Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa
File:                     3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          G2A0SaCfn7P0x9s206eZjhQkCLL23kOqpHuvmLqytrE=
Subject key identifier:   31:0B:8B:8C:48:FD:1D:FA:B0:0B:26:43:A6:71:E9:58:71:26:A9:DD
Certificate issuer:       /CN=B1A2287CEAA131778218645B379857543955CA06
Certificate serial:       20D477DB621CDD37B6E5EF5EE9D2D82C6DE5125F
Authority key identifier: B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa
Signing time:             Wed 01 Apr 2026 12:59:55 +0000
ROA not before:           Wed 01 Apr 2026 12:54:55 +0000
ROA not after:            Wed 31 Mar 2027 12:59:55 +0000
asID:                     52540
IP address blocks:        177.129.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl
                          rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 07:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d4:77:db:62:1c:dd:37:b6:e5:ef:5e:e9:d2:d8:2c:6d:e5:12:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1A2287CEAA131778218645B379857543955CA06
        Validity
            Not Before: Apr  1 12:54:55 2026 GMT
            Not After : Mar 31 12:59:55 2027 GMT
        Subject: CN=310B8B8C48FD1DFAB00B2643A671E9587126A9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:f8:68:86:de:54:b3:7f:63:6d:5a:38:30:
                    d8:ae:97:e4:7d:c8:b9:ec:27:3c:2c:ec:a9:de:9f:
                    b4:61:2d:45:89:22:7c:0a:12:b8:79:29:72:47:1a:
                    1d:40:a1:7c:4b:67:c6:eb:53:ad:aa:bd:8e:d0:77:
                    15:b9:e9:b2:3b:9d:c7:61:0d:41:87:f5:31:24:8a:
                    30:cb:87:a9:37:a0:84:cf:df:a6:10:7e:36:93:60:
                    42:cc:39:c6:54:f7:ac:c9:a6:10:67:d7:c5:bc:a6:
                    0e:57:96:44:0f:17:d3:19:61:2d:1e:56:b2:76:ff:
                    6a:29:59:d8:8b:24:95:e8:73:85:85:b3:ae:2a:69:
                    73:8c:5a:e1:dc:c3:d4:89:35:5a:e3:b8:4e:8d:56:
                    02:ee:48:50:b2:d9:68:19:19:6a:71:4e:fb:79:3e:
                    6b:7a:65:e0:52:2d:c6:7e:e8:15:5a:7e:5b:a5:64:
                    e7:e9:4b:cc:84:ed:87:ae:49:29:a7:aa:15:cd:63:
                    28:59:5e:0e:d0:45:2d:de:05:17:69:4a:f9:5c:3d:
                    5e:53:c7:8c:8c:3b:3d:af:c3:03:16:97:c0:79:85:
                    f6:38:40:bf:73:30:f2:a9:17:fd:f7:e9:4d:a0:e1:
                    8d:f9:f4:f2:37:96:3a:bb:af:54:57:c4:3d:fa:84:
                    4c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0B:8B:8C:48:FD:1D:FA:B0:0B:26:43:A6:71:E9:58:71:26:A9:DD
            X509v3 Authority Key Identifier:
                keyid:B1:A2:28:7C:EA:A1:31:77:82:18:64:5B:37:98:57:54:39:55:CA:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/B1A2287CEAA131778218645B379857543955CA06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1A2287CEAA131778218645B379857543955CA06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/2/3137372e3132392e3132362e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:11:92:87:66:7e:11:04:1a:e6:f4:91:11:66:0c:9e:b8:
         37:3d:f7:ae:fe:5a:54:fd:b2:dd:e0:9d:52:c1:6f:8c:3d:41:
         87:ae:c2:83:22:13:05:ff:0d:eb:e2:ee:92:39:d8:18:f5:9c:
         ec:87:12:93:0e:be:a3:d7:28:44:65:d6:fb:2d:b3:59:a6:dc:
         6d:fd:aa:dc:c7:f7:80:9f:38:14:a9:b0:b5:29:b9:06:37:33:
         0e:f0:5d:60:4e:4b:b5:e1:7e:b0:25:b9:c5:b3:cf:7c:a2:12:
         58:73:97:4e:c2:02:0d:49:04:39:8b:bb:e6:f7:62:22:e2:a1:
         59:a0:49:f8:e5:cf:7d:e7:6a:31:03:90:ac:ce:8d:60:b6:de:
         1f:bd:15:e5:0d:a4:e0:5b:b0:a3:9e:81:d1:26:d5:b7:f3:da:
         6d:51:53:a0:47:bc:ec:e4:dc:f8:1b:e2:b9:ce:b2:8b:43:66:
         c8:d0:5d:bf:0d:66:a5:d1:9f:2e:5b:76:a9:66:66:4d:5b:2a:
         29:8a:01:4a:76:1e:13:a5:18:77:fe:a8:e4:69:a6:67:91:f4:
         5c:54:c1:a5:39:d8:ca:1e:b6:3b:f3:07:df:39:1d:96:b7:2b:
         55:01:cd:d6:94:e4:1b:93:83:af:76:d9:00:15:40:16:8e:ff:
         ff:6a:bb:7a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUINR322Ic3Te25e9e6dLYLG3lEl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFBMjI4N0NFQUExMzE3NzgyMTg2NDVCMzc5ODU3NTQz
OTU1Q0EwNjAeFw0yNjA0MDExMjU0NTVaFw0yNzAzMzExMjU5NTVaMDMxMTAvBgNV
BAMTKDMxMEI4QjhDNDhGRDFERkFCMDBCMjY0M0E2NzFFOTU4NzEyNkE5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDECPhoht5Us39jbVo4MNiul+R9
yLnsJzws7Knen7RhLUWJInwKErh5KXJHGh1AoXxLZ8brU62qvY7QdxW56bI7ncdh
DUGH9TEkijDLh6k3oITP36YQfjaTYELMOcZU96zJphBn18W8pg5XlkQPF9MZYS0e
VrJ2/2opWdiLJJXoc4WFs64qaXOMWuHcw9SJNVrjuE6NVgLuSFCy2WgZGWpxTvt5
Pmt6ZeBSLcZ+6BVaflulZOfpS8yE7YeuSSmnqhXNYyhZXg7QRS3eBRdpSvlcPV5T
x4yMOz2vwwMWl8B5hfY4QL9zMPKpF/336U2g4Y359PI3ljq7r1RXxD36hEz9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMQuLjEj9HfqwCyZDpnHpWHEmqd0wHwYDVR0j
BBgwFoAUsaIofOqhMXeCGGRbN5hXVDlVygYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMi9CMUEyMjg3Q0VBQTEzMTc3ODIxODY0NUIzNzk4NTc1NDM5NTVDQTA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxQTIyODdDRUFBMTMxNzc4
MjE4NjQ1QjM3OTg1NzU0Mzk1NUNBMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzIv
MzEzNzM3MmUzMTMyMzkyZTMxMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzNTM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgX4wDQYJKoZIhvcNAQELBQADggEBAFEsEZKH
Zn4RBBrm9JERZgyeuDc9967+WlT9st3gnVLBb4w9QYeuwoMiEwX/Devi7pI52Bj1
nOyHEpMOvqPXKERl1vsts1mm3G39qtzH94CfOBSpsLUpuQY3Mw7wXWBOS7XhfrAl
ucWzz3yiElhzl07CAg1JBDmLu+b3YiLioVmgSfjlz33najEDkKzOjWC23h+9FeUN
pOBbsKOegdEm1bfz2m1RU6BHvOzk3Pgb4rnOsotDZsjQXb8NZqXRny5bdqlmZk1b
KimKAUp2HhOlGHf+qORppmeR9FxUwaU52MoetjvzB985HZa3K1UBzdaU5BuTg692
2QAVQBaO//9qu3o=
-----END CERTIFICATE-----
Generated at Wed Apr 8 19:24:43 2026 by rpki-client