Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa
File:                     3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          /LfrEgMgXldILw6Tn72EodNLGvVtBwyOCrzDQiD0B0s=
Subject key identifier:   88:53:7D:7A:B9:45:99:97:58:E9:14:6E:F2:5A:77:63:0C:62:C4:F1
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       1B92A9B25DAAEEC2406CBFD58F7D582AEF6C885B
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:20 +0000
ROA not before:           Wed 10 Jun 2026 14:22:20 +0000
ROA not after:            Wed 09 Jun 2027 14:27:20 +0000
asID:                     262444
IP address blocks:        177.52.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:92:a9:b2:5d:aa:ee:c2:40:6c:bf:d5:8f:7d:58:2a:ef:6c:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:20 2026 GMT
            Not After : Jun  9 14:27:20 2027 GMT
        Subject: CN=88537D7AB945999758E9146EF25A77630C62C4F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:9f:cf:06:fa:f8:f1:5c:4f:ff:65:a4:84:
                    2e:b9:67:c6:80:d5:dd:32:e5:16:4f:ec:82:19:f5:
                    96:16:02:ff:4e:6d:21:c8:1a:ab:8b:b7:c8:7c:6a:
                    08:ca:ce:56:c8:fd:9c:d4:c9:80:a9:4b:ee:b7:b9:
                    cf:b4:a8:c5:e3:86:95:3f:91:34:ad:12:2e:69:a0:
                    8a:5b:5f:31:7e:49:f4:c1:79:87:40:ee:89:78:a5:
                    7b:0c:63:22:48:3e:cf:3f:68:65:9c:9d:fa:ca:c8:
                    a5:a9:76:4b:33:2b:42:91:55:a2:5c:45:51:52:6e:
                    31:20:11:60:00:d6:1f:e4:2a:f8:8b:b0:c1:cf:c8:
                    86:0c:68:1a:7c:54:b4:07:5e:57:a2:e7:01:e1:db:
                    6b:c8:19:a3:1c:03:c9:0d:ea:60:9a:a1:f1:1f:67:
                    c8:0b:42:e1:1d:35:35:87:0d:ba:bd:8c:ca:2a:98:
                    90:90:f7:3f:91:f7:aa:fc:f3:a9:84:86:a3:6a:c7:
                    35:08:5a:44:7b:a9:97:8a:de:8f:62:31:7f:7b:99:
                    ce:2b:09:45:ec:7e:20:87:9a:0b:0c:21:85:99:68:
                    75:ed:cc:18:dd:70:80:37:f5:3c:24:7a:a8:60:58:
                    d9:cf:91:d0:8c:0f:0f:e3:e9:f0:4c:8b:b1:91:21:
                    5d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:7D:7A:B9:45:99:97:58:E9:14:6E:F2:5A:77:63:0C:62:C4:F1
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3137372e35322e3130362e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:05:c5:a8:7e:28:f4:84:a7:9c:7a:0d:60:e2:b2:79:2c:ed:
         81:7d:a3:fa:63:e9:21:5b:5a:24:83:a2:32:4a:23:0d:e9:ae:
         0e:16:73:a5:eb:42:9b:c7:8f:7f:18:bc:20:09:3b:cf:f6:ca:
         c1:36:0b:bf:9c:9c:d3:bb:36:54:f7:41:a5:e3:a0:54:6e:d3:
         67:5d:a1:f3:77:eb:10:cc:35:34:61:fe:ce:17:1e:5b:04:0f:
         0c:9f:31:ab:15:b6:67:72:78:b9:27:a0:74:11:55:9c:d5:8e:
         5b:00:7a:e1:88:b3:7b:d7:ea:bd:6c:21:e0:1f:6e:c1:7e:86:
         fc:d2:0a:06:af:85:bd:b8:74:fd:45:62:27:ec:58:c0:e9:41:
         bb:e6:18:7e:ae:8d:bf:55:3c:a6:f0:3b:ae:cd:02:b3:5c:a2:
         d3:ae:f3:d1:5f:11:3f:5c:0b:ce:a7:e8:d1:fd:29:98:dc:b9:
         cf:1b:cc:2e:b7:ce:1e:e9:c3:5f:10:f7:f3:28:97:98:ba:66:
         a0:8d:2b:5b:a7:d5:5c:25:11:fd:68:57:04:0a:cd:cc:cf:ed:
         c7:1b:26:21:5b:e1:6e:48:f1:8c:0b:cc:35:2f:0c:58:b0:06:
         28:7e:44:c0:ce:92:96:13:4d:12:61:bf:48:eb:41:e9:3a:63:
         ea:f3:e3:7a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG5Kpsl2q7sJAbL/Vj31YKu9siFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNjA2MTAxNDIyMjBaFw0yNzA2MDkxNDI3MjBaMDMxMTAvBgNV
BAMTKDg4NTM3RDdBQjk0NTk5OTc1OEU5MTQ2RUYyNUE3NzYzMEM2MkM0RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/DJ/PBvr48VxP/2WkhC65Z8aA
1d0y5RZP7IIZ9ZYWAv9ObSHIGquLt8h8agjKzlbI/ZzUyYCpS+63uc+0qMXjhpU/
kTStEi5poIpbXzF+SfTBeYdA7ol4pXsMYyJIPs8/aGWcnfrKyKWpdkszK0KRVaJc
RVFSbjEgEWAA1h/kKviLsMHPyIYMaBp8VLQHXlei5wHh22vIGaMcA8kN6mCaofEf
Z8gLQuEdNTWHDbq9jMoqmJCQ9z+R96r886mEhqNqxzUIWkR7qZeK3o9iMX97mc4r
CUXsfiCHmgsMIYWZaHXtzBjdcIA39TwkeqhgWNnPkdCMDw/j6fBMi7GRIV0pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiFN9erlFmZdY6RRu8lp3YwxixPEwHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzEzNzM3MmUzNTMyMmUzMTMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxNGowDQYJKoZIhvcNAQELBQADggEBANMFxah+
KPSEp5x6DWDisnks7YF9o/pj6SFbWiSDojJKIw3prg4Wc6XrQpvHj38YvCAJO8/2
ysE2C7+cnNO7NlT3QaXjoFRu02ddofN36xDMNTRh/s4XHlsEDwyfMasVtmdyeLkn
oHQRVZzVjlsAeuGIs3vX6r1sIeAfbsF+hvzSCgavhb24dP1FYifsWMDpQbvmGH6u
jb9VPKbwO67NArNcotOu89FfET9cC86n6NH9KZjcuc8bzC63zh7pw18Q9/Mol5i6
ZqCNK1un1VwlEf1oVwQKzczP7ccbJiFb4W5I8YwLzDUvDFiwBih+RMDOkpYTTRJh
v0jrQek6Y+rz43o=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:37 2026 by rpki-client