Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa
File:                     3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa (raw, json)
Hash identifier:          MQjC/VlzGzKIrYYQY8TCBt3M5c/IDREqQTpDYVAFV8k=
Subject key identifier:   BB:25:D3:FC:81:03:B3:D9:68:80:86:A4:30:E8:22:3D:FA:F9:2C:0B
Certificate issuer:       /CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
Certificate serial:       4793E40FA866EE0DD61F80403E0DB85F8AC979A4
Authority key identifier: EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa
Signing time:             Wed 27 May 2026 13:01:20 +0000
ROA not before:           Wed 27 May 2026 12:56:20 +0000
ROA not after:            Wed 26 May 2027 13:01:20 +0000
asID:                     270602
IP address blocks:        177.85.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl
                          rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:93:e4:0f:a8:66:ee:0d:d6:1f:80:40:3e:0d:b8:5f:8a:c9:79:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA8978EA326E0C135B17DA6DCA463EFC4F313FD7
        Validity
            Not Before: May 27 12:56:20 2026 GMT
            Not After : May 26 13:01:20 2027 GMT
        Subject: CN=BB25D3FC8103B3D9688086A430E8223DFAF92C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:d7:3f:d4:ec:6f:4f:28:66:eb:9e:68:35:
                    9e:b6:e7:a8:b2:79:44:90:e9:06:ed:c8:e4:64:71:
                    4d:66:70:c9:11:45:4d:ff:da:9f:a5:c1:08:bc:b8:
                    47:39:e8:c2:a8:9d:31:31:aa:95:e3:c9:16:50:24:
                    a6:ea:60:1b:7e:ee:19:9e:c3:9c:2b:9b:36:e3:14:
                    32:44:48:bb:fd:47:2d:ad:3a:e9:b1:16:e2:bf:4f:
                    06:8c:b5:ab:2a:d7:3b:0b:98:c1:e4:70:4d:e6:4b:
                    c9:17:e3:a7:2d:49:9d:fb:78:ef:3c:f7:f2:5a:0b:
                    2c:59:0d:2e:4e:65:dc:1d:d8:dc:5c:9f:e3:b4:a7:
                    d6:44:91:c0:66:ef:51:d6:3f:fc:da:06:d3:7c:bf:
                    ba:33:37:0c:fd:5e:66:3c:99:4f:b2:cc:33:62:1c:
                    fa:b1:dd:c0:6c:98:4f:05:e0:77:9c:f3:7f:cd:5c:
                    40:75:8c:ae:65:75:8a:ae:6c:a5:a7:29:da:25:0c:
                    af:4a:ef:c2:02:4c:39:d6:9f:d6:fc:15:d5:62:5e:
                    99:7a:02:6a:55:66:fe:15:fb:20:ed:18:2c:32:69:
                    1d:81:77:08:3a:fc:22:0f:c1:09:7e:cc:4d:f6:33:
                    bd:00:d2:90:f3:7f:04:f9:1f:a6:0b:08:bc:b1:42:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:25:D3:FC:81:03:B3:D9:68:80:86:A4:30:E8:22:3D:FA:F9:2C:0B
            X509v3 Authority Key Identifier:
                keyid:EA:89:78:EA:32:6E:0C:13:5B:17:DA:6D:CA:46:3E:FC:4F:31:3F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EA8978EA326E0C135B17DA6DCA463EFC4F313FD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:80:29:42:f1:a6:c2:a8:d1:eb:7a:7a:84:79:f7:e7:07:8b:
         59:90:6a:ed:0a:9d:3b:68:1a:9f:8d:b0:02:fd:02:be:32:34:
         5c:bb:8f:6f:39:e7:c4:81:13:82:bf:a6:cb:ec:c5:23:e6:4d:
         61:cb:0d:86:34:50:e1:a7:4d:5e:df:ad:e4:e3:7a:af:79:9b:
         ac:3f:91:d1:97:bf:da:c6:a3:74:4a:f0:91:3b:a6:c7:56:09:
         00:d0:67:05:48:4e:37:ad:dd:ef:bc:7a:18:f0:1b:c3:cd:88:
         f5:d0:97:5e:2f:54:bc:f9:6f:c0:b4:65:8b:a0:01:35:06:97:
         40:95:35:64:4d:0f:f3:73:1f:45:76:19:9c:44:01:43:87:36:
         34:b5:14:fc:a4:53:0f:d2:f9:55:63:16:f0:1e:13:1e:28:fa:
         04:73:e2:61:84:4e:a2:e7:d7:b2:c1:f1:75:92:ce:fe:bd:de:
         27:3d:90:e9:4b:c4:42:65:f7:0f:55:e8:c6:7f:0c:6c:c3:ff:
         78:61:25:14:64:fb:36:ed:73:a7:c6:0c:66:25:97:1c:e7:91:
         a2:e1:22:06:02:cd:ae:f8:4b:2b:49:76:dd:d3:8e:37:58:52:
         5b:2e:bb:88:02:41:d3:4a:a0:27:e9:72:ee:97:e2:a0:c1:b3:
         8b:90:3f:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR5PkD6hm7g3WH4BAPg24X4rJeaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUE4OTc4RUEzMjZFMEMxMzVCMTdEQTZEQ0E0NjNFRkM0
RjMxM0ZENzAeFw0yNjA1MjcxMjU2MjBaFw0yNzA1MjYxMzAxMjBaMDMxMTAvBgNV
BAMTKEJCMjVEM0ZDODEwM0IzRDk2ODgwODZBNDMwRTgyMjNERkFGOTJDMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+Nc/1OxvTyhm655oNZ6256iy
eUSQ6QbtyORkcU1mcMkRRU3/2p+lwQi8uEc56MKonTExqpXjyRZQJKbqYBt+7hme
w5wrmzbjFDJESLv9Ry2tOumxFuK/TwaMtasq1zsLmMHkcE3mS8kX46ctSZ37eO88
9/JaCyxZDS5OZdwd2Nxcn+O0p9ZEkcBm71HWP/zaBtN8v7ozNwz9XmY8mU+yzDNi
HPqx3cBsmE8F4Hec83/NXEB1jK5ldYqubKWnKdolDK9K78ICTDnWn9b8FdViXpl6
AmpVZv4V+yDtGCwyaR2Bdwg6/CIPwQl+zE32M70A0pDzfwT5H6YLCLyxQg7dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuyXT/IEDs9logIakMOgiPfr5LAswHwYDVR0j
BBgwFoAU6ol46jJuDBNbF9ptykY+/E8xP9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM29hOGNUa3Riek1jc1ZvcFphMXNLamlDZ0hia1g1bjM4eGpabnFvTWoy
eXIvMC9FQTg5NzhFQTMyNkUwQzEzNUIxN0RBNkRDQTQ2M0VGQzRGMzEzRkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VBODk3OEVBMzI2RTBDMTM1
QjE3REE2RENBNDYzRUZDNEYzMTNGRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNvYThjVGt0YnpNY3NWb3BaYTFzS2ppQ2dIYmtYNW4zOHhqWm5xb01qMnlyLzAv
MzEzNzM3MmUzODM1MmUzMjM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVfIwDQYJKoZIhvcNAQELBQADggEBAGmAKULx
psKo0et6eoR59+cHi1mQau0KnTtoGp+NsAL9Ar4yNFy7j28558SBE4K/psvsxSPm
TWHLDYY0UOGnTV7freTjeq95m6w/kdGXv9rGo3RK8JE7psdWCQDQZwVITjet3e+8
ehjwG8PNiPXQl14vVLz5b8C0ZYugATUGl0CVNWRND/NzH0V2GZxEAUOHNjS1FPyk
Uw/S+VVjFvAeEx4o+gRz4mGETqLn17LB8XWSzv693ic9kOlLxEJl9w9V6MZ/DGzD
/3hhJRRk+zbtc6fGDGYllxznkaLhIgYCza74SytJdt3TjjdYUlsuu4gCQdNKoCfp
cu6X4qDBs4uQP1U=
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:36:17 2026 by rpki-client