Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232312e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232312e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          lT2fc6Mpup79XamBAs2S+CWEBsVPBHJvy36PtxT8gBU=
Subject key identifier:   C7:F7:01:E0:FC:7B:BB:77:F5:13:B5:4B:29:8A:D1:4A:BC:CB:66:0F
Certificate issuer:       /CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
Certificate serial:       61874E55CF71F78115958551D1477937667788AB
Authority key identifier: E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232312e302f32342d3234203d3e20323632363533.roa
Signing time:             Mon 29 Jun 2026 12:21:06 +0000
ROA not before:           Mon 29 Jun 2026 12:16:06 +0000
ROA not after:            Mon 28 Jun 2027 12:21:06 +0000
asID:                     262653
IP address blocks:        177.105.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:87:4e:55:cf:71:f7:81:15:95:85:51:d1:47:79:37:66:77:88:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
        Validity
            Not Before: Jun 29 12:16:06 2026 GMT
            Not After : Jun 28 12:21:06 2027 GMT
        Subject: CN=C7F701E0FC7BBB77F513B54B298AD14ABCCB660F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:29:f1:b2:67:64:1e:74:39:c0:fd:4f:0e:
                    b6:bf:28:b9:4c:e1:f8:cc:f1:91:82:8e:e9:67:84:
                    b0:6b:e9:20:c0:4b:4b:b6:46:b8:e8:ac:9c:6d:7c:
                    6d:be:5e:2e:e4:0f:28:70:c3:65:32:dc:6b:37:0f:
                    05:33:49:d3:d7:e0:51:fc:4c:60:73:94:39:92:0e:
                    12:cc:c9:49:d7:2e:10:86:3c:1c:dd:eb:69:9a:a5:
                    dd:ca:d9:fb:02:9f:dc:55:d7:48:91:dd:3c:93:91:
                    4f:83:d0:d4:a6:41:41:d7:f8:58:e9:48:5c:36:94:
                    a3:d2:6b:f7:69:f1:b0:5e:7f:08:4d:3c:81:90:13:
                    7e:ce:ed:40:b2:74:fd:e3:2f:85:c2:39:f3:67:2e:
                    8b:f7:12:64:34:08:6c:0b:a4:26:c9:49:79:1e:be:
                    1f:8c:5d:05:ed:26:db:3a:af:18:7e:a5:b7:4a:87:
                    4c:be:a8:3d:5f:74:6d:a2:eb:95:98:45:54:2b:70:
                    0d:26:6b:40:4d:b6:e4:aa:93:fe:76:f8:6d:47:60:
                    61:77:08:23:b9:9c:49:6f:73:95:84:e8:07:d5:f2:
                    70:9c:44:82:de:b9:f9:a7:7a:b0:f3:a6:32:e7:70:
                    a7:b5:10:22:a4:b0:6a:5e:ce:c4:7d:a8:9e:df:20:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F7:01:E0:FC:7B:BB:77:F5:13:B5:4B:29:8A:D1:4A:BC:CB:66:0F
            X509v3 Authority Key Identifier:
                keyid:E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232312e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:19:17:fe:ec:d3:4e:0d:55:7d:dd:0d:7b:20:d6:3c:9f:
         92:fc:90:ee:2d:bd:e2:d0:51:f5:1b:0c:cd:d0:34:81:94:9b:
         50:55:15:e6:2f:9f:eb:30:7a:1d:49:b7:c2:a1:f0:3b:fb:3d:
         e6:92:e9:6a:0e:ac:9e:af:2f:d2:22:f6:18:c7:7b:ca:06:1b:
         32:a3:bc:f2:1c:63:4e:5a:94:ef:cc:74:16:1d:ad:5f:60:3e:
         12:2b:6a:11:64:7c:35:0c:f3:f3:22:bb:73:e0:bf:d3:30:1b:
         ef:36:cb:b4:b1:8e:da:8b:09:62:1e:e9:66:74:86:0e:11:71:
         41:f4:ca:ba:a3:23:7c:ef:0e:c4:cf:24:55:ef:b4:f4:74:7d:
         4f:2e:91:f7:4d:79:a0:dd:78:64:0f:6f:ce:67:a7:4e:e2:b6:
         4f:62:fe:bb:4e:1f:4b:64:33:9d:b6:2b:1e:26:8e:5b:96:61:
         4f:c9:b6:d6:53:df:b8:9b:c5:30:da:7e:fb:62:41:27:f4:ae:
         ae:7c:3c:7d:d6:6c:69:f5:f3:52:b0:b9:41:33:4c:25:45:d3:
         df:c8:6b:be:03:d3:4d:c5:2c:12:38:92:12:3d:96:6f:de:29:
         ca:94:ef:4f:33:bd:ab:a3:c6:4d:19:83:c4:88:9f:17:e4:48:
         46:fb:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:21 2026 by rpki-client