Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38312e302f32342d3234203d3e20323632333639.roa
File:                     3137372e3133302e38312e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          moVnWnQ8Y+wOqyyx4zcZ4nLUvmp3o31P1Cfu5bpu5Nc=
Subject key identifier:   7E:CB:BB:46:7C:66:4D:DA:3C:CF:83:DE:2D:5A:27:73:DC:8F:FE:4C
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       3DC51835D8B91FC6B553A33D11F38EBE73A5AC58
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38312e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:26 +0000
ROA not before:           Fri 28 Aug 2026 19:01:26 +0000
ROA not after:            Fri 27 Aug 2027 19:06:26 +0000
asID:                     262369
IP address blocks:        177.130.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c5:18:35:d8:b9:1f:c6:b5:53:a3:3d:11:f3:8e:be:73:a5:ac:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:26 2026 GMT
            Not After : Aug 27 19:06:26 2027 GMT
        Subject: CN=7ECBBB467C664DDA3CCF83DE2D5A2773DC8FFE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:76:aa:e5:65:e2:ee:d8:d5:40:e3:ef:4b:d5:
                    03:79:34:e3:9c:bb:fb:ab:a9:ab:de:a4:16:53:cc:
                    b7:37:22:a9:f2:e0:07:0a:0c:ff:0d:fd:56:b6:58:
                    59:a2:75:cf:85:05:99:af:30:90:fe:b6:e3:e0:c5:
                    55:48:7f:34:39:b1:4c:e1:5b:85:e8:cc:10:01:ce:
                    61:84:b4:8f:8a:ec:a9:7e:74:d4:91:c1:24:0c:c0:
                    e0:24:49:5e:2c:65:3e:93:f7:16:58:49:39:fb:5f:
                    de:eb:f2:f8:0e:e2:74:88:56:a2:19:54:33:47:67:
                    d1:90:41:33:6d:a9:d5:8a:8c:cd:f0:d9:c6:c9:3e:
                    c1:33:64:f8:26:a2:82:e3:eb:e4:cd:f9:88:4b:f0:
                    9b:29:47:9f:c3:42:00:83:15:46:b3:7c:c8:0c:c5:
                    5b:55:e7:c7:63:9a:72:1f:07:7c:27:a9:88:09:bf:
                    5c:1c:fc:61:ef:f3:eb:65:a9:e6:65:d9:ba:a0:98:
                    94:71:e5:37:11:eb:9d:4f:5b:31:79:4b:de:68:c0:
                    84:d8:bd:d6:00:a2:22:58:d7:6d:a8:80:e2:f4:33:
                    c5:77:17:3c:82:bd:3c:40:8a:89:b0:fb:76:be:4d:
                    27:19:11:97:8d:ad:de:32:69:7a:31:1b:44:b9:02:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CB:BB:46:7C:66:4D:DA:3C:CF:83:DE:2D:5A:27:73:DC:8F:FE:4C
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3137372e3133302e38312e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:e7:37:ad:a3:ac:9d:1a:28:3b:82:f8:70:76:c4:0b:70:ca:
         aa:94:65:3b:a8:cf:fa:58:63:ce:9d:f6:7c:22:b1:3c:f4:8d:
