Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa
File:                     3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa (raw, json)
Hash identifier:          H6fDUSaxRQKm+JwWJBnKOB3iQtpHhUrn3wfACBn9/6M=
Subject key identifier:   6F:D6:1E:20:18:5C:B0:6C:C2:16:12:8D:68:11:2B:49:65:0D:39:57
Certificate issuer:       /CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
Certificate serial:       10E76CC449690A600EEE465A5E3B1C1C67D546BF
Authority key identifier: B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa
Signing time:             Fri 27 Feb 2026 19:41:27 +0000
ROA not before:           Fri 27 Feb 2026 19:36:27 +0000
ROA not after:            Fri 26 Feb 2027 19:41:27 +0000
asID:                     270782
IP address blocks:        177.131.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl
                          rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 02:09:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e7:6c:c4:49:69:0a:60:0e:ee:46:5a:5e:3b:1c:1c:67:d5:46:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1E2CC63C140B29130D3460184B7314D3BC134C9
        Validity
            Not Before: Feb 27 19:36:27 2026 GMT
            Not After : Feb 26 19:41:27 2027 GMT
        Subject: CN=6FD61E20185CB06CC216128D68112B49650D3957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8a:12:18:cc:be:46:d4:62:83:04:5b:83:85:
                    c9:7f:c8:e7:4e:d3:71:7d:82:2b:d4:b9:37:32:d3:
                    6d:2c:4a:c9:e9:50:cb:8d:9b:59:ee:3d:b3:69:58:
                    6e:22:60:fb:d9:60:d3:d2:52:8e:25:66:1f:d7:1d:
                    8c:5f:97:b0:8e:88:80:7d:a8:d0:51:e5:59:e4:40:
                    6b:97:7c:c1:d5:0b:ad:52:bf:c0:fe:14:f6:54:7b:
                    3a:cf:29:e5:40:bf:0f:c1:1f:ba:07:e6:26:bb:fa:
                    96:48:9d:66:11:66:f0:78:2e:aa:e9:fc:74:66:0a:
                    a5:73:2a:d8:60:ab:37:da:e6:a9:4c:59:f1:41:b7:
                    16:ba:0d:78:0e:8b:00:03:27:0f:6b:6e:c3:88:da:
                    43:94:b7:04:92:76:98:a2:59:ed:d8:9d:c8:73:0b:
                    3b:4c:e2:c1:a8:d7:6d:3c:a0:02:d0:a4:f8:0b:7c:
                    34:9f:52:ce:ec:f1:37:88:7f:22:f6:b2:69:61:b8:
                    c0:1f:2e:92:83:20:f9:ab:3a:ff:71:bd:25:4c:a9:
                    f0:07:4f:75:a7:23:d5:60:b1:36:43:89:f6:4e:e1:
                    50:c9:e4:5a:a3:17:0f:af:0a:b4:5d:57:df:86:25:
                    21:de:56:d0:7e:3d:6b:02:92:90:b1:ca:84:4a:14:
                    ea:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D6:1E:20:18:5C:B0:6C:C2:16:12:8D:68:11:2B:49:65:0D:39:57
            X509v3 Authority Key Identifier:
                keyid:B1:E2:CC:63:C1:40:B2:91:30:D3:46:01:84:B7:31:4D:3B:C1:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/B1E2CC63C140B29130D3460184B7314D3BC134C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1E2CC63C140B29130D3460184B7314D3BC134C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFqgkQQsvsXSoj2hS2wtm1XRdUVrpyb7oxpoG8mR27BW/0/3137372e3133312e3133352e302f32342d3234203d3e20323730373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:e5:fa:b7:fa:3a:5e:00:92:8f:a2:68:bc:c7:41:3e:8f:
         13:27:97:5d:28:ed:32:0c:c9:3a:2b:da:da:b5:81:95:85:21:
         0b:be:dd:d2:35:67:2c:de:72:b2:d5:f9:35:87:b8:be:58:30:
         c2:cd:49:fe:cf:d5:42:b3:ff:e1:3c:94:72:32:2b:3e:93:a2:
         89:ec:80:b6:6b:d3:aa:16:59:57:7a:aa:a3:c2:5b:9e:29:53:
         dd:07:37:f7:40:f7:b7:7d:e3:97:2a:64:9f:90:94:0e:e7:88:
         cf:1f:9a:d2:73:42:3b:f6:eb:c8:c8:ea:8f:99:21:57:d2:cb:
         6b:da:f0:92:ae:98:d4:32:06:45:e8:6f:b6:ae:38:54:72:af:
         ea:13:37:8c:4a:d0:2c:2f:9d:e7:5c:3e:51:e2:46:83:f6:77:
         7b:ea:02:39:04:60:2c:05:19:30:19:f3:e5:74:7d:ba:99:70:
         c4:53:3a:cd:21:07:e6:78:aa:fb:85:40:fa:af:21:3a:76:40:
         2f:ca:e7:75:90:f5:4a:b7:d0:d3:97:09:72:ad:cc:06:53:97:
         2b:fb:b8:dc:05:eb:6a:db:f5:51:3b:f8:4f:46:9d:85:d7:0a:
         9e:28:15:1c:3c:cc:ed:33:95:ed:4b:d7:11:05:f5:52:38:8b:
         86:8c:cb:79
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEOdsxElpCmAO7kZaXjscHGfVRr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFFMkNDNjNDMTQwQjI5MTMwRDM0NjAxODRCNzMxNEQz
QkMxMzRDOTAeFw0yNjAyMjcxOTM2MjdaFw0yNzAyMjYxOTQxMjdaMDMxMTAvBgNV
BAMTKDZGRDYxRTIwMTg1Q0IwNkNDMjE2MTI4RDY4MTEyQjQ5NjUwRDM5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ihIYzL5G1GKDBFuDhcl/yOdO
03F9givUuTcy020sSsnpUMuNm1nuPbNpWG4iYPvZYNPSUo4lZh/XHYxfl7COiIB9
qNBR5VnkQGuXfMHVC61Sv8D+FPZUezrPKeVAvw/BH7oH5ia7+pZInWYRZvB4Lqrp
/HRmCqVzKthgqzfa5qlMWfFBtxa6DXgOiwADJw9rbsOI2kOUtwSSdpiiWe3Ynchz
CztM4sGo1208oALQpPgLfDSfUs7s8TeIfyL2smlhuMAfLpKDIPmrOv9xvSVMqfAH
T3WnI9VgsTZDifZO4VDJ5FqjFw+vCrRdV9+GJSHeVtB+PWsCkpCxyoRKFOolAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUb9YeIBhcsGzCFhKNaBErSWUNOVcwHwYDVR0j
BBgwFoAUseLMY8FAspEw00YBhLcxTTvBNMkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUZxZ2tRUXN2c1hTb2oyaFMyd3RtMVhSZFVWcnB5YjdveHBvRzhtUjI3
QlcvMC9CMUUyQ0M2M0MxNDBCMjkxMzBEMzQ2MDE4NEI3MzE0RDNCQzEzNEM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxRTJDQzYzQzE0MEIyOTEz
MEQzNDYwMTg0QjczMTREM0JDMTM0QzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VGcWdrUVFzdnNYU29qMmhTMnd0bTFYUmRVVnJweWI3b3hwb0c4bVIyN0JXLzAv
MzEzNzM3MmUzMTMzMzEyZTMxMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzgzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGDhzANBgkqhkiG9w0BAQsFAAOCAQEADdzl
+rf6Ol4Ako+iaLzHQT6PEyeXXSjtMgzJOiva2rWBlYUhC77d0jVnLN5ystX5NYe4
vlgwws1J/s/VQrP/4TyUcjIrPpOiieyAtmvTqhZZV3qqo8JbnilT3Qc390D3t33j
lypkn5CUDueIzx+a0nNCO/bryMjqj5khV9LLa9rwkq6Y1DIGRehvtq44VHKv6hM3
jErQLC+d51w+UeJGg/Z3e+oCOQRgLAUZMBnz5XR9uplwxFM6zSEH5niq+4VA+q8h
OnZAL8rndZD1SrfQ05cJcq3MBlOXK/u43AXratv1UTv4T0adhdcKnigVHDzM7TOV
7UvXEQX1UjiLhozLeQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:15:21 2026 by rpki-client