Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39382e302f32332d3332203d3e20323731363135.roa
File:                     3137372e33392e39382e302f32332d3332203d3e20323731363135.roa (raw, json)
Hash identifier:          7WeZG9VV3Zq8kk0kt7nRU3+1yMhrtMJRHUv0F/hY+Zg=
Subject key identifier:   2C:C2:E1:F3:18:FC:81:FB:18:2A:9C:77:D9:14:F0:75:C9:3E:48:95
Certificate issuer:       /CN=470AE1EB9714E43320F9D361336505142D7D836B
Certificate serial:       2FFA6E1D7F001A44858A084B2EFFAFF2C70B9BA7
Authority key identifier: 47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39382e302f32332d3332203d3e20323731363135.roa
Signing time:             Wed 27 May 2026 02:56:36 +0000
ROA not before:           Wed 27 May 2026 02:51:36 +0000
ROA not after:            Wed 26 May 2027 02:56:36 +0000
asID:                     271615
IP address blocks:        177.39.98.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl
                          rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fa:6e:1d:7f:00:1a:44:85:8a:08:4b:2e:ff:af:f2:c7:0b:9b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470AE1EB9714E43320F9D361336505142D7D836B
        Validity
            Not Before: May 27 02:51:36 2026 GMT
            Not After : May 26 02:56:36 2027 GMT
        Subject: CN=2CC2E1F318FC81FB182A9C77D914F075C93E4895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:dd:9c:0b:d8:c4:53:6e:b3:6d:bc:ef:1b:
                    0c:0e:9a:6b:96:b8:70:12:b4:59:a9:16:3a:cd:e2:
                    5c:54:20:35:f1:27:17:70:1d:3a:8f:6f:e6:7b:d0:
                    28:61:be:f7:8e:55:95:7c:43:02:4c:f3:4c:9b:62:
                    81:42:c8:ed:1c:ee:ca:95:8e:a9:6e:1a:b8:3f:c6:
                    bf:b5:85:04:1a:9e:fa:18:14:94:50:10:a0:c2:1b:
                    43:4f:d0:33:cf:93:74:19:1a:cb:d9:06:88:e0:67:
                    3d:09:c5:40:e3:12:63:c1:53:82:38:dd:a4:8f:41:
                    5a:ce:82:76:a3:1c:70:9e:da:1a:de:2d:48:f2:83:
                    3c:03:db:78:db:74:d1:f2:7f:43:be:74:79:64:94:
                    e6:4b:0d:ef:e7:0e:22:6f:cf:6d:d2:61:ee:dd:d1:
                    0a:36:28:c7:d8:2c:3e:fe:af:23:da:74:89:93:06:
                    12:cc:27:a9:94:c5:4c:50:16:a3:0a:9d:65:5c:1f:
                    b0:c0:b7:28:96:00:82:5d:f0:26:96:14:0e:87:3b:
                    01:f7:a4:a6:ba:c1:0c:4b:61:28:b1:8c:71:23:36:
                    ad:83:1f:99:91:cc:12:2a:87:8d:50:88:04:2a:30:
                    01:6b:12:c7:ac:87:9a:29:a0:e3:1a:f6:dc:45:16:
                    fb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C2:E1:F3:18:FC:81:FB:18:2A:9C:77:D9:14:F0:75:C9:3E:48:95
            X509v3 Authority Key Identifier:
                keyid:47:0A:E1:EB:97:14:E4:33:20:F9:D3:61:33:65:05:14:2D:7D:83:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/470AE1EB9714E43320F9D361336505142D7D836B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/470AE1EB9714E43320F9D361336505142D7D836B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CMzwVakW37om5XPSrEQcuPGZ1CQFNzw6yvtmoRSGoLw/0/3137372e33392e39382e302f32332d3332203d3e20323731363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:70:fe:bd:85:fa:0e:6d:81:52:70:83:9a:c2:9a:c7:6b:b0:
