Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa
File:                     3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa (raw, json)
Hash identifier:          jSVBuOqRSsH562VUmV/FhB+FqEfzz2bVSNXY0ba3nOs=
Subject key identifier:   E4:C9:C7:2C:50:39:9A:41:C7:D8:76:0C:99:40:8E:A1:92:CF:A8:93
Certificate issuer:       /CN=C8232E7ADA2149C400868144F5DA83930BC26309
Certificate serial:       7A1C87296924299597A2386ADB58BA65E800B8BC
Authority key identifier: C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa
Signing time:             Thu 26 Feb 2026 18:55:48 +0000
ROA not before:           Thu 26 Feb 2026 18:50:48 +0000
ROA not after:            Thu 25 Feb 2027 18:55:48 +0000
asID:                     262566
IP address blocks:        177.129.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl
                          rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1c:87:29:69:24:29:95:97:a2:38:6a:db:58:ba:65:e8:00:b8:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Validity
            Not Before: Feb 26 18:50:48 2026 GMT
            Not After : Feb 25 18:55:48 2027 GMT
        Subject: CN=E4C9C72C50399A41C7D8760C99408EA192CFA893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:75:d9:8b:7b:55:ed:ad:0d:d1:e2:78:b3:ff:
                    62:7d:33:64:01:19:36:ea:68:5d:6c:8b:53:5d:ce:
                    d8:81:83:e0:a2:52:f4:db:c8:e1:e4:83:fb:93:14:
                    0f:cf:8f:6e:c0:d9:38:4b:bc:45:47:cd:2c:a5:23:
                    51:07:bf:43:05:b6:7b:b6:d4:11:71:19:16:66:83:
                    22:52:64:66:5d:2e:af:a6:c6:f6:83:7f:39:be:60:
                    6c:29:88:eb:d1:ea:35:0b:cc:b4:cf:d7:dc:0e:c6:
                    4a:89:ac:77:f2:82:ca:76:b7:83:0b:23:fe:10:d8:
                    71:a2:22:27:34:1b:d9:9b:5b:62:2f:9c:9c:16:68:
                    97:b1:67:b1:5a:c3:ec:a6:57:65:a6:d9:36:d2:91:
                    30:8a:05:8a:c0:ed:39:bc:7a:0c:7b:cd:6c:6d:0d:
                    9c:14:98:4e:c5:ad:3f:39:21:39:92:4a:ba:27:af:
                    bf:bf:93:ea:f8:9f:dc:0e:99:13:ec:c9:a9:ba:d3:
                    26:13:5d:77:9a:ab:22:1e:ea:a1:cf:2c:58:11:31:
                    3d:ef:fe:64:98:19:0e:4a:48:e2:77:8b:75:91:62:
                    e4:35:df:7f:5f:be:6c:7f:28:b4:5b:cb:87:a5:da:
                    a7:3f:06:a7:5c:8f:10:63:93:da:42:79:f1:df:5f:
                    ed:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:C7:2C:50:39:9A:41:C7:D8:76:0C:99:40:8E:A1:92:CF:A8:93
            X509v3 Authority Key Identifier:
                keyid:C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/3137372e3132392e3138342e302f32342d3234203d3e20323632353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:59:22:46:c8:8d:9b:59:1e:c7:a0:fa:7f:e6:e8:32:01:
         97:05:de:b5:dc:78:92:93:1b:0d:88:3b:0d:9e:00:8f:c5:e3:
         8d:9b:95:f9:af:a1:36:56:ae:2e:da:a7:4a:4d:25:b4:9b:df:
         46:ed:3b:95:b6:67:f9:d8:d2:1e:b0:36:49:b5:12:ee:33:b0:
         85:be:23:6a:72:4f:63:f9:f4:fd:9b:98:19:93:ac:34:a9:58:
         46:ef:d4:9c:34:08:2a:16:7a:24:24:8c:5d:25:b3:5f:5f:3c:
         be:08:2f:4f:6c:fd:5e:e6:64:5a:34:28:d5:2b:9e:7a:89:58:
         9f:68:f5:96:ab:ac:8c:cf:91:e0:09:13:2f:0a:71:80:4b:c7:
         2f:f6:1c:a0:02:7f:9a:e6:66:bd:69:dc:56:59:33:6b:9b:34:
         6e:b6:e2:87:b6:9e:a0:ad:e2:52:53:9e:f6:10:a6:f8:5f:be:
         f4:a8:4e:23:32:93:e9:33:e2:13:54:f0:f2:76:1c:85:4f:c9:
         1a:3a:81:ce:54:cc:15:eb:cf:37:18:ff:76:32:83:2f:d5:45:
         ba:e6:4e:50:0d:04:cb:fe:d8:8a:7c:a7:8a:37:85:52:16:51:
         d5:2f:70:68:b8:c8:35:b6:c4:07:c3:dc:b7:05:db:5a:b7:39:
         97:0f:0d:53
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUehyHKWkkKZWXojhq21i6ZegAuLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgyMzJFN0FEQTIxNDlDNDAwODY4MTQ0RjVEQTgzOTMw
QkMyNjMwOTAeFw0yNjAyMjYxODUwNDhaFw0yNzAyMjUxODU1NDhaMDMxMTAvBgNV
BAMTKEU0QzlDNzJDNTAzOTlBNDFDN0Q4NzYwQzk5NDA4RUExOTJDRkE4OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKddmLe1XtrQ3R4niz/2J9M2QB
GTbqaF1si1NdztiBg+CiUvTbyOHkg/uTFA/Pj27A2ThLvEVHzSylI1EHv0MFtnu2
1BFxGRZmgyJSZGZdLq+mxvaDfzm+YGwpiOvR6jULzLTP19wOxkqJrHfygsp2t4ML
I/4Q2HGiIic0G9mbW2IvnJwWaJexZ7Faw+ymV2Wm2TbSkTCKBYrA7Tm8egx7zWxt
DZwUmE7FrT85ITmSSronr7+/k+r4n9wOmRPsyam60yYTXXeaqyIe6qHPLFgRMT3v
/mSYGQ5KSOJ3i3WRYuQ1339fvmx/KLRby4el2qc/BqdcjxBjk9pCefHfX+2fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5MnHLFA5mkHH2HYMmUCOoZLPqJMwHwYDVR0j
BBgwFoAUyCMuetohScQAhoFE9dqDkwvCYwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVtaFpGZ0RTb3pLUHZTQmYxanVENWY4TmdLQVZDS0pzWU1oY1RQc29G
VHcvMS9DODIzMkU3QURBMjE0OUM0MDA4NjgxNDRGNURBODM5MzBCQzI2MzA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4MjMyRTdBREEyMTQ5QzQw
MDg2ODE0NEY1REE4MzkzMEJDMjYzMDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1bWhaRmdEU296S1B2U0JmMWp1RDVmOE5nS0FWQ0tKc1lNaGNUUHNvRlR3LzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBuDANBgkqhkiG9w0BAQsFAAOCAQEAPzBZ
IkbIjZtZHseg+n/m6DIBlwXetdx4kpMbDYg7DZ4Aj8XjjZuV+a+hNlauLtqnSk0l
tJvfRu07lbZn+djSHrA2SbUS7jOwhb4janJPY/n0/ZuYGZOsNKlYRu/UnDQIKhZ6
JCSMXSWzX188vggvT2z9XuZkWjQo1SueeolYn2j1lqusjM+R4AkTLwpxgEvHL/Yc
oAJ/muZmvWncVlkza5s0brbih7aeoK3iUlOe9hCm+F++9KhOIzKT6TPiE1Tw8nYc
hU/JGjqBzlTMFevPNxj/djKDL9VFuuZOUA0Ey/7YinynijeFUhZR1S9waLjINbbE
B8PctwXbWrc5lw8NUw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:00 2026 by rpki-client