Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          Cg4i6Dfewm366MCug74jr2WrX2ddIzcWRMklhHsp4oo=
Subject key identifier:   E6:27:EF:77:48:4B:EE:7F:33:BA:41:60:57:1B:0D:25:E2:FE:7E:BA
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       1670F887C2A6DFD21A9282C1DF72252C611E68AF
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
Signing time:             Thu 16 Apr 2026 23:22:04 +0000
ROA not before:           Thu 16 Apr 2026 23:17:04 +0000
ROA not after:            Thu 15 Apr 2027 23:22:04 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 18:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:70:f8:87:c2:a6:df:d2:1a:92:82:c1:df:72:25:2c:61:1e:68:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Apr 16 23:17:04 2026 GMT
            Not After : Apr 15 23:22:04 2027 GMT
        Subject: CN=E627EF77484BEE7F33BA4160571B0D25E2FE7EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d7:3e:0d:a0:ca:a4:65:82:1c:8e:c8:d1:23:
                    75:d4:14:b4:8f:a4:62:58:35:9b:66:32:4d:b1:e1:
                    4a:42:bb:fa:e3:d9:a2:d2:b0:a5:c4:0b:12:52:a3:
                    62:4e:12:ca:0b:d0:60:a5:26:f8:e1:dc:cb:19:15:
                    8b:35:d1:da:de:1d:16:f0:06:5f:72:55:d2:26:8e:
                    b9:62:17:c1:59:0f:dc:ac:7b:2f:c0:0c:3e:a0:d3:
                    bf:96:7c:00:57:79:00:87:89:f5:bd:a0:a7:f6:f1:
                    4b:7a:22:53:38:de:d7:b7:ba:f2:c3:a5:06:c7:d0:
                    d6:63:0c:71:80:1b:1a:25:77:5b:6f:65:54:3f:90:
                    22:a1:d0:d5:89:ae:00:5c:ff:8d:69:cd:8b:37:33:
                    4e:43:18:96:ce:a7:0e:23:b7:03:8e:e0:05:17:68:
                    68:cf:97:84:7f:c8:18:af:0b:ef:77:33:76:6f:f6:
                    e9:32:11:42:8b:b1:af:56:04:7e:3d:81:b8:3e:9a:
                    bf:7a:6e:1f:3c:fb:a1:be:83:ea:54:87:7d:52:a3:
                    e8:c7:bd:0e:23:f3:63:e4:d1:e1:0a:28:1b:f6:c5:
                    e5:ba:24:52:ab:60:94:76:30:22:3f:cb:f8:97:ef:
                    33:10:96:69:36:93:e0:c6:59:86:d2:90:25:3c:f4:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:27:EF:77:48:4B:EE:7F:33:BA:41:60:57:1B:0D:25:E2:FE:7E:BA
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c6:d6:2b:20:01:8a:ea:7e:2b:00:68:d1:bd:60:4e:3a:40:78:
         e8:53:89:f4:cc:17:18:9c:f0:ac:0a:e0:fd:a8:0d:0f:b1:cd:
         86:2d:0f:7b:82:17:6e:14:e7:51:cc:67:33:ee:0d:ef:67:1d:
         69:18:60:67:94:7b:c8:66:6d:18:88:f8:ad:c9:c8:59:9a:77:
         01:c3:cf:06:2e:02:2e:d3:03:d7:2b:77:3c:90:35:b7:19:b1:
         ec:94:a2:5f:59:09:78:f7:f4:ae:b8:2f:2a:e9:b0:aa:48:1b:
         01:78:62:4b:ed:13:0d:ea:2c:ab:80:44:09:aa:24:ab:5e:dc:
         7f:bd:92:77:01:c7:e6:23:ad:3b:03:43:6e:d6:ce:e4:45:75:
         76:16:37:af:74:1d:a5:d8:51:ff:a2:23:88:10:8a:45:6b:6a:
         58:05:c2:6d:07:28:de:82:b8:81:75:54:7c:43:47:23:81:fd:
         3a:5f:03:9a:8a:89:ef:3b:e4:3a:aa:ee:b4:84:bb:7b:20:08:
         4d:e3:d4:b8:ab:4f:cb:8f:57:b7:76:50:03:b9:9d:49:4d:a6:
         d2:78:0a:45:2b:43:c8:54:67:65:1a:7c:43:4e:a7:79:af:c9:
         fa:8f:16:be:e4:5a:f6:29:1b:bf:10:d2:ad:c0:fc:91:02:02:
         6f:cc:f3:e4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFnD4h8Km39IakoLB33IlLGEeaK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNjA0MTYyMzE3MDRaFw0yNzA0MTUyMzIyMDRaMDMxMTAvBgNV
BAMTKEU2MjdFRjc3NDg0QkVFN0YzM0JBNDE2MDU3MUIwRDI1RTJGRTdFQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe1z4NoMqkZYIcjsjRI3XUFLSP
pGJYNZtmMk2x4UpCu/rj2aLSsKXECxJSo2JOEsoL0GClJvjh3MsZFYs10dreHRbw
Bl9yVdImjrliF8FZD9ysey/ADD6g07+WfABXeQCHifW9oKf28Ut6IlM43te3uvLD
pQbH0NZjDHGAGxold1tvZVQ/kCKh0NWJrgBc/41pzYs3M05DGJbOpw4jtwOO4AUX
aGjPl4R/yBivC+93M3Zv9ukyEUKLsa9WBH49gbg+mr96bh88+6G+g+pUh31So+jH
vQ4j82Pk0eEKKBv2xeW6JFKrYJR2MCI/y/iX7zMQlmk2k+DGWYbSkCU89C8NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5ifvd0hL7n8zukFgVxsNJeL+frowHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTMyMzkyZTM4MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgVQwDQYJKoZIhvcNAQELBQADggEBAMbWKyAB
iup+KwBo0b1gTjpAeOhTifTMFxic8KwK4P2oDQ+xzYYtD3uCF24U51HMZzPuDe9n
HWkYYGeUe8hmbRiI+K3JyFmadwHDzwYuAi7TA9crdzyQNbcZseyUol9ZCXj39K64
LyrpsKpIGwF4YkvtEw3qLKuARAmqJKte3H+9kncBx+YjrTsDQ27WzuRFdXYWN690
HaXYUf+iI4gQikVralgFwm0HKN6CuIF1VHxDRyOB/TpfA5qKie875Dqq7rSEu3sg
CE3j1LirT8uPV7d2UAO5nUlNptJ4CkUrQ8hUZ2UafENOp3mvyfqPFr7kWvYpG78Q
0q3A/JECAm/M8+Q=
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:52:16 2026 by rpki-client