Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
File:                     3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa (raw, json)
Hash identifier:          CpIAsmlVTPwvN5vVC9TAgBmptp5onm9Q7i3YqG8l05A=
Subject key identifier:   C5:BB:73:2E:EB:4D:AE:18:34:8C:C1:F1:AA:54:41:BD:42:E1:D0:47
Certificate issuer:       /CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
Certificate serial:       4105EF57BC7201C986FE507891DF8A7F8BA43E24
Authority key identifier: 2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa
Signing time:             Tue 13 Oct 2026 13:34:13 +0000
ROA not before:           Tue 13 Oct 2026 13:29:13 +0000
ROA not after:            Tue 12 Oct 2027 13:34:13 +0000
asID:                     262478
IP address blocks:        177.47.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl
                          rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 12:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:ef:57:bc:72:01:c9:86:fe:50:78:91:df:8a:7f:8b:a4:3e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A
        Validity
            Not Before: Oct 13 13:29:13 2026 GMT
            Not After : Oct 12 13:34:13 2027 GMT
        Subject: CN=C5BB732EEB4DAE18348CC1F1AA5441BD42E1D047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:62:1c:a9:c2:cc:c3:d0:7c:61:d3:85:44:6e:
                    7f:b8:56:e3:da:7f:8e:a5:b4:fe:6d:32:0c:2f:08:
                    cf:50:02:91:44:bb:a9:74:bb:ef:e2:c7:f2:16:21:
                    dd:b6:a0:1e:29:7b:2d:aa:55:30:98:da:84:ae:ea:
                    2b:e4:78:14:12:f5:98:54:db:41:e0:da:7b:36:31:
                    0f:0e:d6:9d:15:5b:bd:be:a7:37:ce:d6:f0:45:9f:
                    c9:c8:ae:de:c8:3e:25:55:f3:fa:44:b4:5a:17:01:
                    75:e7:d7:de:6a:63:03:93:65:94:dc:0c:a4:a3:ee:
                    62:87:8b:ec:af:16:46:d0:b4:6a:7a:7f:7b:d4:5c:
                    b5:36:61:9d:96:cf:72:43:1e:26:87:ba:7f:38:39:
                    a7:a2:f9:a1:6f:b9:64:72:3e:2c:41:0d:be:8e:0e:
                    99:89:c5:be:bf:83:55:b2:f2:66:ad:d2:8e:ec:36:
                    da:0b:a9:0a:48:d9:db:64:dd:13:1b:b7:e3:6b:15:
                    ff:0a:58:4b:aa:70:2b:9d:e7:d8:4d:56:a9:0d:84:
                    eb:ec:a8:cc:32:19:a4:37:c1:9b:91:d6:12:bc:49:
                    4a:d2:41:aa:49:8d:8a:49:52:73:d1:b2:95:d1:08:
                    1a:ad:2d:ab:ff:bb:b7:d7:61:01:e7:dd:e9:2f:48:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:73:2E:EB:4D:AE:18:34:8C:C1:F1:AA:54:41:BD:42:E1:D0:47
            X509v3 Authority Key Identifier:
                keyid:2A:DB:E9:AD:84:AE:FF:D4:39:4F:6B:8E:20:CB:07:E9:C0:30:C5:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ADBE9AD84AEFFD4394F6B8E20CB07E9C030C53A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/2/3137372e34372e3234382e302f32332d3233203d3e20323632343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:46:a5:04:f3:0b:ec:55:15:a2:77:c6:37:b4:c7:ad:a2:c1:
