Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
File:                     3137392e36332e39342e302f32342d3234203d3e20323731363132.roa (raw, json)
Hash identifier:          r3lIuMG6t2qc9dSv9ibh9kJ88s1PlYV4A1gbtyQ5hMY=
Subject key identifier:   A8:B5:B4:00:F7:E7:00:F7:82:85:63:D6:A5:59:82:D7:F9:19:99:49
Certificate issuer:       /CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
Certificate serial:       5D4095455BE2707411F0011A27EEE773DD1FD4CF
Authority key identifier: D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa
Signing time:             Wed 27 May 2026 17:08:30 +0000
ROA not before:           Wed 27 May 2026 17:03:30 +0000
ROA not after:            Wed 26 May 2027 17:08:30 +0000
asID:                     271612
IP address blocks:        179.63.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl
                          rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 16:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:40:95:45:5b:e2:70:74:11:f0:01:1a:27:ee:e7:73:dd:1f:d4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D449E37DE5FDE1C414F169BA00C9AC63D56EEF83
        Validity
            Not Before: May 27 17:03:30 2026 GMT
            Not After : May 26 17:08:30 2027 GMT
        Subject: CN=A8B5B400F7E700F7828563D6A55982D7F9199949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ec:11:74:35:0f:83:00:fc:2f:b4:7a:1f:82:
                    3b:50:c7:31:e9:15:43:81:8c:95:c3:41:5b:4e:e6:
                    96:b5:2c:a2:b2:ae:f3:1d:20:f8:fe:4b:b5:ea:26:
                    0e:5a:95:11:be:2e:ed:41:b2:d3:36:59:d5:67:61:
                    92:52:18:47:4a:29:c8:55:90:ee:6c:1c:00:69:85:
                    23:16:9b:4a:12:22:ad:5a:f0:2a:ff:f3:7a:ad:be:
                    f5:ac:e6:2d:a2:48:28:4e:b3:2d:03:3d:a7:35:85:
                    d5:12:b2:45:ca:b0:3e:89:cd:c8:a2:ca:60:a0:94:
                    fd:8c:10:10:ea:a3:9d:1a:d0:fd:d5:8a:22:e6:c8:
                    d5:b4:bf:28:07:85:e6:95:b1:ec:ec:f2:b2:ee:d2:
                    98:9f:d2:07:85:b5:5b:1e:76:e7:78:c4:66:7c:df:
                    2f:ee:dc:3d:61:88:4f:56:4c:f9:6f:6e:74:da:8f:
                    10:57:6a:7c:79:5d:42:00:5a:10:c9:2e:ad:58:a5:
                    2d:2e:c9:98:cc:60:c1:b3:13:a7:a5:95:f8:1f:61:
                    24:00:fa:35:07:8d:bd:eb:10:5d:03:ea:af:43:6c:
                    83:9d:93:15:08:9d:7e:a3:ee:04:39:91:b4:f7:0e:
                    8c:e6:22:52:1b:7c:38:e4:f6:ed:50:9a:9c:2c:83:
                    70:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B5:B4:00:F7:E7:00:F7:82:85:63:D6:A5:59:82:D7:F9:19:99:49
            X509v3 Authority Key Identifier:
                keyid:D4:49:E3:7D:E5:FD:E1:C4:14:F1:69:BA:00:C9:AC:63:D5:6E:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D449E37DE5FDE1C414F169BA00C9AC63D56EEF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/3137392e36332e39342e302f32342d3234203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:14:76:b1:cd:c8:cf:bc:6d:ff:aa:b8:d1:13:30:7d:42:35:
         86:51:ac:e9:ee:60:03:61:f8:0d:64:7a:ab:5b:cc:32:1e:fa:
         62:84:e3:3d:80:99:68:26:02:f3:2a:22:d5:b5:c8:db:a5:af:
         b1:21:13:19:47:8a:60:7c:fc:91:99:ea:b5:58:27:8b:8e:c1:
         0b:05:f5:5a:ba:93:5a:8d:71:e8:9f:ac:ce:b9:3c:60:72:20:
         69:ec:9a:46:b8:8d:b6:ff:a5:5e:45:b9:51:21:b7:2c:36:6f:
         68:66:c3:d6:1b:22:bd:d2:6c:2b:5f:a1:f7:98:54:8d:7e:2d:
         d2:74:a0:83:fe:2e:dc:b4:ff:82:6d:b2:c3:7b:80:36:a0:ad:
         76:84:a6:39:93:85:86:42:7f:27:f8:e1:88:17:69:8b:33:01:
         81:d7:19:2f:04:92:45:f1:36:2a:6b:fe:c1:df:21:35:ca:a2:
         7a:94:cd:29:8d:5d:21:ef:a4:bc:fa:5b:fe:b9:3d:62:3e:ae:
         8f:92:d8:95:37:1e:bc:87:06:b1:d3:5a:29:02:c6:46:39:b6:
         79:eb:64:34:91:f4:f5:2c:89:aa:0d:29:2a:bf:f2:1b:e2:7e:
         f2:f1:ef:08:de:56:d9:17:fb:1d:45:bd:50:b1:51:91:56:8c:
         b6:f3:df:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXUCVRVvicHQR8AEaJ+7nc90f1M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ0OUUzN0RFNUZERTFDNDE0RjE2OUJBMDBDOUFDNjNE
NTZFRUY4MzAeFw0yNjA1MjcxNzAzMzBaFw0yNzA1MjYxNzA4MzBaMDMxMTAvBgNV
BAMTKEE4QjVCNDAwRjdFNzAwRjc4Mjg1NjNENkE1NTk4MkQ3RjkxOTk5NDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo7BF0NQ+DAPwvtHofgjtQxzHp
FUOBjJXDQVtO5pa1LKKyrvMdIPj+S7XqJg5alRG+Lu1BstM2WdVnYZJSGEdKKchV
kO5sHABphSMWm0oSIq1a8Cr/83qtvvWs5i2iSChOsy0DPac1hdUSskXKsD6Jzcii
ymCglP2MEBDqo50a0P3ViiLmyNW0vygHheaVsezs8rLu0pif0geFtVsedud4xGZ8
3y/u3D1hiE9WTPlvbnTajxBXanx5XUIAWhDJLq1YpS0uyZjMYMGzE6ellfgfYSQA
+jUHjb3rEF0D6q9DbIOdkxUInX6j7gQ5kbT3DozmIlIbfDjk9u1Qmpwsg3BFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqLW0APfnAPeChWPWpVmC1/kZmUkwHwYDVR0j
BBgwFoAU1EnjfeX94cQU8Wm6AMmsY9Vu74MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMno1OEZldVpiOVV0R3dTNVJaQnBiY1BoMm9hcE14ZW5UVmRiTGNoOUxM
bjUvMC9ENDQ5RTM3REU1RkRFMUM0MTRGMTY5QkEwMEM5QUM2M0Q1NkVFRjgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NDlFMzdERTVGREUxQzQx
NEYxNjlCQTAwQzlBQzYzRDU2RUVGODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ6NThGZXVaYjlVdEd3UzVSWkJwYmNQaDJvYXBNeGVuVFZkYkxjaDlMTG41LzAv
MzEzNzM5MmUzNjMzMmUzOTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsz9eMA0GCSqGSIb3DQEBCwUAA4IBAQB4FHaxzcjP
vG3/qrjREzB9QjWGUazp7mADYfgNZHqrW8wyHvpihOM9gJloJgLzKiLVtcjbpa+x
IRMZR4pgfPyRmeq1WCeLjsELBfVaupNajXHon6zOuTxgciBp7JpGuI22/6VeRblR
IbcsNm9oZsPWGyK90mwrX6H3mFSNfi3SdKCD/i7ctP+CbbLDe4A2oK12hKY5k4WG
Qn8n+OGIF2mLMwGB1xkvBJJF8TYqa/7B3yE1yqJ6lM0pjV0h76S8+lv+uT1iPq6P
ktiVNx68hwax01opAsZGObZ562Q0kfT1LImqDSkqv/Ib4n7y8e8I3lbZF/sdRb1Q
sVGRVoy28988
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:08:25 2026 by rpki-client