Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3234203d3e20323635303431.roa
File:                     3137302e3135302e3133362e302f32322d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          /1N6vr7cLZB60Xc3ica5rDJfVqzILZ856iqLNv4Uffw=
Subject key identifier:   34:B7:B0:50:17:5E:EA:8C:15:36:01:11:9E:89:04:18:85:D4:DC:2C
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       1B38DCAE42ADE3F22651BD18D6E5188577D44063
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3234203d3e20323635303431.roa
Signing time:             Wed 17 Jun 2026 19:49:20 +0000
ROA not before:           Wed 17 Jun 2026 19:44:20 +0000
ROA not after:            Wed 16 Jun 2027 19:49:20 +0000
asID:                     265041
IP address blocks:        170.150.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:dc:ae:42:ad:e3:f2:26:51:bd:18:d6:e5:18:85:77:d4:40:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Jun 17 19:44:20 2026 GMT
            Not After : Jun 16 19:49:20 2027 GMT
        Subject: CN=34B7B050175EEA8C153601119E89041885D4DC2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b4:00:c5:89:1c:f5:d7:fc:75:92:a9:70:69:
                    41:bc:e4:7c:96:f6:9e:dd:f7:9f:e8:38:25:a3:28:
                    d6:34:23:fc:b3:3f:c5:92:ae:5f:b9:ef:5a:c1:5a:
                    6e:9b:4a:96:fd:b3:fb:70:72:eb:5f:bf:a0:3e:9b:
                    bb:25:fd:81:38:a7:0e:04:3d:31:b4:18:9f:e3:0b:
                    7b:94:2d:ce:f0:a0:96:73:ad:53:16:19:5e:7e:4b:
                    aa:42:5a:d7:3b:c0:19:c9:f4:48:16:e3:29:95:fd:
                    77:cd:20:31:a6:51:37:15:d3:1d:d4:7c:a5:45:cc:
                    d9:9b:49:a7:53:83:e0:ef:73:c4:26:cc:60:fe:eb:
                    df:74:fa:67:b8:17:61:10:08:45:40:d5:39:a8:c0:
                    f5:39:15:20:cd:b4:46:37:58:9d:e5:e0:36:13:b3:
                    79:79:3c:10:c9:38:5e:76:5d:51:62:7f:15:8c:f4:
                    0d:b4:33:c3:bc:a7:e2:8f:8d:bf:a3:81:2f:34:bd:
                    2a:52:b4:76:12:20:b4:08:31:ab:2e:aa:de:d2:43:
                    82:95:cd:23:2d:f1:b0:d0:7a:63:cd:b9:1e:52:38:
                    60:9a:4e:11:58:a1:f1:f4:f0:88:72:cf:c6:34:07:
                    66:cd:6b:6d:b8:b0:3a:63:cc:8f:76:94:97:ce:c0:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B7:B0:50:17:5E:EA:8C:15:36:01:11:9E:89:04:18:85:D4:DC:2C
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3137302e3135302e3133362e302f32322d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8e:5b:c6:20:95:a1:bd:89:6b:00:53:b0:69:6d:e5:66:57:
         fb:95:87:d6:66:b8:1c:cb:93:cc:03:0f:2d:63:be:d6:ea:bd:
         01:0e:19:0d:b7:80:dc:2b:e3:f6:a7:36:63:80:56:12:ec:b6:
         ed:9a:a7:08:a8:d9:a0:ce:09:62:12:c7:0a:e9:64:a9:d0:b9:
         fd:f7:ac:7c:95:38:fc:b8:c7:ab:88:a8:0e:31:9c:0b:cd:64:
         05:06:b9:a3:71:c7:96:d6:e5:4f:5d:2e:9f:d8:2c:6c:00:50:
         f3:f7:17:f4:22:b9:49:a8:72:38:b9:b9:d0:3e:70:2a:59:b7:
         8c:b2:97:87:31:67:93:a2:ca:8c:c0:78:ae:a9:e7:eb:76:77:
         e8:13:9a:96:7a:7c:58:4f:e3:fb:51:09:dc:c4:11:0b:b5:62:
         bb:f0:57:07:92:0d:a2:64:29:46:02:11:74:db:a7:fc:47:da:
         d5:eb:cb:f6:60:83:7f:e9:6f:37:ea:d3:40:e3:26:23:1f:f8:
         fc:6d:3d:63:db:9b:f2:62:0f:45:d6:57:8c:ee:5f:85:f1:77:
         0f:90:3a:dc:44:78:a8:89:98:8f:8a:cc:4e:ec:dc:35:b7:e0:
         7e:61:05:8d:d9:44:8a:66:0d:d8:e3:a4:c4:7a:66:f8:b2:90:
         77:dc:f7:0d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGzjcrkKt4/ImUb0Y1uUYhXfUQGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQzNCREJDMjg3NzFFMjNCNkEzQUY4RkJEMzY2NEFD
NEMwRUNCRjAeFw0yNjA2MTcxOTQ0MjBaFw0yNzA2MTYxOTQ5MjBaMDMxMTAvBgNV
BAMTKDM0QjdCMDUwMTc1RUVBOEMxNTM2MDExMTlFODkwNDE4ODVENERDMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDutADFiRz11/x1kqlwaUG85HyW
9p7d95/oOCWjKNY0I/yzP8WSrl+571rBWm6bSpb9s/twcutfv6A+m7sl/YE4pw4E
PTG0GJ/jC3uULc7woJZzrVMWGV5+S6pCWtc7wBnJ9EgW4ymV/XfNIDGmUTcV0x3U
fKVFzNmbSadTg+Dvc8QmzGD+6990+me4F2EQCEVA1TmowPU5FSDNtEY3WJ3l4DYT
s3l5PBDJOF52XVFifxWM9A20M8O8p+KPjb+jgS80vSpStHYSILQIMasuqt7SQ4KV
zSMt8bDQemPNuR5SOGCaThFYofH08Ihyz8Y0B2bNa224sDpjzI92lJfOwGVRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNLewUBde6owVNgERnokEGIXU3CwwHwYDVR0j
BBgwFoAUp7w728KHceI7ajr4+9NmSsTA7L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMS9BN0JDM0JEQkMyODc3MUUyM0I2QTNBRjhGQkQzNjY0QUM0QzBFQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QkMzQkRCQzI4NzcxRTIz
QjZBM0FGOEZCRDM2NjRBQzRDMEVDQkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzEv
MzEzNzMwMmUzMTM1MzAyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNTMwMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWiDANBgkqhkiG9w0BAQsFAAOCAQEACI5b
xiCVob2JawBTsGlt5WZX+5WH1ma4HMuTzAMPLWO+1uq9AQ4ZDbeA3Cvj9qc2Y4BW
Euy27ZqnCKjZoM4JYhLHCulkqdC5/fesfJU4/LjHq4ioDjGcC81kBQa5o3HHltbl
T10un9gsbABQ8/cX9CK5SahyOLm50D5wKlm3jLKXhzFnk6LKjMB4rqnn63Z36BOa
lnp8WE/j+1EJ3MQRC7Viu/BXB5INomQpRgIRdNun/Efa1evL9mCDf+lvN+rTQOMm
Ix/4/G09Y9ub8mIPRdZXjO5fhfF3D5A63ER4qImYj4rMTuzcNbfgfmEFjdlEimYN
2OOkxHpm+LKQd9z3DQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 21:56:05 2026 by rpki-client