Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32332d3233203d3e20323636323933.roa
File:                     3137302e37392e3133322e302f32332d3233203d3e20323636323933.roa (raw, json)
Hash identifier:          3DFqLdMW3arjQvoiiaOaErIJO94EP7LRXDygAGA57eY=
Subject key identifier:   2C:7D:96:0D:5A:A6:EC:34:A3:55:00:10:74:E3:98:42:65:CC:97:A1
Certificate issuer:       /CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
Certificate serial:       5A89684249B5F0FA1AF37835A10658EF1A795E90
Authority key identifier: 0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32332d3233203d3e20323636323933.roa
Signing time:             Tue 28 Jul 2026 19:01:06 +0000
ROA not before:           Tue 28 Jul 2026 18:56:06 +0000
ROA not after:            Tue 27 Jul 2027 19:01:06 +0000
asID:                     266293
IP address blocks:        170.79.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl
                          rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:89:68:42:49:b5:f0:fa:1a:f3:78:35:a1:06:58:ef:1a:79:5e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51
        Validity
            Not Before: Jul 28 18:56:06 2026 GMT
            Not After : Jul 27 19:01:06 2027 GMT
        Subject: CN=2C7D960D5AA6EC34A355001074E3984265CC97A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:08:77:37:a9:8e:5c:29:da:9b:c1:73:3b:
                    ca:f0:c6:5c:63:a0:13:25:4a:a5:e7:60:b7:b6:d5:
                    e8:56:d1:1f:70:e0:08:b6:95:0f:60:b1:a3:d1:1f:
                    b5:9e:c2:18:ee:10:06:58:bd:ef:1a:89:31:93:b1:
                    38:a9:31:30:d7:63:a0:e5:89:40:de:60:4b:70:04:
                    57:3f:89:58:32:60:11:6f:df:a2:a8:51:22:ef:a6:
                    ab:3c:7c:a7:f9:d8:0b:3b:92:3b:ae:b1:aa:78:3e:
                    9b:17:93:db:a0:73:a7:ff:5c:68:a0:48:d0:db:27:
                    71:2f:11:76:a4:85:bb:44:c6:4d:76:67:da:a1:8c:
                    cc:36:a1:9d:23:fa:90:7b:3b:60:28:b3:96:8b:33:
                    b8:c8:9b:fd:c8:9d:b1:56:3a:de:75:3a:e5:92:23:
                    4c:1b:54:72:58:36:8f:e3:71:d6:d0:d6:b8:98:a5:
                    8d:09:71:15:86:bc:d4:41:6e:64:34:c0:fb:3d:96:
                    ca:2c:1c:f2:92:ac:96:c5:8b:ec:75:b4:ba:9c:3e:
                    1b:87:ff:47:8a:53:bf:52:04:f9:1a:34:ad:96:6f:
                    04:19:40:6d:4b:b0:d6:86:fd:9d:49:c0:93:0c:5a:
                    b0:ce:80:4a:72:57:d1:a4:58:63:75:90:b2:f4:b6:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:96:0D:5A:A6:EC:34:A3:55:00:10:74:E3:98:42:65:CC:97:A1
            X509v3 Authority Key Identifier:
                keyid:0D:34:F9:E8:B6:60:8C:58:01:16:1F:81:D1:1D:F8:C5:D9:F3:AC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D34F9E8B6608C5801161F81D11DF8C5D9F3AC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/3137302e37392e3133322e302f32332d3233203d3e20323636323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:10:0a:d4:5b:1d:60:49:49:2d:8d:21:85:b8:10:fb:b0:9b:
         65:be:fc:85:98:b2:b8:1e:92:00:9e:e3:65:66:9d:1d:3d:50:
         70:f2:e7:0b:49:33:cf:1d:76:a2:76:a4:94:5e:9b:83:58:76:
         66:02:19:bb:af:ca:74:c5:e8:46:f5:96:01:e2:83:76:d3:b8:
         66:ea:0e:48:f3:4d:89:78:fc:70:cf:de:37:f6:53:02:fc:2d:
         b1:4f:00:45:44:25:a2:7d:7f:72:15:d0:bb:ca:21:6e:0c:08:
         1d:b2:09:55:8b:b7:87:e3:32:79:56:b3:44:bb:f1:ec:29:6c:
         fc:81:4e:f6:ff:3c:a8:84:32:ed:c4:a9:f7:d0:cd:f3:63:ce:
         c0:97:dc:87:6e:30:21:a0:0e:21:6b:ac:ae:33:25:ab:5f:87:
         c5:83:3f:d6:21:f8:45:c2:b2:29:f1:09:14:76:2b:cc:b5:8b:
         91:46:48:61:5b:70:12:3d:a5:6f:ee:16:31:c0:cb:e2:39:6d:
         86:09:c4:38:e7:fb:0a:ab:d7:44:5f:d7:bb:4a:13:e8:85:f1:
         6e:8c:b4:89:e9:35:6f:a9:ed:3a:b0:89:61:8e:dd:85:5c:6f:
         30:72:e0:c1:dc:d1:cb:6f:8b:05:45:dd:61:8f:2e:e0:ee:ce:
         ac:76:d5:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWoloQkm18Poa83g1oQZY7xp5XpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQzNEY5RThCNjYwOEM1ODAxMTYxRjgxRDExREY4QzVE
OUYzQUM1MTAeFw0yNjA3MjgxODU2MDZaFw0yNzA3MjcxOTAxMDZaMDMxMTAvBgNV
BAMTKDJDN0Q5NjBENUFBNkVDMzRBMzU1MDAxMDc0RTM5ODQyNjVDQzk3QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtwh3N6mOXCnam8FzO8rwxlxj
oBMlSqXnYLe21ehW0R9w4Ai2lQ9gsaPRH7WewhjuEAZYve8aiTGTsTipMTDXY6Dl
iUDeYEtwBFc/iVgyYBFv36KoUSLvpqs8fKf52As7kjuusap4PpsXk9ugc6f/XGig
SNDbJ3EvEXakhbtExk12Z9qhjMw2oZ0j+pB7O2Aos5aLM7jIm/3InbFWOt51OuWS
I0wbVHJYNo/jcdbQ1riYpY0JcRWGvNRBbmQ0wPs9lsosHPKSrJbFi+x1tLqcPhuH
/0eKU79SBPkaNK2WbwQZQG1LsNaG/Z1JwJMMWrDOgEpyV9GkWGN1kLL0ttxTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULH2WDVqm7DSjVQAQdOOYQmXMl6EwHwYDVR0j
BBgwFoAUDTT56LZgjFgBFh+B0R34xdnzrFEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2hkOE1kUnlMcGlwUkhrRUREZHRVWVNGQzMzWFR5dDRzQXBBZlY1dGcz
S0wvMC8wRDM0RjlFOEI2NjA4QzU4MDExNjFGODFEMTFERjhDNUQ5RjNBQzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBEMzRGOUU4QjY2MDhDNTgw
MTE2MUY4MUQxMURGOEM1RDlGM0FDNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNoZDhNZFJ5THBpcFJIa0VERGR0VVlTRkMzM1hUeXQ0c0FwQWZWNXRnM0tMLzAv
MzEzNzMwMmUzNzM5MmUzMTMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqT4QwDQYJKoZIhvcNAQELBQADggEBAFwQCtRb
HWBJSS2NIYW4EPuwm2W+/IWYsrgekgCe42VmnR09UHDy5wtJM88ddqJ2pJRem4NY
dmYCGbuvynTF6Eb1lgHig3bTuGbqDkjzTYl4/HDP3jf2UwL8LbFPAEVEJaJ9f3IV
0LvKIW4MCB2yCVWLt4fjMnlWs0S78ewpbPyBTvb/PKiEMu3EqffQzfNjzsCX3Idu
MCGgDiFrrK4zJatfh8WDP9Yh+EXCsinxCRR2K8y1i5FGSGFbcBI9pW/uFjHAy+I5
bYYJxDjn+wqr10Rf17tKE+iF8W6MtInpNW+p7TqwiWGO3YVcbzBy4MHc0ctviwVF
3WGPLuDuzqx21T4=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:56 2026 by rpki-client