Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/3137372e38342e32342e302f32322d3332203d3e20323632353737.roa
File:                     3137372e38342e32342e302f32322d3332203d3e20323632353737.roa (raw, json)
Hash identifier:          +jEdDp9EA7lRTIzWzVNW9syn95exciZtXmWtHnuIP8k=
Subject key identifier:   7C:AE:34:EE:FF:59:3F:C5:51:49:2C:AC:DA:31:E3:FB:F6:7E:79:9A
Certificate issuer:       /CN=D2991FF0EF094685597EA5146C4730F0270A9201
Certificate serial:       6CE5BA88AC3D865883A0B0C0F62117EF2A2DB2E2
Authority key identifier: D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/3137372e38342e32342e302f32322d3332203d3e20323632353737.roa
Signing time:             Wed 16 Sep 2026 12:15:55 +0000
ROA not before:           Wed 16 Sep 2026 12:10:55 +0000
ROA not after:            Wed 15 Sep 2027 12:15:55 +0000
asID:                     262577
IP address blocks:        177.84.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl
                          rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 12:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:e5:ba:88:ac:3d:86:58:83:a0:b0:c0:f6:21:17:ef:2a:2d:b2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2991FF0EF094685597EA5146C4730F0270A9201
        Validity
            Not Before: Sep 16 12:10:55 2026 GMT
            Not After : Sep 15 12:15:55 2027 GMT
        Subject: CN=7CAE34EEFF593FC551492CACDA31E3FBF67E799A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:93:9e:a7:a2:4d:18:09:06:14:3d:f4:cf:
                    00:d5:5e:0b:d6:c4:a6:cc:d4:b7:02:da:f9:5e:9f:
                    9e:f5:7a:b7:82:f4:40:4f:a6:4f:a9:0b:6c:77:3b:
                    32:fd:55:28:9d:f7:d9:0e:ba:e7:4b:70:d4:17:ae:
                    16:b9:db:81:28:19:6e:3d:0a:3a:e0:13:e9:19:4f:
                    5d:eb:6f:c6:e5:75:cf:0d:b3:f2:04:cf:ed:72:6c:
                    63:cb:cc:b1:1c:f1:dd:64:85:5f:a6:e2:e1:fd:d0:
                    9e:77:59:28:47:f4:19:2b:42:3e:07:f1:3b:7a:9b:
                    c0:97:2f:45:da:32:db:98:4c:76:20:d7:5d:71:bd:
                    83:e6:f2:7c:98:12:9b:d1:20:36:67:30:5a:c9:13:
                    2c:84:25:8a:4e:a2:41:67:2e:19:a3:43:88:4f:88:
                    19:48:a5:ad:07:34:dd:af:d3:4a:74:84:1b:61:ab:
                    e3:3c:b1:ec:1f:81:30:a2:e5:58:c9:5b:0d:6f:55:
                    dc:4c:17:a4:da:ec:10:21:da:75:cc:a0:2e:9e:56:
                    00:50:7d:9e:33:69:5c:ff:67:1d:30:22:79:b0:69:
                    a7:fd:b6:a0:5d:55:e2:21:32:5c:47:df:9c:11:12:
                    6e:04:5d:64:49:a8:f9:bc:d8:ae:57:22:08:e2:2d:
                    91:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AE:34:EE:FF:59:3F:C5:51:49:2C:AC:DA:31:E3:FB:F6:7E:79:9A
            X509v3 Authority Key Identifier:
