Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa
File:                     3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier:          zAOMPEMCFlAuEYJLLdmMJjHIgFZYcTpYa9gBy4NbKgk=
Subject key identifier:   FD:71:9A:12:C3:CF:B4:EB:D7:07:7B:00:A2:09:AC:C4:D1:15:5F:5E
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       07BBBEA32B3ED99F09C1CEE6605471A9F9AE1737
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:43 +0000
ROA not before:           Mon 13 Apr 2026 15:39:43 +0000
ROA not after:            Mon 12 Apr 2027 15:44:43 +0000
asID:                     262296
IP address blocks:        177.11.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bb:be:a3:2b:3e:d9:9f:09:c1:ce:e6:60:54:71:a9:f9:ae:17:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:43 2026 GMT
            Not After : Apr 12 15:44:43 2027 GMT
        Subject: CN=FD719A12C3CFB4EBD7077B00A209ACC4D1155F5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:db:b8:db:8b:bb:99:19:6b:23:9e:2a:a7:92:
                    bf:06:1f:0e:df:10:f0:b9:b4:9c:c1:45:30:0d:30:
                    a1:6d:8b:7d:9b:e3:a9:21:cc:07:b0:18:e8:51:22:
                    5d:29:7f:b7:84:63:cf:a7:b4:9a:04:14:02:3f:ad:
                    b3:c6:fd:14:5e:76:c6:b0:b8:ad:dc:3c:5f:d2:18:
                    65:31:02:7b:c4:7b:43:92:87:03:4c:83:25:30:c4:
                    34:02:53:5a:2a:a3:58:9b:8a:b3:bd:ac:7f:0d:52:
                    90:3f:ad:8f:2c:48:d0:fd:d7:fc:30:fc:40:3e:e1:
                    89:1f:4b:e2:14:a8:2e:23:b9:8e:a6:aa:6e:1c:76:
                    af:69:40:de:dd:08:29:9b:fb:08:9c:fe:77:ba:e2:
                    2e:e5:aa:9a:6e:40:fd:f6:be:7e:e9:f9:da:9f:b7:
                    48:66:6f:88:ca:ed:dc:2d:02:63:f4:05:38:25:53:
                    03:58:f8:50:ff:96:9a:74:f2:24:76:ba:a8:3c:31:
                    0f:57:2c:d0:9f:06:14:d9:d2:ee:eb:7e:4b:2d:60:
                    c7:78:c5:5a:24:eb:93:64:6a:43:d0:d6:05:50:39:
                    e1:fd:6d:74:cc:7f:90:5d:2f:78:68:25:38:46:7e:
                    11:db:2a:e2:dd:82:13:00:e7:10:0d:4e:e2:b2:50:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:71:9A:12:C3:CF:B4:EB:D7:07:7B:00:A2:09:AC:C4:D1:15:5F:5E
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e31312e3132362e302f32342d3234203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:17:97:7e:84:02:9f:f8:da:82:14:9b:1e:3b:4f:c9:d2:42:
         84:b5:d0:12:f1:71:93:5f:6c:1f:1f:c7:4d:81:da:d1:a1:9c:
         41:79:b2:86:6d:bb:38:f3:73:08:fa:ad:c9:33:7e:04:4a:cf:
         ad:2e:7d:23:75:b8:17:09:a8:3a:ac:96:e8:6b:cb:09:be:3d:
         18:67:ca:20:63:8f:72:6f:3d:22:2e:bc:6e:11:04:8f:00:c9:
         c7:ae:ad:da:60:f0:bc:6a:a1:57:f3:19:7d:fc:94:c9:d2:83:
         5f:75:f0:0d:64:b6:6e:12:d0:d4:4c:dd:9d:c2:5d:bf:27:a4:
         f3:33:43:33:33:ac:e4:f3:2c:a7:7f:9a:94:5f:e1:52:92:21:
         85:31:9b:60:24:68:b4:8b:ad:c5:85:95:c4:40:bf:9d:b5:4e:
         81:80:6a:75:ff:a7:7b:0f:04:4d:7b:be:95:d0:c9:3d:d6:1e:
         8e:90:5b:06:38:d3:2b:61:d5:e1:47:d0:9e:a5:e2:ba:19:12:
         4d:19:c4:a0:54:c5:92:26:a2:d5:9f:84:5c:c7:a1:14:fc:5d:
         28:58:66:60:fd:d9:f8:11:1a:61:4d:21:e5:3b:8e:4e:e1:e9:
         b2:bf:03:e2:c7:fc:a9:5a:35:9f:c7:5f:df:06:20:b8:b6:2e:
         d8:f0:13:1f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUB7u+oys+2Z8Jwc7mYFRxqfmuFzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFQTQyOTA5RUNEOUE4MDc0OUFGODlGRDdBQzhGNTMx
NUU1RkZDODAeFw0yNjA0MTMxNTM5NDNaFw0yNzA0MTIxNTQ0NDNaMDMxMTAvBgNV
BAMTKEZENzE5QTEyQzNDRkI0RUJENzA3N0IwMEEyMDlBQ0M0RDExNTVGNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq27jbi7uZGWsjniqnkr8GHw7f
EPC5tJzBRTANMKFti32b46khzAewGOhRIl0pf7eEY8+ntJoEFAI/rbPG/RRedsaw
uK3cPF/SGGUxAnvEe0OShwNMgyUwxDQCU1oqo1ibirO9rH8NUpA/rY8sSND91/ww
/EA+4YkfS+IUqC4juY6mqm4cdq9pQN7dCCmb+wic/ne64i7lqppuQP32vn7p+dqf
t0hmb4jK7dwtAmP0BTglUwNY+FD/lpp08iR2uqg8MQ9XLNCfBhTZ0u7rfkstYMd4
xVok65NkakPQ1gVQOeH9bXTMf5BdL3hoJThGfhHbKuLdghMA5xANTuKyUMs3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/XGaEsPPtOvXB3sAogmsxNEVX14wHwYDVR0j
BBgwFoAURepCkJ7NmoB0mvif16yPUxXl/8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC80NUVBNDI5MDlFQ0Q5QTgwNzQ5QUY4OUZEN0FDOEY1MzE1RTVGRkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RUE0MjkwOUVDRDlBODA3
NDlBRjg5RkQ3QUM4RjUzMTVFNUZGQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzM3MmUzMTMxMmUzMTMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxC34wDQYJKoZIhvcNAQELBQADggEBAAcXl36E
Ap/42oIUmx47T8nSQoS10BLxcZNfbB8fx02B2tGhnEF5soZtuzjzcwj6rckzfgRK
z60ufSN1uBcJqDqsluhrywm+PRhnyiBjj3JvPSIuvG4RBI8Ayceurdpg8LxqoVfz
GX38lMnSg1918A1ktm4S0NRM3Z3CXb8npPMzQzMzrOTzLKd/mpRf4VKSIYUxm2Ak
aLSLrcWFlcRAv521ToGAanX/p3sPBE17vpXQyT3WHo6QWwY40yth1eFH0J6l4roZ
Ek0ZxKBUxZImotWfhFzHoRT8XShYZmD92fgRGmFNIeU7jk7h6bK/A+LH/KlaNZ/H
X98GILi2LtjwEx8=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:49 2026 by rpki-client