Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/3137372e37332e3133342e302f32332d3234203d3e20323734363530.roa
File:                     3137372e37332e3133342e302f32332d3234203d3e20323734363530.roa (raw, json)
Hash identifier:          XjReLRizE+VceqEUIdAAeNVlEMCoN76DwEl7OIX4fwM=
Subject key identifier:   2F:41:B2:41:B5:88:A0:4D:EE:DA:45:8F:A4:F4:F8:3A:71:85:60:FC
Certificate issuer:       /CN=06664FAF5CB7684C04F85E86663BF9217A8BA6A0
Certificate serial:       28A091443D8952329E1AC35C0730BDDA1E8AB16C
Authority key identifier: 06:66:4F:AF:5C:B7:68:4C:04:F8:5E:86:66:3B:F9:21:7A:8B:A6:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/3137372e37332e3133342e302f32332d3234203d3e20323734363530.roa
Signing time:             Tue 29 Sep 2026 19:11:50 +0000
ROA not before:           Tue 29 Sep 2026 19:06:50 +0000
ROA not after:            Tue 28 Sep 2027 19:11:50 +0000
asID:                     274650
IP address blocks:        177.73.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.crl
                          rsync://rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 23:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a0:91:44:3d:89:52:32:9e:1a:c3:5c:07:30:bd:da:1e:8a:b1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06664FAF5CB7684C04F85E86663BF9217A8BA6A0
        Validity
            Not Before: Sep 29 19:06:50 2026 GMT
            Not After : Sep 28 19:11:50 2027 GMT
        Subject: CN=2F41B241B588A04DEEDA458FA4F4F83A718560FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:f6:0c:fd:21:dc:b7:34:1c:c8:f9:3e:f1:
                    af:fa:a1:52:a2:d0:ae:c0:20:90:81:15:d1:f6:fb:
                    ae:e8:77:72:db:6e:21:c7:12:34:8a:79:f1:0c:22:
                    36:77:fa:9e:19:46:df:30:a6:96:92:8d:c3:7c:52:
                    52:1a:0c:53:8f:e6:8e:fe:37:46:af:7e:24:a5:b8:
                    00:2c:40:0e:3b:bc:e0:a7:07:c0:f7:b4:a3:a7:fb:
                    de:f2:5a:ed:14:8c:c0:0c:98:62:28:03:8b:a0:a6:
                    a6:76:9d:e1:9c:83:6a:9d:c4:61:eb:5c:1a:f0:b9:
                    d5:2e:dc:ef:f8:c7:24:b2:71:58:0b:fb:a9:ec:af:
                    9d:1c:4e:ec:49:38:7f:b6:93:b5:39:52:a7:5f:bf:
                    91:df:1d:18:51:ef:89:fd:a8:52:f4:e0:66:03:dd:
                    ad:9c:29:22:52:c2:ef:a5:41:15:52:07:78:a5:e7:
                    c0:f6:98:12:f7:fa:9e:48:12:59:d3:34:62:f6:38:
                    f0:23:06:62:9d:aa:8e:85:69:4c:d5:8b:fa:f7:c5:
                    11:b6:44:f9:1a:f9:7b:02:dc:de:08:a7:20:da:fc:
                    3b:fd:05:c4:b7:b3:07:46:32:e2:c8:b8:31:93:15:
                    c1:cb:19:f4:74:90:24:d0:2b:29:f2:96:e6:81:1c:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:41:B2:41:B5:88:A0:4D:EE:DA:45:8F:A4:F4:F8:3A:71:85:60:FC
            X509v3 Authority Key Identifier:
                keyid:06:66:4F:AF:5C:B7:68:4C:04:F8:5E:86:66:3B:F9:21:7A:8B:A6:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06664FAF5CB7684C04F85E86663BF9217A8BA6A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ct3p1CJugScPn2fcLR9V2tNX3komsyegynxkcaR1njRP/0/3137372e37332e3133342e302f32332d3234203d3e20323734363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:52:5b:2c:b6:7f:c4:2c:d7:1b:6d:35:c8:94:81:72:30:45:
         8e:81:eb:ad:54:83:e9:b7:2b:2c:51:f5:f6:68:13:48:51:8f:
         0f:ea:83:ba:c5:67:02:32:4d:77:f3:4d:49:ba:77:39:2a:88:
         af:f4:26:15:9b:24:3c:07:cb:b6:64:ad:1a:d5:22:7f:1a:9e:
         d2:19:96:f3:68:63:59:ee:74:47:63:12:e1:c8:16:b4:25:24:
         ee:e6:dc:1a:d9:b8:44:a3:35:d2:72:09:2c:a3:28:30:76:2c:
         15:97:f8:2f:4a:e8:6b:11:c2:ba:02:32:d6:75:4d:cf:b2:6a:
         89:35:74:1b:35:aa:34:bc:30:e3:45:36:98:6b:93:a3:e1:1a:
         af:24:d9:7a:6d:30:37:c7:b1:81:03:6b:87:4c:30:93:ae:73:
         6e:0d:1c:a1:1f:f7:2f:5c:23:63:b7:4b:89:19:3b:42:9a:2e:
         e9:0e:e5:ec:17:c5:7e:b7:14:ec:e5:95:ff:fc:07:16:3d:fc:
         2d:49:de:1b:44:94:bd:53:04:84:f5:43:27:ec:7c:bb:dd:6a:
         48:93:e2:06:f0:04:94:a8:00:6c:b4:9d:ea:ff:bd:6b:1a:5d:
         cd:84:93:ae:79:6d:9a:09:01:66:46:bb:d5:c8:66:24:b2:ba:
         72:8f:b7:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKKCRRD2JUjKeGsNcBzC92h6KsWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2NjRGQUY1Q0I3Njg0QzA0Rjg1RTg2NjYzQkY5MjE3
QThCQTZBMDAeFw0yNjA5MjkxOTA2NTBaFw0yNzA5MjgxOTExNTBaMDMxMTAvBgNV
BAMTKDJGNDFCMjQxQjU4OEEwNERFRURBNDU4RkE0RjRGODNBNzE4NTYwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0LfYM/SHctzQcyPk+8a/6oVKi
0K7AIJCBFdH2+67od3LbbiHHEjSKefEMIjZ3+p4ZRt8wppaSjcN8UlIaDFOP5o7+
N0avfiSluAAsQA47vOCnB8D3tKOn+97yWu0UjMAMmGIoA4ugpqZ2neGcg2qdxGHr
XBrwudUu3O/4xySycVgL+6nsr50cTuxJOH+2k7U5Uqdfv5HfHRhR74n9qFL04GYD
3a2cKSJSwu+lQRVSB3il58D2mBL3+p5IElnTNGL2OPAjBmKdqo6FaUzVi/r3xRG2
RPka+XsC3N4IpyDa/Dv9BcS3swdGMuLIuDGTFcHLGfR0kCTQKynyluaBHH/jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUL0GyQbWIoE3u2kWPpPT4OnGFYPwwHwYDVR0j
BBgwFoAUBmZPr1y3aEwE+F6GZjv5IXqLpqAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3QzcDFDSnVnU2NQbjJmY0xSOVYydE5YM2tvbXN5ZWd5bnhrY2FSMW5q
UlAvMC8wNjY2NEZBRjVDQjc2ODRDMDRGODVFODY2NjNCRjkyMTdBOEJBNkEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjY0RkFGNUNCNzY4NEMw
NEY4NUU4NjY2M0JGOTIxN0E4QkE2QTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0M3AxQ0p1Z1NjUG4yZmNMUjlWMnROWDNrb21zeWVneW54a2NhUjFualJQLzAv
MzEzNzM3MmUzNzMzMmUzMTMzMzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3
MzQzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxSYYwDQYJKoZIhvcNAQELBQADggEBAERSWyy2
f8Qs1xttNciUgXIwRY6B661Ug+m3KyxR9fZoE0hRjw/qg7rFZwIyTXfzTUm6dzkq
iK/0JhWbJDwHy7ZkrRrVIn8antIZlvNoY1nudEdjEuHIFrQlJO7m3BrZuESjNdJy
CSyjKDB2LBWX+C9K6GsRwroCMtZ1Tc+yaok1dBs1qjS8MONFNphrk6PhGq8k2Xpt
MDfHsYEDa4dMMJOuc24NHKEf9y9cI2O3S4kZO0KaLukO5ewXxX63FOzllf/8BxY9
/C1J3htElL1TBIT1QyfsfLvdakiT4gbwBJSoAGy0ner/vWsaXc2Ek655bZoJAWZG
u9XIZiSyunKPt7M=
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:46:26 2026 by rpki-client