Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39322e302f32332d3233203d3e20323731333634.roa
File:                     3137392e302e39322e302f32332d3233203d3e20323731333634.roa (raw, json)
Hash identifier:          eASuAaWc7vl3VuI7dJtn51Z3pQffqSOGhRIRfU56TEw=
Subject key identifier:   D3:13:17:78:92:B5:97:F1:F2:4A:F6:17:2A:AD:D7:6D:BA:D3:53:9A
Certificate issuer:       /CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
Certificate serial:       731DCF02180D7BADC74E246C2A97D3189E081BC5
Authority key identifier: F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39322e302f32332d3233203d3e20323731333634.roa
Signing time:             Thu 30 Jul 2026 15:53:41 +0000
ROA not before:           Thu 30 Jul 2026 15:48:41 +0000
ROA not after:            Thu 29 Jul 2027 15:53:41 +0000
asID:                     271364
IP address blocks:        179.0.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl
                          rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:05:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1d:cf:02:18:0d:7b:ad:c7:4e:24:6c:2a:97:d3:18:9e:08:1b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE
        Validity
            Not Before: Jul 30 15:48:41 2026 GMT
            Not After : Jul 29 15:53:41 2027 GMT
        Subject: CN=D313177892B597F1F24AF6172AADD76DBAD3539A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:68:2d:43:db:ae:d3:e7:fb:df:01:d0:50:
                    3f:0e:db:d8:48:56:0e:2e:a6:ab:19:6f:a3:a9:55:
                    66:fd:c8:43:30:75:ea:0c:56:cd:5c:45:49:52:7b:
                    77:d7:50:a5:c8:e7:62:6b:24:2a:0e:22:ad:9f:31:
                    13:8b:48:7a:92:29:eb:41:95:63:6c:87:9f:22:1e:
                    b3:ed:73:95:d7:1e:f0:13:0f:d8:ec:23:ad:b1:69:
                    7d:f9:e5:8f:5d:2e:40:7f:a7:ec:33:9e:43:de:27:
                    fc:5e:1c:3d:4d:8f:62:0a:88:0d:bc:17:12:61:f0:
                    3f:7c:8f:58:ad:5e:23:3b:08:91:3d:03:21:ee:ea:
                    6b:92:a8:0d:c7:e9:60:c3:9d:ef:57:d7:8a:4b:38:
                    ec:e9:8b:8b:bd:37:5d:bd:ff:11:cb:c7:30:75:68:
                    aa:12:18:3a:e1:17:bf:5c:23:62:35:b2:f0:08:b6:
                    d0:58:cd:14:40:f5:be:4f:44:33:cb:79:73:e7:01:
                    79:28:07:65:67:fa:27:89:e8:d7:d1:66:cc:ac:53:
                    ba:e5:37:dc:7f:bc:e9:b1:f0:e3:eb:77:69:f8:08:
                    5c:5b:18:30:e4:f2:91:54:61:fa:f4:cd:62:d4:a8:
                    88:aa:fd:35:6a:aa:f7:c2:ea:8a:04:b0:74:28:8f:
                    8a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:13:17:78:92:B5:97:F1:F2:4A:F6:17:2A:AD:D7:6D:BA:D3:53:9A
            X509v3 Authority Key Identifier:
