Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa
File:                     3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa (raw, json)
Hash identifier:          s8p6tSQZ5gNrNuYiJwIJIPfXIrQ0NQhOP+2qe6OmpBU=
Subject key identifier:   64:04:B2:FD:4B:C6:85:8C:47:07:B6:EB:0E:E8:6F:49:55:AE:C0:0B
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       16326244BF8C64B5E2BA9F84458ABDA96592D116
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa
Signing time:             Wed 28 Oct 2026 00:57:53 +0000
ROA not before:           Wed 28 Oct 2026 00:52:53 +0000
ROA not after:            Wed 27 Oct 2027 00:57:53 +0000
asID:                     263400
IP address blocks:        177.222.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 19:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:62:44:bf:8c:64:b5:e2:ba:9f:84:45:8a:bd:a9:65:92:d1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Oct 28 00:52:53 2026 GMT
            Not After : Oct 27 00:57:53 2027 GMT
        Subject: CN=6404B2FD4BC6858C4707B6EB0EE86F4955AEC00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5d:13:6b:df:22:ec:e3:20:1c:aa:2b:f5:b3:
                    12:ff:4f:9b:b6:68:b8:34:fc:8e:2c:b3:96:04:4d:
                    7a:d9:7c:ad:49:80:ba:40:74:b4:e3:c8:e9:0d:2b:
                    c7:46:de:a2:ba:1a:6d:cb:d7:8f:80:a7:7c:85:24:
                    d5:73:ac:97:9d:0b:e1:5e:33:54:a5:9d:14:ae:1f:
                    fe:68:bd:25:1a:f3:45:40:1b:37:9d:11:75:64:3f:
                    5e:1d:c9:a6:21:6b:39:dc:a1:93:83:3e:24:c4:8e:
                    3f:a8:78:65:cd:f1:28:3b:68:a5:2c:df:4c:c4:b6:
                    81:91:1c:32:79:e4:cf:af:48:1b:cf:00:97:18:e0:
                    52:bb:b6:c0:bc:59:06:a0:55:b2:ec:4b:a4:30:0f:
                    ee:00:5b:a1:0f:90:b0:24:ed:a8:22:6d:e7:01:7f:
                    34:a0:1a:b2:30:ce:9d:76:a3:8d:c8:be:e2:f5:4a:
                    94:15:5b:4a:f3:7f:b7:51:b0:6f:bc:79:56:ef:e1:
                    60:64:bb:7c:80:3c:2c:0a:ae:93:5a:cd:20:42:0f:
                    fa:4f:18:2e:41:c9:2f:8c:52:73:1a:5a:89:6b:48:
                    d0:06:0e:98:7e:b6:81:2e:37:4e:8d:65:62:1c:3d:
                    ce:67:c4:72:f4:74:c4:10:b7:df:4b:3a:1e:2e:33:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:04:B2:FD:4B:C6:85:8C:47:07:B6:EB:0E:E8:6F:49:55:AE:C0:0B
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/3137372e3232322e3233332e302f32342d3234203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:26:5a:86:16:e4:f1:99:dd:c1:4c:9f:0a:70:a7:7d:46:f8:
         cf:11:b4:2f:6c:9d:cb:5c:5a:e1:6d:db:07:bb:79:04:14:2f:
