Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
File:                     3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa (raw, json)
Hash identifier:          1AC9vNGfwDc79kxFm1iWEHSNkgOrL8j6HCTQP4N/Pp4=
Subject key identifier:   36:3A:69:F4:E5:38:4B:93:21:24:B1:AE:7A:D9:D3:28:C6:A0:AD:2F
Certificate issuer:       /CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
Certificate serial:       077C0F5B9C0FD43EF1518EBB49CD95045DD270F6
Authority key identifier: E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa
Signing time:             Mon 29 Jun 2026 12:21:06 +0000
ROA not before:           Mon 29 Jun 2026 12:16:06 +0000
ROA not after:            Mon 28 Jun 2027 12:21:06 +0000
asID:                     262653
IP address blocks:        177.105.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl
                          rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:16:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7c:0f:5b:9c:0f:d4:3e:f1:51:8e:bb:49:cd:95:04:5d:d2:70:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3882A3CA543383CBCE6BAA8DDDA9A556530E071
        Validity
            Not Before: Jun 29 12:16:06 2026 GMT
            Not After : Jun 28 12:21:06 2027 GMT
        Subject: CN=363A69F4E5384B932124B1AE7AD9D328C6A0AD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d8:84:5f:28:df:73:f2:f6:85:a8:c2:2d:3b:
                    e1:7f:b2:12:1f:3d:61:60:9c:25:ea:1f:c8:48:8f:
                    37:07:32:c3:40:f3:d4:4f:5d:38:d1:be:ba:f4:03:
                    69:61:f4:ef:ca:13:c5:1e:97:67:36:fc:99:75:66:
                    4a:41:65:67:90:ca:a1:71:04:d4:63:b8:a4:5d:84:
                    5e:6f:15:ce:10:d5:7d:37:87:6a:92:2a:50:3a:ca:
                    3c:ff:87:f1:e3:38:d0:03:48:1c:dd:a9:bb:f5:86:
                    b0:35:50:68:3b:7e:a8:be:99:f8:c3:9f:e4:9d:41:
                    d1:43:83:87:73:0d:57:62:b6:f0:33:ae:c9:2b:5b:
                    f9:e7:c3:d7:15:46:12:7c:f1:28:d0:73:7f:4c:e7:
                    c6:f3:de:a0:5f:fa:7b:86:16:fd:5a:c9:5c:6a:73:
                    5b:72:58:7d:1c:d0:88:cf:85:1b:71:74:5a:04:a1:
                    e2:bd:df:e0:7b:ee:85:d6:6c:86:93:87:a8:5d:4e:
                    e6:61:31:b9:ca:38:92:1a:fe:77:eb:81:6f:07:c9:
                    13:13:04:80:6e:b0:94:99:69:77:1e:a1:7d:b6:ee:
                    4e:d1:f8:10:63:10:df:ab:28:a8:88:5a:84:c7:ac:
                    25:81:06:bd:3a:62:7a:e4:25:1c:9e:d9:d4:e8:cd:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:69:F4:E5:38:4B:93:21:24:B1:AE:7A:D9:D3:28:C6:A0:AD:2F
            X509v3 Authority Key Identifier:
                keyid:E3:88:2A:3C:A5:43:38:3C:BC:E6:BA:A8:DD:DA:9A:55:65:30:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3882A3CA543383CBCE6BAA8DDDA9A556530E071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDGeQ6SStdTCy9TsMvN79miQrTHCSRvXg2s2kLtD81fz/0/3137372e3130352e3232332e302f32342d3234203d3e20323632363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:25:db:c6:4b:ee:86:ab:b3:c7:0e:f5:2f:1e:e0:e0:91:31:
         15:e1:c5:53:cc:a7:86:ad:c0:3b:cc:0e:6a:93:1d:88:c3:80:
         10:75:35:5e:13:6b:6f:44:00:bd:c4:b4:3b:0f:da:7f:9a:77:
         ee:12:42:c8:ad:c6:7d:54:02:06:61:ee:66:62:3a:48:18:e7:
         08:83:d5:4c:52:ea:44:62:95:a5:9a:2e:7a:d1:13:6d:52:cf:
         c0:45:44:5f:c6:2d:e2:26:ae:2e:51:9d:d6:f8:d0:b0:0b:90:
         b7:09:f8:f3:22:f0:34:50:24:71:14:c8:8f:fa:ac:26:13:c4:
         82:e3:73:56:19:4d:b7:ba:1f:23:e8:b4:a5:eb:6a:0b:5d:1b:
         26:44:fc:97:53:0f:03:e7:5b:ae:1c:6a:d9:e8:22:07:05:00:
         fb:3d:ac:9f:00:fe:e5:d8:1a:e1:8c:a3:91:4c:57:21:60:01:
         a0:04:98:8e:1f:61:6d:40:e7:22:2a:a3:27:49:c7:43:34:5c:
         67:f8:47:f7:c3:2f:11:c7:02:45:04:21:20:04:f2:94:e1:73:
         6d:91:2b:6f:51:19:73:4c:07:3a:42:86:59:cb:36:bb:ee:63:
         44:9d:44:67:ec:83:62:f8:9b:e0:5d:db:64:d7:fa:9c:d9:2e:
         f4:89:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:22:45 2026 by rpki-client