Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137372e3133372e3132302e302f32312d3234203d3e20323633303135.roa
File:                     3137372e3133372e3132302e302f32312d3234203d3e20323633303135.roa (raw, json)
Hash identifier:          lqXYH92MutKLviAjW+olgQ+Uj5qIsX0Qwkf4WhUJkyw=
Subject key identifier:   F0:CB:61:2D:FB:EC:91:81:3E:1C:53:F6:EB:FF:86:98:9D:CC:34:19
Certificate issuer:       /CN=1D232B88607E98B8964937FFC3413A711882D3C4
Certificate serial:       5C284DDD6105C994734F21C0DD700BB54AF55B3F
Authority key identifier: 1D:23:2B:88:60:7E:98:B8:96:49:37:FF:C3:41:3A:71:18:82:D3:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137372e3133372e3132302e302f32312d3234203d3e20323633303135.roa
Signing time:             Tue 09 Jun 2026 19:42:10 +0000
ROA not before:           Tue 09 Jun 2026 19:37:10 +0000
ROA not after:            Tue 08 Jun 2027 19:42:10 +0000
asID:                     263015
IP address blocks:        177.137.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.crl
                          rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 12:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:28:4d:dd:61:05:c9:94:73:4f:21:c0:dd:70:0b:b5:4a:f5:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D232B88607E98B8964937FFC3413A711882D3C4
        Validity
            Not Before: Jun  9 19:37:10 2026 GMT
            Not After : Jun  8 19:42:10 2027 GMT
        Subject: CN=F0CB612DFBEC91813E1C53F6EBFF86989DCC3419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:e0:22:f8:dc:d1:a1:ca:00:38:93:ad:bc:
                    3a:67:e3:81:69:75:1c:4f:4d:92:81:36:44:d0:48:
                    6d:60:d0:a7:5d:4d:0c:c9:ec:28:cb:62:27:1e:5a:
                    6c:57:a8:50:c6:7d:90:b6:04:70:39:35:e6:3d:5e:
                    4a:27:f8:6a:81:67:f3:83:bd:5c:ea:af:5b:bb:16:
                    c0:29:d1:1c:31:75:03:58:8c:1b:ab:8f:6e:8e:d0:
                    94:b1:95:30:a4:d2:97:a9:65:4d:44:d6:2e:e5:97:
                    d7:6c:4c:85:9d:54:b1:06:0c:78:ed:3d:1f:35:dc:
                    ef:5f:83:c5:c9:bb:98:b4:d9:1b:45:bb:0a:bb:36:
                    d6:6a:6d:a6:9f:1e:4e:c6:10:95:8f:23:ed:c6:20:
                    bf:6a:ce:6a:c2:87:bb:f1:d4:bc:5a:53:a2:39:cd:
                    ba:e1:a5:ff:3a:eb:35:07:e7:14:7f:9a:c0:e7:8e:
                    29:c7:58:60:21:f0:40:6b:f3:98:fb:40:55:ff:48:
                    1d:4d:d5:e5:46:b3:50:e0:88:7e:70:80:92:04:fc:
                    56:cd:21:72:fc:c2:f7:60:cd:28:2d:93:f0:90:05:
                    28:7b:f1:61:b8:8d:7e:2f:62:e9:1c:f7:a3:d4:12:
                    0f:99:e8:08:b2:dd:46:34:47:67:25:84:4f:62:db:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CB:61:2D:FB:EC:91:81:3E:1C:53:F6:EB:FF:86:98:9D:CC:34:19
            X509v3 Authority Key Identifier:
                keyid:1D:23:2B:88:60:7E:98:B8:96:49:37:FF:C3:41:3A:71:18:82:D3:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/1D232B88607E98B8964937FFC3413A711882D3C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D232B88607E98B8964937FFC3413A711882D3C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5maKy9ZjPCPUw2PJX7kTL536AhWAkAxwd2yosRageRn/0/3137372e3133372e3132302e302f32312d3234203d3e20323633303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1c:ea:85:15:4b:dd:92:1f:0b:de:03:8b:f6:f3:3c:56:1f:9c:
         b7:61:76:1e:d6:1e:87:76:24:bf:41:ab:78:be:64:fa:bc:b5:
         08:15:e8:ac:df:df:4e:aa:f1:68:68:ec:a8:c2:97:5e:37:9d:
         8b:f4:89:9c:06:35:40:19:75:98:c6:a8:7c:29:32:98:5f:a5:
         ac:cf:3c:f5:10:a0:9a:79:4a:e5:02:ff:11:e6:ac:93:2a:a7:
         31:fd:99:07:88:e4:f0:47:c6:38:09:2a:60:69:2b:5e:f1:1f:
         86:f9:e8:27:6d:a7:f7:91:8f:e4:e3:91:7f:60:cc:4c:68:84:
         9c:d6:b6:b4:6c:4b:54:a4:72:fe:7a:3d:99:93:92:14:f4:40:
         cf:ed:e6:29:9d:34:a3:ba:12:66:c9:72:ae:3d:0f:6a:c1:b8:
         00:52:c1:97:87:e8:11:a6:83:70:31:27:c0:f7:f7:14:f1:25:
         d3:ec:c4:14:74:95:ed:b4:c6:4a:bb:ba:82:1f:30:ad:27:03:
         d7:2c:79:e9:49:58:7b:1d:ff:30:6c:c8:02:a0:eb:0a:bd:71:
         3f:fc:f6:84:ce:44:15:50:35:a0:62:b4:ee:7a:4f:97:77:86:
         08:ba:e1:89:f8:3b:1b:ba:32:9c:93:7b:10:0b:31:6a:72:4f:
         02:92:f4:f4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXChN3WEFyZRzTyHA3XALtUr1Wz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQyMzJCODg2MDdFOThCODk2NDkzN0ZGQzM0MTNBNzEx
ODgyRDNDNDAeFw0yNjA2MDkxOTM3MTBaFw0yNzA2MDgxOTQyMTBaMDMxMTAvBgNV
BAMTKEYwQ0I2MTJERkJFQzkxODEzRTFDNTNGNkVCRkY4Njk4OURDQzM0MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1eAi+NzRocoAOJOtvDpn44Fp
dRxPTZKBNkTQSG1g0KddTQzJ7CjLYiceWmxXqFDGfZC2BHA5NeY9Xkon+GqBZ/OD
vVzqr1u7FsAp0RwxdQNYjBurj26O0JSxlTCk0pepZU1E1i7ll9dsTIWdVLEGDHjt
PR813O9fg8XJu5i02RtFuwq7NtZqbaafHk7GEJWPI+3GIL9qzmrCh7vx1LxaU6I5
zbrhpf866zUH5xR/msDnjinHWGAh8EBr85j7QFX/SB1N1eVGs1DgiH5wgJIE/FbN
IXL8wvdgzSgtk/CQBSh78WG4jX4vYukc96PUEg+Z6Aiy3UY0R2clhE9i26ZhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8MthLfvskYE+HFP26/+GmJ3MNBkwHwYDVR0j
BBgwFoAUHSMriGB+mLiWSTf/w0E6cRiC08QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVtYUt5OVpqUENQVXcyUEpYN2tUTDUzNkFoV0FrQXh3ZDJ5b3NSYWdl
Um4vMC8xRDIzMkI4ODYwN0U5OEI4OTY0OTM3RkZDMzQxM0E3MTE4ODJEM0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFEMjMyQjg4NjA3RTk4Qjg5
NjQ5MzdGRkMzNDEzQTcxMTg4MkQzQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1bWFLeTlaalBDUFV3MlBKWDdrVEw1MzZBaFdBa0F4d2QyeW9zUmFnZVJuLzAv
MzEzNzM3MmUzMTMzMzcyZTMxMzIzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GJeDANBgkqhkiG9w0BAQsFAAOCAQEAHOqF
FUvdkh8L3gOL9vM8Vh+ct2F2HtYeh3Ykv0GreL5k+ry1CBXorN/fTqrxaGjsqMKX
Xjedi/SJnAY1QBl1mMaofCkymF+lrM889RCgmnlK5QL/EeaskyqnMf2ZB4jk8EfG
OAkqYGkrXvEfhvnoJ22n95GP5OORf2DMTGiEnNa2tGxLVKRy/no9mZOSFPRAz+3m
KZ00o7oSZslyrj0PasG4AFLBl4foEaaDcDEnwPf3FPEl0+zEFHSV7bTGSru6gh8w
rScD1yx56UlYex3/MGzIAqDrCr1xP/z2hM5EFVA1oGK07npPl3eGCLrhifg7G7oy
nJN7EAsxanJPApL09A==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:52:22 2026 by rpki-client