         13:f2:27:f5:62:9f:4a:dd:a3:cc:c4:16:0c:b7:95:94:d7:61:
         c4:b1:83:9a:ea:54:95:5c:05:69:26:8c:d6:b9:6b:9e:84:0b:
         c2:07:1c:06:51:1e:ec:45:69:b3:cf:98:26:27:a3:e7:cf:f0:
         19:d4:eb:23:7d:54:52:41:2c:4c:45:ad:74:3e:3e:dd:34:0b:
         f2:12:9e:c8:a3:a1:9f:91:fc:9a:a6:40:2c:f0:0e:eb:d0:be:
         de:0a:ea:8a:46:b8:51:1c:6a:21:65:48:d7:d4:50:57:b6:55:
         50:91:f0:87:68:de:84:8b:14:76:13:c3:85:d9:5f:0b:48:20:
         41:d7:b1:7d:ed:c5:ed:c8:9c:b2:35:f8:b7:c0:6f:4b:f1:ef:
         b7:94:29:31:73:a9:81:34:e2:74:de:47:79:e2:ea:56:a6:9b:
         2d:03:d1:c4:c5:51:c2:72:68:9d:9a:b9:64:b4:3a:6b:3e:74:
         f5:52:7c:96:ab:4b:01:e1:62:bb:c8:e7:a1:06:47:64:dc:4c:
         35:a9:0f:ee:71:d2:7c:4b:e1:23:5d:c7:09:bb:20:3b:1c:c6:
         81:f8:2a:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPcUYNdi5H8a1U6M9EfOOvnOlrFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODcwQkVBMDU5QUJFRUJDMUY1NDRFQTFGM0ZBNjM1Q0Y3
MkE4NDY1NzAeFw0yNjA4MjgxOTAxMjZaFw0yNzA4MjcxOTA2MjZaMDMxMTAvBgNV
BAMTKDdFQ0JCQjQ2N0M2NjREREEzQ0NGODNERTJENUEyNzczREM4RkZFNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTdqrlZeLu2NVA4+9L1QN5NOOc
u/urqavepBZTzLc3Iqny4AcKDP8N/Va2WFmidc+FBZmvMJD+tuPgxVVIfzQ5sUzh
W4XozBABzmGEtI+K7Kl+dNSRwSQMwOAkSV4sZT6T9xZYSTn7X97r8vgO4nSIVqIZ
VDNHZ9GQQTNtqdWKjM3w2cbJPsEzZPgmooLj6+TN+YhL8JspR5/DQgCDFUazfMgM
xVtV58djmnIfB3wnqYgJv1wc/GHv8+tlqeZl2bqgmJRx5TcR651PWzF5S95owITY
vdYAoiJY122ogOL0M8V3FzyCvTxAiomw+3a+TScZEZeNrd4yaXoxG0S5ArsRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfsu7RnxmTdo8z4PeLVonc9yP/kwwHwYDVR0j
BBgwFoAUhwvqBZq+68H1ROofP6Y1z3KoRlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWFyYWZGZ25SYVk1TGlhWE5HYVZpdWlGU3RWd0dvS1dqMUs1N3I1dzJ3
dXIvMC84NzBCRUEwNTlBQkVFQkMxRjU0NEVBMUYzRkE2MzVDRjcyQTg0NjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3MEJFQTA1OUFCRUVCQzFG
NTQ0RUExRjNGQTYzNUNGNzJBODQ2NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhcmFmRmduUmFZNUxpYVhOR2FWaXVpRlN0VndHb0tXajFLNTdyNXcyd3VyLzAv
MzEzNzM3MmUzMTMzMzAyZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxglEwDQYJKoZIhvcNAQELBQADggEBABHnN62j
rJ0aKDuC+HB2xAtwyqqUZTuoz/pYY86d9nwisTz0jRPyJ/Vin0rdo8zEFgy3lZTX
YcSxg5rqVJVcBWkmjNa5a56EC8IHHAZRHuxFabPPmCYno+fP8BnU6yN9VFJBLExF
rXQ+Pt00C/ISnsijoZ+R/JqmQCzwDuvQvt4K6opGuFEcaiFlSNfUUFe2VVCR8Ido
3oSLFHYTw4XZXwtIIEHXsX3txe3InLI1+LfAb0vx77eUKTFzqYE04nTeR3ni6lam
my0D0cTFUcJyaJ2auWS0Oms+dPVSfJarSwHhYrvI56EGR2TcTDWpD+5x0nxL4SNd
xwm7IDscxoH4KjU=
-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:51 2026 by rpki-client