Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa
File:                     3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa (raw, json)
Hash identifier:          SbqFnm2fAtZhMCxSBlO5xMgEqEFVvCfMIvmgdy9DOS4=
Subject key identifier:   8F:FC:84:F5:7C:1F:3A:9B:AD:70:28:EB:39:9A:C4:85:64:CA:CB:22
Certificate issuer:       /CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
Certificate serial:       13772AC702FCC365935F131FF7884010526B8EBD
Authority key identifier: 41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa
Signing time:             Fri 11 Sep 2026 19:37:43 +0000
ROA not before:           Fri 11 Sep 2026 19:32:43 +0000
ROA not after:            Fri 10 Sep 2027 19:37:43 +0000
asID:                     266457
IP address blocks:        170.82.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl
                          rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 13:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:77:2a:c7:02:fc:c3:65:93:5f:13:1f:f7:88:40:10:52:6b:8e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41A111B11C25CD882E748B0F1AC3E7BBA029024A
        Validity
            Not Before: Sep 11 19:32:43 2026 GMT
            Not After : Sep 10 19:37:43 2027 GMT
        Subject: CN=8FFC84F57C1F3A9BAD7028EB399AC48564CACB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:b1:fe:7c:66:4b:42:1b:fe:69:08:c3:a3:
                    ad:9c:8d:5a:49:38:b5:a6:14:7c:8e:f8:df:2b:68:
                    ac:31:59:fd:5d:22:ca:e8:57:b5:52:5e:2e:e6:fa:
                    5b:5b:1b:0d:ad:a6:21:bd:9a:ad:b1:06:e2:29:12:
                    2a:43:7b:8d:a8:3c:56:e0:b3:0f:a0:e3:c9:07:39:
                    c4:eb:ee:02:70:79:0a:2d:73:e3:6e:81:b9:30:cc:
                    eb:dc:a7:32:42:6e:d3:b8:a3:48:4a:4b:68:85:f7:
                    2b:8b:2c:49:e9:33:02:c8:41:1c:13:8c:cd:85:ae:
                    ee:86:02:9b:58:93:2d:8f:8d:c6:69:ac:8e:5e:2e:
                    e2:db:55:86:82:b0:80:34:0b:63:b6:25:53:5b:e7:
                    30:37:df:bc:61:42:d1:06:5d:e4:a2:5f:72:7f:99:
                    42:a7:6e:07:42:9d:88:6d:65:1f:51:01:0c:ad:ea:
                    06:72:61:c2:c2:c7:2e:3c:14:97:8e:3f:01:3c:dc:
                    d0:95:23:44:e5:d5:be:7f:5a:bf:65:e5:70:a7:ce:
                    c0:58:f2:f8:87:fb:6c:91:b3:68:fe:4c:65:5b:d3:
                    29:80:f1:dd:ba:72:fa:b8:0a:01:07:85:5e:fb:8d:
                    13:a5:bb:d6:73:31:37:23:0b:b6:0c:dd:b8:61:2c:
                    58:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FC:84:F5:7C:1F:3A:9B:AD:70:28:EB:39:9A:C4:85:64:CA:CB:22
            X509v3 Authority Key Identifier:
                keyid:41:A1:11:B1:1C:25:CD:88:2E:74:8B:0F:1A:C3:E7:BB:A0:29:02:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/41A111B11C25CD882E748B0F1AC3E7BBA029024A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41A111B11C25CD882E748B0F1AC3E7BBA029024A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/3137302e38322e3230302e302f32332d3233203d3e20323636343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:c8:54:a2:3d:0d:d0:c7:a5:b4:c6:36:22:13:72:5b:19:
         f8:c4:d2:c6:0f:81:15:13:71:e3:d0:7a:20:d9:b1:17:08:ce:
         95:47:2d:06:27:8a:e2:42:3d:3b:3e:9e:47:6b:a0:15:7e:83:
         86:1c:e1:ab:4a:76:3c:ce:e9:bc:2a:f3:e8:ec:b1:95:73:c5:
         1d:62:6c:5a:b7:4a:7f:c7:8e:ce:ae:c5:e1:db:2e:1f:77:92:
         5a:93:37:74:db:32:24:2a:57:62:51:9a:d3:84:86:2c:43:70:
         0d:25:05:b9:03:4d:b9:a6:c7:08:f2:61:14:a7:b8:9e:43:b8:
         d9:99:e7:f7:4e:ad:04:97:d8:71:cf:6b:dc:d5:17:5e:7d:7c:
         42:19:99:e5:59:28:4e:3c:7b:d6:bd:5f:e9:25:3c:45:da:20:
         6e:1a:49:a1:46:22:38:2b:42:98:3b:a3:47:f4:a1:af:32:ba:
         5d:b4:ca:e8:32:67:31:dd:9e:7a:f9:42:e8:eb:a1:17:b7:a5:
         e5:3a:68:77:40:fc:c1:20:52:28:7a:9a:4e:5a:3c:4c:e2:24:
         6c:12:3c:6b:b1:7e:e8:7b:a8:6d:06:c9:31:46:58:4a:4e:be:
         d9:4a:ab:99:d5:43:1f:c5:fc:65:95:aa:38:d3:c7:69:8f:f3:
         13:94:5f:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE3cqxwL8w2WTXxMf94hAEFJrjr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDFBMTExQjExQzI1Q0Q4ODJFNzQ4QjBGMUFDM0U3QkJB
MDI5MDI0QTAeFw0yNjA5MTExOTMyNDNaFw0yNzA5MTAxOTM3NDNaMDMxMTAvBgNV
BAMTKDhGRkM4NEY1N0MxRjNBOUJBRDcwMjhFQjM5OUFDNDg1NjRDQUNCMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5rH+fGZLQhv+aQjDo62cjVpJ
OLWmFHyO+N8raKwxWf1dIsroV7VSXi7m+ltbGw2tpiG9mq2xBuIpEipDe42oPFbg
sw+g48kHOcTr7gJweQotc+NugbkwzOvcpzJCbtO4o0hKS2iF9yuLLEnpMwLIQRwT
jM2Fru6GAptYky2PjcZprI5eLuLbVYaCsIA0C2O2JVNb5zA337xhQtEGXeSiX3J/
mUKnbgdCnYhtZR9RAQyt6gZyYcLCxy48FJeOPwE83NCVI0Tl1b5/Wr9l5XCnzsBY
8viH+2yRs2j+TGVb0ymA8d26cvq4CgEHhV77jROlu9ZzMTcjC7YM3bhhLFj9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj/yE9XwfOputcCjrOZrEhWTKyyIwHwYDVR0j
BBgwFoAUQaERsRwlzYgudIsPGsPnu6ApAkowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTdoWFoxbmY2RTRHN3I5eHhQbkRlNWlSRUxyRXpKSGd5TkxSd1dQeE1T
VjkvMC80MUExMTFCMTFDMjVDRDg4MkU3NDhCMEYxQUMzRTdCQkEwMjkwMjRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxQTExMUIxMUMyNUNEODgy
RTc0OEIwRjFBQzNFN0JCQTAyOTAyNEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E3aFhaMW5mNkU0RzdyOXh4UG5EZTVpUkVMckV6SkhneU5MUndXUHhNU1Y5LzAv
MzEzNzMwMmUzODMyMmUzMjMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzNDM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqUsgwDQYJKoZIhvcNAQELBQADggEBALCvyFSi
PQ3Qx6W0xjYiE3JbGfjE0sYPgRUTcePQeiDZsRcIzpVHLQYniuJCPTs+nkdroBV+
g4Yc4atKdjzO6bwq8+jssZVzxR1ibFq3Sn/Hjs6uxeHbLh93klqTN3TbMiQqV2JR
mtOEhixDcA0lBbkDTbmmxwjyYRSnuJ5DuNmZ5/dOrQSX2HHPa9zVF159fEIZmeVZ
KE48e9a9X+klPEXaIG4aSaFGIjgrQpg7o0f0oa8yul20yugyZzHdnnr5QujroRe3
peU6aHdA/MEgUih6mk5aPEziJGwSPGuxfuh7qG0GyTFGWEpOvtlKq5nVQx/F/GWV
qjjTx2mP8xOUX/c=
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:22:12 2026 by rpki-client