Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa
File:                     3137372e38372e33362e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          uSeU2V4DeoTIrmgJodhtMyqk8Eq6+BAUJJ0ENkAatLQ=
Subject key identifier:   C1:76:D3:74:B1:80:72:8A:F2:82:6C:12:76:D4:90:5E:82:EB:70:E5
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       3B724857A6D6EC5C65AEBF93892EC53662F50063
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 18:01:13 +0000
ROA not before:           Mon 06 Apr 2026 17:56:13 +0000
ROA not after:            Mon 05 Apr 2027 18:01:13 +0000
asID:                     268976
IP address blocks:        177.87.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:72:48:57:a6:d6:ec:5c:65:ae:bf:93:89:2e:c5:36:62:f5:00:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:56:13 2026 GMT
            Not After : Apr  5 18:01:13 2027 GMT
        Subject: CN=C176D374B180728AF2826C1276D4905E82EB70E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:e0:4b:d2:e9:d8:ba:4d:79:3b:19:a4:68:
                    ce:7e:16:77:f1:b0:93:49:67:f4:a1:90:b8:c0:e6:
                    6f:19:7f:dd:8f:03:80:1d:1d:9d:93:35:88:5b:99:
                    cc:d1:23:fe:a8:c3:83:e5:9f:20:4e:88:33:fd:5a:
                    27:56:4b:c9:9d:56:80:f2:ed:9e:89:9c:a2:ad:c5:
                    57:91:39:5b:09:be:33:fb:a1:03:b8:46:58:87:65:
                    64:36:e1:8c:e6:23:35:09:fd:b5:15:54:e7:b3:df:
                    87:2e:41:ae:d2:fb:93:0b:44:34:5c:f7:cd:69:c4:
                    a5:51:d1:93:12:12:32:20:fb:61:60:a5:76:a7:a1:
                    ba:f9:05:67:3d:6b:cf:2d:74:87:c5:8c:07:6c:14:
                    f7:0f:ec:f3:08:12:9a:fb:82:26:57:01:f6:76:18:
                    33:be:86:0a:6a:68:2e:bb:5a:5b:3a:f5:36:6a:76:
                    8d:1d:d7:0b:8b:75:0e:bc:90:b2:53:fe:0c:b8:e6:
                    39:79:f2:10:ed:59:a8:e1:a4:f4:dd:17:9c:3e:9a:
                    d1:9c:2d:ff:01:cf:4e:aa:5f:9a:23:ec:1d:2c:bc:
                    3a:ea:79:94:97:5a:db:c7:eb:b9:15:fa:90:76:4c:
                    8f:fd:fe:63:21:fd:f8:23:a8:83:81:7f:d4:44:24:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:D3:74:B1:80:72:8A:F2:82:6C:12:76:D4:90:5E:82:EB:70:E5
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3137372e38372e33362e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:73:16:28:b1:02:68:ea:f4:a2:3b:a2:be:60:77:7b:ec:72:
         44:49:7a:49:aa:51:1b:2e:c7:1b:30:6c:01:d9:0d:d6:cf:65:
         c9:0a:ca:e0:ea:72:3d:1d:27:61:51:78:c6:05:f8:dc:40:6f:
         88:5b:49:b6:d0:d1:34:17:ea:42:31:68:54:c8:04:66:65:be:
         79:83:8f:02:5c:be:a9:e6:9e:8d:f4:84:22:02:dc:c9:d5:70:
         65:c0:f1:35:11:00:75:1c:81:43:d8:92:30:1e:a2:14:18:4e:
         8e:ed:3f:46:1f:bc:dc:ea:88:5c:00:db:81:4b:fd:ed:4d:fe:
         73:1c:cf:bb:19:7a:4d:c8:b8:92:d2:b6:e0:19:93:ad:ea:ee:
         4f:da:02:f9:99:fc:66:20:fa:a0:6a:ab:d2:ea:0a:1d:2b:24:
         18:1b:d9:ac:c9:6d:b0:87:8f:e1:2b:11:5e:41:b4:84:14:2c:
         d9:d1:6d:c5:85:ab:71:a0:21:c6:9a:b6:fc:a3:1c:e6:78:79:
         db:ec:d9:8d:e1:2a:19:00:7d:ee:da:a9:00:a9:a0:3c:71:7e:
         ec:ec:3a:4b:df:0d:18:86:eb:28:ab:c5:7d:85:c9:e5:5b:5f:
         43:37:31:57:d8:53:d6:0c:4d:1c:8e:67:47:7c:1c:94:21:f5:
         5f:6c:c7:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUO3JIV6bW7Fxlrr+TiS7FNmL1AGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2OTNEMkI2MTZBRkMwQ0U4MTRBMjhCQTI2MjJCNTkx
QTY2NzQ0NzAeFw0yNjA0MDYxNzU2MTNaFw0yNzA0MDUxODAxMTNaMDMxMTAvBgNV
BAMTKEMxNzZEMzc0QjE4MDcyOEFGMjgyNkMxMjc2RDQ5MDVFODJFQjcwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9duBL0unYuk15OxmkaM5+Fnfx
sJNJZ/ShkLjA5m8Zf92PA4AdHZ2TNYhbmczRI/6ow4PlnyBOiDP9WidWS8mdVoDy
7Z6JnKKtxVeROVsJvjP7oQO4RliHZWQ24YzmIzUJ/bUVVOez34cuQa7S+5MLRDRc
981pxKVR0ZMSEjIg+2FgpXanobr5BWc9a88tdIfFjAdsFPcP7PMIEpr7giZXAfZ2
GDO+hgpqaC67Wls69TZqdo0d1wuLdQ68kLJT/gy45jl58hDtWajhpPTdF5w+mtGc
Lf8Bz06qX5oj7B0svDrqeZSXWtvH67kV+pB2TI/9/mMh/fgjqIOBf9REJLd7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwXbTdLGAcorygmwSdtSQXoLrcOUwHwYDVR0j
BBgwFoAUgWk9K2Fq/AzoFKKLomIrWRpmdEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dFQUZOS1lERkpSdWtuZW1QWTk1clZSYWJSNzZ5V1pxVFhVSjN5NkFk
N1QvMC84MTY5M0QyQjYxNkFGQzBDRTgxNEEyOEJBMjYyMkI1OTFBNjY3NDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNjkzRDJCNjE2QUZDMENF
ODE0QTI4QkEyNjIyQjU5MUE2Njc0NDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXRUFGTktZREZKUnVrbmVtUFk5NXJWUmFiUjc2eVdacVRYVUozeTZBZDdULzAv
MzEzNzM3MmUzODM3MmUzMzM2MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzkzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsVckMA0GCSqGSIb3DQEBCwUAA4IBAQBQcxYosQJo
6vSiO6K+YHd77HJESXpJqlEbLscbMGwB2Q3Wz2XJCsrg6nI9HSdhUXjGBfjcQG+I
W0m20NE0F+pCMWhUyARmZb55g48CXL6p5p6N9IQiAtzJ1XBlwPE1EQB1HIFD2JIw
HqIUGE6O7T9GH7zc6ohcANuBS/3tTf5zHM+7GXpNyLiS0rbgGZOt6u5P2gL5mfxm
IPqgaqvS6godKyQYG9msyW2wh4/hKxFeQbSEFCzZ0W3FhatxoCHGmrb8oxzmeHnb
7NmN4SoZAH3u2qkAqaA8cX7s7DpL3w0Yhusoq8V9hcnlW19DNzFX2FPWDE0cjmdH
fByUIfVfbMcK
-----END CERTIFICATE-----
Generated at Sat Apr 11 09:19:41 2026 by rpki-client