Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
File:                     3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa (raw, json)
Hash identifier:          r0EsqkkiXztF/SzwnAwA+54J2US+5D+VRWqyZsBL5QM=
Subject key identifier:   DF:07:52:85:B7:B8:38:6B:23:F3:87:54:45:37:8D:B4:37:2D:CF:3A
Certificate issuer:       /CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
Certificate serial:       68ABFE02E1B4B65538A5AA67167CF6DB551A714A
Authority key identifier: E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa
Signing time:             Tue 11 Aug 2026 12:25:35 +0000
ROA not before:           Tue 11 Aug 2026 12:20:35 +0000
ROA not after:            Tue 10 Aug 2027 12:25:35 +0000
asID:                     262352
IP address blocks:        177.126.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl
                          rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 05:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ab:fe:02:e1:b4:b6:55:38:a5:aa:67:16:7c:f6:db:55:1a:71:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B
        Validity
            Not Before: Aug 11 12:20:35 2026 GMT
            Not After : Aug 10 12:25:35 2027 GMT
        Subject: CN=DF075285B7B8386B23F3875445378DB4372DCF3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:26:0e:76:d3:b4:51:84:d3:4c:c2:ae:d4:11:
                    2d:75:b8:49:d5:35:5e:f2:b6:a2:2a:15:c8:ff:c9:
                    aa:bb:17:39:13:71:ce:ea:34:e9:26:2a:22:aa:40:
                    2a:22:03:e3:93:5a:d6:a3:d2:a6:f9:a8:29:6c:6b:
                    f5:11:5f:be:aa:cc:37:0e:75:73:3e:cf:32:8e:1f:
                    cd:12:32:4c:c4:75:a4:7e:3c:03:bf:c4:63:a6:8a:
                    27:5c:58:f1:fa:55:0e:52:06:22:8c:2e:60:03:3e:
                    9a:c5:2a:e4:40:7d:a7:ab:ae:f5:0a:94:07:53:dd:
                    d0:0e:e1:bf:88:1c:32:78:de:6b:58:c7:93:c7:0e:
                    9e:a5:f3:0c:b2:a6:14:d1:15:7a:19:88:8b:73:80:
                    4f:fe:b6:f3:d4:c3:86:13:d7:94:a8:8e:ce:eb:b4:
                    05:95:00:60:08:bd:df:9d:5d:1e:70:e5:a9:54:8e:
                    50:1b:2f:cf:61:86:ae:20:b7:94:c9:2b:ba:87:09:
                    c9:8e:4a:65:f9:29:11:78:1f:9e:df:29:da:c7:6d:
                    2f:85:fd:12:b6:d8:cf:a6:0b:e7:b2:fc:14:0b:91:
                    a5:af:53:b0:fa:e5:d3:0f:6f:f0:32:a7:3d:65:68:
                    c9:5a:af:49:f2:db:ec:5a:6b:92:16:a8:db:41:a6:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:07:52:85:B7:B8:38:6B:23:F3:87:54:45:37:8D:B4:37:2D:CF:3A
            X509v3 Authority Key Identifier:
                keyid:E1:93:FD:FC:3B:77:CF:47:FC:3A:F6:3B:30:8B:7B:AD:0A:3F:7A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E193FDFC3B77CF47FC3AF63B308B7BAD0A3F7A0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/0/3137372e3132362e38382e302f32332d3233203d3e20323632333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:87:de:8e:89:1a:5d:0c:7d:05:11:a6:5a:2c:7d:c9:05:
         ab:82:c9:1f:6c:ac:ec:db:f7:94:21:62:71:02:a6:72:b0:d1:
         1d:a1:7e:0b:26:bc:25:2d:7a:9f:5b:31:a3:69:c1:8a:9b:86:
         fa:19:57:56:fd:29:c6:ad:8b:ed:8d:22:70:83:0d:c3:7b:3d:
         53:b9:ec:b7:ef:b6:e6:df:11:e7:fe:74:51:bc:55:69:5f:ba:
         aa:8e:d3:32:46:7a:45:83:8e:aa:52:5e:ed:f0:08:cc:b8:19:
         1f:09:86:cc:e1:ee:d1:33:b3:88:8b:cf:05:fd:3c:80:4f:60:
         c9:32:a1:48:e3:f3:40:1e:44:fa:b7:bf:a3:2e:5a:4b:b5:8c:
         39:52:d7:e8:cf:50:3e:a6:40:95:20:0d:02:d6:c1:98:cf:bc:
         7b:42:16:eb:1b:5b:ac:74:2e:42:f8:7c:ec:1a:03:84:46:c4:
         dc:4d:cf:b6:33:49:29:c4:3d:f8:b3:9c:92:52:bc:88:00:00:
         4d:25:6c:cc:6b:58:77:23:96:49:73:fa:66:dc:1c:aa:aa:fc:
         ce:48:e1:8d:82:2f:b8:79:64:2b:77:b5:12:9c:da:fc:c2:28:
         80:99:1e:64:7e:88:75:8b:7b:b4:ab:db:da:28:e5:c1:27:15:
         a1:84:47:90
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUaKv+AuG0tlU4papnFnz221UacUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQw
QTNGN0EwQjAeFw0yNjA4MTExMjIwMzVaFw0yNzA4MTAxMjI1MzVaMDMxMTAvBgNV
BAMTKERGMDc1Mjg1QjdCODM4NkIyM0YzODc1NDQ1Mzc4REI0MzcyRENGM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEJg5207RRhNNMwq7UES11uEnV
NV7ytqIqFcj/yaq7FzkTcc7qNOkmKiKqQCoiA+OTWtaj0qb5qClsa/URX76qzDcO
dXM+zzKOH80SMkzEdaR+PAO/xGOmiidcWPH6VQ5SBiKMLmADPprFKuRAfaerrvUK
lAdT3dAO4b+IHDJ43mtYx5PHDp6l8wyyphTRFXoZiItzgE/+tvPUw4YT15Sojs7r
tAWVAGAIvd+dXR5w5alUjlAbL89hhq4gt5TJK7qHCcmOSmX5KRF4H57fKdrHbS+F
/RK22M+mC+ey/BQLkaWvU7D65dMPb/Aypz1laMlar0ny2+xaa5IWqNtBpp8bAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU3wdShbe4OGsj84dURTeNtDctzzowHwYDVR0j
BBgwFoAU4ZP9/Dt3z0f8OvY7MIt7rQo/egswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8xbjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1
LzAvRTE5M0ZERkMzQjc3Q0Y0N0ZDM0FGNjNCMzA4QjdCQUQwQTNGN0EwQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FMTkzRkRGQzNCNzdDRjQ3RkMz
QUY2M0IzMDhCN0JBRDBBM0Y3QTBCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8x
bjc2MjlLWXlFaDN4RzRCQnRXdUVDMjFnVzRTZnJ1bWFEOGlWREJOdTc1LzAvMzEz
NzM3MmUzMTMyMzYyZTM4MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzIz
MzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGxflgwDQYJKoZIhvcNAQELBQADggEBAGq9h96OiRpd
DH0FEaZaLH3JBauCyR9srOzb95QhYnECpnKw0R2hfgsmvCUtep9bMaNpwYqbhvoZ
V1b9Kcati+2NInCDDcN7PVO57LfvtubfEef+dFG8VWlfuqqO0zJGekWDjqpSXu3w
CMy4GR8Jhszh7tEzs4iLzwX9PIBPYMkyoUjj80AeRPq3v6MuWku1jDlS1+jPUD6m
QJUgDQLWwZjPvHtCFusbW6x0LkL4fOwaA4RGxNxNz7YzSSnEPfiznJJSvIgAAE0l
bMxrWHcjlklz+mbcHKqq/M5I4Y2CL7h5ZCt3tRKc2vzCKICZHmR+iHWLe7Sr29oo
5cEnFaGER5A=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:19:43 2026 by rpki-client