Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32332d3234203d3e20323731353536.roa
File:                     3137392e36332e38322e302f32332d3234203d3e20323731353536.roa (raw, json)
Hash identifier:          Oj0MQTEVmHmkHXbijZ0HfdrjTJBcIyq2KVI1bdKx+Zs=
Subject key identifier:   B1:77:9B:57:1A:20:92:D1:6D:EB:60:51:C7:ED:74:74:1A:88:75:74
Certificate issuer:       /CN=735141A4993B884A90AA91046F802625E5FCE89A
Certificate serial:       0620D6AAF1B23D6009F833E0E7B162872952A888
Authority key identifier: 73:51:41:A4:99:3B:88:4A:90:AA:91:04:6F:80:26:25:E5:FC:E8:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32332d3234203d3e20323731353536.roa
Signing time:             Wed 29 Jul 2026 18:17:36 +0000
ROA not before:           Wed 29 Jul 2026 18:12:36 +0000
ROA not after:            Wed 28 Jul 2027 18:17:36 +0000
asID:                     271556
IP address blocks:        179.63.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.crl
                          rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:20:d6:aa:f1:b2:3d:60:09:f8:33:e0:e7:b1:62:87:29:52:a8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735141A4993B884A90AA91046F802625E5FCE89A
        Validity
            Not Before: Jul 29 18:12:36 2026 GMT
            Not After : Jul 28 18:17:36 2027 GMT
        Subject: CN=B1779B571A2092D16DEB6051C7ED74741A887574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:30:ce:af:ee:98:75:bd:da:08:73:f1:d7:6c:
                    45:d6:e4:7e:f3:02:82:5b:79:c9:0f:90:25:67:b1:
                    6a:0a:a6:e9:18:51:f6:a4:15:ca:b2:15:30:46:fe:
                    bc:f0:18:c4:9a:4c:d8:1f:5e:ab:37:43:90:c7:3c:
                    dd:06:86:c6:1d:ca:3c:6c:39:6d:a3:e2:b9:61:bf:
                    94:c4:56:c3:eb:de:32:57:2d:7e:ef:51:83:a4:5b:
                    28:d7:09:7f:3c:17:4b:4a:c4:00:c8:f1:e1:c5:11:
                    17:f7:8f:35:84:41:1b:a4:f2:6e:90:a2:b2:08:73:
                    6b:6b:a5:86:44:03:33:9a:c7:c6:a2:fe:4c:b5:dc:
                    2d:d4:e6:5a:c6:38:7e:d0:66:cf:69:42:27:bc:e4:
                    40:2c:4a:11:1c:4b:2b:b4:f2:ce:12:d0:24:98:6b:
                    28:85:27:c6:ac:b1:ee:de:53:87:88:4b:1f:50:82:
                    d5:cd:bf:a0:23:05:b6:6f:5d:47:55:cf:45:70:cd:
                    25:ec:77:44:cc:68:b4:44:0e:ca:e1:fb:47:82:38:
                    a1:a3:90:49:b7:42:02:29:9c:26:ab:95:92:ed:a7:
                    3f:56:9a:ce:48:53:5f:1f:f7:38:b3:21:76:cf:62:
                    b7:a2:a9:91:bd:c8:6e:e7:0f:cd:84:56:ef:0c:b9:
                    ea:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:9B:57:1A:20:92:D1:6D:EB:60:51:C7:ED:74:74:1A:88:75:74
            X509v3 Authority Key Identifier:
