Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32322d3232203d3e20323632323936.roa
File:                     3137372e38352e37362e302f32322d3232203d3e20323632323936.roa (raw, json)
Hash identifier:          EU/rud9q8ABwXBpISQ1YpYJlfYtdC3LgsQiLraDjKqI=
Subject key identifier:   A7:97:37:3A:39:D4:4C:7E:73:A2:BE:96:91:48:1A:35:B4:F2:53:29
Certificate issuer:       /CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
Certificate serial:       778262982E29199F7D8D9F6D3AC89AD4245B1869
Authority key identifier: 45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32322d3232203d3e20323632323936.roa
Signing time:             Mon 13 Apr 2026 15:44:40 +0000
ROA not before:           Mon 13 Apr 2026 15:39:40 +0000
ROA not after:            Mon 12 Apr 2027 15:44:40 +0000
asID:                     262296
IP address blocks:        177.85.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl
                          rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 09:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:82:62:98:2e:29:19:9f:7d:8d:9f:6d:3a:c8:9a:d4:24:5b:18:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8
        Validity
            Not Before: Apr 13 15:39:40 2026 GMT
            Not After : Apr 12 15:44:40 2027 GMT
        Subject: CN=A797373A39D44C7E73A2BE9691481A35B4F25329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:96:56:03:ec:83:fd:b3:c5:96:e9:dc:4b:
                    4a:8f:c1:cd:46:e7:67:2d:4c:5d:85:65:b9:15:7e:
                    2e:c1:76:90:c7:29:f0:0d:62:9e:1a:46:60:36:84:
                    92:a3:12:3d:7d:2f:70:c5:d4:d3:33:e4:4a:9a:97:
                    6e:96:f7:69:ff:1d:30:8d:21:aa:24:c2:6b:47:4f:
                    0f:24:5b:dc:a6:e7:4d:be:22:84:59:d3:3b:f9:b7:
                    a7:18:97:b5:00:6c:e4:46:57:6d:3a:ff:2f:07:27:
                    31:1c:fc:2d:20:4d:46:ba:56:15:6a:d6:b9:db:f1:
                    81:d4:5a:30:c4:26:da:a7:2b:7a:6d:f4:3a:8c:34:
                    9b:3d:31:e9:b6:01:c9:4c:9b:0a:d1:7b:5b:58:e1:
                    62:c6:fa:70:db:74:2e:c4:a9:c3:d5:32:a6:01:24:
                    a1:fe:5e:e3:f7:bd:0b:61:bc:bf:9e:06:2a:04:e9:
                    f2:f0:77:be:b5:1b:89:c1:19:7e:52:68:75:7c:4b:
                    d8:fb:25:91:6e:0e:b3:d5:02:c0:0b:e6:65:80:a6:
                    59:7d:e6:49:da:5a:92:0d:9d:3e:1b:57:bb:f2:87:
                    ef:f5:f8:83:32:41:da:70:0b:56:76:82:ac:50:d4:
                    ac:61:e0:af:3f:49:f8:ac:ed:32:bf:a6:a9:4b:1f:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:37:3A:39:D4:4C:7E:73:A2:BE:96:91:48:1A:35:B4:F2:53:29
            X509v3 Authority Key Identifier:
                keyid:45:EA:42:90:9E:CD:9A:80:74:9A:F8:9F:D7:AC:8F:53:15:E5:FF:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45EA42909ECD9A80749AF89FD7AC8F5315E5FFC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137372e38352e37362e302f32322d3232203d3e20323632323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:92:cc:29:3e:d2:e6:b9:d0:ea:00:a5:15:5c:36:e9:b2:
         71:05:ea:d6:50:dc:eb:ec:56:93:32:6e:0d:1e:36:91:35:93:
         db:7b:ae:7e:39:6b:dc:ae:74:0a:d9:66:1a:be:16:4a:42:f6:
         01:0d:18:ff:06:28:78:e6:54:a5:5d:a6:ae:c9:63:62:8d:86:
         0f:cc:73:65:9c:c4:d6:32:f8:1a:b2:9d:1a:bc:6b:1b:95:a7:
         cd:48:c7:f1:7c:52:5d:d9:29:6b:80:28:c1:7e:7d:00:8c:92:
         85:33:35:12:f6:e0:bb:36:d5:17:5e:0a:db:41:2d:0f:17:f2:
         07:be:11:db:bd:66:b5:c2:42:b6:33:df:41:7d:06:08:ae:66:
         af:85:17:04:ec:18:9e:fd:e7:29:7e:ed:ff:4e:b8:c5:f9:3e:
         ba:c9:55:ad:ef:cb:9c:79:9b:37:34:23:5c:9c:c7:bf:7f:8d:
         7d:eb:80:e4:6c:b9:09:99:ca:a8:9e:22:b7:1c:eb:bc:b9:d8:
         76:88:37:ed:b8:ae:5b:05:58:38:01:31:45:19:87:a4:0b:ac:
         11:f9:a3:79:b6:c0:71:25:e9:f2:5f:92:1d:7b:1e:64:75:ab:
         65:56:d2:29:85:44:6e:f4:0d:ec:4b:a9:79:73:f0:08:43:74:
         ae:9b:aa:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd4JimC4pGZ99jZ9tOsia1CRbGGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVFQTQyOTA5RUNEOUE4MDc0OUFGODlGRDdBQzhGNTMx
NUU1RkZDODAeFw0yNjA0MTMxNTM5NDBaFw0yNzA0MTIxNTQ0NDBaMDMxMTAvBgNV
BAMTKEE3OTczNzNBMzlENDRDN0U3M0EyQkU5NjkxNDgxQTM1QjRGMjUzMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdJZWA+yD/bPFluncS0qPwc1G
52ctTF2FZbkVfi7BdpDHKfANYp4aRmA2hJKjEj19L3DF1NMz5Eqal26W92n/HTCN
IaokwmtHTw8kW9ym502+IoRZ0zv5t6cYl7UAbORGV206/y8HJzEc/C0gTUa6VhVq
1rnb8YHUWjDEJtqnK3pt9DqMNJs9Mem2AclMmwrRe1tY4WLG+nDbdC7EqcPVMqYB
JKH+XuP3vQthvL+eBioE6fLwd761G4nBGX5SaHV8S9j7JZFuDrPVAsAL5mWApll9
5knaWpINnT4bV7vyh+/1+IMyQdpwC1Z2gqxQ1Kxh4K8/Sfis7TK/pqlLH2XfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUp5c3OjnUTH5zor6WkUgaNbTyUykwHwYDVR0j
BBgwFoAURepCkJ7NmoB0mvif16yPUxXl/8gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM05NNm55eVpEUldSUjcxSjJjeHg2eFJzVlh5MktqMWtBR1k2b0NnZ0xp
eTcvMC80NUVBNDI5MDlFQ0Q5QTgwNzQ5QUY4OUZEN0FDOEY1MzE1RTVGRkM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RUE0MjkwOUVDRDlBODA3
NDlBRjg5RkQ3QUM4RjUzMTVFNUZGQzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNOTTZueXlaRFJXUlI3MUoyY3h4NnhSc1ZYeTJLajFrQUdZNm9DZ2dMaXk3LzAv
MzEzNzM3MmUzODM1MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMy
MzIzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVVMMA0GCSqGSIb3DQEBCwUAA4IBAQAjqJLMKT7S
5rnQ6gClFVw26bJxBerWUNzr7FaTMm4NHjaRNZPbe65+OWvcrnQK2WYavhZKQvYB
DRj/Bih45lSlXaauyWNijYYPzHNlnMTWMvgasp0avGsblafNSMfxfFJd2SlrgCjB
fn0AjJKFMzUS9uC7NtUXXgrbQS0PF/IHvhHbvWa1wkK2M99BfQYIrmavhRcE7Bie
/ecpfu3/TrjF+T66yVWt78uceZs3NCNcnMe/f41964DkbLkJmcqoniK3HOu8udh2
iDftuK5bBVg4ATFFGYekC6wR+aN5tsBxJenyX5Idex5kdatlVtIphURu9A3sS6l5
c/AIQ3Sum6qa
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:19:59 2026 by rpki-client