Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          HNXOIH3cRsWO/g8SfT8TMyBzsQj2caSBfQhCBzzrBus=
Subject key identifier:   40:B2:C8:88:08:4F:06:E1:E5:80:B1:3F:B1:10:9C:0B:30:29:C5:6D
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       7717A26B434B751066152236A91A4BB1833FAF3F
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:41 +0000
ROA not before:           Mon 13 Apr 2026 15:39:41 +0000
ROA not after:            Mon 12 Apr 2027 15:44:41 +0000
asID:                     262296
IP address blocks:        177.11.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:17:a2:6b:43:4b:75:10:66:15:22:36:a9:1a:4b:b1:83:3f:af:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:41 2026 GMT
            Not After : Apr 12 15:44:41 2027 GMT
        Subject: CN=40B2C888084F06E1E580B13FB1109C0B3029C56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cc:3b:a0:59:c8:aa:9e:d9:b9:02:ec:98:ca:
                    85:db:6d:38:eb:45:a1:75:98:84:a8:48:b3:d4:a8:
                    f9:0b:d1:73:1e:10:60:dd:ef:35:93:00:94:06:d7:
                    fc:67:df:34:43:c8:7e:8a:ee:05:33:3b:16:ac:32:
                    c6:e6:c0:61:1b:69:d6:b1:6d:30:d2:30:6c:0e:43:
                    ee:77:3a:6a:db:f1:83:fd:92:5b:64:6a:69:cd:fc:
                    b4:00:64:c4:94:ae:27:ef:13:48:69:0e:ac:89:8c:
                    d7:77:f2:e8:ea:6d:2e:5e:e6:d4:39:97:ff:6d:a0:
                    2f:51:7e:bf:fb:59:58:b7:5a:ce:5b:6b:5a:1b:9b:
                    9e:3a:6f:5b:40:2a:76:f9:6b:b2:cf:f0:13:b7:8c:
                    79:ca:da:f8:31:6e:42:68:a9:be:3e:ec:d8:15:d1:
                    a0:46:7e:33:0b:74:13:50:81:1e:bc:0b:aa:eb:07:
                    02:88:21:f3:d9:79:c1:36:5a:3f:f5:55:fc:f1:ae:
                    8a:6d:7b:dc:c1:b5:dc:86:e4:55:17:32:70:3d:47:
                    d6:90:7c:59:02:3d:4b:89:37:ea:16:e1:77:f5:c8:
                    64:14:dc:ad:73:0c:87:de:2c:85:14:a8:db:eb:2a:
                    0a:3c:c9:99:c6:32:65:9d:37:c7:c4:51:18:c0:3d:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B2:C8:88:08:4F:06:E1:E5:80:B1:3F:B1:10:9C:0B:30:29:C5:6D
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132332e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:85:b5:05:a2:be:d1:b7:96:57:b4:37:3c:e6:20:61:32:72:
         09:0c:da:c2:b2:71:08:91:8f:0c:b6:51:0a:c4:29:26:22:b9:
         68:ca:a4:b8:46:75:f3:55:cb:57:6d:5a:bf:7c:18:66:d3:6a:
         f9:4a:90:26:ba:7d:8e:85:21:5e:7a:c6:a7:0b:d7:57:7c:4c:
         bd:37:fa:fa:db:8e:0d:99:d6:15:ff:4c:cf:11:8d:0b:32:cb:
         7f:8e:40:78:a9:02:9d:6e:52:ed:db:39:c6:c9:e4:68:9d:49:
         e7:e4:31:5a:13:61:e9:b6:8a:44:fe:24:a3:16:13:e4:34:af:
         49:a9:a4:9d:a4:83:69:ba:0c:3b:00:cd:48:5b:3f:2e:c4:83:
         9f:0b:0e:f9:30:c8:47:8d:2b:79:87:3d:c2:14:f1:8b:18:12:
         61:2b:27:d6:1c:ee:c4:cc:85:14:f1:7c:fd:f8:1e:fa:7c:fa:
         ac:5c:34:00:6c:cf:c6:81:1e:8d:d1:d7:eb:3b:5f:1a:b1:bb:
         93:12:41:b6:9d:ba:60:55:3b:21:61:98:3b:d7:9d:be:86:b5:
         57:42:ee:89:e6:63:98:b8:10:c5:93:92:14:e4:fa:c7:f5:06:
         d5:0a:3e:82:fd:18:c0:82:08:c5:83:43:fc:0b:fb:ca:85:47:
         11:da:fa:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdxeia0NLdRBmFSI2qRpLsYM/rz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFQTQyOTA5RUNEOUE4MDc0OUFGODlGRDdBQzhGNTMx
NUU1RkZDODAeFw0yNjA0MTMxNTM5NDFaFw0yNzA0MTIxNTQ0NDFaMDMxMTAvBgNV
BAMTKDQwQjJDODg4MDg0RjA2RTFFNTgwQjEzRkIxMTA5QzBCMzAyOUM1NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzDugWciqntm5AuyYyoXbbTjr
RaF1mISoSLPUqPkL0XMeEGDd7zWTAJQG1/xn3zRDyH6K7gUzOxasMsbmwGEbadax
bTDSMGwOQ+53Omrb8YP9kltkamnN/LQAZMSUrifvE0hpDqyJjNd38ujqbS5e5tQ5
l/9toC9Rfr/7WVi3Ws5ba1obm546b1tAKnb5a7LP8BO3jHnK2vgxbkJoqb4+7NgV
0aBGfjMLdBNQgR68C6rrBwKIIfPZecE2Wj/1Vfzxropte9zBtdyG5FUXMnA9R9aQ
fFkCPUuJN+oW4Xf1yGQU3K1zDIfeLIUUqNvrKgo8yZnGMmWdN8fEURjAPQ7pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQLLIiAhPBuHlgLE/sRCcCzApxW0wHwYDVR0j
BBgwFoAURepCkJ7NmoB0mvif16yPUxXl/8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC80NUVBNDI5MDlFQ0Q5QTgwNzQ5QUY4OUZEN0FDOEY1MzE1RTVGRkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RUE0MjkwOUVDRDlBODA3
NDlBRjg5RkQ3QUM4RjUzMTVFNUZGQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzM3MmUzMTMxMmUzMTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxC3swDQYJKoZIhvcNAQELBQADggEBAIOFtQWi
vtG3lle0NzzmIGEycgkM2sKycQiRjwy2UQrEKSYiuWjKpLhGdfNVy1dtWr98GGbT
avlKkCa6fY6FIV56xqcL11d8TL03+vrbjg2Z1hX/TM8RjQsyy3+OQHipAp1uUu3b
OcbJ5GidSefkMVoTYem2ikT+JKMWE+Q0r0mppJ2kg2m6DDsAzUhbPy7Eg58LDvkw
yEeNK3mHPcIU8YsYEmErJ9Yc7sTMhRTxfP34Hvp8+qxcNABsz8aBHo3R1+s7Xxqx
u5MSQbadumBVOyFhmDvXnb6GtVdC7onmY5i4EMWTkhTk+sf1BtUKPoL9GMCCCMWD
Q/wL+8qFRxHa+qA=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:52 2026 by rpki-client