Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
File:                     3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa (raw, json)
Hash identifier:          7aUuUzwFTgsSDrVFokjv6p3v122cUkT32kuirGlaaAs=
Subject key identifier:   C6:03:8C:5B:1A:04:F8:79:CF:AA:55:10:36:33:9B:82:92:10:E6:44
Certificate issuer:       /CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
Certificate serial:       5C8E51D5CD21B9971395D055962E5C491F30ED32
Authority key identifier: E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa
Signing time:             Mon 29 Jun 2026 12:21:07 +0000
ROA not before:           Mon 29 Jun 2026 12:16:07 +0000
ROA not after:            Mon 28 Jun 2027 12:21:07 +0000
asID:                     262653
IP address blocks:        177.105.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8e:51:d5:cd:21:b9:97:13:95:d0:55:96:2e:5c:49:1f:30:ed:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
        Validity
            Not Before: Jun 29 12:16:07 2026 GMT
            Not After : Jun 28 12:21:07 2027 GMT
        Subject: CN=C6038C5B1A04F879CFAA551036339B829210E644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1b:c3:e3:ac:21:ce:85:98:93:23:20:19:ff:
                    54:38:1b:1d:5e:c8:f7:9e:fb:29:72:d2:bd:7f:e7:
                    6f:f3:58:82:e2:3a:80:ab:ea:ea:62:93:b5:20:e3:
                    99:08:25:67:7b:67:30:64:76:13:a7:c5:78:dd:31:
                    6c:9d:b0:5d:f1:03:f8:be:3a:cb:84:40:35:fd:c7:
                    79:c0:8f:2f:a1:97:d5:21:cc:bf:e3:fa:d9:03:71:
                    80:9e:90:be:10:ce:63:65:b7:f8:13:ca:db:9c:98:
                    ed:06:84:31:a5:8e:84:4d:50:b6:96:42:66:07:bb:
                    89:21:c9:41:86:3d:56:dd:ab:08:e9:a4:f5:76:50:
                    b2:97:a4:24:77:63:6e:bc:d1:4a:4a:49:4e:5e:26:
                    b0:d2:85:5e:3e:ed:20:31:d2:d2:bb:08:6c:c5:6f:
                    bc:4c:e9:12:4c:48:2c:87:bd:f6:3a:9e:59:50:04:
                    9c:4b:89:36:2e:83:44:62:2a:67:c6:bc:55:d2:df:
                    92:54:4c:8f:ab:87:ea:ca:87:58:f1:7f:a6:59:11:
                    9d:3d:08:5d:9c:32:ff:2c:59:0f:ba:45:b5:86:4b:
                    19:06:ba:04:1e:6a:18:af:c8:a7:a4:ae:11:f9:07:
                    c3:62:53:46:3f:b5:34:1e:03:a9:c4:3d:c0:4f:02:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:03:8C:5B:1A:04:F8:79:CF:AA:55:10:36:33:9B:82:92:10:E6:44
            X509v3 Authority Key Identifier:
                keyid:E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3231362e302f32312d3231203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:53:e7:11:be:16:3c:95:4f:76:bf:6d:89:60:3a:a3:d7:38:
         87:30:9d:14:e2:31:25:8f:a5:92:3d:72:89:14:5e:58:45:a9:
         76:6d:fd:75:30:46:d6:61:db:0a:b7:55:85:be:47:50:0b:b5:
         77:18:3d:4c:57:49:04:97:48:5c:af:99:35:57:8a:f2:d0:1e:
         fd:5d:76:d4:ad:1d:b6:c5:91:fc:56:48:f9:67:be:88:56:ca:
         91:99:51:44:42:e9:c0:82:89:c1:d7:a4:6b:8e:37:07:a9:6f:
         ac:b5:f7:5c:23:31:45:e0:9b:d1:9b:c5:76:7d:85:da:1b:be:
         b7:c4:0f:b4:3d:57:5a:6c:df:02:11:12:74:4a:77:14:d5:c4:
         88:60:43:6a:da:0d:e9:55:08:07:ec:63:c9:9c:7d:ed:47:25:
         49:d6:4f:43:ba:6a:db:92:dc:35:1e:32:3c:31:b5:8f:50:2d:
         9a:a4:1f:30:df:38:66:de:cd:67:a9:b2:f0:fb:a5:26:bc:72:
         eb:63:a9:ed:a0:87:5c:a6:42:05:81:e0:e9:8f:d1:ac:ef:67:
         00:78:c9:02:f4:70:4e:49:27:c8:28:a7:ad:39:a9:05:e2:99:
         5e:f3:5b:a9:19:ab:a8:56:0a:27:3c:23:0a:25:ad:a6:fb:ee:
         9e:a1:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:40 2026 by rpki-client