Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa
File:                     3137372e33362e37312e302f32342d3234203d3e20323730393531.roa (raw, json)
Hash identifier:          zU2Y0NNOQ2JrycTjrGGii4x9vPlHNosedNizrUKtTuM=
Subject key identifier:   22:38:9E:6D:DC:5D:51:00:F0:F5:A7:36:4D:7A:F6:CA:5C:F2:31:6B
Certificate issuer:       /CN=2855A71E150CFAB4453167F74DEE4613F739EA02
Certificate serial:       2F8FD5D0C6841CA443923FDE77B05AE65AD9EA03
Authority key identifier: 28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa
Signing time:             Fri 10 Apr 2026 17:14:56 +0000
ROA not before:           Fri 10 Apr 2026 17:09:56 +0000
ROA not after:            Fri 09 Apr 2027 17:14:56 +0000
asID:                     270951
IP address blocks:        177.36.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl
                          rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 04:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8f:d5:d0:c6:84:1c:a4:43:92:3f:de:77:b0:5a:e6:5a:d9:ea:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2855A71E150CFAB4453167F74DEE4613F739EA02
        Validity
            Not Before: Apr 10 17:09:56 2026 GMT
            Not After : Apr  9 17:14:56 2027 GMT
        Subject: CN=22389E6DDC5D5100F0F5A7364D7AF6CA5CF2316B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:54:b9:86:0b:3d:73:84:2a:65:0c:e8:0c:
                    87:8a:f6:5a:a5:84:ab:4e:17:66:a2:f0:88:6b:e3:
                    cf:1f:28:68:96:62:68:db:f6:31:fc:a9:1d:1f:ff:
                    ad:68:8c:d3:a9:fe:20:a6:3e:c7:55:b3:6e:9a:09:
                    16:d1:85:8f:0b:6c:21:8a:07:8a:48:93:b9:05:92:
                    d7:55:39:4d:ad:e0:85:a4:05:17:2b:7c:94:c0:8a:
                    7d:ba:fa:b5:47:9a:69:a1:ac:c2:1d:46:6c:0f:67:
                    87:e2:72:e9:9a:ac:a9:d2:9b:2d:57:15:8c:34:1f:
                    90:ae:57:52:3c:04:c6:94:8d:da:e5:0d:39:f0:94:
                    ca:16:f4:bd:0a:d5:dd:97:3b:69:91:ff:b8:20:b3:
                    3f:d0:9f:c9:43:be:11:d4:76:72:ae:f1:17:c8:81:
                    e8:3f:1b:e5:26:90:76:42:66:eb:11:dd:c0:95:fc:
                    05:e9:7f:af:98:89:9d:f5:03:db:aa:79:24:19:95:
                    a4:e1:45:cc:f4:3f:27:6c:72:c0:06:f4:0f:81:a3:
                    bd:25:b7:8b:bd:47:21:50:a3:59:fb:e8:5b:4f:77:
                    a0:5e:a2:04:66:9d:97:e7:79:00:63:8c:be:94:4e:
                    3b:f1:e7:2a:1b:17:1c:f3:45:8c:35:7e:a6:af:12:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:9E:6D:DC:5D:51:00:F0:F5:A7:36:4D:7A:F6:CA:5C:F2:31:6B
            X509v3 Authority Key Identifier:
                keyid:28:55:A7:1E:15:0C:FA:B4:45:31:67:F7:4D:EE:46:13:F7:39:EA:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/2855A71E150CFAB4453167F74DEE4613F739EA02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2855A71E150CFAB4453167F74DEE4613F739EA02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/3137372e33362e37312e302f32342d3234203d3e20323730393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:07:6f:d0:06:9a:f5:31:0d:e4:81:fd:75:20:65:c0:c3:9b:
         65:c0:43:e0:db:f7:31:de:01:3c:c5:37:cb:1e:56:52:2b:db:
         dc:61:cd:8c:26:96:94:23:85:a5:28:73:19:db:21:6c:10:dd:
         2f:65:cc:2b:2f:9f:ad:45:7d:40:b5:1d:6a:fe:54:52:62:4f:
         38:6d:b4:79:a7:8f:be:85:09:09:8c:38:75:b7:ee:22:21:37:
         8c:9d:da:76:ee:31:b3:bf:e7:4c:29:37:4d:15:bc:1f:15:f8:
         bb:3d:a5:43:92:75:f2:bb:73:40:5e:a5:54:ea:44:56:b6:64:
         91:94:7d:4b:4a:47:e2:67:d1:cb:07:41:5d:b1:8d:7e:9a:c6:
         4d:46:b0:e7:f2:a2:30:0f:ca:82:02:80:d7:1a:aa:fe:63:65:
         33:08:ff:cf:5f:ba:bb:d6:be:76:13:27:da:a1:86:ce:3a:13:
         fb:31:c1:7c:67:ef:53:22:9d:5a:85:5c:d1:47:a5:38:40:4b:
         06:97:8b:44:72:8d:85:fe:4d:97:89:6e:78:3f:99:3d:7a:ee:
         d2:1c:d0:90:3f:47:f9:66:01:21:a8:07:6b:ac:2c:52:a0:a8:
         52:77:64:c5:b4:d1:b3:45:c1:0b:40:86:78:f8:f2:c5:74:ed:
         6e:41:b7:59
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL4/V0MaEHKRDkj/ed7Ba5lrZ6gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg1NUE3MUUxNTBDRkFCNDQ1MzE2N0Y3NERFRTQ2MTNG
NzM5RUEwMjAeFw0yNjA0MTAxNzA5NTZaFw0yNzA0MDkxNzE0NTZaMDMxMTAvBgNV
BAMTKDIyMzg5RTZEREM1RDUxMDBGMEY1QTczNjREN0FGNkNBNUNGMjMxNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QFS5hgs9c4QqZQzoDIeK9lql
hKtOF2ai8Ihr488fKGiWYmjb9jH8qR0f/61ojNOp/iCmPsdVs26aCRbRhY8LbCGK
B4pIk7kFktdVOU2t4IWkBRcrfJTAin26+rVHmmmhrMIdRmwPZ4ficumarKnSmy1X
FYw0H5CuV1I8BMaUjdrlDTnwlMoW9L0K1d2XO2mR/7ggsz/Qn8lDvhHUdnKu8RfI
geg/G+UmkHZCZusR3cCV/AXpf6+YiZ31A9uqeSQZlaThRcz0PydscsAG9A+Bo70l
t4u9RyFQo1n76FtPd6BeogRmnZfneQBjjL6UTjvx5yobFxzzRYw1fqavEqPtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIjiebdxdUQDw9ac2TXr2ylzyMWswHwYDVR0j
BBgwFoAUKFWnHhUM+rRFMWf3Te5GE/c56gIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTF6Ym5Yajk4NGtMNFdrWHU4UW5CeFA5Q21XaVpKZTZFaTRwanpZRndv
cXEvMC8yODU1QTcxRTE1MENGQUI0NDUzMTY3Rjc0REVFNDYxM0Y3MzlFQTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NTVBNzFFMTUwQ0ZBQjQ0
NTMxNjdGNzRERUU0NjEzRjczOUVBMDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxemJuWGo5ODRrTDRXa1h1OFFuQnhQOUNtV2laSmU2RWk0cGp6WUZ3b3FxLzAv
MzEzNzM3MmUzMzM2MmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsSRHMA0GCSqGSIb3DQEBCwUAA4IBAQB9B2/QBpr1
MQ3kgf11IGXAw5tlwEPg2/cx3gE8xTfLHlZSK9vcYc2MJpaUI4WlKHMZ2yFsEN0v
ZcwrL5+tRX1AtR1q/lRSYk84bbR5p4++hQkJjDh1t+4iITeMndp27jGzv+dMKTdN
FbwfFfi7PaVDknXyu3NAXqVU6kRWtmSRlH1LSkfiZ9HLB0FdsY1+msZNRrDn8qIw
D8qCAoDXGqr+Y2UzCP/PX7q71r52EyfaoYbOOhP7McF8Z+9TIp1ahVzRR6U4QEsG
l4tEco2F/k2XiW54P5k9eu7SHNCQP0f5ZgEhqAdrrCxSoKhSd2TFtNGzRcELQIZ4
+PLFdO1uQbdZ
-----END CERTIFICATE-----
Generated at Sat Apr 18 08:13:02 2026 by rpki-client