Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38372e302f32342d3234203d3e20323633313239.roa
File:                     3137372e3135352e38372e302f32342d3234203d3e20323633313239.roa (raw, json)
Hash identifier:          zn0sFxi2EcfWRREI6nO54vUJ0uoE21ztHZ6t2m5sUz0=
Subject key identifier:   1C:BC:E5:0A:F5:5D:76:30:7B:87:41:B6:AC:B8:1E:A9:1B:E0:4E:54
Certificate issuer:       /CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
Certificate serial:       14649AA1E5E317A48C364B57F32665279710C2D5
Authority key identifier: AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38372e302f32342d3234203d3e20323633313239.roa
Signing time:             Fri 18 Sep 2026 11:56:38 +0000
ROA not before:           Fri 18 Sep 2026 11:51:38 +0000
ROA not after:            Fri 17 Sep 2027 11:56:38 +0000
asID:                     263129
IP address blocks:        177.155.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl
                          rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:64:9a:a1:e5:e3:17:a4:8c:36:4b:57:f3:26:65:27:97:10:c2:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF50F638CF25272403E3BE3527E6E84FE685FBE7
        Validity
            Not Before: Sep 18 11:51:38 2026 GMT
            Not After : Sep 17 11:56:38 2027 GMT
        Subject: CN=1CBCE50AF55D76307B8741B6ACB81EA91BE04E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:05:75:67:d8:e6:fa:4f:63:f3:4f:45:d8:d6:
                    80:51:0b:cc:ca:66:51:af:ad:92:d4:4d:c5:eb:61:
                    51:76:40:3c:88:1d:73:77:37:97:70:94:66:5e:58:
                    31:0d:7e:46:ec:1b:86:29:8d:b1:5c:fa:03:dd:7f:
                    1d:26:99:da:c9:8d:53:4a:3e:6b:ab:0b:01:45:2f:
                    38:8c:ee:c5:79:79:36:e9:27:7a:dc:3c:c4:ac:42:
                    eb:b7:ff:dc:1e:f1:5a:92:8c:9b:1a:31:08:60:a5:
                    2a:8e:46:1b:d0:50:ef:78:bc:b2:0c:2d:0b:a7:59:
                    5c:1f:02:d7:be:3a:24:89:4c:eb:51:0d:5d:7a:48:
                    85:c6:ff:a3:09:11:68:12:b9:86:20:5b:3a:6c:d9:
                    6e:3d:4f:70:34:a6:46:6d:1c:ee:c0:ca:cf:45:f9:
                    2e:ec:51:96:c7:fe:2f:48:ed:84:66:fa:1c:f3:8f:
                    cb:da:ee:78:6b:54:e3:06:c5:85:c8:79:f7:1b:ab:
                    58:1f:e4:d3:49:11:d8:0a:c3:c2:66:13:09:66:f6:
                    83:48:f3:fe:c9:db:f1:23:e9:7d:2a:3e:4f:18:05:
                    63:9d:e9:cb:66:b3:01:0c:a8:6b:6b:65:23:45:92:
                    d8:ed:4b:22:11:30:76:31:67:87:74:c8:95:91:4a:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BC:E5:0A:F5:5D:76:30:7B:87:41:B6:AC:B8:1E:A9:1B:E0:4E:54
            X509v3 Authority Key Identifier:
                keyid:AF:50:F6:38:CF:25:27:24:03:E3:BE:35:27:E6:E8:4F:E6:85:FB:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/AF50F638CF25272403E3BE3527E6E84FE685FBE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF50F638CF25272403E3BE3527E6E84FE685FBE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yZhmKTLhGeYV9qNvunK1YwBZjzqpBZNvvqFeFWs6Jmo/0/3137372e3135352e38372e302f32342d3234203d3e20323633313239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:6b:53:b5:39:37:c9:7d:43:b2:b6:36:4f:b8:da:5f:91:
         1f:de:78:5b:e6:86:2f:de:bb:39:b9:48:02:1b:53:4c:55:62:
         56:68:32:40:d5:1f:87:ae:96:43:1d:37:cc:65:05:4c:2b:54:
         91:ec:12:b4:06:10:9c:13:ba:16:b7:a3:83:0f:b8:f6:eb:3b:
         a5:0f:f7:d5:a1:2f:cf:af:63:45:2e:7f:4e:e1:02:03:64:42:
         a2:d8:2a:8d:57:b0:10:70:19:6b:fe:11:0d:6a:d7:b1:ac:ba:
         0c:53:f1:12:e9:eb:4a:3f:52:36:b8:d1:86:cf:df:2c:a6:94:
         0d:0f:0d:ef:68:78:7c:2b:a4:ff:a6:b9:a3:94:64:62:ea:9e:
         59:e1:41:94:39:a7:f5:a9:da:9f:70:da:04:69:21:77:e4:a5:
         58:77:a4:35:ee:f9:d8:d9:ac:51:b2:2d:bb:f3:9c:9f:78:aa:
         17:ea:34:53:2e:e3:f3:49:8f:92:3d:3e:b1:10:a2:69:79:8c:
         43:bc:2c:1a:0d:10:cd:35:d6:95:49:64:79:11:00:38:03:9d:
         89:1e:1a:aa:ba:da:12:31:d1:e8:a3:59:1c:1e:ce:df:5c:b6:
         a2:d0:04:6b:7a:a5:7d:f8:8a:c8:f4:31:e6:bc:e1:3a:14:bc:
         eb:55:b7:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFGSaoeXjF6SMNktX8yZlJ5cQwtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY1MEY2MzhDRjI1MjcyNDAzRTNCRTM1MjdFNkU4NEZF
Njg1RkJFNzAeFw0yNjA5MTgxMTUxMzhaFw0yNzA5MTcxMTU2MzhaMDMxMTAvBgNV
BAMTKDFDQkNFNTBBRjU1RDc2MzA3Qjg3NDFCNkFDQjgxRUE5MUJFMDRFNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBXVn2Ob6T2PzT0XY1oBRC8zK
ZlGvrZLUTcXrYVF2QDyIHXN3N5dwlGZeWDENfkbsG4YpjbFc+gPdfx0mmdrJjVNK
PmurCwFFLziM7sV5eTbpJ3rcPMSsQuu3/9we8VqSjJsaMQhgpSqORhvQUO94vLIM
LQunWVwfAte+OiSJTOtRDV16SIXG/6MJEWgSuYYgWzps2W49T3A0pkZtHO7Ays9F
+S7sUZbH/i9I7YRm+hzzj8va7nhrVOMGxYXIefcbq1gf5NNJEdgKw8JmEwlm9oNI
8/7J2/Ej6X0qPk8YBWOd6ctmswEMqGtrZSNFktjtSyIRMHYxZ4d0yJWRSsn/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHLzlCvVddjB7h0G2rLgeqRvgTlQwHwYDVR0j
BBgwFoAUr1D2OM8lJyQD4741J+boT+aF++cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXlaaG1LVExoR2VZVjlxTnZ1bksxWXdCWmp6cXBCWk52dnFGZUZXczZK
bW8vMC9BRjUwRjYzOENGMjUyNzI0MDNFM0JFMzUyN0U2RTg0RkU2ODVGQkU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGNTBGNjM4Q0YyNTI3MjQw
M0UzQkUzNTI3RTZFODRGRTY4NUZCRTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV5WmhtS1RMaEdlWVY5cU52dW5LMVl3QlpqenFwQlpOdnZxRmVGV3M2Sm1vLzAv
MzEzNzM3MmUzMTM1MzUyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxm1cwDQYJKoZIhvcNAQELBQADggEBABcMa1O1
OTfJfUOytjZPuNpfkR/eeFvmhi/euzm5SAIbU0xVYlZoMkDVH4eulkMdN8xlBUwr
VJHsErQGEJwTuha3o4MPuPbrO6UP99WhL8+vY0Uuf07hAgNkQqLYKo1XsBBwGWv+
EQ1q17GsugxT8RLp60o/Uja40YbP3yymlA0PDe9oeHwrpP+muaOUZGLqnlnhQZQ5
p/Wp2p9w2gRpIXfkpVh3pDXu+djZrFGyLbvznJ94qhfqNFMu4/NJj5I9PrEQoml5
jEO8LBoNEM011pVJZHkRADgDnYkeGqq62hIx0eijWRwezt9ctqLQBGt6pX34isj0
Mea84ToUvOtVtxQ=
-----END CERTIFICATE-----
Generated at Wed Oct 14 21:24:57 2026 by rpki-client