Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e302e3231322e302f32322d3234203d3e20323633303135.roa
File:                     3137302e302e3231322e302f32322d3234203d3e20323633303135.roa (raw, json)
Hash identifier:          icDceLW65/gdlDJeGzHVmf/A2cFNJ0mp+JieA5zl6Xs=
Subject key identifier:   E5:4D:57:1E:56:5F:BF:43:4A:8A:20:9D:AD:7A:2C:E5:4A:7F:D5:E9
Certificate issuer:       /CN=1D232B88607E98B8964937FFC3413A711882D3C4
Certificate serial:       51BFF77E22C8CC4ECD52F53A3A72633AC55D62FD
Authority key identifier: 1D:23:2B:88:60:7E:98:B8:96:49:37:FF:C3:41:3A:71:18:82:D3:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e302e3231322e302f32322d3234203d3e20323633303135.roa
Signing time:             Tue 09 Jun 2026 19:54:32 +0000
ROA not before:           Tue 09 Jun 2026 19:49:32 +0000
ROA not after:            Tue 08 Jun 2027 19:54:32 +0000
asID:                     263015
IP address blocks:        170.0.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.crl
                          rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bf:f7:7e:22:c8:cc:4e:cd:52:f5:3a:3a:72:63:3a:c5:5d:62:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D232B88607E98B8964937FFC3413A711882D3C4
        Validity
            Not Before: Jun  9 19:49:32 2026 GMT
            Not After : Jun  8 19:54:32 2027 GMT
        Subject: CN=E54D571E565FBF434A8A209DAD7A2CE54A7FD5E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:ec:9c:04:c9:55:43:f0:ed:8d:89:d7:8d:
                    13:21:17:9f:f7:fd:67:28:a4:8c:72:27:82:6c:0f:
                    f1:f2:8a:1a:19:c3:6f:3b:ba:2e:58:11:10:8f:d7:
                    9b:3e:9d:56:e3:fc:dd:b1:32:ec:2b:57:60:22:f5:
                    e7:3c:66:53:0b:17:23:2c:d2:7f:24:05:40:7e:3c:
                    11:3c:ef:a9:33:0e:7d:2e:c2:93:d8:3b:b3:93:eb:
                    17:91:d1:01:02:f7:24:34:b9:b4:f8:66:79:58:a6:
                    f6:93:8f:14:7f:b6:17:12:f3:9d:40:a1:ab:42:7c:
                    6f:51:29:3e:68:37:2f:90:06:c4:b1:7b:02:9f:44:
                    e3:b7:27:4b:ca:8e:7f:34:a4:a4:c4:45:8d:b6:c2:
                    85:a6:48:e6:4b:93:75:0a:45:a8:9e:81:55:6e:7a:
                    3d:20:22:cc:9a:b4:83:62:b9:56:ea:1e:1c:86:9a:
                    f3:55:98:fc:83:df:98:19:23:8e:c9:20:e6:df:7c:
                    83:02:a9:7f:cf:df:a9:87:b6:78:54:1e:2c:0a:4b:
                    ba:84:d7:a2:a3:de:8c:d7:e6:40:c5:9d:e6:90:a7:
                    aa:86:f2:ab:37:bf:48:25:bf:bc:32:5a:99:69:3b:
                    4e:20:e5:f7:08:4d:b2:5f:4d:90:98:4e:ba:34:fe:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4D:57:1E:56:5F:BF:43:4A:8A:20:9D:AD:7A:2C:E5:4A:7F:D5:E9
            X509v3 Authority Key Identifier:
