Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
File:                     3137372e39312e34362e302f32332d3233203d3e20323633343237.roa (raw, json)
Hash identifier:          SzRmYSlCL9nZSFlJh7GhRkRPASjauga6cEVVKuskANI=
Subject key identifier:   52:39:2F:E6:DA:60:11:40:B6:7A:4F:B5:17:2A:32:88:8E:DF:45:29
Certificate issuer:       /CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
Certificate serial:       79109F9DEF7AF717A9F3A82F6BB4810FEFBCD776
Authority key identifier: 73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa
Signing time:             Mon 26 Oct 2026 17:16:10 +0000
ROA not before:           Mon 26 Oct 2026 17:11:10 +0000
ROA not after:            Mon 25 Oct 2027 17:16:10 +0000
asID:                     263427
IP address blocks:        177.91.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 03:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:9f:9d:ef:7a:f7:17:a9:f3:a8:2f:6b:b4:81:0f:ef:bc:d7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
        Validity
            Not Before: Oct 26 17:11:10 2026 GMT
            Not After : Oct 25 17:16:10 2027 GMT
        Subject: CN=52392FE6DA601140B67A4FB5172A32888EDF4529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d8:1d:c0:5e:87:e4:d3:f1:10:80:0c:3d:0c:
                    a0:ae:e0:5e:30:04:54:30:7d:51:20:38:2d:74:3d:
                    99:ec:07:3b:6c:ac:09:66:24:f4:ae:28:66:a3:0e:
                    78:9e:e8:8b:fe:49:e0:6b:4c:25:ab:ec:f9:d7:49:
                    f0:e2:d5:b6:5c:ce:d5:b5:12:f3:95:65:5f:e7:81:
                    07:0d:97:7b:7b:b3:6c:f5:36:19:99:0a:0e:b1:f1:
                    d7:f7:b9:e4:25:cb:c1:87:74:32:4f:a4:f5:4a:29:
                    3d:ba:a6:0f:8d:74:8a:84:63:57:ff:c5:80:e3:c5:
                    4e:f0:95:91:32:b4:ac:23:dc:e5:5b:eb:c6:66:49:
                    cd:03:03:7b:56:ce:a3:f7:05:30:64:04:12:a0:39:
                    67:f7:f4:db:aa:7f:62:82:9c:e9:8d:74:f4:c8:eb:
                    e6:41:b5:d8:76:73:78:29:d1:85:06:ad:4a:ca:4c:
                    59:56:fb:08:cd:da:c1:f2:6c:8d:dc:6c:1d:15:51:
                    13:75:d8:64:0b:2e:cd:59:6b:86:d2:e7:a1:12:3e:
                    1b:ce:d3:a8:28:5c:63:d1:d8:b5:22:d3:44:5d:20:
                    e7:42:30:39:e6:34:70:1d:a0:6e:35:f7:41:be:d7:
                    42:88:50:14:43:de:cb:e4:6b:4a:9a:02:f7:42:e9:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:39:2F:E6:DA:60:11:40:B6:7A:4F:B5:17:2A:32:88:8E:DF:45:29
            X509v3 Authority Key Identifier:
                keyid:73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34362e302f32332d3233203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:20:9b:d9:eb:df:02:00:60:99:86:d4:f6:91:fc:c4:64:f3:
         6b:cd:fb:be:d1:d8:e6:c8:80:c4:8d:56:dd:2b:9f:49:20:ef:
         a9:4f:be:d4:2b:ba:a4:55:30:ca:ab:6d:b4:50:13:86:f2:dd:
         f6:f9:80:55:14:67:d7:42:55:72:2f:02:0d:01:d6:a7:d4:6f:
         e1:68:a0:1d:8f:9b:78:94:7b:de:28:41:f9:9a:82:c8:f8:d6:
         26:43:92:1c:0d:7f:aa:fa:34:27:0f:ee:40:76:7a:10:f4:eb:
         79:a4:f2:b0:86:f8:27:7a:b4:b8:62:4b:bf:c2:b5:85:03:75:
         55:21:dc:b6:fa:4d:d3:65:9a:7b:22:2d:7d:0e:24:a6:bf:47:
         a4:2a:34:51:72:39:9a:3b:82:f0:02:53:df:ad:ec:b9:99:cd:
         a4:e1:ea:2e:20:79:24:0f:fc:08:e3:0c:80:96:a8:d5:88:28:
         51:60:a5:25:51:65:d1:db:d2:c9:47:7b:66:80:12:6f:2e:77:
         fa:48:ea:47:78:7b:ac:32:5f:4e:1f:be:53:03:f1:89:ba:ed:
         d7:25:6c:56:b4:fe:b6:ce:ca:e8:9a:ab:2b:3e:a6:10:d6:0c:
         29:d3:eb:bf:90:2f:e3:02:40:55:ac:14:da:dd:2a:d1:df:f1:
         51:91:81:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeRCfne969xep86gva7SBD++813YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0OEJBNDc0Q0JEM0NGMEIzMEM0OTExQjMwMkI3MTFD
MTI5QUNGMTAeFw0yNjEwMjYxNzExMTBaFw0yNzEwMjUxNzE2MTBaMDMxMTAvBgNV
BAMTKDUyMzkyRkU2REE2MDExNDBCNjdBNEZCNTE3MkEzMjg4OEVERjQ1MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL2B3AXofk0/EQgAw9DKCu4F4w
BFQwfVEgOC10PZnsBztsrAlmJPSuKGajDnie6Iv+SeBrTCWr7PnXSfDi1bZcztW1
EvOVZV/ngQcNl3t7s2z1NhmZCg6x8df3ueQly8GHdDJPpPVKKT26pg+NdIqEY1f/
xYDjxU7wlZEytKwj3OVb68ZmSc0DA3tWzqP3BTBkBBKgOWf39Nuqf2KCnOmNdPTI
6+ZBtdh2c3gp0YUGrUrKTFlW+wjN2sHybI3cbB0VURN12GQLLs1Za4bS56ESPhvO
06goXGPR2LUi00RdIOdCMDnmNHAdoG4190G+10KIUBRD3svka0qaAvdC6Q8bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUjkv5tpgEUC2ek+1FyoyiI7fRSkwHwYDVR0j
BBgwFoAUc0i6R0y9PPCzDEkRswK3EcEprPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC83MzQ4QkE0NzRDQkQzQ0YwQjMwQzQ5MTFCMzAyQjcxMUMxMjlBQ0YxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNDhCQTQ3NENCRDNDRjBC
MzBDNDkxMUIzMDJCNzExQzEyOUFDRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzM3MmUzOTMxMmUzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVsuMA0GCSqGSIb3DQEBCwUAA4IBAQAbIJvZ698C
AGCZhtT2kfzEZPNrzfu+0djmyIDEjVbdK59JIO+pT77UK7qkVTDKq220UBOG8t32
+YBVFGfXQlVyLwINAdan1G/haKAdj5t4lHveKEH5moLI+NYmQ5IcDX+q+jQnD+5A
dnoQ9Ot5pPKwhvgnerS4Yku/wrWFA3VVIdy2+k3TZZp7Ii19DiSmv0ekKjRRcjma
O4LwAlPfrey5mc2k4eouIHkkD/wI4wyAlqjViChRYKUlUWXR29LJR3tmgBJvLnf6
SOpHeHusMl9OH75TA/GJuu3XJWxWtP62zsromqsrPqYQ1gwp0+u/kC/jAkBVrBTa
3SrR3/FRkYFT
-----END CERTIFICATE-----
Generated at Wed Nov 4 06:59:35 2026 by rpki-client