Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
File:                     3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa (raw, json)
Hash identifier:          q/tu2RNzMZUDxVsxAEw09lby7i3itAqN2QcUdxdBbH4=
Subject key identifier:   2F:9F:F6:54:AD:F4:72:E9:3D:77:CF:9A:8C:ED:C1:94:F9:10:45:52
Certificate issuer:       /CN=C6B5FFD52421C40A8F60526E870108CB6A3C4EF8
Certificate serial:       72D4F266FCAFA06379002AF3435621B1DED16ADA
Authority key identifier: C6:B5:FF:D5:24:21:C4:0A:8F:60:52:6E:87:01:08:CB:6A:3C:4E:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa
Signing time:             Wed 15 Jul 2026 13:51:24 +0000
ROA not before:           Wed 15 Jul 2026 13:46:24 +0000
ROA not after:            Wed 14 Jul 2027 13:51:24 +0000
asID:                     262373
IP address blocks:        177.128.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.crl
                          rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 20:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d4:f2:66:fc:af:a0:63:79:00:2a:f3:43:56:21:b1:de:d1:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6B5FFD52421C40A8F60526E870108CB6A3C4EF8
        Validity
            Not Before: Jul 15 13:46:24 2026 GMT
            Not After : Jul 14 13:51:24 2027 GMT
        Subject: CN=2F9FF654ADF472E93D77CF9A8CEDC194F9104552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:70:bf:03:d5:d5:18:b5:90:77:e0:73:31:
                    0f:07:11:0f:cc:c1:78:74:98:af:32:21:ad:a1:d2:
                    73:c9:85:d8:d4:26:66:cc:a7:1b:c4:c0:b3:f3:fb:
                    a5:da:78:5d:b0:de:c1:5f:e7:90:cd:3d:7f:55:99:
                    15:a1:3f:d6:d4:bb:ce:b6:ec:eb:e4:ce:fb:a2:1a:
                    9a:45:91:85:12:25:b1:66:4a:be:93:ca:02:27:b4:
                    b0:8d:8a:9c:d7:83:e2:de:c0:ad:a1:13:da:2a:6f:
                    27:84:9f:f3:74:2a:ae:60:10:31:08:d0:ca:e0:f2:
                    0d:1d:85:f3:a1:1e:6f:ff:70:e1:16:a9:66:7e:1f:
                    e9:48:92:8b:4d:3a:f9:20:a4:3f:aa:e7:9a:18:33:
                    b3:87:6d:e9:06:bf:1d:b2:33:24:11:1c:e2:30:59:
                    a2:ef:1c:6d:59:d2:10:6b:cc:20:9a:6e:03:1f:b3:
                    57:b4:c0:e3:f9:27:4a:c4:c3:78:5e:98:d3:6c:cc:
                    56:6c:ae:48:bb:25:80:e1:c0:e4:96:99:3b:25:c6:
                    ea:f0:47:c2:aa:00:5b:26:db:64:89:71:6c:81:1a:
                    f3:b9:33:70:35:96:dd:3e:db:9b:64:25:f9:47:86:
                    73:98:86:22:22:34:23:ab:fa:2a:c7:2d:b5:71:fc:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9F:F6:54:AD:F4:72:E9:3D:77:CF:9A:8C:ED:C1:94:F9:10:45:52
            X509v3 Authority Key Identifier:
                keyid:C6:B5:FF:D5:24:21:C4:0A:8F:60:52:6E:87:01:08:CB:6A:3C:4E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C6B5FFD52421C40A8F60526E870108CB6A3C4EF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HiLzL4KhdVpDFoCJeyrUnJpKh1fq4AY5EWiscg8zjzas/0/3137372e3132382e3133362e302f32322d3234203d3e20323632333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:02:19:7e:d9:4e:7e:f0:eb:53:24:fd:a1:27:dd:9f:5c:86:
         dc:61:cf:37:99:ed:47:a0:21:21:7a:ce:4d:c8:0a:fa:8e:19:
         83:41:1e:c8:03:3e:39:bb:3d:35:32:3b:05:11:ac:57:eb:f6:
         a6:3a:ba:9d:c9:9d:14:e2:99:81:42:0e:ae:23:66:a7:3f:1d:
         36:2b:c9:c9:20:6b:14:48:f4:bb:6f:64:10:f9:b2:c9:03:02:
         f5:a0:30:0c:60:fb:83:02:d2:36:60:5b:5b:0d:31:b3:b0:36:
         8c:10:1e:0f:cc:2a:81:79:94:44:d9:a7:46:df:17:f5:ce:74:
         84:a7:4e:ff:fb:29:a3:0b:96:cc:52:c4:a0:46:fb:16:1a:eb:
         5e:8a:ac:ba:0f:a1:fe:9a:c8:e1:8b:07:55:f6:9f:85:14:02:
         13:47:e2:3c:dd:fe:0b:b1:8c:c2:1e:b7:09:71:f0:c6:74:65:
         9e:29:c8:74:73:0e:64:63:25:9b:91:b1:1d:be:d3:21:a3:bc:
         1a:77:03:1e:bf:13:7b:d0:da:5b:57:2f:fb:5c:45:a1:e6:78:
         91:7b:f6:e6:2e:fd:0f:d2:7b:1e:67:80:32:a4:4b:a9:86:23:
         8c:29:41:09:32:b9:c3:84:ae:30:c9:07:b1:f0:ba:6a:08:da:
         52:c1:2f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:23:40 2026 by rpki-client