Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137302e3234372e32342e302f32322d3332203d3e20323632353933.roa
File:                     3137302e3234372e32342e302f32322d3332203d3e20323632353933.roa (raw, json)
Hash identifier:          vKFVaVvjm6hxTnBfZMSdXVTEW0pqIz/hbxU43FkRYbo=
Subject key identifier:   F8:59:C0:D0:DC:1C:59:56:D6:A8:90:04:B3:A2:94:3F:30:08:56:26
Certificate issuer:       /CN=DB1151FCAAB88186E460D045F58E61DEF333046D
Certificate serial:       34D89B237D70648511DFFB7A539BE45FABE8591E
Authority key identifier: DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137302e3234372e32342e302f32322d3332203d3e20323632353933.roa
Signing time:             Fri 18 Sep 2026 22:20:47 +0000
ROA not before:           Fri 18 Sep 2026 22:15:47 +0000
ROA not after:            Fri 17 Sep 2027 22:20:47 +0000
asID:                     262593
IP address blocks:        170.247.24.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl
                          rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 09:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d8:9b:23:7d:70:64:85:11:df:fb:7a:53:9b:e4:5f:ab:e8:59:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB1151FCAAB88186E460D045F58E61DEF333046D
        Validity
            Not Before: Sep 18 22:15:47 2026 GMT
            Not After : Sep 17 22:20:47 2027 GMT
        Subject: CN=F859C0D0DC1C5956D6A89004B3A2943F30085626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:73:be:c9:95:f8:96:b6:8a:ef:ed:8f:08:e8:
                    38:c0:be:0d:be:a0:05:c2:76:3e:e1:4e:73:93:bd:
                    9f:cc:3c:e7:68:41:9a:91:e2:8b:ce:30:dd:fe:d0:
                    05:85:cb:4c:0f:c0:0b:ff:52:23:9f:d5:a1:dd:28:
                    35:d5:b9:7a:02:91:88:33:7d:d9:d1:1f:5c:9a:43:
                    ea:22:2f:d9:af:b7:71:ac:94:fb:86:e3:e8:f1:84:
                    a2:bf:41:48:f9:a3:1b:17:b9:13:91:ba:45:7c:81:
                    39:40:2a:a3:c8:54:1d:7a:46:20:fa:aa:db:81:55:
                    02:d5:c4:fa:ec:e4:02:84:10:3d:92:23:5d:ec:ed:
                    5c:8d:f0:5b:c7:ab:1b:53:b9:e2:93:3c:2b:b1:bf:
                    90:0c:66:27:a3:ff:52:3a:f9:46:35:81:46:88:ba:
                    da:7f:d3:3e:2f:c9:31:c9:2d:5a:f9:7d:52:c2:41:
                    60:8d:6f:62:c8:0e:e6:58:a0:7f:ec:e7:d6:2e:99:
                    33:a6:75:b3:bf:c8:c0:fa:59:7f:f4:ed:8c:f1:f7:
                    6d:62:a3:0a:97:9a:ff:80:86:1a:55:b4:36:c3:dc:
                    29:b0:72:c9:eb:33:db:95:61:fa:f0:43:08:29:c9:
                    74:fc:0c:5e:75:1c:2b:30:68:c0:a9:47:a8:67:78:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:59:C0:D0:DC:1C:59:56:D6:A8:90:04:B3:A2:94:3F:30:08:56:26
            X509v3 Authority Key Identifier:
