Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e33302e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          OV8N+2JgL6PGyZ4NmTLGHK4kPKLFOHmdR/7If1x0rac=
Subject key identifier:   94:57:70:5A:86:06:52:6A:3B:0A:D6:7D:5A:7F:5F:53:D7:69:2C:D6
Certificate issuer:       /CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
Certificate serial:       0EE2287FB1A61E775C2E54FE342475364DE4F027
Authority key identifier: 60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa
Signing time:             Fri 22 Aug 2025 21:36:54 +0000
ROA not before:           Fri 22 Aug 2025 21:31:54 +0000
ROA not after:            Fri 21 Aug 2026 21:36:54 +0000
asID:                     52706
IP address blocks:        177.126.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl
                          rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:28:7f:b1:a6:1e:77:5c:2e:54:fe:34:24:75:36:4d:e4:f0:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60085AC6A7E2B26CD5A332853E705D9924CA9DD7
        Validity
            Not Before: Aug 22 21:31:54 2025 GMT
            Not After : Aug 21 21:36:54 2026 GMT
        Subject: CN=9457705A8606526A3B0AD67D5A7F5F53D7692CD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:11:20:4e:57:20:00:70:2a:a7:da:69:6d:
                    f2:16:1f:e8:60:9e:39:2b:ed:38:ae:a5:11:f7:16:
                    76:cc:8f:70:2a:56:32:84:68:bd:c1:e6:03:6e:87:
                    d4:18:d2:c4:9b:22:a6:3f:83:05:bd:7a:49:41:d2:
                    4b:3b:ef:a8:62:60:f9:69:be:72:88:4b:21:ab:0b:
                    26:92:79:ad:ea:69:3e:31:c3:3a:a9:c3:5e:ac:29:
                    06:d6:8d:84:34:4a:43:1b:d5:d5:db:0d:6c:a8:eb:
                    20:4f:9a:53:d2:65:33:47:60:ab:b1:fd:53:61:45:
                    77:05:55:01:8f:a6:52:de:37:35:91:a9:4b:46:b8:
                    65:96:83:d2:42:45:6a:ca:17:79:4c:22:97:66:24:
                    8e:79:e0:6e:57:05:ec:c7:2c:01:a3:f8:f0:ca:f8:
                    b9:18:fc:04:e4:bc:20:12:3f:5c:6e:48:9d:87:9b:
                    19:7b:79:32:f5:a1:08:1d:e0:34:c2:0e:3c:45:83:
                    bb:95:ae:7c:89:34:d6:b8:7b:53:55:0c:0b:9f:04:
                    7f:2e:bd:10:c1:d1:63:39:10:20:bd:52:87:5d:81:
                    74:1a:63:d9:d1:3f:48:7c:46:05:7a:f6:9b:91:74:
                    00:f3:aa:c8:76:dc:8a:7a:75:55:1d:0f:b4:42:6a:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:57:70:5A:86:06:52:6A:3B:0A:D6:7D:5A:7F:5F:53:D7:69:2C:D6
            X509v3 Authority Key Identifier:
                keyid:60:08:5A:C6:A7:E2:B2:6C:D5:A3:32:85:3E:70:5D:99:24:CA:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60085AC6A7E2B26CD5A332853E705D9924CA9DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:d7:8e:cd:6e:0a:d0:78:b4:4f:2c:50:79:bb:0c:9e:e6:
         a0:d4:c7:14:76:76:56:27:c1:8e:86:d3:db:e4:64:15:23:93:
         0f:bd:72:23:67:3f:fa:e0:d9:5c:95:94:00:93:db:a8:c5:f0:
         16:64:2f:f0:f3:7e:b4:2d:aa:5a:6b:f9:ea:1e:3a:26:0c:13:
         6a:f4:d4:22:ba:65:24:c6:88:67:13:02:75:41:88:fc:20:e5:
         a1:da:05:00:d9:a2:2b:37:95:47:bc:e9:bd:c4:e9:70:a4:06:
         08:72:bd:9f:67:34:eb:9a:22:b4:a2:d0:94:52:41:43:f6:83:
         7d:1c:c3:86:14:f9:a7:8b:30:ca:e9:f7:a5:94:79:f8:65:c2:
         f2:52:ec:86:08:47:93:08:62:1f:56:c2:52:98:1d:c8:22:91:
         b3:e2:20:b9:8d:40:6e:07:a1:15:19:f9:77:a5:11:fa:16:45:
         69:ae:e9:d1:d6:0e:74:c2:fc:9b:c6:a8:4b:bc:b2:32:4b:18:
         31:f2:46:00:cc:19:98:fd:af:16:d3:b0:2b:26:f7:84:07:08:
         62:8f:31:54:94:b1:1b:ba:4f:91:bd:89:a3:3c:a0:07:d5:b4:
         dd:d7:1c:c7:5a:c7:f0:dd:36:dc:3d:33:14:f5:4a:01:60:7c:
         6a:14:8d:76
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDuIof7GmHndcLlT+NCR1Nk3k8CcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwODVBQzZBN0UyQjI2Q0Q1QTMzMjg1M0U3MDVEOTky
NENBOURENzAeFw0yNTA4MjIyMTMxNTRaFw0yNjA4MjEyMTM2NTRaMDMxMTAvBgNV
BAMTKDk0NTc3MDVBODYwNjUyNkEzQjBBRDY3RDVBN0Y1RjUzRDc2OTJDRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaCBEgTlcgAHAqp9ppbfIWH+hg
njkr7TiupRH3FnbMj3AqVjKEaL3B5gNuh9QY0sSbIqY/gwW9eklB0ks776hiYPlp
vnKISyGrCyaSea3qaT4xwzqpw16sKQbWjYQ0SkMb1dXbDWyo6yBPmlPSZTNHYKux
/VNhRXcFVQGPplLeNzWRqUtGuGWWg9JCRWrKF3lMIpdmJI554G5XBezHLAGj+PDK
+LkY/ATkvCASP1xuSJ2Hmxl7eTL1oQgd4DTCDjxFg7uVrnyJNNa4e1NVDAufBH8u
vRDB0WM5ECC9UoddgXQaY9nRP0h8RgV69puRdADzqsh23Ip6dVUdD7RCalUrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlFdwWoYGUmo7CtZ9Wn9fU9dpLNYwHwYDVR0j
BBgwFoAUYAhaxqfismzVozKFPnBdmSTKndcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC82MDA4NUFDNkE3RTJCMjZDRDVBMzMyODUzRTcwNUQ5OTI0Q0E5REQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMDg1QUM2QTdFMkIyNkNE
NUEzMzI4NTNFNzA1RDk5MjRDQTlERDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4eMA0GCSqGSIb3DQEBCwUAA4IBAQAfIdeOzW4K
0Hi0TyxQebsMnuag1McUdnZWJ8GOhtPb5GQVI5MPvXIjZz/64NlclZQAk9uoxfAW
ZC/w8360Lapaa/nqHjomDBNq9NQiumUkxohnEwJ1QYj8IOWh2gUA2aIrN5VHvOm9
xOlwpAYIcr2fZzTrmiK0otCUUkFD9oN9HMOGFPmnizDK6fellHn4ZcLyUuyGCEeT
CGIfVsJSmB3IIpGz4iC5jUBuB6EVGfl3pRH6FkVprunR1g50wvybxqhLvLIySxgx
8kYAzBmY/a8W07ArJveEBwhijzFUlLEbuk+RvYmjPKAH1bTd1xzHWsfw3TbcPTMU
9UoBYHxqFI12
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:35:27 2025 by rpki-client