Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa
File:                     3137372e39312e34352e302f32342d3234203d3e20323633343237.roa (raw, json)
Hash identifier:          1RyPjSEtEU5Zj1Dy+vNEXCQ/bB93G4Kx3N7QIfGyyn8=
Subject key identifier:   8B:C1:46:97:0E:C6:6E:10:64:5A:61:0F:AC:D2:6E:56:4C:2C:B3:95
Certificate issuer:       /CN=8D649BA756DE234532A1E9A858DEBF41843906BD
Certificate serial:       793FA9030CEDDA1C10A58732D61C6E07C2725B4A
Authority key identifier: 8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa
Signing time:             Tue 23 Jun 2026 21:14:34 +0000
ROA not before:           Tue 23 Jun 2026 21:09:34 +0000
ROA not after:            Tue 22 Jun 2027 21:14:34 +0000
asID:                     263427
IP address blocks:        177.91.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl
                          rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3f:a9:03:0c:ed:da:1c:10:a5:87:32:d6:1c:6e:07:c2:72:5b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D649BA756DE234532A1E9A858DEBF41843906BD
        Validity
            Not Before: Jun 23 21:09:34 2026 GMT
            Not After : Jun 22 21:14:34 2027 GMT
        Subject: CN=8BC146970EC66E10645A610FACD26E564C2CB395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:20:b1:30:db:3b:0f:6b:ad:87:04:17:87:
                    a2:50:95:c3:81:fd:84:db:c9:f6:eb:87:63:73:11:
                    c2:f2:b3:bb:6d:f7:ff:02:f4:15:06:ef:b5:e8:1b:
                    41:30:16:a1:92:c9:f0:17:14:a8:a7:1f:77:64:aa:
                    35:66:eb:e3:87:6a:78:db:90:38:9e:b1:81:65:21:
                    ea:a3:7d:44:e5:49:6d:c7:a3:95:a8:c0:1f:a9:d7:
                    cf:80:f4:a2:6d:69:c8:6b:eb:1c:38:21:f4:e0:80:
                    cd:b6:09:2e:e5:ef:4d:33:de:77:ff:43:0c:51:ac:
                    15:2f:e9:b9:e0:05:19:33:53:58:48:cc:a3:89:14:
                    c1:3b:46:83:31:cb:4a:9f:f1:3d:b3:5b:32:9f:ee:
                    99:84:1d:11:00:a0:35:bf:85:9c:6a:9c:39:59:ab:
                    37:95:94:bc:b7:14:cf:69:d7:ab:fc:0e:dd:17:cc:
                    6b:b9:fd:5e:6e:06:72:a6:29:16:44:f7:43:88:03:
                    19:41:77:96:c0:07:54:77:44:e5:49:cd:ec:98:e9:
                    66:0b:7e:4b:06:32:35:c9:d7:00:49:74:84:f7:fe:
                    97:37:7b:7d:10:68:6c:e6:a1:91:b0:91:29:eb:fc:
                    6d:f4:2b:7f:1c:70:f3:47:7f:46:80:19:de:f6:75:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:46:97:0E:C6:6E:10:64:5A:61:0F:AC:D2:6E:56:4C:2C:B3:95
            X509v3 Authority Key Identifier:
                keyid:8D:64:9B:A7:56:DE:23:45:32:A1:E9:A8:58:DE:BF:41:84:39:06:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/8D649BA756DE234532A1E9A858DEBF41843906BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D649BA756DE234532A1E9A858DEBF41843906BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/3137372e39312e34352e302f32342d3234203d3e20323633343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:a6:c4:49:ed:32:01:ad:b8:d8:41:b2:a4:a2:e6:8a:3d:
