Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135332e302f32342d3234203d3e20323633363530.roa
File:                     3137372e37342e3135332e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          5k32iIlmcYwBT0KmQdyTwgc1Y8Xb+6tVz8E6pnz9u/A=
Subject key identifier:   7E:3E:08:57:5B:CB:9C:7A:E0:94:DC:FC:56:48:03:D4:C1:D0:89:6A
Certificate issuer:       /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial:       175AE16B1A061365152B25BA9F47F85B7CBD568F
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135332e302f32342d3234203d3e20323633363530.roa
Signing time:             Thu 17 Sep 2026 13:31:42 +0000
ROA not before:           Thu 17 Sep 2026 13:26:42 +0000
ROA not after:            Thu 16 Sep 2027 13:31:42 +0000
asID:                     263650
IP address blocks:        177.74.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 19:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5a:e1:6b:1a:06:13:65:15:2b:25:ba:9f:47:f8:5b:7c:bd:56:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
        Validity
            Not Before: Sep 17 13:26:42 2026 GMT
            Not After : Sep 16 13:31:42 2027 GMT
        Subject: CN=7E3E08575BCB9C7AE094DCFC564803D4C1D0896A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:0e:84:07:b2:5b:9f:cb:1f:30:3e:61:e5:
                    dd:4e:85:23:c6:f4:a6:48:ad:a9:a2:f0:be:ed:90:
                    1b:e0:6e:f0:eb:b4:ae:1f:95:a1:73:1d:de:57:13:
                    6c:5f:e7:c9:e9:a1:f9:a4:9e:13:79:5e:85:6f:ba:
                    63:04:fd:b2:7a:0d:70:ec:38:5d:e7:e6:ae:f9:59:
                    d1:b4:bf:72:5d:64:2b:09:ac:82:f0:50:ac:cb:e8:
                    f7:f5:17:92:52:af:2f:da:0a:9f:28:da:90:90:7e:
                    24:d5:ec:8c:4b:e4:e3:ac:16:fc:bb:c1:ab:7f:eb:
                    aa:57:6b:e8:b1:58:c1:8a:ab:88:f0:59:b9:5c:2c:
                    94:83:62:43:72:ee:ba:c0:4c:d8:95:81:d2:a2:43:
                    6a:d6:91:fa:34:c7:8e:e6:60:05:72:b6:81:74:c0:
                    c7:fa:1f:33:29:44:27:4b:21:59:96:0a:af:f6:40:
                    10:f2:ed:b2:44:ec:7a:58:81:76:57:7a:fb:de:d4:
                    6a:8d:b9:6b:fb:05:59:84:66:c5:1c:0b:1d:36:48:
                    61:04:9f:26:76:d0:d8:48:05:db:cd:f2:78:67:f2:
                    e8:53:f1:db:5e:12:5d:58:5c:d8:a2:c5:38:81:41:
                    f6:a0:2b:39:04:d5:21:f3:44:21:e0:c2:1b:96:21:
                    a4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3E:08:57:5B:CB:9C:7A:E0:94:DC:FC:56:48:03:D4:C1:D0:89:6A
            X509v3 Authority Key Identifier:
                keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135332e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:0e:3b:47:55:bd:e9:4f:bb:ea:8c:13:4c:ba:84:ad:3d:
         1e:fb:b3:d2:8e:20:dc:04:89:74:1b:3e:ff:00:6b:88:a6:e0:
         38:45:a9:5f:96:e3:2d:ec:09:11:e0:b4:a4:0d:b1:d0:c7:76:
         a6:0b:0e:3b:32:89:a8:91:fe:7e:e3:f0:1c:0f:0a:37:5b:2e:
         21:91:27:2b:19:cd:ca:18:4a:d5:f3:d6:15:8b:c8:a1:41:0f:
         65:e8:37:10:d6:49:b0:f6:3a:d5:56:27:a9:34:29:17:be:29:
         1e:98:2c:b2:30:e1:19:9d:e8:54:04:94:83:32:5b:63:f2:1f:
         05:d7:c5:3e:e2:83:de:09:10:b2:bd:b8:11:0b:ff:5b:da:c0:
         a0:c8:3d:e6:09:e9:58:aa:f1:93:1b:1b:90:9e:bf:3f:9e:e1:
         7e:70:e5:b1:ef:01:2d:5f:f2:46:b0:92:12:db:1b:8d:b4:c7:
         c3:c7:b4:64:7c:57:89:11:d7:62:80:cd:57:34:3d:e8:43:da:
         8b:96:70:6c:86:f8:fd:ea:19:25:f9:99:48:d9:00:13:7c:67:
         55:28:ee:d6:a9:3c:f9:ee:88:a3:9d:bd:ab:3a:f0:ee:06:14:
         87:1b:6b:83:59:23:ce:4f:93:3c:c4:e4:a7:a7:8b:5e:c4:72:
         92:07:83:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF1rhaxoGE2UVKyW6n0f4W3y9Vo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5NjJGQTg4RjU3RUJCREEwRUI3ODc3QzEzODA1NUIz
ODM4QkIwOTAeFw0yNjA5MTcxMzI2NDJaFw0yNzA5MTYxMzMxNDJaMDMxMTAvBgNV
BAMTKDdFM0UwODU3NUJDQjlDN0FFMDk0RENGQzU2NDgwM0Q0QzFEMDg5NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEQ6EB7Jbn8sfMD5h5d1OhSPG
9KZIrami8L7tkBvgbvDrtK4flaFzHd5XE2xf58npofmknhN5XoVvumME/bJ6DXDs
OF3n5q75WdG0v3JdZCsJrILwUKzL6Pf1F5JSry/aCp8o2pCQfiTV7IxL5OOsFvy7
wat/66pXa+ixWMGKq4jwWblcLJSDYkNy7rrATNiVgdKiQ2rWkfo0x47mYAVytoF0
wMf6HzMpRCdLIVmWCq/2QBDy7bJE7HpYgXZXevve1GqNuWv7BVmEZsUcCx02SGEE
nyZ20NhIBdvN8nhn8uhT8dteEl1YXNiixTiBQfagKzkE1SHzRCHgwhuWIaSBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfj4IV1vLnHrglNz8VkgD1MHQiWowHwYDVR0j
BBgwFoAUqZYvqI9X672g63h3wTgFWzg4uwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGha
ekwvMC9BOTk2MkZBODhGNTdFQkJEQTBFQjc4NzdDMTM4MDU1QjM4MzhCQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OTYyRkE4OEY1N0VCQkRB
MEVCNzg3N0MxMzgwNTVCMzgzOEJCMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMMWpXTkxpZ1dZTTl4bTM5emVaWXh5ckxqVFlmeXFrR0Nlb0UzWFhoWnpMLzAv
MzEzNzM3MmUzNzM0MmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSpkwDQYJKoZIhvcNAQELBQADggEBAI26DjtH
Vb3pT7vqjBNMuoStPR77s9KOINwEiXQbPv8Aa4im4DhFqV+W4y3sCRHgtKQNsdDH
dqYLDjsyiaiR/n7j8BwPCjdbLiGRJysZzcoYStXz1hWLyKFBD2XoNxDWSbD2OtVW
J6k0KRe+KR6YLLIw4Rmd6FQElIMyW2PyHwXXxT7ig94JELK9uBEL/1vawKDIPeYJ
6Viq8ZMbG5Cevz+e4X5w5bHvAS1f8kawkhLbG420x8PHtGR8V4kR12KAzVc0PehD
2ouWcGyG+P3qGSX5mUjZABN8Z1Uo7tapPPnuiKOdvas68O4GFIcba4NZI85PkzzE
5Keni17EcpIHg1U=
-----END CERTIFICATE-----
Generated at Tue Oct 13 13:49:47 2026 by rpki-client