                keyid:73:51:41:A4:99:3B:88:4A:90:AA:91:04:6F:80:26:25:E5:FC:E8:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/735141A4993B884A90AA91046F802625E5FCE89A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/735141A4993B884A90AA91046F802625E5FCE89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ouZAZdAtQ3YLajF566whX7LdjePBdvWKdS5arcYptdX/0/3137392e36332e38322e302f32332d3234203d3e20323731353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:79:fb:15:46:56:c3:36:8c:cb:71:51:0a:41:64:b6:15:
         f0:2e:c0:16:90:20:a6:83:70:e4:39:53:e2:a3:31:d6:2b:59:
         5a:03:a1:b0:46:f5:3c:97:0a:94:57:b3:6e:de:c4:30:b6:b8:
         a4:9b:7e:9b:bd:87:b4:13:76:cd:71:3a:94:ab:65:61:26:42:
         80:66:ff:77:28:6b:5e:2c:9f:1b:47:55:96:ff:63:f6:37:c4:
         e7:87:9b:fb:e1:7c:90:f8:1a:d7:2c:b3:06:81:f0:90:61:72:
         df:07:08:71:a7:7a:ff:5c:2a:dc:4e:36:06:0e:c8:04:67:40:
         86:f1:17:fe:b3:e7:93:f4:45:44:42:bb:be:4a:f1:10:88:a5:
         fb:59:a3:f2:a3:f9:36:fa:3c:a4:58:ab:68:84:09:11:a2:dc:
         da:99:88:f6:dc:66:60:25:ac:1f:6f:e8:44:c3:8f:d9:b4:58:
         df:d4:b5:41:33:a7:3a:10:21:16:c0:2c:08:6c:df:06:96:f3:
         e0:d4:c8:4e:49:9f:11:fa:2c:1c:5d:5e:0a:4f:e3:bf:ca:7b:
         c8:cf:03:2e:ef:86:0d:f2:48:f9:09:a9:ec:f8:85:32:14:c8:
         b2:15:b5:d1:c9:99:7d:2d:29:8e:0c:33:09:27:fa:00:1a:cd:
         e5:f0:56:0a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBiDWqvGyPWAJ+DPg57FihylSqIgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1MTQxQTQ5OTNCODg0QTkwQUE5MTA0NkY4MDI2MjVF
NUZDRTg5QTAeFw0yNjA3MjkxODEyMzZaFw0yNzA3MjgxODE3MzZaMDMxMTAvBgNV
BAMTKEIxNzc5QjU3MUEyMDkyRDE2REVCNjA1MUM3RUQ3NDc0MUE4ODc1NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMM6v7ph1vdoIc/HXbEXW5H7z
AoJbeckPkCVnsWoKpukYUfakFcqyFTBG/rzwGMSaTNgfXqs3Q5DHPN0GhsYdyjxs
OW2j4rlhv5TEVsPr3jJXLX7vUYOkWyjXCX88F0tKxADI8eHFERf3jzWEQRuk8m6Q
orIIc2trpYZEAzOax8ai/ky13C3U5lrGOH7QZs9pQie85EAsShEcSyu08s4S0CSY
ayiFJ8asse7eU4eISx9QgtXNv6AjBbZvXUdVz0VwzSXsd0TMaLREDsrh+0eCOKGj
kEm3QgIpnCarlZLtpz9Wms5IU18f9zizIXbPYreiqZG9yG7nD82EVu8MueonAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsXebVxogktFt62BRx+10dBqIdXQwHwYDVR0j
BBgwFoAUc1FBpJk7iEqQqpEEb4AmJeX86JowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm91WkFaZEF0UTNZTGFqRjU2NndoWDdMZGplUEJkdldLZFM1YXJjWXB0
ZFgvMC83MzUxNDFBNDk5M0I4ODRBOTBBQTkxMDQ2RjgwMjYyNUU1RkNFODlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczNTE0MUE0OTkzQjg4NEE5
MEFBOTEwNDZGODAyNjI1RTVGQ0U4OUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZvdVpBWmRBdFEzWUxhakY1NjZ3aFg3TGRqZVBCZHZXS2RTNWFyY1lwdGRYLzAv
MzEzNzM5MmUzNjMzMmUzODMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsz9SMA0GCSqGSIb3DQEBCwUAA4IBAQAAyXn7FUZW
wzaMy3FRCkFkthXwLsAWkCCmg3DkOVPiozHWK1laA6GwRvU8lwqUV7Nu3sQwtrik
m36bvYe0E3bNcTqUq2VhJkKAZv93KGteLJ8bR1WW/2P2N8Tnh5v74XyQ+BrXLLMG
gfCQYXLfBwhxp3r/XCrcTjYGDsgEZ0CG8Rf+s+eT9EVEQru+SvEQiKX7WaPyo/k2
+jykWKtohAkRotzamYj23GZgJawfb+hEw4/ZtFjf1LVBM6c6ECEWwCwIbN8GlvPg
1MhOSZ8R+iwcXV4KT+O/ynvIzwMu74YN8kj5Cans+IUyFMiyFbXRyZl9LSmODDMJ
J/oAGs3l8FYK
-----END CERTIFICATE-----
Generated at Sun Aug 23 16:10:49 2026 by rpki-client