                keyid:1D:23:2B:88:60:7E:98:B8:96:49:37:FF:C3:41:3A:71:18:82:D3:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137302e302e3231322e302f32322d3234203d3e20323633303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ed:b7:45:52:e1:07:5e:a4:c8:be:f0:cb:8d:dd:2e:97:2a:
         a4:10:30:8f:03:5e:aa:b3:3d:5c:b8:fd:cb:01:99:d4:8c:58:
         64:d8:f0:ee:71:ef:8f:28:ec:c2:0c:d0:a1:a8:66:b9:9b:38:
         74:5a:12:14:92:6d:13:be:08:ae:27:2a:19:e4:05:d4:0d:86:
         72:d2:4d:74:7c:68:8b:7a:d5:d2:93:02:4e:75:90:64:b1:7d:
         89:d4:0c:e0:f8:40:35:40:1d:08:38:fb:9b:dc:fd:31:52:e9:
         24:ae:61:cb:bb:95:38:09:0e:7c:16:16:58:9d:93:77:2a:30:
         80:10:b4:39:ec:b5:c4:3c:32:9b:ba:dd:79:a8:dc:9b:02:70:
         21:7c:df:f9:08:e0:45:f5:95:80:a8:ca:20:3e:0c:59:e4:12:
         33:00:14:f8:35:32:2d:40:56:25:5b:fb:38:59:26:45:b2:9c:
         4a:18:b5:ff:2f:af:da:b3:6f:fc:e9:bf:30:a5:76:fb:4a:2d:
         ff:b2:13:18:42:4d:66:2a:85:0f:c7:05:e9:bc:e8:dc:7e:60:
         da:7d:63:06:9d:de:ac:78:88:73:4d:4e:b5:09:ba:9e:e5:90:
         10:a4:86:a6:bf:9d:ab:3e:69:4e:cb:e0:71:f0:de:ef:53:a1:
         41:5c:1a:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUb/3fiLIzE7NUvU6OnJjOsVdYv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyMzJCODg2MDdFOThCODk2NDkzN0ZGQzM0MTNBNzEx
ODgyRDNDNDAeFw0yNjA2MDkxOTQ5MzJaFw0yNzA2MDgxOTU0MzJaMDMxMTAvBgNV
BAMTKEU1NEQ1NzFFNTY1RkJGNDM0QThBMjA5REFEN0EyQ0U1NEE3RkQ1RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFT+ycBMlVQ/DtjYnXjRMhF5/3
/WcopIxyJ4JsD/HyihoZw287ui5YERCP15s+nVbj/N2xMuwrV2Ai9ec8ZlMLFyMs
0n8kBUB+PBE876kzDn0uwpPYO7OT6xeR0QEC9yQ0ubT4ZnlYpvaTjxR/thcS851A
oatCfG9RKT5oNy+QBsSxewKfROO3J0vKjn80pKTERY22woWmSOZLk3UKRaiegVVu
ej0gIsyatINiuVbqHhyGmvNVmPyD35gZI47JIObffIMCqX/P36mHtnhUHiwKS7qE
16Kj3ozX5kDFneaQp6qG8qs3v0glv7wyWplpO04g5fcITbJfTZCYTro0/i8JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5U1XHlZfv0NKiiCdrXos5Up/1ekwHwYDVR0j
BBgwFoAUHSMriGB+mLiWSTf/w0E6cRiC08QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVtYUt5OVpqUENQVXcyUEpYN2tUTDUzNkFoV0FrQXh3ZDJ5b3NSYWdl
Um4vMC8xRDIzMkI4ODYwN0U5OEI4OTY0OTM3RkZDMzQxM0E3MTE4ODJEM0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMjMyQjg4NjA3RTk4Qjg5
NjQ5MzdGRkMzNDEzQTcxMTg4MkQzQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1bWFLeTlaalBDUFV3MlBKWDdrVEw1MzZBaFdBa0F4d2QyeW9zUmFnZVJuLzAv
MzEzNzMwMmUzMDJlMzIzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMz
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDUMA0GCSqGSIb3DQEBCwUAA4IBAQB/7bdFUuEH
XqTIvvDLjd0ulyqkEDCPA16qsz1cuP3LAZnUjFhk2PDuce+PKOzCDNChqGa5mzh0
WhIUkm0TvgiuJyoZ5AXUDYZy0k10fGiLetXSkwJOdZBksX2J1Azg+EA1QB0IOPub
3P0xUukkrmHLu5U4CQ58FhZYnZN3KjCAELQ57LXEPDKbut15qNybAnAhfN/5COBF
9ZWAqMogPgxZ5BIzABT4NTItQFYlW/s4WSZFspxKGLX/L6/as2/86b8wpXb7Si3/
shMYQk1mKoUPxwXpvOjcfmDafWMGnd6seIhzTU61Cbqe5ZAQpIamv52rPmlOy+Bx
8N7vU6FBXBrT
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:55 2026 by rpki-client