Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
File:                     3137372e382e3134322e302f32342d3234203d3e20323730353833.roa (raw, json)
Hash identifier:          TfLTTwEIRACZ00dy8p/H08ltUwNXdOtIUezBeHFJv/0=
Subject key identifier:   19:5A:8F:9E:F4:5B:04:9E:96:EB:74:A2:74:2D:1E:71:BD:34:4C:24
Certificate issuer:       /CN=7BFA05BDBC4272262DF95AF94996A2187C1FD3AE
Certificate serial:       64286935EE1F1BB3374840B9528D422167BA7F22
Authority key identifier: 7B:FA:05:BD:BC:42:72:26:2D:F9:5A:F9:49:96:A2:18:7C:1F:D3:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa
Signing time:             Thu 28 May 2026 02:24:34 +0000
ROA not before:           Thu 28 May 2026 02:19:34 +0000
ROA not after:            Thu 27 May 2027 02:24:34 +0000
asID:                     270583
IP address blocks:        177.8.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.crl
                          rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:28:69:35:ee:1f:1b:b3:37:48:40:b9:52:8d:42:21:67:ba:7f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BFA05BDBC4272262DF95AF94996A2187C1FD3AE
        Validity
            Not Before: May 28 02:19:34 2026 GMT
            Not After : May 27 02:24:34 2027 GMT
        Subject: CN=195A8F9EF45B049E96EB74A2742D1E71BD344C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:60:84:04:71:42:12:ae:89:13:42:a9:3c:c0:
                    b0:8e:44:7d:dd:f9:f9:bc:77:08:bd:29:06:3e:08:
                    e5:ba:94:67:4d:0f:0c:0c:8d:2d:53:69:00:cb:63:
                    68:69:7c:3f:a1:6c:9b:17:5d:ff:d6:b5:08:88:0b:
                    e5:85:9c:6e:93:03:1e:66:b1:67:ee:68:57:bb:95:
                    5b:ff:c2:4f:b5:8f:40:b5:19:46:7c:32:33:bd:0f:
                    b9:3e:e9:91:6c:45:ea:91:01:fb:8c:54:c2:2f:fd:
                    72:68:5b:4c:f5:2f:7c:2c:ab:3c:9c:31:c5:5b:1a:
                    56:b1:62:f7:0f:49:be:6a:b3:dc:a9:4b:35:97:84:
                    dc:f0:75:f3:b8:9a:86:6e:6c:8e:1d:d4:3c:85:c4:
                    a2:33:f2:28:65:dc:80:bc:6b:77:3d:a0:cf:9a:c8:
                    52:b2:1c:e3:56:2c:fb:50:98:d7:4b:19:71:76:41:
                    a8:4c:c3:d3:0b:78:e2:ec:a7:cb:4c:88:d6:34:1c:
                    27:6a:7b:7b:13:33:63:9f:6a:ee:80:df:5e:89:e0:
                    be:bf:67:9c:8c:06:28:35:bb:ee:74:4e:72:1d:f3:
                    f7:03:7a:a0:ab:27:83:98:da:e2:cb:a2:c6:6f:7d:
                    57:d5:e4:8b:89:be:33:5a:79:8f:d4:a7:45:14:b4:
                    dc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:8F:9E:F4:5B:04:9E:96:EB:74:A2:74:2D:1E:71:BD:34:4C:24
            X509v3 Authority Key Identifier:
                keyid:7B:FA:05:BD:BC:42:72:26:2D:F9:5A:F9:49:96:A2:18:7C:1F:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BFA05BDBC4272262DF95AF94996A2187C1FD3AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/261Fqks5US4cN5v2Q97cZRE69Lvqg4v35zno1X6yQJyx/0/3137372e382e3134322e302f32342d3234203d3e20323730353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5a:c6:3e:e2:5e:a3:87:f3:72:ac:77:c3:1d:01:80:0e:3a:
         85:89:99:a0:f6:de:18:8a:0d:34:92:ef:0f:6d:f0:c5:b4:ba:
         13:d2:13:ab:5c:1b:18:3b:e9:47:9b:d8:b9:68:fe:48:7b:8f:
         d4:9d:83:82:10:81:61:43:4e:a7:f1:08:c6:44:49:0d:a5:8f:
         ac:87:12:34:93:82:60:65:fe:ac:8a:55:f8:02:bf:58:8e:8a:
         b7:f3:26:43:d0:c9:67:d4:fe:31:69:c2:09:16:2e:75:3c:6f:
         29:8e:52:1e:c5:db:42:11:51:ef:c5:37:51:d4:41:eb:bb:34:
         05:a4:7a:a9:0e:be:ef:41:70:a8:0c:20:f5:91:15:68:53:89:
         d3:5e:64:94:e5:ea:5d:9e:00:cc:a5:3a:0d:3e:5d:bc:f3:44:
         7f:36:2f:23:e5:2c:93:ee:93:e4:d7:a7:68:30:02:d4:65:21:
         19:c0:fd:8d:7a:e4:64:c4:87:75:ce:4c:e9:a1:34:57:d0:26:
         26:ae:ca:65:e5:db:7e:4e:f8:13:4f:bc:b5:e2:66:1b:06:d7:
         19:ae:ab:8b:21:4f:d5:7b:b1:bf:57:c6:a2:db:0f:4f:ac:72:
         62:7b:e3:ac:a0:75:82:06:df:42:41:a6:93:4d:22:10:be:57:
         9d:0a:37:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZChpNe4fG7M3SEC5Uo1CIWe6fyIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JGQTA1QkRCQzQyNzIyNjJERjk1QUY5NDk5NkEyMTg3
QzFGRDNBRTAeFw0yNjA1MjgwMjE5MzRaFw0yNzA1MjcwMjI0MzRaMDMxMTAvBgNV
BAMTKDE5NUE4RjlFRjQ1QjA0OUU5NkVCNzRBMjc0MkQxRTcxQkQzNDRDMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYIQEcUISrokTQqk8wLCORH3d
+fm8dwi9KQY+COW6lGdNDwwMjS1TaQDLY2hpfD+hbJsXXf/WtQiIC+WFnG6TAx5m
sWfuaFe7lVv/wk+1j0C1GUZ8MjO9D7k+6ZFsReqRAfuMVMIv/XJoW0z1L3wsqzyc
McVbGlaxYvcPSb5qs9ypSzWXhNzwdfO4moZubI4d1DyFxKIz8ihl3IC8a3c9oM+a
yFKyHONWLPtQmNdLGXF2QahMw9MLeOLsp8tMiNY0HCdqe3sTM2Ofau6A316J4L6/
Z5yMBig1u+50TnId8/cDeqCrJ4OY2uLLosZvfVfV5IuJvjNaeY/Up0UUtNwzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGVqPnvRbBJ6W63SidC0ecb00TCQwHwYDVR0j
BBgwFoAUe/oFvbxCciYt+Vr5SZaiGHwf064wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjYxRnFrczVVUzRjTjV2MlE5N2NaUkU2OUx2cWc0djM1em5vMVg2eVFK
eXgvMC83QkZBMDVCREJDNDI3MjI2MkRGOTVBRjk0OTk2QTIxODdDMUZEM0FFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCRkEwNUJEQkM0MjcyMjYy
REY5NUFGOTQ5OTZBMjE4N0MxRkQzQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2MUZxa3M1VVM0Y041djJROTdjWlJFNjlMdnFnNHYzNXpubzFYNnlRSnl4LzAv
MzEzNzM3MmUzODJlMzEzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsQiOMA0GCSqGSIb3DQEBCwUAA4IBAQCzWsY+4l6j
h/NyrHfDHQGADjqFiZmg9t4Yig00ku8PbfDFtLoT0hOrXBsYO+lHm9i5aP5Ie4/U
nYOCEIFhQ06n8QjGREkNpY+shxI0k4JgZf6silX4Ar9Yjoq38yZD0Mln1P4xacIJ
Fi51PG8pjlIexdtCEVHvxTdR1EHruzQFpHqpDr7vQXCoDCD1kRVoU4nTXmSU5epd
ngDMpToNPl2880R/Ni8j5SyT7pPk16doMALUZSEZwP2NeuRkxId1zkzpoTRX0CYm
rspl5dt+TvgTT7y14mYbBtcZrquLIU/Ve7G/V8ai2w9PrHJie+OsoHWCBt9CQaaT
TSIQvledCjcO
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:16:03 2026 by rpki-client