Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32322d3232203d3e203532373635.roa (raw, json)
Hash identifier:          R1fCRT9dxns9Et6w9l9ApF+HFpxYZYnEA73Ow9/JA1o=
Subject key identifier:   B3:C6:A0:12:DA:B2:D2:51:F2:22:18:1E:A4:CA:01:18:F4:D3:D0:25
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       726A29947111F48AF2B91D85E3897B7235B148E4
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:06 +0000
ROA not before:           Wed 26 Aug 2026 02:02:06 +0000
ROA not after:            Wed 25 Aug 2027 02:07:06 +0000
asID:                     52765
IP address blocks:        170.239.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 19:40:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6a:29:94:71:11:f4:8a:f2:b9:1d:85:e3:89:7b:72:35:b1:48:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:06 2026 GMT
            Not After : Aug 25 02:07:06 2027 GMT
        Subject: CN=B3C6A012DAB2D251F222181EA4CA0118F4D3D025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:05:a5:b4:30:d0:ad:8d:46:5b:55:1c:b0:69:
                    a4:fb:e4:78:1e:7f:15:ef:98:40:8a:3b:f4:6e:97:
                    a3:3e:bf:f7:eb:a9:b4:6a:8b:71:5c:c2:1b:60:b9:
                    84:4a:d5:ba:13:55:6c:00:5d:7f:08:f3:0b:a7:21:
                    90:98:db:ca:83:4f:92:ad:45:cd:1b:02:f7:01:4d:
                    b6:fc:e4:fe:99:ff:4d:7d:81:d2:73:b7:a1:0a:0f:
                    94:6c:1e:cd:ab:22:ca:ce:1f:45:11:8b:b3:73:76:
                    b9:3a:82:d1:8e:c5:e4:74:0e:6c:88:5d:ef:12:21:
                    74:11:bd:00:17:8a:72:0e:fc:76:d5:18:1f:82:fc:
                    90:2a:54:dc:bb:83:96:b1:f3:94:40:8a:6d:66:78:
                    7a:6c:cb:51:3c:5f:4c:31:b2:fc:66:4c:62:a3:53:
                    54:87:91:d0:5e:c5:55:ae:c7:04:63:e8:70:12:fb:
                    9d:2a:dc:c5:38:88:23:0b:7d:21:6b:9e:80:86:5f:
                    4c:09:16:f0:c5:e1:93:9a:7f:90:09:c7:db:64:f1:
                    b3:92:9c:12:62:02:ca:cb:b0:71:f6:ce:1c:69:a3:
                    48:8a:09:8d:42:ff:06:ee:86:b8:6e:64:5a:e1:fe:
                    2f:58:76:9c:8c:8a:e5:d5:00:33:e3:a6:4d:21:56:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C6:A0:12:DA:B2:D2:51:F2:22:18:1E:A4:CA:01:18:F4:D3:D0:25
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32322d3232203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:32:54:e6:e1:79:22:70:89:9e:f1:6b:52:28:7d:85:fa:42:
         ac:f6:79:da:5e:2a:9e:4e:1e:04:cd:0a:a5:55:01:1e:aa:5f:
         40:c9:61:e5:a6:0d:5c:a1:0d:c6:1c:4c:c3:af:94:ba:3f:9c:
         81:95:29:3f:72:9f:96:94:90:bd:fa:fc:c0:0e:bd:fb:50:3e:
         4a:bf:b2:da:ce:a0:a1:fc:60:84:1e:6b:0b:ee:30:23:47:3e:
         0e:fa:18:13:c8:cb:65:30:31:05:03:fb:c1:3c:c0:57:24:ea:
         ac:cc:3b:e1:d6:c5:d5:da:cd:92:1d:88:e2:a1:b0:89:78:1a:
         93:86:51:f0:bc:ca:8a:cf:a7:9a:90:2b:36:70:8e:33:a9:90:
         a4:a5:eb:2a:3b:e1:92:cd:6c:75:9b:fa:90:4b:a2:77:62:48:
         45:8c:d5:00:f8:a8:c8:64:26:23:09:ed:5c:9a:35:eb:ee:ea:
         de:83:d3:01:0d:43:dd:9c:37:b5:dc:a2:73:78:78:2e:9c:da:
         9d:b7:78:77:48:a4:fd:99:3d:11:a1:66:ed:c2:17:17:7a:fc:
         b0:96:16:1e:29:97:7a:85:20:9a:64:a7:bc:eb:d9:14:ff:8c:
         f3:ab:7b:78:e9:0d:ae:e2:e0:9a:c9:d3:6e:53:87:73:45:0a:
         55:77:19:43
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcmoplHER9IryuR2F44l7cjWxSOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQwRTI3QkY5ODY0MzNBOEY3NjNGM0E0RkI3QkNDQ0M5
QTgxMkY3RTAeFw0yNjA4MjYwMjAyMDZaFw0yNzA4MjUwMjA3MDZaMDMxMTAvBgNV
BAMTKEIzQzZBMDEyREFCMkQyNTFGMjIyMTgxRUE0Q0EwMTE4RjREM0QwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBaW0MNCtjUZbVRywaaT75Hge
fxXvmECKO/Rul6M+v/frqbRqi3FcwhtguYRK1boTVWwAXX8I8wunIZCY28qDT5Kt
Rc0bAvcBTbb85P6Z/019gdJzt6EKD5RsHs2rIsrOH0URi7Nzdrk6gtGOxeR0DmyI
Xe8SIXQRvQAXinIO/HbVGB+C/JAqVNy7g5ax85RAim1meHpsy1E8X0wxsvxmTGKj
U1SHkdBexVWuxwRj6HAS+50q3MU4iCMLfSFrnoCGX0wJFvDF4ZOaf5AJx9tk8bOS
nBJiAsrLsHH2zhxpo0iKCY1C/wbuhrhuZFrh/i9YdpyMiuXVADPjpk0hVg8LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUs8agEtqy0lHyIhgepMoBGPTT0CUwHwYDVR0j
BBgwFoAUFA4nv5hkM6j3Y/Ok+3vMzJqBL34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl
U1kvMC8xNDBFMjdCRjk4NjQzM0E4Rjc2M0YzQTRGQjdCQ0NDQzlBODEyRjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MEUyN0JGOTg2NDMzQThG
NzYzRjNBNEZCN0JDQ0NDOUE4MTJGN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSaG14N1lldVNYTnYySE4zaDhuMmJhcTNpem15TTlmSkhoY3hTVlZhZVNZLzAv
MzEzNzMwMmUzMjMzMzkyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqu9IMA0GCSqGSIb3DQEBCwUAA4IBAQAmMlTm4Xki
cIme8WtSKH2F+kKs9nnaXiqeTh4EzQqlVQEeql9AyWHlpg1coQ3GHEzDr5S6P5yB
lSk/cp+WlJC9+vzADr37UD5Kv7LazqCh/GCEHmsL7jAjRz4O+hgTyMtlMDEFA/vB
PMBXJOqszDvh1sXV2s2SHYjiobCJeBqThlHwvMqKz6eakCs2cI4zqZCkpesqO+GS
zWx1m/qQS6J3YkhFjNUA+KjIZCYjCe1cmjXr7ureg9MBDUPdnDe13KJzeHgunNqd
t3h3SKT9mT0RoWbtwhcXevywlhYeKZd6hSCaZKe869kU/4zzq3t46Q2u4uCaydNu
U4dzRQpVdxlD
-----END CERTIFICATE-----
Generated at Sat Sep 5 05:13:42 2026 by rpki-client