         93:3f:bf:76:80:63:ca:ce:77:8c:bd:e1:50:4c:aa:5d:00:dc:
         c8:49:f1:82:16:82:54:76:ff:6e:03:9f:7c:7d:5a:b7:be:be:
         45:24:e5:59:3f:d8:bf:ff:02:88:4c:82:66:a7:0d:2b:23:92:
         a1:a1:97:b6:2b:3b:af:8a:98:33:8d:60:4f:ac:df:f0:f2:2a:
         e4:b4:d1:e2:03:c5:da:d7:6e:db:0e:06:c0:d5:d9:f8:31:9a:
         2f:83:95:10:cc:3b:42:e6:49:b2:43:d1:a8:00:6b:7a:2e:fc:
         67:80:1d:f7:cd:80:9c:73:8b:e8:e2:07:82:e4:17:7d:d4:1d:
         38:ab:67:5f:6e:c8:05:36:44:ff:d8:c3:71:7f:f0:6a:15:62:
         a8:de:96:45:ce:29:72:d8:55:56:df:bf:58:96:1c:a7:26:fe:
         e0:7f:d4:da:5e:38:f4:e3:06:f5:ed:c4:37:c8:b8:bf:7b:b6:
         4e:47:fd:0e:bb:81:8d:a1:18:c5:b3:25:58:7d:77:56:cd:b2:
         73:a3:cf:95:1a:69:d1:0c:e9:6b:a1:93:27:91:d0:d3:c0:2b:
         16:a1:5e:d4:15:e0:2e:d5:78:89:16:9c:20:a4:1a:26:b3:cb:
         9d:db:ce:e7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQQXvV7xyAcmG/lB4kd+Kf4ukPiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFEQkU5QUQ4NEFFRkZENDM5NEY2QjhFMjBDQjA3RTlD
MDMwQzUzQTAeFw0yNjEwMTMxMzI5MTNaFw0yNzEwMTIxMzM0MTNaMDMxMTAvBgNV
BAMTKEM1QkI3MzJFRUI0REFFMTgzNDhDQzFGMUFBNTQ0MUJENDJFMUQwNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUYhypwszD0Hxh04VEbn+4VuPa
f46ltP5tMgwvCM9QApFEu6l0u+/ix/IWId22oB4pey2qVTCY2oSu6ivkeBQS9ZhU
20Hg2ns2MQ8O1p0VW72+pzfO1vBFn8nIrt7IPiVV8/pEtFoXAXXn195qYwOTZZTc
DKSj7mKHi+yvFkbQtGp6f3vUXLU2YZ2Wz3JDHiaHun84Oaei+aFvuWRyPixBDb6O
DpmJxb6/g1Wy8mat0o7sNtoLqQpI2dtk3RMbt+NrFf8KWEuqcCud59hNVqkNhOvs
qMwyGaQ3wZuR1hK8SUrSQapJjYpJUnPRspXRCBqtLav/u7fXYQHn3ekvSO8JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxbtzLutNrhg0jMHxqlRBvULh0EcwHwYDVR0j
BBgwFoAUKtvprYSu/9Q5T2uOIMsH6cAwxTowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVdXeE5UWmR1NGpQOTRTZDY3cGRTa2ZMQ2R3TndVd3k1MXozQXhza2lL
OEEvMi8yQURCRTlBRDg0QUVGRkQ0Mzk0RjZCOEUyMENCMDdFOUMwMzBDNTNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBREJFOUFEODRBRUZGRDQz
OTRGNkI4RTIwQ0IwN0U5QzAzMEM1M0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VXV3hOVFpkdTRqUDk0U2Q2N3BkU2tmTENkd053VXd5NTF6M0F4c2tpSzhBLzIv
MzEzNzM3MmUzNDM3MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxL/gwDQYJKoZIhvcNAQELBQADggEBAJdGpQTz
C+xVFaJ3xje0x62iwZM/v3aAY8rOd4y94VBMql0A3MhJ8YIWglR2/24Dn3x9Wre+
vkUk5Vk/2L//AohMgmanDSsjkqGhl7YrO6+KmDONYE+s3/DyKuS00eIDxdrXbtsO
BsDV2fgxmi+DlRDMO0LmSbJD0agAa3ou/GeAHffNgJxzi+jiB4LkF33UHTirZ19u
yAU2RP/Yw3F/8GoVYqjelkXOKXLYVVbfv1iWHKcm/uB/1NpeOPTjBvXtxDfIuL97
tk5H/Q67gY2hGMWzJVh9d1bNsnOjz5UaadEM6WuhkyeR0NPAKxahXtQV4C7VeIkW
nCCkGiazy53bzuc=
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:30:37 2026 by rpki-client