Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32342d3234203d3e203532373635.roa
File:                     3137302e3233392e37322e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          Km26pT47IOhZtyVnLRVZC7cvD4fCBGFBtk1h7yp9OUU=
Subject key identifier:   67:BE:A4:65:24:16:40:87:A8:8D:AD:77:60:09:B7:E6:9D:74:D4:AC
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       0A8112A941D57459C15FA5BEC5783527E81777E5
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:05 +0000
ROA not before:           Wed 26 Aug 2026 02:02:05 +0000
ROA not after:            Wed 25 Aug 2027 02:07:05 +0000
asID:                     52765
IP address blocks:        170.239.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:81:12:a9:41:d5:74:59:c1:5f:a5:be:c5:78:35:27:e8:17:77:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:05 2026 GMT
            Not After : Aug 25 02:07:05 2027 GMT
        Subject: CN=67BEA46524164087A88DAD776009B7E69D74D4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8d:64:cf:9c:bc:0b:49:27:ab:10:7e:cb:a0:
                    a8:30:37:19:0a:88:03:9b:84:7b:ae:ff:05:16:2c:
                    a0:1e:bb:4e:8f:1d:35:98:35:2e:ca:e9:a7:ec:8e:
                    d6:7e:f1:a5:83:e6:ec:08:e6:a0:3c:b1:fa:62:ff:
                    4e:af:e0:4b:b6:bc:6b:5f:a6:44:55:ca:08:ec:13:
                    e2:12:62:08:7a:fe:c5:60:13:79:04:f5:cb:04:eb:
                    f0:70:97:0c:6b:2d:3b:60:b3:25:5e:71:5e:06:8c:
                    f0:2f:1b:e3:b2:19:b6:de:d0:87:79:6e:e7:d4:84:
                    76:a6:e1:68:16:9d:ab:29:7d:ba:43:6c:5d:c2:73:
                    ba:8f:56:48:34:62:9b:f5:75:f2:47:ab:d4:48:15:
                    f8:d7:87:41:65:ab:99:3f:42:ab:64:07:84:7f:09:
                    d6:8f:ee:ea:8a:c8:54:62:8b:e5:00:7c:92:ac:1f:
                    23:a9:78:75:c8:24:b5:f0:51:c2:d3:58:19:1f:1c:
                    52:a9:c1:cd:ca:00:ef:17:85:c7:ac:57:b6:a7:3a:
                    cb:c8:31:a2:fb:f5:69:a1:c0:e8:4e:9d:7c:62:27:
                    99:49:af:be:63:f5:21:e6:96:48:ec:47:56:af:6d:
                    f0:bf:9c:5f:d9:25:3d:f3:ef:e7:7c:23:dd:20:47:
                    33:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BE:A4:65:24:16:40:87:A8:8D:AD:77:60:09:B7:E6:9D:74:D4:AC
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3137302e3233392e37322e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d7:7f:6d:84:5b:36:be:c3:0d:5f:c4:02:fb:48:0f:5e:f3:
         9c:37:2c:bc:2e:6a:26:e2:68:ea:cc:43:32:19:75:1b:4b:83:
         90:35:3a:d8:f6:62:4f:95:65:0d:07:ae:66:1a:4d:6f:fa:41:
         56:14:84:19:23:21:f7:cc:50:2a:fd:89:07:89:63:e5:ba:7f:
         a7:4e:33:dd:f5:40:fb:ce:2a:7d:ac:fa:8c:de:ea:c5:55:ed:
         20:af:be:f4:94:e5:8f:d4:02:ae:f7:fa:86:41:80:fe:2d:73:
         9a:2f:a0:bd:bb:5e:be:98:39:2b:66:88:50:ad:c2:aa:28:77:
         6b:fa:a5:05:f7:3c:77:e6:e0:a9:47:17:20:ec:70:86:58:08:
         f5:a9:b5:3f:b6:29:3d:37:c4:fd:00:7c:59:8a:2c:fa:a8:80:
         42:7a:55:41:36:9e:dc:27:13:91:68:a3:db:1b:45:e6:d1:95:
         3c:a5:3e:2e:fc:1b:4b:6a:53:ab:89:a9:f7:c7:7b:55:62:e4:
         52:75:6d:b4:30:86:a2:da:5e:d9:5c:28:f1:68:40:71:c8:e2:
         d9:0e:59:6d:90:a9:45:f1:10:15:d1:16:75:3f:9a:b8:ad:ec:
         4a:20:81:6d:36:01:e1:51:f2:98:da:89:41:07:d8:78:bf:bb:
         57:a1:79:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCoESqUHVdFnBX6W+xXg1J+gXd+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQwRTI3QkY5ODY0MzNBOEY3NjNGM0E0RkI3QkNDQ0M5
QTgxMkY3RTAeFw0yNjA4MjYwMjAyMDVaFw0yNzA4MjUwMjA3MDVaMDMxMTAvBgNV
BAMTKDY3QkVBNDY1MjQxNjQwODdBODhEQUQ3NzYwMDlCN0U2OUQ3NEQ0QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYjWTPnLwLSSerEH7LoKgwNxkK
iAObhHuu/wUWLKAeu06PHTWYNS7K6afsjtZ+8aWD5uwI5qA8sfpi/06v4Eu2vGtf
pkRVygjsE+ISYgh6/sVgE3kE9csE6/BwlwxrLTtgsyVecV4GjPAvG+OyGbbe0Id5
bufUhHam4WgWnaspfbpDbF3Cc7qPVkg0Ypv1dfJHq9RIFfjXh0Flq5k/QqtkB4R/
CdaP7uqKyFRii+UAfJKsHyOpeHXIJLXwUcLTWBkfHFKpwc3KAO8XhcesV7anOsvI
MaL79WmhwOhOnXxiJ5lJr75j9SHmlkjsR1avbfC/nF/ZJT3z7+d8I90gRzNLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZ76kZSQWQIeoja13YAm35p101KwwHwYDVR0j
BBgwFoAUFA4nv5hkM6j3Y/Ok+3vMzJqBL34wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlJobXg3WWV1U1hOdjJITjNoOG4yYmFxM2l6bXlNOWZKSGhjeFNWVmFl
U1kvMC8xNDBFMjdCRjk4NjQzM0E4Rjc2M0YzQTRGQjdCQ0NDQzlBODEyRjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MEUyN0JGOTg2NDMzQThG
NzYzRjNBNEZCN0JDQ0NDOUE4MTJGN0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JSaG14N1lldVNYTnYySE4zaDhuMmJhcTNpem15TTlmSkhoY3hTVlZhZVNZLzAv
MzEzNzMwMmUzMjMzMzkyZTM3MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqu9IMA0GCSqGSIb3DQEBCwUAA4IBAQA+139thFs2
vsMNX8QC+0gPXvOcNyy8Lmom4mjqzEMyGXUbS4OQNTrY9mJPlWUNB65mGk1v+kFW
FIQZIyH3zFAq/YkHiWPlun+nTjPd9UD7zip9rPqM3urFVe0gr770lOWP1AKu9/qG
QYD+LXOaL6C9u16+mDkrZohQrcKqKHdr+qUF9zx35uCpRxcg7HCGWAj1qbU/tik9
N8T9AHxZiiz6qIBCelVBNp7cJxORaKPbG0Xm0ZU8pT4u/BtLalOrian3x3tVYuRS
dW20MIai2l7ZXCjxaEBxyOLZDlltkKlF8RAV0RZ1P5q4rexKIIFtNgHhUfKY2olB
B9h4v7tXoXnX
-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:11 2026 by rpki-client