                keyid:DB:11:51:FC:AA:B8:81:86:E4:60:D0:45:F5:8E:61:DE:F3:33:04:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/DB1151FCAAB88186E460D045F58E61DEF333046D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB1151FCAAB88186E460D045F58E61DEF333046D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/3137302e3234372e32342e302f32322d3332203d3e20323632353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:51:31:06:06:38:62:bd:5d:c4:2c:63:6a:fe:5c:f1:76:a4:
         13:b2:0a:46:c0:b5:71:30:16:e5:18:88:c4:a4:a0:d1:44:7a:
         b7:01:98:a5:09:94:69:e0:df:bc:69:2c:71:f0:4a:34:83:6e:
         b2:cc:52:47:1c:03:b2:49:91:63:7d:d6:0f:a6:59:3b:3f:d2:
         ff:57:8e:97:18:3c:bd:88:02:89:da:dd:98:ba:13:b5:06:cf:
         ba:21:f6:76:a8:4f:fd:5d:3c:c4:1d:22:de:86:12:9f:9d:d9:
         22:3b:7c:fd:4b:c7:1c:af:1c:52:7a:82:3c:51:9c:0b:9f:98:
         65:aa:ef:92:a6:3f:25:ac:7c:f2:92:f3:8c:be:62:05:d3:c7:
         e6:7c:e9:34:10:fc:08:66:aa:ab:f7:c1:eb:7c:11:c8:82:4b:
         4b:71:9f:7d:f8:5b:35:89:35:7f:50:f8:bc:7b:c8:4b:f2:3e:
         33:ac:f6:7d:53:01:4a:83:da:57:7a:8e:84:da:f4:c6:83:92:
         29:b6:cb:52:16:a8:13:0f:32:89:4d:18:51:b2:c9:4e:e3:38:
         21:77:e3:ff:8d:e3:1e:c1:27:3e:c4:71:eb:fa:e4:b3:23:33:
         25:82:70:be:ca:b5:b3:0a:d8:c0:cb:27:99:7d:ed:0b:5d:80:
         00:ee:be:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNNibI31wZIUR3/t6U5vkX6voWR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIxMTUxRkNBQUI4ODE4NkU0NjBEMDQ1RjU4RTYxREVG
MzMzMDQ2RDAeFw0yNjA5MTgyMjE1NDdaFw0yNzA5MTcyMjIwNDdaMDMxMTAvBgNV
BAMTKEY4NTlDMEQwREMxQzU5NTZENkE4OTAwNEIzQTI5NDNGMzAwODU2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtc77JlfiWtorv7Y8I6DjAvg2+
oAXCdj7hTnOTvZ/MPOdoQZqR4ovOMN3+0AWFy0wPwAv/UiOf1aHdKDXVuXoCkYgz
fdnRH1yaQ+oiL9mvt3GslPuG4+jxhKK/QUj5oxsXuRORukV8gTlAKqPIVB16RiD6
qtuBVQLVxPrs5AKEED2SI13s7VyN8FvHqxtTueKTPCuxv5AMZiej/1I6+UY1gUaI
utp/0z4vyTHJLVr5fVLCQWCNb2LIDuZYoH/s59YumTOmdbO/yMD6WX/07Yzx921i
owqXmv+AhhpVtDbD3CmwcsnrM9uVYfrwQwgpyXT8DF51HCswaMCpR6hneL6rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+FnA0NwcWVbWqJAEs6KUPzAIViYwHwYDVR0j
BBgwFoAU2xFR/Kq4gYbkYNBF9Y5h3vMzBG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRBeUVSbzkyYXp4eFBRa0pBaURvUmI2a0I5bXNhbVJ3WFVLZmZ6b05u
RzYvMC9EQjExNTFGQ0FBQjg4MTg2RTQ2MEQwNDVGNThFNjFERUYzMzMwNDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCMTE1MUZDQUFCODgxODZF
NDYwRDA0NUY1OEU2MURFRjMzMzA0NkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0QXlFUm85MmF6eHhQUWtKQWlEb1JiNmtCOW1zYW1Sd1hVS2Zmem9Obkc2LzAv
MzEzNzMwMmUzMjM0MzcyZTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzIzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9xgwDQYJKoZIhvcNAQELBQADggEBABdRMQYG
OGK9XcQsY2r+XPF2pBOyCkbAtXEwFuUYiMSkoNFEercBmKUJlGng37xpLHHwSjSD
brLMUkccA7JJkWN91g+mWTs/0v9XjpcYPL2IAona3Zi6E7UGz7oh9naoT/1dPMQd
It6GEp+d2SI7fP1LxxyvHFJ6gjxRnAufmGWq75KmPyWsfPKS84y+YgXTx+Z86TQQ
/Ahmqqv3wet8EciCS0txn334WzWJNX9Q+Lx7yEvyPjOs9n1TAUqD2ld6joTa9MaD
kim2y1IWqBMPMolNGFGyyU7jOCF34/+N4x7BJz7Ecev65LMjMyWCcL7KtbMK2MDL
J5l97QtdgADuvlM=
-----END CERTIFICATE-----
Generated at Thu Oct 15 04:23:09 2026 by rpki-client