         b5:ab:17:e4:d4:08:ea:f1:03:13:18:3d:a2:3d:1c:cf:ce:29:
         f6:fc:25:1b:c5:08:2a:90:0c:1b:02:52:66:30:f0:ce:0c:85:
         7f:83:b2:d8:f6:43:13:f1:e4:09:b6:f8:a9:38:f3:ae:93:93:
         25:f7:18:c1:30:87:ea:a7:4e:aa:78:8d:16:c6:b3:2e:9e:cd:
         f8:cf:39:d3:5f:7e:da:49:9e:a4:e8:bd:98:53:43:54:f7:94:
         e5:36:61:a8:56:eb:5d:d8:30:9b:ad:8d:7c:d4:3a:47:de:47:
         15:5d:b7:7f:0a:9c:ce:f1:ff:37:64:fd:76:a7:cc:94:50:e9:
         4e:69:94:78:8d:8b:e0:13:45:9b:e1:e3:70:01:f8:a2:83:41:
         74:71:a2:0c:92:8e:da:2f:2a:0b:e3:38:0a:3d:39:e2:4c:2f:
         f1:00:3c:63:1d:47:cd:36:55:9b:9f:cc:70:05:c0:8a:37:bc:
         27:f7:e1:0a:a0:a3:d0:34:5a:2b:6a:e9:f5:08:c7:2c:d9:6f:
         ed:e8:91:97:82:2e:fe:9c:5e:26:f1:84:8e:f3:a4:9b:3d:d0:
         4f:58:68:92:97:a5:6e:5e:bd:37:9b:ff:b1:ee:5d:e0:23:74:
         fc:83:d6:fd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL/puHX8AGkSFighLLv+v8scLm6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDcwQUUxRUI5NzE0RTQzMzIwRjlEMzYxMzM2NTA1MTQy
RDdEODM2QjAeFw0yNjA1MjcwMjUxMzZaFw0yNzA1MjYwMjU2MzZaMDMxMTAvBgNV
BAMTKDJDQzJFMUYzMThGQzgxRkIxODJBOUM3N0Q5MTRGMDc1QzkzRTQ4OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zt2cC9jEU26zbbzvGwwOmmuW
uHAStFmpFjrN4lxUIDXxJxdwHTqPb+Z70ChhvveOVZV8QwJM80ybYoFCyO0c7sqV
jqluGrg/xr+1hQQanvoYFJRQEKDCG0NP0DPPk3QZGsvZBojgZz0JxUDjEmPBU4I4
3aSPQVrOgnajHHCe2hreLUjygzwD23jbdNHyf0O+dHlklOZLDe/nDiJvz23SYe7d
0Qo2KMfYLD7+ryPadImTBhLMJ6mUxUxQFqMKnWVcH7DAtyiWAIJd8CaWFA6HOwH3
pKa6wQxLYSixjHEjNq2DH5mRzBIqh41QiAQqMAFrEsesh5opoOMa9txFFvvNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULMLh8xj8gfsYKpx32RTwdck+SJUwHwYDVR0j
BBgwFoAURwrh65cU5DMg+dNhM2UFFC19g2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkNNendWYWtXMzdvbTVYUFNyRVFjdVBHWjFDUUZOenc2eXZ0bW9SU0dv
THcvMC80NzBBRTFFQjk3MTRFNDMzMjBGOUQzNjEzMzY1MDUxNDJEN0Q4MzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3MEFFMUVCOTcxNEU0MzMy
MEY5RDM2MTMzNjUwNTE0MkQ3RDgzNkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJDTXp3VmFrVzM3b201WFBTckVRY3VQR1oxQ1FGTnp3Nnl2dG1vUlNHb0x3LzAv
MzEzNzM3MmUzMzM5MmUzOTM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzIzNzMx
MzYzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsSdiMA0GCSqGSIb3DQEBCwUAA4IBAQACcP69hfoO
bYFScIOawprHa7C1qxfk1Ajq8QMTGD2iPRzPzin2/CUbxQgqkAwbAlJmMPDODIV/
g7LY9kMT8eQJtvipOPOuk5Ml9xjBMIfqp06qeI0WxrMuns34zznTX37aSZ6k6L2Y
U0NU95TlNmGoVutd2DCbrY181DpH3kcVXbd/CpzO8f83ZP12p8yUUOlOaZR4jYvg
E0Wb4eNwAfiig0F0caIMko7aLyoL4zgKPTniTC/xADxjHUfNNlWbn8xwBcCKN7wn
9+EKoKPQNForaun1CMcs2W/t6JGXgi7+nF4m8YSO86SbPdBPWGiSl6VuXr03m/+x
7l3gI3T8g9b9
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:44:36 2026 by rpki-client