Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa
File:                     3137372e38362e3138362e302f32332d3233203d3e203532353735.roa (raw, json)
Hash identifier:          LvZpzBgtIIOOPUNGfPv5pFmUpnafl7IcCwwMLGGiW/U=
Subject key identifier:   18:98:EF:22:7E:D6:20:38:86:77:3F:25:83:87:DF:58:A7:6B:E1:55
Certificate issuer:       /CN=3260D5B977B09CA3A78FE87024E3A07443C93270
Certificate serial:       2EE9301FBC4EEA369F3E8EFEA61E07C1D08A8937
Authority key identifier: 32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa
Signing time:             Tue 14 Apr 2026 16:33:17 +0000
ROA not before:           Tue 14 Apr 2026 16:28:17 +0000
ROA not after:            Tue 13 Apr 2027 16:33:17 +0000
asID:                     52575
IP address blocks:        177.86.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl
                          rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e9:30:1f:bc:4e:ea:36:9f:3e:8e:fe:a6:1e:07:c1:d0:8a:89:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3260D5B977B09CA3A78FE87024E3A07443C93270
        Validity
            Not Before: Apr 14 16:28:17 2026 GMT
            Not After : Apr 13 16:33:17 2027 GMT
        Subject: CN=1898EF227ED6203886773F258387DF58A76BE155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8a:54:23:48:10:ba:cd:d6:40:c9:72:8f:3f:
                    5f:78:c3:95:9b:35:cf:69:31:fd:ea:e5:12:2a:2b:
                    42:76:f7:0f:87:99:f3:2b:48:6c:9c:83:fe:33:35:
                    da:92:e9:06:01:72:4c:f1:94:48:19:03:bf:03:30:
                    a2:6e:96:d4:c4:93:c3:1b:4b:39:2e:67:95:29:a8:
                    f4:ce:1e:42:ca:b2:0c:ae:f2:b1:5d:78:7a:6a:e5:
                    72:de:10:2b:fa:c1:3b:c5:3a:8c:64:61:92:1f:1b:
                    50:38:35:d8:9b:08:c4:26:2f:2d:f7:d9:2f:82:f3:
                    49:be:23:a1:53:c4:57:d2:fb:1c:0a:8e:db:52:7b:
                    8f:ae:99:3d:69:6b:83:bd:af:32:a2:2f:68:97:9d:
                    b8:31:91:54:1a:6a:18:84:be:c3:4d:78:3b:99:52:
                    a4:ae:7b:dc:24:50:f1:d4:44:a7:e2:25:83:c9:3a:
                    a2:7d:ab:cd:29:ca:8b:ce:ba:d0:f2:a7:b1:31:85:
                    f2:f3:21:9a:cc:52:92:7f:c9:92:4d:ae:21:fe:6a:
                    29:83:c4:01:87:74:96:ac:a1:97:e7:39:46:61:86:
                    af:47:8e:45:c7:03:fe:ec:6f:80:c2:2c:b4:93:b0:
                    e3:2e:c7:8f:25:b6:ff:37:f0:d9:3f:b1:e0:99:f9:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:98:EF:22:7E:D6:20:38:86:77:3F:25:83:87:DF:58:A7:6B:E1:55
            X509v3 Authority Key Identifier:
                keyid:32:60:D5:B9:77:B0:9C:A3:A7:8F:E8:70:24:E3:A0:74:43:C9:32:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3260D5B977B09CA3A78FE87024E3A07443C93270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3260D5B977B09CA3A78FE87024E3A07443C93270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5eVGVMHbA4SSMS7BPXf4hyHURAtXyCspuokQnfWbFXHg/0/3137372e38362e3138362e302f32332d3233203d3e203532353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:38:8c:5e:20:38:7e:a0:82:f0:37:7c:7e:c3:b9:c6:57:cd:
         dd:d8:2d:78:13:55:a4:e0:a0:cf:19:93:1b:70:16:ac:d4:67:
         6c:b8:db:aa:eb:e5:15:67:b3:d6:0e:b5:78:5c:30:5f:62:22:
         d4:99:e1:d1:c6:50:b7:3e:98:75:c1:69:ed:fb:d5:89:dc:ad:
         ce:7b:6f:81:e5:09:77:b7:be:b2:5b:43:67:f9:89:2f:44:f4:
         fd:55:ee:57:79:69:50:eb:89:d8:4a:04:d5:0d:8e:ae:37:63:
         3c:12:ba:5c:be:2b:da:eb:8c:7e:de:1b:ca:4c:f6:b1:8c:0d:
         59:50:b7:13:c3:9c:bf:6f:e2:e7:00:9c:cc:a5:a6:22:32:39:
         62:fc:4d:a7:ce:a8:d9:03:c8:c0:82:c1:3e:1e:6e:27:98:02:
         31:c8:45:2f:46:c8:0d:c6:2c:b8:2a:62:2e:8e:6b:5d:46:43:
         90:ce:34:7e:a5:fa:b6:73:79:02:89:90:5f:ec:5a:b8:4a:d5:
         30:9b:8b:1d:46:fb:96:52:54:db:16:51:55:93:7c:1d:36:21:
         21:aa:ab:41:b5:95:22:fa:23:77:46:d0:b0:8d:cf:11:14:5e:
         59:a3:bb:43:67:6d:e8:b5:ef:03:66:6b:9d:d5:36:9b:ed:f9:
         87:22:82:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULukwH7xO6jafPo7+ph4HwdCKiTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI2MEQ1Qjk3N0IwOUNBM0E3OEZFODcwMjRFM0EwNzQ0
M0M5MzI3MDAeFw0yNjA0MTQxNjI4MTdaFw0yNzA0MTMxNjMzMTdaMDMxMTAvBgNV
BAMTKDE4OThFRjIyN0VENjIwMzg4Njc3M0YyNTgzODdERjU4QTc2QkUxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCailQjSBC6zdZAyXKPP194w5Wb
Nc9pMf3q5RIqK0J29w+HmfMrSGycg/4zNdqS6QYBckzxlEgZA78DMKJultTEk8Mb
SzkuZ5UpqPTOHkLKsgyu8rFdeHpq5XLeECv6wTvFOoxkYZIfG1A4NdibCMQmLy33
2S+C80m+I6FTxFfS+xwKjttSe4+umT1pa4O9rzKiL2iXnbgxkVQaahiEvsNNeDuZ
UqSue9wkUPHURKfiJYPJOqJ9q80pyovOutDyp7ExhfLzIZrMUpJ/yZJNriH+aimD
xAGHdJasoZfnOUZhhq9HjkXHA/7sb4DCLLSTsOMux48ltv838Nk/seCZ+dDJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGJjvIn7WIDiGdz8lg4ffWKdr4VUwHwYDVR0j
BBgwFoAUMmDVuXewnKOnj+hwJOOgdEPJMnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWVWR1ZNSGJBNFNTTVM3QlBYZjRoeUhVUkF0WHlDc3B1b2tRbmZXYkZY
SGcvMC8zMjYwRDVCOTc3QjA5Q0EzQTc4RkU4NzAyNEUzQTA3NDQzQzkzMjcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMyNjBENUI5NzdCMDlDQTNB
NzhGRTg3MDI0RTNBMDc0NDNDOTMyNzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVlVkdWTUhiQTRTU01TN0JQWGY0aHlIVVJBdFh5Q3NwdW9rUW5mV2JGWEhnLzAv
MzEzNzM3MmUzODM2MmUzMTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVa6MA0GCSqGSIb3DQEBCwUAA4IBAQCSOIxeIDh+
oILwN3x+w7nGV83d2C14E1Wk4KDPGZMbcBas1GdsuNuq6+UVZ7PWDrV4XDBfYiLU
meHRxlC3Pph1wWnt+9WJ3K3Oe2+B5Ql3t76yW0Nn+YkvRPT9Ve5XeWlQ64nYSgTV
DY6uN2M8Erpcviva64x+3hvKTPaxjA1ZULcTw5y/b+LnAJzMpaYiMjli/E2nzqjZ
A8jAgsE+Hm4nmAIxyEUvRsgNxiy4KmIujmtdRkOQzjR+pfq2c3kCiZBf7Fq4StUw
m4sdRvuWUlTbFlFVk3wdNiEhqqtBtZUi+iN3RtCwjc8RFF5Zo7tDZ23ote8DZmud
1Tab7fmHIoKz
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:02 2026 by rpki-client