                keyid:D2:99:1F:F0:EF:09:46:85:59:7E:A5:14:6C:47:30:F0:27:0A:92:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/D2991FF0EF094685597EA5146C4730F0270A9201.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2991FF0EF094685597EA5146C4730F0270A9201.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFQUi5VQZ467FVoMjHeM2JKLSRACLH3TkheY8xHPTVFz/0/3137372e38342e32342e302f32322d3332203d3e20323632353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:66:95:9b:47:9e:1a:2b:d2:7d:69:a3:58:08:b6:21:1b:
         3f:d4:a4:2d:33:1b:79:36:18:c4:75:46:7b:d9:07:07:d1:04:
         24:9a:cf:ae:63:42:9c:c3:1b:63:c6:ba:e3:9e:67:09:63:24:
         b2:bb:3a:18:fe:93:91:58:07:91:56:75:e8:c5:24:49:52:d1:
         e4:c4:a9:42:8d:d5:fe:18:34:88:2d:74:fe:35:45:32:20:3a:
         9e:a1:d2:bb:74:57:fc:b9:89:1d:02:e6:51:cd:27:a5:1d:41:
         c7:0e:a0:41:41:5f:fb:cd:5a:a2:05:25:22:86:16:21:73:9c:
         05:66:56:b3:d7:85:66:34:5c:96:1e:1e:d8:21:24:f1:07:3b:
         ad:94:83:31:3c:48:9b:c5:2b:2e:4f:21:e0:1d:0c:56:f8:87:
         87:9b:97:de:9b:9c:8a:f4:18:9b:b8:a7:4d:51:f9:06:6e:e6:
         6f:74:05:16:4d:e6:65:19:47:e9:10:4c:96:f7:55:20:09:23:
         62:7f:36:2f:d7:3e:6c:9f:ab:f2:b3:5d:87:0b:55:93:61:f3:
         af:af:83:ae:7d:a0:cd:99:ea:4a:a1:cc:c9:56:fd:21:d0:c2:
         be:01:88:44:a9:46:f4:4f:8d:68:da:ce:5e:5b:cb:88:42:69:
         c2:c2:02:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbOW6iKw9hliDoLDA9iEX7yotsuIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI5OTFGRjBFRjA5NDY4NTU5N0VBNTE0NkM0NzMwRjAy
NzBBOTIwMTAeFw0yNjA5MTYxMjEwNTVaFw0yNzA5MTUxMjE1NTVaMDMxMTAvBgNV
BAMTKDdDQUUzNEVFRkY1OTNGQzU1MTQ5MkNBQ0RBMzFFM0ZCRjY3RTc5OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01ZOep6JNGAkGFD30zwDVXgvW
xKbM1LcC2vlen571ereC9EBPpk+pC2x3OzL9VSid99kOuudLcNQXrha524EoGW49
CjrgE+kZT13rb8bldc8Ns/IEz+1ybGPLzLEc8d1khV+m4uH90J53WShH9BkrQj4H
8Tt6m8CXL0XaMtuYTHYg111xvYPm8nyYEpvRIDZnMFrJEyyEJYpOokFnLhmjQ4hP
iBlIpa0HNN2v00p0hBthq+M8sewfgTCi5VjJWw1vVdxMF6Ta7BAh2nXMoC6eVgBQ
fZ4zaVz/Zx0wInmwaaf9tqBdVeIhMlxH35wREm4EXWRJqPm82K5XIgjiLZE3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfK407v9ZP8VRSSys2jHj+/Z+eZowHwYDVR0j
BBgwFoAU0pkf8O8JRoVZfqUUbEcw8CcKkgEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZRVWk1VlFaNDY3RlZvTWpIZU0ySktMU1JBQ0xIM1RraGVZOHhIUFRW
RnovMC9EMjk5MUZGMEVGMDk0Njg1NTk3RUE1MTQ2QzQ3MzBGMDI3MEE5MjAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyOTkxRkYwRUYwOTQ2ODU1
OTdFQTUxNDZDNDczMEYwMjcwQTkyMDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JGUVVpNVZRWjQ2N0ZWb01qSGVNMkpLTFNSQUNMSDNUa2hlWTh4SFBUVkZ6LzAv
MzEzNzM3MmUzODM0MmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjMy
MzUzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVQYMA0GCSqGSIb3DQEBCwUAA4IBAQCIsGaVm0ee
GivSfWmjWAi2IRs/1KQtMxt5NhjEdUZ72QcH0QQkms+uY0KcwxtjxrrjnmcJYySy
uzoY/pORWAeRVnXoxSRJUtHkxKlCjdX+GDSILXT+NUUyIDqeodK7dFf8uYkdAuZR
zSelHUHHDqBBQV/7zVqiBSUihhYhc5wFZlaz14VmNFyWHh7YISTxBzutlIMxPEib
xSsuTyHgHQxW+IeHm5fem5yK9BibuKdNUfkGbuZvdAUWTeZlGUfpEEyW91UgCSNi
fzYv1z5sn6vys12HC1WTYfOvr4OufaDNmepKoczJVv0h0MK+AYhEqUb0T41o2s5e
W8uIQmnCwgLn
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:25:02 2026 by rpki-client