Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e352e302f32342d3234203d3e20323632363432.roa
File:                     3137372e38372e352e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          PSKce1J3wpcPw2hmEC+Hli5gyDCeAVkIQd50M2JZ6eA=
Subject key identifier:   E0:2C:46:63:32:F1:39:5A:FF:89:94:2C:88:FF:9F:0F:43:BE:1E:69
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       7270BC6AF6F827E971886653D94B0835D39E7960
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e352e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:01 +0000
ROA not before:           Fri 28 Aug 2026 17:01:01 +0000
ROA not after:            Fri 27 Aug 2027 17:06:01 +0000
asID:                     262642
IP address blocks:        177.87.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:70:bc:6a:f6:f8:27:e9:71:88:66:53:d9:4b:08:35:d3:9e:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:01 2026 GMT
            Not After : Aug 27 17:06:01 2027 GMT
        Subject: CN=E02C466332F1395AFF89942C88FF9F0F43BE1E69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:b6:41:9c:22:50:70:c5:e1:16:f7:3b:dc:
                    80:66:51:52:c0:31:42:3f:89:c2:e2:2d:0a:1d:ba:
                    e9:12:70:be:f6:e0:52:c4:a2:29:9f:b9:3e:0c:34:
                    74:db:83:1d:84:a7:b1:9c:21:fd:32:08:1e:1b:32:
                    96:b5:04:ad:94:6e:ee:a3:63:9b:a5:63:d7:30:3e:
                    16:6b:12:93:e6:48:ed:6c:b4:fb:f9:be:d7:f2:85:
                    d8:32:e2:25:12:6e:9f:20:67:a0:20:35:57:a6:1b:
                    c7:80:f0:8f:28:d6:fb:31:54:e1:6d:32:a3:a8:24:
                    d2:b5:67:6a:0f:0d:83:5d:ea:46:bc:00:12:23:c7:
                    44:be:d9:b3:f5:d2:02:2b:66:26:78:61:26:56:52:
                    48:e4:16:53:9b:c5:94:04:bb:09:7c:58:f0:3a:5b:
                    54:e3:25:e0:d9:f9:c9:72:90:8a:f9:84:f9:75:76:
                    02:c4:b1:1a:c9:06:14:08:1a:b9:4a:d7:b5:88:3d:
                    ce:d5:a5:91:05:2c:ec:bf:3c:49:57:d0:7f:58:ba:
                    aa:12:f0:7f:76:ab:00:fc:fc:cc:32:22:ae:f8:7c:
                    30:6a:8f:e6:67:11:5f:0b:9d:d1:7b:17:dc:c2:b2:
                    f5:f3:fc:62:a8:f4:62:33:d3:60:68:3b:eb:61:4d:
                    25:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:46:63:32:F1:39:5A:FF:89:94:2C:88:FF:9F:0F:43:BE:1E:69
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3137372e38372e352e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:02:2d:a1:6e:17:09:cc:5d:28:ac:91:20:a3:71:ca:53:
         0b:0d:6a:d1:ff:bc:c4:25:33:f8:96:d3:03:02:46:f7:11:a7:
         81:9b:87:b6:6c:c3:31:a5:4e:a1:5f:4b:3c:0f:9f:c9:87:0d:
         4e:fa:f7:c6:e8:12:39:63:9d:f5:83:30:63:8c:cd:ef:cc:ca:
         cc:3d:04:46:c6:42:36:8e:09:e0:05:84:37:fc:d6:58:4d:49:
         bc:85:98:da:52:b7:6d:a8:cd:d2:4d:cd:27:26:85:98:46:51:
         a0:d4:38:9b:63:9a:f0:8b:7d:79:e6:02:c5:d0:aa:40:bc:0b:
         ba:4d:c3:42:f1:1f:d1:33:fa:ec:2c:9d:d7:d9:3a:ed:7a:13:
         62:69:e5:db:7e:05:e8:11:63:89:e1:8b:36:8c:bf:bb:94:8e:
         c6:f9:bd:9e:49:b7:1a:e4:df:68:69:6c:85:b9:4e:f3:9f:87:
         7e:99:21:1c:51:65:06:50:b2:f8:46:90:70:94:dd:f6:98:b0:
         50:c0:f7:5f:7f:f4:63:49:f3:f8:80:61:b6:2d:a0:64:da:73:
         af:69:02:fa:7c:19:20:d9:ca:ee:fb:6c:03:e3:34:17:c3:dc:
         eb:98:7c:2d:0d:a5:dd:9b:34:bd:1b:d1:5b:e3:38:df:f2:78:
         ad:35:7a:14
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcnC8avb4J+lxiGZT2UsINdOeeWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDFaFw0yNzA4MjcxNzA2MDFaMDMxMTAvBgNV
BAMTKEUwMkM0NjYzMzJGMTM5NUFGRjg5OTQyQzg4RkY5RjBGNDNCRTFFNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9uLZBnCJQcMXhFvc73IBmUVLA
MUI/icLiLQoduukScL724FLEoimfuT4MNHTbgx2Ep7GcIf0yCB4bMpa1BK2Ubu6j
Y5ulY9cwPhZrEpPmSO1stPv5vtfyhdgy4iUSbp8gZ6AgNVemG8eA8I8o1vsxVOFt
MqOoJNK1Z2oPDYNd6ka8ABIjx0S+2bP10gIrZiZ4YSZWUkjkFlObxZQEuwl8WPA6
W1TjJeDZ+clykIr5hPl1dgLEsRrJBhQIGrlK17WIPc7VpZEFLOy/PElX0H9YuqoS
8H92qwD8/MwyIq74fDBqj+ZnEV8LndF7F9zCsvXz/GKo9GIz02BoO+thTSXfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4CxGYzLxOVr/iZQsiP+fD0O+HmkwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNzM3MmUzODM3MmUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM2
MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFXBTANBgkqhkiG9w0BAQsFAAOCAQEAPXsCLaFuFwnM
XSiskSCjccpTCw1q0f+8xCUz+JbTAwJG9xGngZuHtmzDMaVOoV9LPA+fyYcNTvr3
xugSOWOd9YMwY4zN78zKzD0ERsZCNo4J4AWEN/zWWE1JvIWY2lK3bajN0k3NJyaF
mEZRoNQ4m2Oa8It9eeYCxdCqQLwLuk3DQvEf0TP67Cyd19k67XoTYmnl234F6BFj
ieGLNoy/u5SOxvm9nkm3GuTfaGlshblO85+HfpkhHFFlBlCy+EaQcJTd9piwUMD3
X3/0Y0nz+IBhti2gZNpzr2kC+nwZINnK7vtsA+M0F8Pc65h8LQ2l3Zs0vRvRW+M4
3/J4rTV6FA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:02:29 2026 by rpki-client