Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa
File:                     3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa (raw, json)
Hash identifier:          dec0GArXfzR9EmPnvXMeS4GlSlsi5dZaje3JavYgRj0=
Subject key identifier:   51:E4:AE:80:A9:96:C4:AC:3E:D9:DA:16:09:B3:A9:12:00:60:93:F0
Certificate issuer:       /CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
Certificate serial:       4A8AFDE29DC4DB8FC03CCCBB39656991136770A0
Authority key identifier: 4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa
Signing time:             Tue 07 Apr 2026 16:23:53 +0000
ROA not before:           Tue 07 Apr 2026 16:18:53 +0000
ROA not after:            Tue 06 Apr 2027 16:23:53 +0000
asID:                     263295
IP address blocks:        177.91.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl
                          rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 06:43:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:8a:fd:e2:9d:c4:db:8f:c0:3c:cc:bb:39:65:69:91:13:67:70:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC
        Validity
            Not Before: Apr  7 16:18:53 2026 GMT
            Not After : Apr  6 16:23:53 2027 GMT
        Subject: CN=51E4AE80A996C4AC3ED9DA1609B3A912006093F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:e5:03:37:1b:dd:6f:80:63:93:1d:3b:23:
                    22:25:c0:5e:02:00:dc:bc:10:3f:05:1b:94:ce:95:
                    bb:e7:ab:0f:0b:0f:1e:e1:d7:f3:8e:96:63:76:ae:
                    7d:d6:7e:b7:7a:b8:ad:d7:5b:21:63:f3:03:bf:08:
                    a9:56:46:ee:e8:a4:fa:aa:0a:3e:b1:49:aa:c3:75:
                    a4:82:c3:be:c2:94:5f:7c:bf:cd:53:15:f9:ed:29:
                    34:bf:51:fd:f0:16:35:00:4a:f9:63:0f:c6:91:bc:
                    e6:b9:0a:c0:54:19:b3:33:0e:4d:7f:d2:8a:86:55:
                    8c:ae:78:96:25:22:dc:9d:b3:5f:fc:79:13:13:53:
                    17:49:84:f0:5a:f9:f5:74:57:32:fd:44:7f:b2:b6:
                    ac:ff:b2:ce:db:b3:ad:f8:c1:55:a2:ac:f5:85:3f:
                    85:ec:12:db:bc:78:e7:fc:c3:da:37:b3:64:36:c2:
                    9d:62:d2:75:89:6e:71:87:5b:84:bf:3a:dc:e0:d2:
                    14:3a:6b:9c:47:e1:e7:21:02:b6:1a:da:cd:c2:f4:
                    fc:a8:2f:ae:98:54:87:d1:cb:b0:68:a0:91:ef:e8:
                    dc:60:6a:a1:d9:95:ba:02:fd:e4:8d:30:3a:26:3d:
                    2f:4e:a0:f7:66:c3:6b:f1:8d:62:3a:12:58:46:9a:
                    78:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E4:AE:80:A9:96:C4:AC:3E:D9:DA:16:09:B3:A9:12:00:60:93:F0
            X509v3 Authority Key Identifier:
                keyid:4F:A8:AB:A4:F3:F2:5A:2D:D6:D1:94:26:2C:47:FE:40:FE:E1:81:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FA8ABA4F3F25A2DD6D194262C47FE40FEE181FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/3137372e39312e3134322e302f32332d3233203d3e20323633323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:64:10:e9:52:af:2b:72:32:99:a6:64:60:cd:cb:d7:5f:
         18:3f:bc:70:80:5d:10:9e:be:2d:54:f9:63:d4:7a:d6:63:d4:
         25:e1:ec:5e:ed:77:d3:c4:7e:75:06:dc:d5:f7:5e:5c:eb:0f:
         84:20:97:d7:da:1f:69:91:33:11:73:3a:2a:09:e6:05:89:3d:
         5d:b2:19:68:fd:88:c3:60:98:29:ff:b0:b2:7b:95:0b:30:3d:
         99:05:e3:e8:be:a6:d9:c9:95:69:21:75:f0:7a:2c:70:63:18:
         58:99:0a:7f:78:3a:97:e5:c5:57:36:02:5b:9f:93:85:35:28:
         7e:bf:06:42:f8:5f:bc:e7:20:ca:53:2a:f1:82:5d:cf:ac:1f:
         31:99:0e:56:f1:ba:a7:d7:73:74:ef:c7:dc:ed:5a:55:33:a0:
         9a:34:be:50:bf:b7:b9:33:34:4d:7d:70:55:31:b7:af:4a:d6:
         d4:43:c6:4d:99:13:ba:65:0e:b9:63:a7:c3:90:df:cc:cb:63:
         ba:a1:d4:92:8c:9c:0b:fd:cc:0d:80:26:1d:0b:0d:19:e0:f9:
         37:88:1b:3e:d7:e9:b1:ec:72:08:f2:f5:0b:c3:88:e3:3d:77:
         c5:a9:1e:8e:6f:d5:1c:0e:22:ea:7b:fe:aa:a4:25:38:a5:7e:
         f4:c3:39:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSor94p3E24/APMy7OWVpkRNncKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZBOEFCQTRGM0YyNUEyREQ2RDE5NDI2MkM0N0ZFNDBG
RUUxODFGQzAeFw0yNjA0MDcxNjE4NTNaFw0yNzA0MDYxNjIzNTNaMDMxMTAvBgNV
BAMTKDUxRTRBRTgwQTk5NkM0QUMzRUQ5REExNjA5QjNBOTEyMDA2MDkzRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifOUDNxvdb4Bjkx07IyIlwF4C
ANy8ED8FG5TOlbvnqw8LDx7h1/OOlmN2rn3Wfrd6uK3XWyFj8wO/CKlWRu7opPqq
Cj6xSarDdaSCw77ClF98v81TFfntKTS/Uf3wFjUASvljD8aRvOa5CsBUGbMzDk1/
0oqGVYyueJYlItyds1/8eRMTUxdJhPBa+fV0VzL9RH+ytqz/ss7bs634wVWirPWF
P4XsEtu8eOf8w9o3s2Q2wp1i0nWJbnGHW4S/Otzg0hQ6a5xH4echArYa2s3C9Pyo
L66YVIfRy7BooJHv6NxgaqHZlboC/eSNMDomPS9OoPdmw2vxjWI6ElhGmnhVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUeSugKmWxKw+2doWCbOpEgBgk/AwHwYDVR0j
BBgwFoAUT6irpPPyWi3W0ZQmLEf+QP7hgfwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEIzNEZiekRjRkpXemVaOUVDWDlRSHhmNzdtTDlITU1tZDliQXBodlV0
ZE4vMC80RkE4QUJBNEYzRjI1QTJERDZEMTk0MjYyQzQ3RkU0MEZFRTE4MUZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRGQThBQkE0RjNGMjVBMkRE
NkQxOTQyNjJDNDdGRTQwRkVFMTgxRkMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCMzRGYnpEY0ZKV3plWjlFQ1g5UUh4Zjc3bUw5SE1NbWQ5YkFwaHZVdGROLzAv
MzEzNzM3MmUzOTMxMmUzMTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxW44wDQYJKoZIhvcNAQELBQADggEBACJsZBDp
Uq8rcjKZpmRgzcvXXxg/vHCAXRCevi1U+WPUetZj1CXh7F7td9PEfnUG3NX3Xlzr
D4Qgl9faH2mRMxFzOioJ5gWJPV2yGWj9iMNgmCn/sLJ7lQswPZkF4+i+ptnJlWkh
dfB6LHBjGFiZCn94OpflxVc2Alufk4U1KH6/BkL4X7znIMpTKvGCXc+sHzGZDlbx
uqfXc3Tvx9ztWlUzoJo0vlC/t7kzNE19cFUxt69K1tRDxk2ZE7plDrljp8OQ38zL
Y7qh1JKMnAv9zA2AJh0LDRng+TeIGz7X6bHscgjy9QvDiOM9d8WpHo5v1RwOIup7
/qqkJTilfvTDOSY=
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:43:10 2026 by rpki-client