Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa
File:                     3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa (raw, json)
Hash identifier:          Halum3NDkDVJiQCZ2dHvd2R3j1Gtic46sTH424yi2Nw=
Subject key identifier:   DF:55:4B:61:18:F4:48:66:D2:41:E1:3F:6C:C4:9D:70:36:D6:C0:AA
Certificate issuer:       /CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
Certificate serial:       20FB43E57CA174F914329012AF5AB97EEA7A60E9
Authority key identifier: 6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa
Signing time:             Thu 23 Apr 2026 15:00:29 +0000
ROA not before:           Thu 23 Apr 2026 14:55:29 +0000
ROA not after:            Thu 22 Apr 2027 15:00:29 +0000
asID:                     263649
IP address blocks:        177.74.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl
                          rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:28:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fb:43:e5:7c:a1:74:f9:14:32:90:12:af:5a:b9:7e:ea:7a:60:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B
        Validity
            Not Before: Apr 23 14:55:29 2026 GMT
            Not After : Apr 22 15:00:29 2027 GMT
        Subject: CN=DF554B6118F44866D241E13F6CC49D7036D6C0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:95:55:97:bd:93:af:30:b7:d2:4c:74:22:
                    df:28:4d:18:01:0b:f4:7c:45:d9:a3:d0:1a:6b:b2:
                    20:8b:66:1e:ac:83:1e:7e:f8:1c:68:01:d6:93:9e:
                    1b:35:98:92:c9:28:00:0b:4d:f6:23:d3:75:de:87:
                    f6:d9:20:bf:0f:7b:10:e7:da:a0:b1:4f:1c:bf:19:
                    4d:e9:3c:26:fe:60:fa:b5:e1:67:a5:a4:ae:4f:91:
                    8d:73:56:78:6d:55:e0:0d:ed:89:12:34:83:ca:18:
                    b9:03:43:60:c4:4e:98:98:d5:27:29:d4:0d:a8:f3:
                    fb:fb:d2:64:e9:93:af:a6:ef:bc:82:d4:7f:16:73:
                    d1:71:fb:ba:00:7a:91:34:99:7d:77:4b:66:87:56:
                    a3:6f:47:66:90:68:73:9a:50:1f:4f:5f:0a:12:59:
                    54:dc:bf:50:c5:66:be:a2:4a:ad:dc:91:f0:00:c4:
                    85:22:9f:a8:c9:13:31:d6:f3:d1:de:e8:af:4b:dc:
                    d4:10:aa:96:7b:2b:0a:ab:d5:f3:2b:8f:50:8b:56:
                    0a:70:3c:d0:8a:e7:1d:51:ee:16:e0:e9:f8:86:e5:
                    b9:62:ee:a2:b3:42:31:88:9e:5a:e7:1d:ca:1f:6e:
                    ec:1c:7b:b5:f9:b3:a0:ac:68:a6:92:74:85:10:53:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:55:4B:61:18:F4:48:66:D2:41:E1:3F:6C:C4:9D:70:36:D6:C0:AA
            X509v3 Authority Key Identifier:
                keyid:6A:5B:FC:EB:0E:D1:5D:45:74:69:EC:7F:A1:ED:3C:B5:4A:FE:C5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5BFCEB0ED15D457469EC7FA1ED3CB54AFEC53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMiyUemoaAzP4phLuu8rsS37nAW2fQLY9vbqow6tHjQf/1/3137372e37342e3134342e302f32322d3234203d3e20323633363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:40:4e:7d:98:5e:db:68:c3:29:aa:d4:13:bf:2f:a5:29:16:
         0b:00:46:40:c1:07:ba:17:19:b1:02:54:3a:ba:6a:7b:ba:f9:
         bc:32:72:3c:8e:1a:44:bd:ad:3c:ec:d1:6b:6f:9c:d4:c3:89:
         75:42:0a:03:e9:fa:48:bc:15:0c:c1:81:75:d2:0c:48:3f:91:
         8e:6f:3e:ae:cf:ce:27:c1:54:51:8e:de:f5:0a:42:2f:01:d8:
         36:f7:1f:b5:e2:ae:73:00:fd:45:f7:8b:81:64:b9:10:1f:2b:
         54:65:ca:37:47:ef:6b:fe:67:74:a8:bc:8e:9e:13:e6:46:88:
         e5:fe:9a:81:32:8c:e0:6c:5c:f5:8c:a8:dd:0a:a9:32:4e:7f:
         53:95:a8:b5:74:3d:b3:64:ae:90:6a:7f:e5:e2:87:8f:7c:75:
         46:77:dc:7d:bc:b9:2f:6c:64:cf:12:bb:47:3a:b3:79:8f:ca:
         c9:35:b9:1f:ae:ba:17:8b:91:67:f5:03:54:c0:82:6d:11:2d:
         14:33:7b:a4:4b:05:57:4b:69:f4:06:95:6b:b3:c2:cb:33:44:
         76:ee:f0:98:ea:8b:59:b8:28:2e:ff:5b:3f:ad:3a:3d:0a:b2:
         86:6e:16:de:c0:05:06:4d:01:d6:31:aa:29:42:e1:55:bd:ac:
         13:6c:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:32 2026 by rpki-client