         70:05:23:98:2e:cc:95:a5:e0:68:3d:af:73:5f:66:44:33:8f:
         f4:3b:07:f7:30:ad:22:aa:fb:9e:08:b4:62:09:24:a0:67:db:
         88:f1:19:c3:42:2f:96:a9:58:4b:3e:f2:bd:67:f5:13:17:be:
         2f:40:17:f4:c6:cc:9c:d2:da:53:2a:9a:45:d2:e1:10:54:c3:
         cf:ba:b8:70:35:2f:6b:1e:c0:5c:2a:db:f1:3a:2f:a9:65:39:
         13:49:ef:df:10:6e:fe:88:14:8a:46:3d:18:17:d8:bf:8d:88:
         f2:e0:57:d7:eb:7b:fe:3c:49:16:07:61:37:46:43:dd:f0:48:
         d5:92:5d:c1:75:a0:00:51:28:0a:61:cf:bf:0e:a1:9f:ad:3f:
         ac:6e:4f:9b:f2:aa:86:36:cc:2f:4d:47:c0:7f:e8:09:da:d4:
         29:f1:ec:24:94:48:60:20:ad:ec:4c:4b:dd:44:67:25:8b:3e:
         3b:3e:12:be:42:e9:04:ac:6a:a5:aa:21:aa:ee:ea:1a:fc:89:
         b1:ab:f2:2d:b5:09:a0:97:91:d9:4e:bf:66:8b:15:a5:26:99:
         19:85:66:15
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFjJiRL+MZLXiup+ERYq9qWWS0RYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0QyMzkxRkE3QzI4QUUwRjlDOEIyQjk5RTE5MDkyQTM0
ODdBMkVDOTAeFw0yNjEwMjgwMDUyNTNaFw0yNzEwMjcwMDU3NTNaMDMxMTAvBgNV
BAMTKDY0MDRCMkZENEJDNjg1OEM0NzA3QjZFQjBFRTg2RjQ5NTVBRUMwMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XRNr3yLs4yAcqiv1sxL/T5u2
aLg0/I4ss5YETXrZfK1JgLpAdLTjyOkNK8dG3qK6Gm3L14+Ap3yFJNVzrJedC+Fe
M1SlnRSuH/5ovSUa80VAGzedEXVkP14dyaYhazncoZODPiTEjj+oeGXN8Sg7aKUs
30zEtoGRHDJ55M+vSBvPAJcY4FK7tsC8WQagVbLsS6QwD+4AW6EPkLAk7agibecB
fzSgGrIwzp12o43IvuL1SpQVW0rzf7dRsG+8eVbv4WBku3yAPCwKrpNazSBCD/pP
GC5ByS+MUnMaWolrSNAGDph+toEuN06NZWIcPc5nxHL0dMQQt99LOh4uM6dLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZASy/UvGhYxHB7brDuhvSVWuwAswHwYDVR0j
BBgwFoAUzSOR+nworg+ciyuZ4ZCSo0h6LskwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVobnZBd1FCeHlQYmtoVXBoTVFueEN1VEVEZ3Y3a1NCMWFURDQxOFRo
U1gvMS9DRDIzOTFGQTdDMjhBRTBGOUM4QjJCOTlFMTkwOTJBMzQ4N0EyRUM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NEMjM5MUZBN0MyOEFFMEY5
QzhCMkI5OUUxOTA5MkEzNDg3QTJFQzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFaG52QXdRQnh5UGJraFVwaE1RbnhDdVRFRGd2N2tTQjFhVEQ0MThUaFNYLzEv
MzEzNzM3MmUzMjMyMzIyZTMyMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALHe6TANBgkqhkiG9w0BAQsFAAOCAQEAGSZa
hhbk8ZndwUyfCnCnfUb4zxG0L2ydy1xa4W3bB7t5BBQvcAUjmC7MlaXgaD2vc19m
RDOP9DsH9zCtIqr7ngi0YgkkoGfbiPEZw0IvlqlYSz7yvWf1Exe+L0AX9MbMnNLa
UyqaRdLhEFTDz7q4cDUvax7AXCrb8TovqWU5E0nv3xBu/ogUikY9GBfYv42I8uBX
1+t7/jxJFgdhN0ZD3fBI1ZJdwXWgAFEoCmHPvw6hn60/rG5Pm/KqhjbML01HwH/o
CdrUKfHsJJRIYCCt7ExL3URnJYs+Oz4SvkLpBKxqpaohqu7qGvyJsavyLbUJoJeR
2U6/ZosVpSaZGYVmFQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 21:58:41 2026 by rpki-client