Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
File:                     3137372e32322e33322e302f32302d3234203d3e203532393831.roa (raw, json)
Hash identifier:          oUQW9nGPB2oUP0id9Oag0dfIdNMZfMH5y5DOBlBcC8c=
Subject key identifier:   EF:DF:2D:10:1D:28:CF:D4:81:AA:34:54:0C:83:64:42:66:94:EE:EF
Certificate issuer:       /CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
Certificate serial:       758D4CE8925CF2B4D779267B8F77B551593D7606
Authority key identifier: 0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa
Signing time:             Fri 03 Apr 2026 17:56:32 +0000
ROA not before:           Fri 03 Apr 2026 17:51:32 +0000
ROA not after:            Fri 02 Apr 2027 17:56:32 +0000
asID:                     52981
IP address blocks:        177.22.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl
                          rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:39:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8d:4c:e8:92:5c:f2:b4:d7:79:26:7b:8f:77:b5:51:59:3d:76:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
        Validity
            Not Before: Apr  3 17:51:32 2026 GMT
            Not After : Apr  2 17:56:32 2027 GMT
        Subject: CN=EFDF2D101D28CFD481AA34540C8364426694EEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:ec:f0:16:fd:88:92:60:be:df:48:aa:26:
                    2d:19:14:c9:b9:64:35:69:74:67:0f:7e:66:e0:27:
                    d5:63:43:3a:49:61:0f:44:f1:ed:f9:e4:3f:c9:1b:
                    9a:83:7f:72:ab:e9:ab:0f:87:81:15:37:46:ed:5f:
                    71:8f:30:b6:ce:50:c8:1b:7a:3d:51:24:c0:35:3e:
                    d9:db:e1:64:56:7b:73:56:d6:86:12:39:c0:8b:fa:
                    8f:d4:2f:16:4e:47:ad:d6:50:d3:ec:bb:53:59:30:
                    7e:c7:18:52:8a:b2:6c:e2:70:19:f3:86:a7:2c:53:
                    e8:02:13:7e:08:3f:00:8e:fc:87:b3:20:76:83:c8:
                    40:ca:8e:b0:5a:c0:89:5b:55:36:f9:00:61:2a:4b:
                    2e:4a:fd:9f:11:0e:57:9c:7a:5a:93:75:65:79:2d:
                    d5:20:45:44:2d:42:44:d2:91:46:18:54:67:d4:76:
                    8d:53:82:6d:42:54:07:26:30:4f:55:3f:96:33:2f:
                    cc:b5:5f:f8:82:c9:97:91:55:2f:bd:f6:91:3b:c9:
                    c0:1e:1c:32:89:6c:78:98:32:f5:75:45:1b:2e:25:
                    b2:cc:52:d6:31:cc:8b:56:e7:3e:96:6d:21:ac:ae:
                    e3:0f:a6:47:ae:a5:17:65:d8:c6:12:a1:35:61:cb:
                    9f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:2D:10:1D:28:CF:D4:81:AA:34:54:0C:83:64:42:66:94:EE:EF
            X509v3 Authority Key Identifier:
                keyid:0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/3137372e32322e33322e302f32302d3234203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:99:20:7a:e8:dc:d6:ab:4d:82:90:12:bb:57:9e:c1:c8:d2:
         39:e8:ce:e1:86:3b:57:fb:f8:f6:42:39:e3:38:28:21:c5:74:
         0f:87:d6:80:a6:0d:29:33:df:a1:b0:24:66:a7:b4:aa:b7:82:
         6a:60:f1:3a:67:26:87:48:46:f6:f5:c4:2f:b6:60:1a:c5:00:
         07:6a:94:98:ca:0f:61:20:c9:59:2c:d5:45:7e:95:82:76:94:
         68:ed:44:a3:7d:67:d9:33:ef:13:0a:bc:ec:ad:ec:56:63:9c:
         55:84:58:6c:6b:b9:f8:25:95:ee:f1:02:02:2c:08:05:83:e5:
         8c:eb:09:33:46:0f:1a:aa:77:51:c7:85:33:2a:59:f7:2d:16:
         46:c6:98:a2:7b:78:dc:9b:44:4c:f2:34:41:a0:1b:2c:85:3e:
         2b:a6:10:a0:df:8e:50:0e:44:27:0f:8e:c6:9b:f4:14:ff:ac:
         ce:30:d4:88:22:29:bf:c3:05:a3:ba:be:a2:2f:38:ca:ec:92:
         ec:24:44:af:9a:c6:8b:99:14:ea:f3:a5:fd:ee:0a:db:d4:2a:
         c3:45:6a:76:f7:3a:fe:20:42:d3:32:3a:aa:98:61:0b:5d:6d:
         8b:f9:e0:30:87:e6:15:e9:4a:79:f2:38:33:34:e0:be:55:c1:
         19:1d:36:fc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUdY1M6JJc8rTXeSZ7j3e1UVk9dgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxQ0IwRjY0RjJFQjZGNjA1MDc5NkFDNENEMTYyMDhF
QzEyMzQ4ODAeFw0yNjA0MDMxNzUxMzJaFw0yNzA0MDIxNzU2MzJaMDMxMTAvBgNV
BAMTKEVGREYyRDEwMUQyOENGRDQ4MUFBMzQ1NDBDODM2NDQyNjY5NEVFRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEuzwFv2IkmC+30iqJi0ZFMm5
ZDVpdGcPfmbgJ9VjQzpJYQ9E8e355D/JG5qDf3Kr6asPh4EVN0btX3GPMLbOUMgb
ej1RJMA1Ptnb4WRWe3NW1oYSOcCL+o/ULxZOR63WUNPsu1NZMH7HGFKKsmzicBnz
hqcsU+gCE34IPwCO/IezIHaDyEDKjrBawIlbVTb5AGEqSy5K/Z8RDlecelqTdWV5
LdUgRUQtQkTSkUYYVGfUdo1Tgm1CVAcmME9VP5YzL8y1X/iCyZeRVS+99pE7ycAe
HDKJbHiYMvV1RRsuJbLMUtYxzItW5z6WbSGsruMPpkeupRdl2MYSoTVhy5/dAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU798tEB0oz9SBqjRUDINkQmaU7u8wHwYDVR0j
BBgwFoAUCxyw9k8utvYFB5asTNFiCOwSNIgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVrTUxkemQ4UEFoRjJ4Tmo1Y1JnbmFONFZCamRMZG50a3BiTm50RTN0
UUovMC8wQjFDQjBGNjRGMkVCNkY2MDUwNzk2QUM0Q0QxNjIwOEVDMTIzNDg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBCMUNCMEY2NEYyRUI2RjYw
NTA3OTZBQzRDRDE2MjA4RUMxMjM0ODguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVa01MZHpkOFBBaEYyeE5qNWNSZ25hTjRWQmpkTGRudGtwYk5udEUzdFFKLzAv
MzEzNzM3MmUzMjMyMmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLEWIDANBgkqhkiG9w0BAQsFAAOCAQEAMJkgeujc1qtN
gpASu1eewcjSOejO4YY7V/v49kI54zgoIcV0D4fWgKYNKTPfobAkZqe0qreCamDx
Omcmh0hG9vXEL7ZgGsUAB2qUmMoPYSDJWSzVRX6VgnaUaO1Eo31n2TPvEwq87K3s
VmOcVYRYbGu5+CWV7vECAiwIBYPljOsJM0YPGqp3UceFMypZ9y0WRsaYont43JtE
TPI0QaAbLIU+K6YQoN+OUA5EJw+Oxpv0FP+szjDUiCIpv8MFo7q+oi84yuyS7CRE
r5rGi5kU6vOl/e4K29Qqw0Vqdvc6/iBC0zI6qphhC11ti/ngMIfmFelKefI4MzTg
vlXBGR02/A==
-----END CERTIFICATE-----
Generated at Thu Apr 9 13:00:48 2026 by rpki-client