Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133322e302f32322d3232203d3e20323735373235.roa
File:                     3137372e32332e3133322e302f32322d3232203d3e20323735373235.roa (raw, json)
Hash identifier:          T+4cM+dK0/jJ9bw96TFbKMj+i/1sZ+JzeQM//f1nP3I=
Subject key identifier:   C1:6D:5C:65:24:EB:14:26:02:B0:9F:57:BB:AE:65:CF:5C:F3:17:CA
Certificate issuer:       /CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
Certificate serial:       1994BD71BB0CABB86790C6D842D90CA6DFF5AD87
Authority key identifier: 0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133322e302f32322d3232203d3e20323735373235.roa
Signing time:             Wed 02 Sep 2026 18:04:35 +0000
ROA not before:           Wed 02 Sep 2026 17:59:35 +0000
ROA not after:            Wed 01 Sep 2027 18:04:35 +0000
asID:                     275725
IP address blocks:        177.23.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl
                          rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 06:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:94:bd:71:bb:0c:ab:b8:67:90:c6:d8:42:d9:0c:a6:df:f5:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF8C98DA778EFF088738110C5FDC4C28EDAD25D
        Validity
            Not Before: Sep  2 17:59:35 2026 GMT
            Not After : Sep  1 18:04:35 2027 GMT
        Subject: CN=C16D5C6524EB142602B09F57BBAE65CF5CF317CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:de:50:75:f8:40:4b:0e:57:28:1a:60:18:
                    f9:de:f2:c4:30:d5:32:7b:33:08:5b:0c:3e:ca:a0:
                    2f:0a:6a:3d:e4:ed:fb:f3:86:04:cf:a9:a2:73:c5:
                    8b:74:50:bc:d1:51:47:59:65:73:73:ee:9f:8b:f5:
                    69:79:31:c4:01:33:4c:70:2e:7e:0a:d1:b8:8c:0a:
                    48:86:a6:c2:f9:21:df:ff:34:4f:d1:9a:f5:30:44:
                    e7:29:1e:76:94:5e:1f:d4:9b:4e:20:9c:cd:b6:e1:
                    79:3f:be:f3:1b:34:f0:4c:49:b5:cc:2a:dc:c7:fc:
                    87:bb:70:36:4a:b3:1b:99:5b:40:2b:83:10:3c:82:
                    d9:11:5e:90:a7:31:9f:22:cd:b4:92:29:a8:0e:2a:
                    79:3c:fb:1e:34:ab:d5:89:b1:23:e9:db:92:49:4d:
                    bd:72:9a:d6:f0:cd:5e:11:c9:38:52:fa:ab:b4:31:
                    48:42:5d:da:66:6d:f4:4b:6c:f1:55:26:ee:5a:3c:
                    63:31:19:5c:64:6c:da:7d:82:95:d4:37:95:79:4d:
                    16:ab:dc:3b:ac:5c:f9:ab:45:22:2e:45:3a:92:1e:
                    ed:15:ce:07:98:67:72:b6:8f:be:9d:59:de:e0:95:
                    ea:69:05:af:06:9a:a9:52:ac:16:d4:95:82:fc:b6:
                    bb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:5C:65:24:EB:14:26:02:B0:9F:57:BB:AE:65:CF:5C:F3:17:CA
            X509v3 Authority Key Identifier:
                keyid:0F:F8:C9:8D:A7:78:EF:F0:88:73:81:10:C5:FD:C4:C2:8E:DA:D2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FF8C98DA778EFF088738110C5FDC4C28EDAD25D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8oJ3VCrNLmffwdPx52KaBKh6FSLvRkj4mqhHE5seMTf/0/3137372e32332e3133322e302f32322d3232203d3e20323735373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:99:fa:08:4b:a4:74:7f:3f:83:7d:75:47:16:ff:8f:76:9d:
         62:30:f4:91:4f:4f:4c:f2:47:d6:b4:f9:20:67:e4:9b:f1:10:
         3d:62:5b:e5:99:c6:6f:8c:96:64:43:89:30:f3:99:5e:23:31:
         c9:b1:c3:03:37:5e:38:60:e5:25:21:59:46:e7:41:0d:ee:e6:
         62:0f:ca:64:9d:48:19:b1:95:87:b1:a7:24:86:64:1c:a4:75:
         9e:a0:cb:51:e9:c2:e4:ed:b1:63:65:1a:d8:d8:37:29:59:b4:
         f5:cf:94:10:d1:37:ec:89:a6:5e:11:a8:21:6f:79:84:3a:29:
         61:67:9a:1a:78:54:4a:bc:bc:04:5e:6a:57:35:bc:9b:14:ae:
         e4:15:6c:0a:95:7d:3f:b3:0a:17:57:e9:49:e5:3c:f6:a1:d1:
         62:a2:5f:2d:d7:53:9d:96:47:fb:e6:de:b3:80:84:11:0f:ae:
         cb:5c:b7:8f:0f:ae:84:0d:e5:f2:c1:20:01:29:fe:9f:1a:e7:
         61:15:b4:46:ca:db:30:c0:33:f0:13:bc:d0:2e:f7:71:e2:ca:
         ac:95:16:7f:c0:52:79:0a:14:92:25:30:10:d3:16:fe:a8:95:
         f5:f7:f7:14:36:6a:26:21:a3:7c:a3:76:9a:1c:ee:6b:5b:15:
         03:86:33:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGZS9cbsMq7hnkMbYQtkMpt/1rYcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZGOEM5OERBNzc4RUZGMDg4NzM4MTEwQzVGREM0QzI4
RURBRDI1RDAeFw0yNjA5MDIxNzU5MzVaFw0yNzA5MDExODA0MzVaMDMxMTAvBgNV
BAMTKEMxNkQ1QzY1MjRFQjE0MjYwMkIwOUY1N0JCQUU2NUNGNUNGMzE3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJd5QdfhASw5XKBpgGPne8sQw
1TJ7MwhbDD7KoC8Kaj3k7fvzhgTPqaJzxYt0ULzRUUdZZXNz7p+L9Wl5McQBM0xw
Ln4K0biMCkiGpsL5Id//NE/RmvUwROcpHnaUXh/Um04gnM224Xk/vvMbNPBMSbXM
KtzH/Ie7cDZKsxuZW0ArgxA8gtkRXpCnMZ8izbSSKagOKnk8+x40q9WJsSPp25JJ
Tb1ymtbwzV4RyThS+qu0MUhCXdpmbfRLbPFVJu5aPGMxGVxkbNp9gpXUN5V5TRar
3DusXPmrRSIuRTqSHu0VzgeYZ3K2j76dWd7gleppBa8GmqlSrBbUlYL8trv5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwW1cZSTrFCYCsJ9Xu65lz1zzF8owHwYDVR0j
BBgwFoAUD/jJjad47/CIc4EQxf3Ewo7a0l0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQThvSjNWQ3JOTG1mZndkUHg1MkthQktoNkZTTHZSa2o0bXFoSEU1c2VN
VGYvMC8wRkY4Qzk4REE3NzhFRkYwODg3MzgxMTBDNUZEQzRDMjhFREFEMjVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBGRjhDOThEQTc3OEVGRjA4
ODczODExMEM1RkRDNEMyOEVEQUQyNUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E4b0ozVkNyTkxtZmZ3ZFB4NTJLYUJLaDZGU0x2UmtqNG1xaEhFNXNlTVRmLzAv
MzEzNzM3MmUzMjMzMmUzMTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzUzNzMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxF4QwDQYJKoZIhvcNAQELBQADggEBAGuZ+ghL
pHR/P4N9dUcW/492nWIw9JFPT0zyR9a0+SBn5JvxED1iW+WZxm+MlmRDiTDzmV4j
McmxwwM3Xjhg5SUhWUbnQQ3u5mIPymSdSBmxlYexpySGZBykdZ6gy1HpwuTtsWNl
GtjYNylZtPXPlBDRN+yJpl4RqCFveYQ6KWFnmhp4VEq8vARealc1vJsUruQVbAqV
fT+zChdX6UnlPPah0WKiXy3XU52WR/vm3rOAhBEPrstct48ProQN5fLBIAEp/p8a
52EVtEbK2zDAM/ATvNAu93HiyqyVFn/AUnkKFJIlMBDTFv6olfX39xQ2aiYho3yj
dpoc7mtbFQOGM6A=
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:23 2026 by rpki-client