         82:09:82:52:29:55:44:6b:6f:d7:89:47:3e:8f:5a:05:84:91:
         e8:48:c2:4b:6b:95:92:b1:8f:d1:73:71:cb:79:4e:98:20:df:
         a4:b4:54:0b:ec:65:f2:f4:31:78:f3:74:4d:f5:c5:78:3c:b5:
         06:49:06:fb:05:65:57:b8:64:73:33:b5:42:c6:1a:46:a3:ed:
         fc:44:40:ba:42:d4:d6:45:01:f1:60:81:82:61:2b:37:c5:31:
         0b:de:4e:8c:46:2a:9d:91:90:6d:17:fb:26:56:3f:34:e9:76:
         9d:d6:12:7b:c5:60:93:60:ce:bb:81:fd:c1:33:b3:b6:6e:69:
         7b:51:65:a1:6c:8f:29:67:b4:db:5f:fa:1e:dc:ec:6e:9d:30:
         e9:7a:dc:5a:78:bf:f3:b4:bb:67:ea:20:ab:6f:05:8e:24:50:
         20:72:f6:71:64:4d:07:92:f6:64:2e:70:67:50:09:13:91:c6:
         34:10:7f:24:9f:f6:89:ea:0a:db:be:12:cb:38:ee:5b:12:2f:
         24:ae:ec:86:fe:f5:79:8b:8f:21:77:e8:c8:ca:eb:57:96:1f:
         82:f9:10:ec:ac:c3:d3:3c:ec:9f:08:8b:ac:4e:c3:65:4f:58:
         d6:cb:da:b3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeT+pAwzt2hwQpYcy1hxuB8JyW0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2NDlCQTc1NkRFMjM0NTMyQTFFOUE4NThERUJGNDE4
NDM5MDZCRDAeFw0yNjA2MjMyMTA5MzRaFw0yNzA2MjIyMTE0MzRaMDMxMTAvBgNV
BAMTKDhCQzE0Njk3MEVDNjZFMTA2NDVBNjEwRkFDRDI2RTU2NEMyQ0IzOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPSCxMNs7D2uthwQXh6JQlcOB
/YTbyfbrh2NzEcLys7tt9/8C9BUG77XoG0EwFqGSyfAXFKinH3dkqjVm6+OHanjb
kDiesYFlIeqjfUTlSW3Ho5WowB+p18+A9KJtachr6xw4IfTggM22CS7l700z3nf/
QwxRrBUv6bngBRkzU1hIzKOJFME7RoMxy0qf8T2zWzKf7pmEHREAoDW/hZxqnDlZ
qzeVlLy3FM9p16v8Dt0XzGu5/V5uBnKmKRZE90OIAxlBd5bAB1R3ROVJzeyY6WYL
fksGMjXJ1wBJdIT3/pc3e30QaGzmoZGwkSnr/G30K38ccPNHf0aAGd72dUfFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUi8FGlw7GbhBkWmEPrNJuVkwss5UwHwYDVR0j
BBgwFoAUjWSbp1beI0UyoemoWN6/QYQ5Br0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdHeHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16
TTQvMC84RDY0OUJBNzU2REUyMzQ1MzJBMUU5QTg1OERFQkY0MTg0MzkwNkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhENjQ5QkE3NTZERTIzNDUz
MkExRTlBODU4REVCRjQxODQzOTA2QkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAv
MzEzNzM3MmUzOTMxMmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVstMA0GCSqGSIb3DQEBCwUAA4IBAQAiLqbESe0y
Aa242EGypKLmij2CCYJSKVVEa2/XiUc+j1oFhJHoSMJLa5WSsY/Rc3HLeU6YIN+k
tFQL7GXy9DF483RN9cV4PLUGSQb7BWVXuGRzM7VCxhpGo+38REC6QtTWRQHxYIGC
YSs3xTEL3k6MRiqdkZBtF/smVj806Xad1hJ7xWCTYM67gf3BM7O2bml7UWWhbI8p
Z7TbX/oe3OxunTDpetxaeL/ztLtn6iCrbwWOJFAgcvZxZE0HkvZkLnBnUAkTkcY0
EH8kn/aJ6grbvhLLOO5bEi8kruyG/vV5i48hd+jIyutXlh+C+RDsrMPTPOyfCIus
TsNlT1jWy9qz
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:47 2026 by rpki-client