Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa
File:                     3137372e39312e38302e302f32312d3231203d3e20323633343333.roa (raw, json)
Hash identifier:          S1dos1mhY/R+zLmmje9KldsRlHDXALrflpE7oQHbvXQ=
Subject key identifier:   CF:C3:75:F5:0A:89:22:1F:06:10:CD:1A:61:3E:41:13:59:6A:3C:F8
Certificate issuer:       /CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
Certificate serial:       5F588D40B5ADD3395C2FB00D307AB80AB8D1B158
Authority key identifier: E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa
Signing time:             Wed 10 Jun 2026 11:40:49 +0000
ROA not before:           Wed 10 Jun 2026 11:35:49 +0000
ROA not after:            Wed 09 Jun 2027 11:40:49 +0000
asID:                     263433
IP address blocks:        177.91.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl
                          rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 10:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:58:8d:40:b5:ad:d3:39:5c:2f:b0:0d:30:7a:b8:0a:b8:d1:b1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B55D0394EBCE78FC73953C3CE5357A5D391082
        Validity
            Not Before: Jun 10 11:35:49 2026 GMT
            Not After : Jun  9 11:40:49 2027 GMT
        Subject: CN=CFC375F50A89221F0610CD1A613E4113596A3CF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:3f:0b:9a:ae:b9:87:1f:73:45:a7:bc:67:
                    96:8d:14:5f:16:7f:5c:c7:8d:22:4b:ed:15:ef:6f:
                    45:fe:6d:19:1b:3f:21:5f:a4:cd:3c:37:25:d4:26:
                    0f:62:d1:48:9e:e2:da:9c:41:8d:06:48:f9:6e:d4:
                    d1:bd:60:a9:67:72:6e:f4:4d:8a:0b:80:6d:33:da:
                    fd:fa:3b:68:34:89:79:84:53:e3:c2:e0:d0:b0:1c:
                    65:02:ca:2e:ea:7c:4b:43:64:98:9f:f1:99:c4:f9:
                    83:f9:db:cc:ad:e4:a3:b8:9a:23:09:2f:d3:09:32:
                    28:43:b9:0c:33:1b:a7:a9:07:7b:27:c8:2a:24:3a:
                    36:6d:1f:09:eb:0e:b8:18:7f:d3:c2:b2:03:1d:f1:
                    96:d2:3e:70:e5:50:1e:6f:b4:d6:5c:13:5c:ff:8c:
                    b9:8b:a2:61:52:59:8f:20:65:43:7f:b1:87:5c:d3:
                    a0:a4:1c:b5:38:80:df:6d:38:d0:4c:3e:f6:c1:d6:
                    36:a7:7f:15:68:7f:54:08:dc:e2:a0:a9:5f:cf:7c:
                    92:c3:f0:3e:30:f5:8c:41:20:b5:24:63:66:ef:0a:
                    2e:e1:cc:7c:e4:ff:57:5e:32:92:d3:f5:f0:35:27:
                    37:6e:56:a7:62:87:4c:ef:3c:f3:71:2c:29:7d:d6:
                    4f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C3:75:F5:0A:89:22:1F:06:10:CD:1A:61:3E:41:13:59:6A:3C:F8
            X509v3 Authority Key Identifier:
                keyid:E4:B5:5D:03:94:EB:CE:78:FC:73:95:3C:3C:E5:35:7A:5D:39:10:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/E4B55D0394EBCE78FC73953C3CE5357A5D391082.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B55D0394EBCE78FC73953C3CE5357A5D391082.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3xLveRfAWFtcm6boySKZL5aQ3SzXXfdsy66HdRn9R55b/0/3137372e39312e38302e302f32312d3231203d3e20323633343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:e2:bc:67:64:b9:64:5e:06:ef:30:83:a8:7b:2a:b1:4f:06:
         67:e4:2b:58:30:3d:d0:7d:35:08:16:64:45:b9:21:9b:7b:c2:
         ff:b4:07:55:16:96:3d:cb:d5:9f:c7:81:ce:65:9d:15:1f:1e:
         a3:44:5e:b7:aa:a0:e8:57:db:67:64:a5:29:50:f1:4d:f8:75:
         2f:fc:86:1d:aa:26:b7:d6:b4:fe:3b:c4:cf:cd:2e:cb:c7:00:
         28:5e:20:88:4b:1a:56:db:b4:7c:c7:3d:5d:fd:86:90:48:2b:
         3f:fb:86:b2:33:db:ea:fa:16:8e:8c:42:bf:ce:49:3c:46:6a:
         ed:de:0b:6f:25:46:5a:ab:98:a8:e1:5a:9d:94:54:05:4e:75:
         31:44:7b:e9:54:20:43:9b:3f:24:df:4a:dd:27:da:5b:88:da:
         d4:a1:69:fa:b1:55:c8:91:9f:4e:5a:cb:cf:a3:2e:f2:c9:a4:
         d6:6a:55:e9:8c:c6:55:aa:c0:c1:36:1b:c3:56:2a:80:32:02:
         46:ca:f5:d7:68:18:c3:73:a7:cf:37:df:c7:11:17:bd:6a:c6:
         82:8e:25:05:e5:3c:ae:50:47:89:6d:7f:18:68:d7:02:f4:d3:
         5c:33:3e:d3:4c:0f:2d:22:43:d3:a9:d3:1c:77:6f:05:9e:a3:
         e8:86:25:6a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX1iNQLWt0zlcL7ANMHq4CrjRsVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCNTVEMDM5NEVCQ0U3OEZDNzM5NTNDM0NFNTM1N0E1
RDM5MTA4MjAeFw0yNjA2MTAxMTM1NDlaFw0yNzA2MDkxMTQwNDlaMDMxMTAvBgNV
BAMTKENGQzM3NUY1MEE4OTIyMUYwNjEwQ0QxQTYxM0U0MTEzNTk2QTNDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIUT8Lmq65hx9zRae8Z5aNFF8W
f1zHjSJL7RXvb0X+bRkbPyFfpM08NyXUJg9i0Uie4tqcQY0GSPlu1NG9YKlncm70
TYoLgG0z2v36O2g0iXmEU+PC4NCwHGUCyi7qfEtDZJif8ZnE+YP528yt5KO4miMJ
L9MJMihDuQwzG6epB3snyCokOjZtHwnrDrgYf9PCsgMd8ZbSPnDlUB5vtNZcE1z/
jLmLomFSWY8gZUN/sYdc06CkHLU4gN9tONBMPvbB1janfxVof1QI3OKgqV/PfJLD
8D4w9YxBILUkY2bvCi7hzHzk/1deMpLT9fA1JzduVqdih0zvPPNxLCl91k9lAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz8N19QqJIh8GEM0aYT5BE1lqPPgwHwYDVR0j
BBgwFoAU5LVdA5Trznj8c5U8POU1el05EIIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3hMdmVSZkFXRnRjbTZib3lTS1pMNWFRM1N6WFhmZHN5NjZIZFJuOVI1
NWIvMC9FNEI1NUQwMzk0RUJDRTc4RkM3Mzk1M0MzQ0U1MzU3QTVEMzkxMDgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjU1RDAzOTRFQkNFNzhG
QzczOTUzQzNDRTUzNTdBNUQzOTEwODIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN4THZlUmZBV0Z0Y202Ym95U0taTDVhUTNTelhYZmRzeTY2SGRSbjlSNTViLzAv
MzEzNzM3MmUzOTMxMmUzODMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzNjMz
MzQzMzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVtQMA0GCSqGSIb3DQEBCwUAA4IBAQCI4rxnZLlk
XgbvMIOoeyqxTwZn5CtYMD3QfTUIFmRFuSGbe8L/tAdVFpY9y9Wfx4HOZZ0VHx6j
RF63qqDoV9tnZKUpUPFN+HUv/IYdqia31rT+O8TPzS7LxwAoXiCISxpW27R8xz1d
/YaQSCs/+4ayM9vq+haOjEK/zkk8Rmrt3gtvJUZaq5io4VqdlFQFTnUxRHvpVCBD
mz8k30rdJ9pbiNrUoWn6sVXIkZ9OWsvPoy7yyaTWalXpjMZVqsDBNhvDViqAMgJG
yvXXaBjDc6fPN9/HERe9asaCjiUF5TyuUEeJbX8YaNcC9NNcMz7TTA8tIkPTqdMc
d28FnqPohiVq
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:51:17 2026 by rpki-client