:f8:46:25:40:23:0a:01:cd:6d:89:
                    e8:b5:fb:37:99:1e:71:98:03:9b:ab:e0:d0:0c:67:
                    1d:06:54:92:ad:03:79:77:1e:92:d1:d4:b1:a8:8a:
                    79:5d:83:f2:c3:fb:4d:99:1d:8a:b2:5d:89:4b:8c:
                    43:13:0d:68:79:e3:cc:aa:59:91:ee:24:fb:50:06:
                    5b:e2:c0:d0:10:86:58:c6:1d:22:6e:ce:2d:c1:b0:
                    5a:7c:5b:6d:5a:98:f6:75:07:e8:86:c0:7c:18:54:
                    65:a3:39:3c:5c:38:b7:2f:82:d3:db:a6:50:0e:c7:
                    90:8a:82:68:5d:5d:bc:88:2c:0b:6b:f9:0e:48:ee:
                    6a:30:84:81:c8:96:d6:13:bd:28:e5:90:4f:5b:f8:
                    82:60:5a:4b:77:ad:de:3c:44:f1:72:c9:7d:ad:16:
                    fb:c4:37:93:b0:40:1e:0a:1e:43:38:e6:13:f9:e2:
                    08:a4:4a:e7:b3:17:e9:f8:c6:9f:a9:7d:24:61:ba:
                    82:8d:f4:7b:d2:cf:da:ee:b1:87:2c:d8:02:57:23:
                    65:78:54:79:50:ae:1f:a7:6d:dc:0e:94:81:da:d2:
                    d9:26:4e:97:e3:eb:3d:96:cc:7e:82:74:6a:79:d0:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E7:08:F4:88:54:48:F4:9C:23:5E:A1:76:D9:76:22:39:84:90:4D
            X509v3 Authority Key Identifier:
                keyid:EA:76:1F:A2:87:1F:FF:D4:45:57:E4:0A:3C:25:F8:10:01:74:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/EA761FA2871FFFD44557E40A3C25F810017487F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA761FA2871FFFD44557E40A3C25F810017487F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:d3:87:00:81:df:17:7a:9c:fc:e2:18:19:83:ce:60:51:48:
         e5:fe:5d:3b:e3:ad:ca:00:6e:0f:e6:df:bd:a0:a3:02:d2:6a:
         4e:7f:d2:fd:3b:fe:58:64:4a:9d:2e:6e:a4:dc:71:46:a4:45:
         a4:b6:99:8f:00:f5:a4:c2:09:63:49:1b:97:b8:39:ca:9b:3e:
         3d:e9:c9:37:cd:a1:3e:b3:c9:d9:72:35:47:d3:6e:6a:9d:1c:
         4c:67:1e:f9:95:5a:80:4b:a5:b4:4b:17:1b:49:d6:76:1a:80:
         69:a5:8b:08:59:15:d2:60:cb:1e:f0:90:d7:be:ce:79:65:d7:
         9b:67:4e:81:35:c1:0c:61:cd:90:09:6e:b6:8d:13:47:46:ba:
         79:1d:6b:cc:64:6c:69:79:74:6f:ef:47:96:c8:8c:9a:ad:50:
         b1:25:63:4b:14:32:4d:de:2f:1a:bc:b4:aa:ac:49:a7:f2:0a:
         99:3a:27:a2:ec:7b:5c:31:e6:2b:c3:cb:3f:cc:0f:75:6d:ce:
         61:fb:23:18:f4:3b:df:e3:d5:4a:6a:3c:d2:be:86:c9:d7:4a:
         f6:86:8a:93:5a:5c:a8:1b:57:18:35:e5:10:1d:b6:15:ac:e6:
         77:e0:a0:c8:6c:f2:e8:a5:d8:9f:4b:ff:40:62:2d:e8:58:6e:
         f9:3d:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:00 2026 by rpki-client