                keyid:F6:75:12:EE:74:E2:BC:FA:EA:0E:BB:14:2E:81:3E:28:32:B8:B7:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F67512EE74E2BCFAEA0EBB142E813E2832B8B7FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGg66jwT8T2nVFoNHUd2pH97DCpXpY2X151mUy9hEXdi/0/3137392e302e39322e302f32332d3233203d3e20323731333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:6c:98:f2:1a:1a:50:5a:81:2c:54:84:b9:1a:05:02:56:16:
         8d:a1:8b:31:10:7f:83:50:44:57:dc:16:75:eb:5a:a7:2f:cc:
         e9:3f:c3:86:42:3f:2b:b8:8f:31:a2:4f:f4:f4:63:c2:a9:ab:
         2a:23:4f:00:27:31:b3:f2:49:25:a3:92:f6:14:b1:d7:e7:81:
         92:d8:dd:9d:e7:07:87:8c:fe:9f:11:4a:30:df:ab:30:18:79:
         38:c2:77:cb:dc:17:cc:8b:f7:df:be:6c:6a:60:0f:8e:48:e0:
         fe:3b:8d:11:24:5e:e2:51:14:05:5d:87:53:5b:d8:5a:c8:30:
         56:a6:d9:a6:16:41:10:e9:cc:e0:02:69:21:93:80:85:c6:17:
         7a:ad:10:cb:77:97:b1:29:41:c9:76:23:ec:28:b2:6d:90:87:
         8e:cf:29:3d:f5:ac:e9:0a:1c:75:4c:59:0b:0b:db:ed:50:15:
         4d:90:c4:03:d8:b3:f5:20:00:6f:15:f9:f6:b1:6a:85:f6:3d:
         d0:56:dc:00:9c:dd:bf:79:2d:df:d7:66:d5:1e:a3:e0:a5:ce:
         82:47:24:74:01:42:90:77:8b:13:e0:1e:ce:8f:43:76:83:e2:
         af:a2:fc:e9:c7:dc:bc:c3:3a:b6:77:c3:ba:14:c0:48:29:fb:
         23:d9:3a:fb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUcx3PAhgNe63HTiRsKpfTGJ4IG8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY3NTEyRUU3NEUyQkNGQUVBMEVCQjE0MkU4MTNFMjgz
MkI4QjdGRTAeFw0yNjA3MzAxNTQ4NDFaFw0yNzA3MjkxNTUzNDFaMDMxMTAvBgNV
BAMTKEQzMTMxNzc4OTJCNTk3RjFGMjRBRjYxNzJBQURENzZEQkFEMzUzOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuC2gtQ9uu0+f73wHQUD8O29hI
Vg4upqsZb6OpVWb9yEMwdeoMVs1cRUlSe3fXUKXI52JrJCoOIq2fMROLSHqSKetB
lWNsh58iHrPtc5XXHvATD9jsI62xaX355Y9dLkB/p+wznkPeJ/xeHD1Nj2IKiA28
FxJh8D98j1itXiM7CJE9AyHu6muSqA3H6WDDne9X14pLOOzpi4u9N129/xHLxzB1
aKoSGDrhF79cI2I1svAIttBYzRRA9b5PRDPLeXPnAXkoB2Vn+ieJ6NfRZsysU7rl
N9x/vOmx8OPrd2n4CFxbGDDk8pFUYfr0zWLUqIiq/TVqqvfC6ooEsHQoj4qLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0xMXeJK1l/HySvYXKq3XbbrTU5owHwYDVR0j
BBgwFoAU9nUS7nTivPrqDrsULoE+KDK4t/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUdnNjZqd1Q4VDJuVkZvTkhVZDJwSDk3RENwWHBZMlgxNTFtVXk5aEVY
ZGkvMC9GNjc1MTJFRTc0RTJCQ0ZBRUEwRUJCMTQyRTgxM0UyODMyQjhCN0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NzUxMkVFNzRFMkJDRkFF
QTBFQkIxNDJFODEzRTI4MzJCOEI3RkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FHZzY2andUOFQyblZGb05IVWQycEg5N0RDcFhwWTJYMTUxbVV5OWhFWGRpLzAv
MzEzNzM5MmUzMDJlMzkzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzczMTMz
MzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAbMAXDANBgkqhkiG9w0BAQsFAAOCAQEAG2yY8hoaUFqB
LFSEuRoFAlYWjaGLMRB/g1BEV9wWdetapy/M6T/DhkI/K7iPMaJP9PRjwqmrKiNP
ACcxs/JJJaOS9hSx1+eBktjdnecHh4z+nxFKMN+rMBh5OMJ3y9wXzIv3375samAP
jkjg/juNESRe4lEUBV2HU1vYWsgwVqbZphZBEOnM4AJpIZOAhcYXeq0Qy3eXsSlB
yXYj7CiybZCHjs8pPfWs6QocdUxZCwvb7VAVTZDEA9iz9SAAbxX59rFqhfY90Fbc
AJzdv3kt39dm1R6j4KXOgkckdAFCkHeLE+Aezo9DdoPir6L86cfcvMM6tnfDuhTA
SCn7I9k6+w==
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:13:11 2026 by rpki-client