Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          ZMECJQn5+450oicXs7rQpgg/mMH5Fv0S2tosjuTjOZM=
Subject key identifier:   EA:A0:16:98:5D:97:C9:C8:B3:45:F8:79:33:2C:35:3C:CE:BB:23:11
Certificate issuer:       /CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
Certificate serial:       79E2870292CAB313AFD2B98136CBD1834FD10E43
Authority key identifier: 6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 02 Mar 2026 18:35:16 +0000
ROA not before:           Mon 02 Mar 2026 18:30:16 +0000
ROA not after:            Mon 01 Mar 2027 18:35:16 +0000
asID:                     262296
IP address blocks:        177.11.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e2:87:02:92:ca:b3:13:af:d2:b9:81:36:cb:d1:83:4f:d1:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990
        Validity
            Not Before: Mar  2 18:30:16 2026 GMT
            Not After : Mar  1 18:35:16 2027 GMT
        Subject: CN=EAA016985D97C9C8B345F879332C353CCEBB2311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:2e:7a:b9:f1:29:69:8d:37:25:9d:36:0a:
                    49:69:29:ad:ac:b5:40:64:42:fc:7e:49:c5:05:78:
                    d5:18:ce:6e:0e:bb:fb:d3:e6:3e:a9:84:cc:5a:39:
                    a4:ff:5b:be:b9:1a:02:ee:c5:87:6f:0d:51:be:77:
                    bb:b1:7e:e0:74:ad:93:d2:4b:c1:0a:c8:6f:d6:02:
                    77:55:7c:5b:0c:eb:58:5f:fe:31:91:6f:7b:a7:e1:
                    fb:df:f3:0e:e0:5c:b7:5f:75:4e:13:92:77:d1:7f:
                    ca:da:d9:bb:47:7e:34:e9:9c:c4:c1:7c:d9:07:84:
                    97:ee:7e:04:c5:bd:0e:46:a8:7c:33:fb:ec:c4:e3:
                    45:2b:3b:15:2d:e9:02:02:f0:12:0d:bb:43:a0:3c:
                    a4:f3:92:1e:52:23:a5:c7:e7:3d:82:cf:ab:3b:f2:
                    97:e6:bb:bf:f9:0e:60:70:c9:f3:d9:8e:c0:76:23:
                    0b:11:42:57:a3:df:c5:cc:f4:36:11:83:ca:5c:e8:
                    c8:27:5d:46:26:8c:4f:19:d7:a1:d2:b4:bf:47:31:
                    e8:08:f6:0c:16:af:af:82:70:93:37:7f:e5:ce:99:
                    47:3a:6f:0f:ae:af:54:62:c6:01:3d:d9:0a:a0:3d:
                    f3:3a:3b:a6:58:b8:48:61:e2:bb:d6:ee:74:67:d4:
                    cd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A0:16:98:5D:97:C9:C8:B3:45:F8:79:33:2C:35:3C:CE:BB:23:11
            X509v3 Authority Key Identifier:
                keyid:6A:33:2E:4B:CE:71:1A:A8:B9:A8:0F:C6:3C:F8:23:DF:B4:F0:B9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A332E4BCE711AA8B9A80FC63CF823DFB4F0B990.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132352e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:98:8f:c9:e3:dd:df:03:a5:62:5a:c9:7e:94:02:d6:e3:0b:
         b1:ce:1a:0e:00:86:f2:bb:93:70:59:da:84:af:13:95:30:bb:
         21:38:2d:80:d6:ff:44:48:50:6e:20:fa:36:60:d0:ca:f1:d5:
         b8:75:aa:13:0d:da:81:06:72:47:2e:b6:87:75:92:e6:71:09:
         74:5f:03:f9:b8:fe:4e:38:99:0e:f6:bf:0a:47:2a:a6:8e:04:
         13:4e:10:72:86:08:9e:74:0f:b3:6d:a6:96:dd:17:d2:19:4b:
         9a:a5:88:a1:1d:66:8e:39:9c:35:ad:fa:9c:79:4d:35:45:f4:
         9a:c5:10:2e:11:c1:3f:9f:6b:15:3d:7d:22:84:07:b2:52:3c:
         48:e4:44:9e:3e:35:46:a2:30:d5:b0:97:9b:9b:a2:e2:0e:14:
         eb:bc:7f:40:66:25:ba:66:89:52:0c:7e:eb:07:41:7b:7e:3d:
         1d:5b:6a:89:ef:42:7f:e8:f7:7d:84:ee:19:db:16:81:8f:79:
         60:8c:81:51:79:69:a7:e1:0d:ad:b0:dd:e6:f8:b6:17:2c:f8:
         2f:b2:1b:94:e6:3d:e1:03:39:3b:0c:96:48:7a:49:a0:29:35:
         29:a5:b0:da:5a:c0:d0:d9:a5:d4:b9:1f:65:9c:7f:06:bc:66:
         cb:12:91:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeeKHApLKsxOv0rmBNsvRg0/RDkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkEzMzJFNEJDRTcxMUFBOEI5QTgwRkM2M0NGODIzREZC
NEYwQjk5MDAeFw0yNjAzMDIxODMwMTZaFw0yNzAzMDExODM1MTZaMDMxMTAvBgNV
BAMTKEVBQTAxNjk4NUQ5N0M5QzhCMzQ1Rjg3OTMzMkMzNTNDQ0VCQjIzMTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP3i56ufEpaY03JZ02CklpKa2s
tUBkQvx+ScUFeNUYzm4Ou/vT5j6phMxaOaT/W765GgLuxYdvDVG+d7uxfuB0rZPS
S8EKyG/WAndVfFsM61hf/jGRb3un4fvf8w7gXLdfdU4TknfRf8ra2btHfjTpnMTB
fNkHhJfufgTFvQ5GqHwz++zE40UrOxUt6QIC8BINu0OgPKTzkh5SI6XH5z2Cz6s7
8pfmu7/5DmBwyfPZjsB2IwsRQlej38XM9DYRg8pc6MgnXUYmjE8Z16HStL9HMegI
9gwWr6+CcJM3f+XOmUc6bw+ur1RixgE92QqgPfM6O6ZYuEhh4rvW7nRn1M3rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6qAWmF2XycizRfh5Myw1PM67IxEwHwYDVR0j
BBgwFoAUajMuS85xGqi5qA/GPPgj37TwuZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC82QTMzMkU0QkNFNzExQUE4QjlBODBGQzYzQ0Y4MjNERkI0RjBCOTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBMzMyRTRCQ0U3MTFBQThC
OUE4MEZDNjNDRjgyM0RGQjRGMEI5OTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzM3MmUzMTMxMmUzMTMyMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxC30wDQYJKoZIhvcNAQELBQADggEBAGGYj8nj
3d8DpWJayX6UAtbjC7HOGg4AhvK7k3BZ2oSvE5UwuyE4LYDW/0RIUG4g+jZg0Mrx
1bh1qhMN2oEGckcutod1kuZxCXRfA/m4/k44mQ72vwpHKqaOBBNOEHKGCJ50D7Nt
ppbdF9IZS5qliKEdZo45nDWt+px5TTVF9JrFEC4RwT+faxU9fSKEB7JSPEjkRJ4+
NUaiMNWwl5ubouIOFOu8f0BmJbpmiVIMfusHQXt+PR1baonvQn/o932E7hnbFoGP
eWCMgVF5aafhDa2w3eb4thcs+C+yG5TmPeEDOTsMlkh6SaApNSmlsNpawNDZpdS5
H2Wcfwa8ZssSkV8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:39:01 2026 by rpki-client