Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
File:                     3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa (raw, json)
Hash identifier:          7Ap0D/mbQjuBrNqmmTMSLgSROvxOhoMqhw22n1l2RIQ=
Subject key identifier:   02:BA:E3:D5:4C:40:BA:36:DD:D7:F7:9F:DE:47:19:64:07:F7:C5:87
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       22773542BA9F6935EB53D1D2524D2944EFCC0866
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa
Signing time:             Mon 13 Apr 2026 11:07:13 +0000
ROA not before:           Mon 13 Apr 2026 11:02:13 +0000
ROA not after:            Mon 12 Apr 2027 11:07:13 +0000
asID:                     262441
IP address blocks:        179.106.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:15:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:77:35:42:ba:9f:69:35:eb:53:d1:d2:52:4d:29:44:ef:cc:08:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: Apr 13 11:02:13 2026 GMT
            Not After : Apr 12 11:07:13 2027 GMT
        Subject: CN=02BAE3D54C40BA36DDD7F79FDE47196407F7C587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:e6:26:25:eb:7a:c2:a1:bb:2f:88:90:1d:
                    2d:13:f2:28:42:cd:79:b1:b3:7b:09:38:4e:3c:06:
                    b1:bd:7c:8a:b0:01:7b:b5:de:37:f1:bc:f5:53:46:
                    38:60:16:e5:92:f3:ce:d4:88:35:15:80:0c:55:8b:
                    d7:68:1d:d6:44:1a:50:a6:2c:e0:3b:94:43:d8:4d:
                    10:1b:3c:3c:b2:1b:be:00:45:f8:35:11:74:f7:e7:
                    77:c8:a8:41:df:df:cc:4e:fd:cf:7e:a5:74:3a:8c:
                    02:e6:fb:ef:d5:6b:5f:f3:71:5c:39:9f:f5:8a:9b:
                    96:a7:74:48:c1:75:2d:e9:3a:75:ae:a5:8e:1a:c6:
                    81:a6:5c:30:1c:dc:d4:69:39:6e:79:2d:f5:aa:34:
                    0e:e5:25:59:f5:40:eb:85:97:06:0c:54:7e:09:46:
                    e2:d0:17:c3:1a:a3:a2:8f:a4:b5:fc:d0:24:a4:7f:
                    c2:a9:bb:fc:0d:db:22:78:2e:1a:3a:3c:d9:26:18:
                    44:a8:37:d2:69:a7:81:a7:e5:0d:3f:18:63:ff:3b:
                    39:2c:6f:49:51:f8:1f:d0:e2:8d:71:01:34:32:c9:
                    33:a8:83:98:a3:98:0c:c9:c4:29:45:ef:47:b1:d1:
                    37:36:d8:27:7a:5f:1a:6b:b1:ff:79:47:93:c6:b3:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BA:E3:D5:4C:40:BA:36:DD:D7:F7:9F:DE:47:19:64:07:F7:C5:87
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/3137392e3130362e3132382e302f32302d3234203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:a9:92:98:be:af:17:a0:47:56:8f:5c:22:44:04:e6:df:
         24:a8:68:02:62:0e:6f:93:4e:0e:32:b4:25:05:75:d1:1c:95:
         ed:eb:27:0a:e3:4c:3b:61:40:f2:fc:46:2a:6d:ad:14:86:ac:
         e3:75:3a:ee:1c:83:9b:75:7c:b5:15:f6:03:0c:f6:89:2d:a2:
         eb:43:6c:0e:9c:c2:ae:c8:07:1e:f6:50:b3:34:cb:18:da:c7:
         7e:6b:d2:65:0c:ec:35:de:f2:d6:1e:5f:e6:00:6d:f0:f2:22:
         a1:0a:d1:87:c1:65:7e:67:64:a6:72:09:32:15:ce:d6:2c:74:
         25:57:4c:1e:9e:d9:9c:ea:50:ad:94:9a:b3:97:9f:15:22:52:
         8c:b5:45:d5:7d:2e:ab:a5:cf:77:a9:a0:0c:5c:b0:ef:9a:02:
         ad:24:1f:ea:98:81:03:7d:52:67:a4:43:e1:ee:00:73:e1:89:
         76:c2:3e:5e:47:aa:e7:e9:ed:9f:a8:8f:b3:d4:1a:e2:78:81:
         87:6b:29:ad:ee:c1:6e:98:b4:d7:31:3f:60:4b:e2:b3:13:92:
         be:b1:d5:3b:2b:1f:d4:f7:02:8a:e6:5a:45:d9:2c:82:e3:66:
         a1:66:a1:31:52:76:fa:ed:2c:fc:2b:72:da:f3:71:c8:b8:3a:
         8b:c3:13:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUInc1QrqfaTXrU9HSUk0pRO/MCGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUwNjhCMDZERTVDNzgzQTk5MjE0NDdBMzkyNDUyRUQ1
M0YyMjgzNzAeFw0yNjA0MTMxMTAyMTNaFw0yNzA0MTIxMTA3MTNaMDMxMTAvBgNV
BAMTKDAyQkFFM0Q1NEM0MEJBMzZEREQ3Rjc5RkRFNDcxOTY0MDdGN0M1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmOYmJet6wqG7L4iQHS0T8ihC
zXmxs3sJOE48BrG9fIqwAXu13jfxvPVTRjhgFuWS887UiDUVgAxVi9doHdZEGlCm
LOA7lEPYTRAbPDyyG74ARfg1EXT353fIqEHf38xO/c9+pXQ6jALm++/Va1/zcVw5
n/WKm5andEjBdS3pOnWupY4axoGmXDAc3NRpOW55LfWqNA7lJVn1QOuFlwYMVH4J
RuLQF8Mao6KPpLX80CSkf8Kpu/wN2yJ4Lho6PNkmGESoN9Jpp4Gn5Q0/GGP/Ozks
b0lR+B/Q4o1xATQyyTOog5ijmAzJxClF70ex0Tc22Cd6Xxprsf95R5PGs6gHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUArrj1UxAujbd1/ef3kcZZAf3xYcwHwYDVR0j
BBgwFoAUvgaLBt5ceDqZIUR6OSRS7VPyKDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3VIcmU3RXdNeExnN05aVWU3b0hneXNDYXdvZjJXbzhLc2ZCTjFDVTRB
VncvMS9CRTA2OEIwNkRFNUM3ODNBOTkyMTQ0N0EzOTI0NTJFRDUzRjIyODM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMDY4QjA2REU1Qzc4M0E5
OTIxNDQ3QTM5MjQ1MkVENTNGMjI4MzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN1SHJlN0V3TXhMZzdOWlVlN29IZ3lzQ2F3b2YyV284S3NmQk4xQ1U0QVZ3LzEv
MzEzNzM5MmUzMTMwMzYyZTMxMzIzODJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLNqgDANBgkqhkiG9w0BAQsFAAOCAQEARpyp
kpi+rxegR1aPXCJEBObfJKhoAmIOb5NODjK0JQV10RyV7esnCuNMO2FA8vxGKm2t
FIas43U67hyDm3V8tRX2Awz2iS2i60NsDpzCrsgHHvZQszTLGNrHfmvSZQzsNd7y
1h5f5gBt8PIioQrRh8FlfmdkpnIJMhXO1ix0JVdMHp7ZnOpQrZSas5efFSJSjLVF
1X0uq6XPd6mgDFyw75oCrSQf6piBA31SZ6RD4e4Ac+GJdsI+Xkeq5+ntn6iPs9Qa
4niBh2spre7Bbpi01zE/YEvisxOSvrHVOysf1PcCiuZaRdksguNmoWahMVJ2+u0s
/Cty2vNxyLg6i8MT/A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:56:17 2026 by rpki-client