Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34372e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          24X4cABUqlAYe6B+pX6xfndEHgkkafBKuixi3mLDrk4=
Subject key identifier:   7F:0C:D8:79:CF:65:72:BF:CE:26:5F:8E:03:04:B3:9B:45:ED:88:71
Certificate issuer:       /CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
Certificate serial:       345461006FEEB0E616340684BAE37339F3F79315
Authority key identifier: 73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa
Signing time:             Mon 26 Oct 2026 17:16:06 +0000
ROA not before:           Mon 26 Oct 2026 17:11:06 +0000
ROA not after:            Mon 25 Oct 2027 17:16:06 +0000
asID:                     263427
IP address blocks:        177.91.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 16:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:61:00:6f:ee:b0:e6:16:34:06:84:ba:e3:73:39:f3:f7:93:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
        Validity
            Not Before: Oct 26 17:11:06 2026 GMT
            Not After : Oct 25 17:16:06 2027 GMT
        Subject: CN=7F0CD879CF6572BFCE265F8E0304B39B45ED8871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:9c:dd:b8:4d:49:35:70:d6:b5:05:e3:f7:
                    dc:f3:cd:18:71:04:38:72:fd:b5:30:2a:ea:f7:1c:
                    0a:96:1b:16:b8:22:7d:16:a7:6d:ac:83:43:69:fb:
                    09:18:85:40:ae:9d:4b:e9:d4:36:18:9f:e4:81:1a:
                    2f:ec:70:d9:79:23:85:3d:08:e6:47:d0:57:7b:34:
                    b5:90:c8:ab:1d:7c:0a:9f:a0:8f:e1:94:f2:fc:66:
                    9c:10:aa:37:87:b7:78:0c:9a:6f:13:86:98:43:a3:
                    4a:e5:7a:65:fc:e3:48:70:eb:9d:77:ca:81:7a:9a:
                    b6:53:3a:f1:25:27:63:79:7b:bb:a1:40:20:fe:87:
                    0f:86:86:ac:62:f1:4f:70:3f:10:eb:13:82:28:77:
                    49:ff:02:49:94:2e:35:7d:e2:98:95:7e:7e:b6:12:
                    d6:0e:21:34:9d:bf:bd:bf:05:41:47:3b:35:cf:e0:
                    6a:52:d5:70:42:fc:73:b1:a1:e8:a6:bc:c6:35:b3:
                    3f:b1:66:2b:cc:b4:10:ac:0d:36:e7:ad:c1:0e:17:
                    41:1f:83:ec:22:e4:6d:f5:1e:8e:bb:2b:0d:ef:3a:
                    4f:95:a8:5d:dd:18:15:31:61:b8:5d:b0:45:db:11:
                    d8:0f:c4:c2:53:c6:ec:6c:0b:c1:5d:07:b9:13:15:
                    4f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0C:D8:79:CF:65:72:BF:CE:26:5F:8E:03:04:B3:9B:45:ED:88:71
            X509v3 Authority Key Identifier:
                keyid:73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34372e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:e4:be:0e:5e:bf:4b:23:8d:5d:a5:03:f2:44:d2:33:7c:
         0d:58:a7:df:56:43:ab:02:65:89:e4:9d:03:65:a5:4b:0e:c4:
         1a:98:1b:09:a2:03:4d:47:46:36:98:e6:ba:e6:41:cd:ba:17:
         d7:a3:51:50:eb:38:8a:b1:05:1f:7b:ed:bc:68:29:1c:bc:69:
         20:2d:9c:03:f5:a5:68:c9:95:95:9a:97:36:1b:3b:42:64:c0:
         19:e8:7d:91:f0:9c:5c:86:2b:16:4d:5a:1d:eb:5d:b8:75:8c:
         6b:12:f6:4e:9a:21:cc:aa:e6:bf:2e:8d:12:46:15:ed:4f:c3:
         70:93:7e:90:b2:dc:20:71:a5:01:e7:4b:3f:57:47:5d:1f:b2:
         81:28:f4:8d:d9:9c:52:51:ca:eb:63:11:ed:34:f9:6c:cf:75:
         d2:17:eb:15:00:c8:31:4e:02:49:47:cf:6e:2d:d5:64:f1:b1:
         1b:ed:f6:2e:fd:00:27:fe:7e:8e:7a:e9:4c:bc:97:e3:2e:b3:
         c7:94:9f:29:90:c8:61:05:36:27:70:ee:d3:cc:ee:9e:71:55:
         85:92:d5:fd:03:6a:98:e0:24:08:a6:9d:ed:12:06:bd:53:2b:
         54:6c:9b:99:45:11:91:56:90:df:d1:4a:e4:fb:44:03:d7:9d:
         b9:05:41:57
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNFRhAG/usOYWNAaEuuNzOfP3kxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM0OEJBNDc0Q0JEM0NGMEIzMEM0OTExQjMwMkI3MTFD
MTI5QUNGMTAeFw0yNjEwMjYxNzExMDZaFw0yNzEwMjUxNzE2MDZaMDMxMTAvBgNV
BAMTKDdGMENEODc5Q0Y2NTcyQkZDRTI2NUY4RTAzMDRCMzlCNDVFRDg4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumpzduE1JNXDWtQXj99zzzRhx
BDhy/bUwKur3HAqWGxa4In0Wp22sg0Np+wkYhUCunUvp1DYYn+SBGi/scNl5I4U9
COZH0Fd7NLWQyKsdfAqfoI/hlPL8ZpwQqjeHt3gMmm8ThphDo0rlemX840hw6513
yoF6mrZTOvElJ2N5e7uhQCD+hw+Ghqxi8U9wPxDrE4Iod0n/AkmULjV94piVfn62
EtYOITSdv72/BUFHOzXP4GpS1XBC/HOxoeimvMY1sz+xZivMtBCsDTbnrcEOF0Ef
g+wi5G31Ho67Kw3vOk+VqF3dGBUxYbhdsEXbEdgPxMJTxuxsC8FdB7kTFU+TAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfwzYec9lcr/OJl+OAwSzm0XtiHEwHwYDVR0j
BBgwFoAUc0i6R0y9PPCzDEkRswK3EcEprPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC83MzQ4QkE0NzRDQkQzQ0YwQjMwQzQ5MTFCMzAyQjcxMUMxMjlBQ0YxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNDhCQTQ3NENCRDNDRjBC
MzBDNDkxMUIzMDJCNzExQzEyOUFDRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzM3MmUzOTMxMmUzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVsvMA0GCSqGSIb3DQEBCwUAA4IBAQBQ1+S+Dl6/
SyONXaUD8kTSM3wNWKffVkOrAmWJ5J0DZaVLDsQamBsJogNNR0Y2mOa65kHNuhfX
o1FQ6ziKsQUfe+28aCkcvGkgLZwD9aVoyZWVmpc2GztCZMAZ6H2R8JxchisWTVod
6124dYxrEvZOmiHMqua/Lo0SRhXtT8Nwk36QstwgcaUB50s/V0ddH7KBKPSN2ZxS
UcrrYxHtNPlsz3XSF+sVAMgxTgJJR89uLdVk8bEb7fYu/QAn/n6OeulMvJfjLrPH
lJ8pkMhhBTYncO7TzO6ecVWFktX9A2qY4CQIpp3tEga9UytUbJuZRRGRVpDf0Urk
+0QD1525BUFX
-----END CERTIFICATE-----
Generated at Sat Oct 31 06:23:11 2026 by rpki-client