Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3137392e302f32342d3234203d3e20323634393834.roa
File:                     3137372e3132382e3137392e302f32342d3234203d3e20323634393834.roa (raw, json)
Hash identifier:          4za4sdOpZLf5r+FBXjzaoERUj9IjgsZAzi/3qW6vJt8=
Subject key identifier:   55:D9:C6:0C:7A:C2:A6:96:56:FE:98:08:C0:FD:64:8A:86:65:B1:42
Certificate issuer:       /CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
Certificate serial:       5F560F93B1F38F315908187B12EAEBF288FADCF0
Authority key identifier: 42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3137392e302f32342d3234203d3e20323634393834.roa
Signing time:             Wed 17 Jun 2026 15:17:06 +0000
ROA not before:           Wed 17 Jun 2026 15:12:06 +0000
ROA not after:            Wed 16 Jun 2027 15:17:06 +0000
asID:                     264984
IP address blocks:        177.128.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl
                          rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:56:0f:93:b1:f3:8f:31:59:08:18:7b:12:ea:eb:f2:88:fa:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42C699479C53A3D36D21D10779B08C5EFF648DD6
        Validity
            Not Before: Jun 17 15:12:06 2026 GMT
            Not After : Jun 16 15:17:06 2027 GMT
        Subject: CN=55D9C60C7AC2A69656FE9808C0FD648A8665B142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:dd:c1:db:1c:72:fe:5b:d7:8b:69:09:88:
                    d5:b7:7b:2e:3a:4f:c7:c9:21:22:aa:79:4d:95:8d:
                    e3:99:7d:90:c0:6b:4b:12:7b:8b:f4:ad:d5:33:16:
                    35:97:3a:c0:b5:06:dd:46:69:c2:a0:60:c5:a7:02:
                    e5:fd:27:d2:54:ff:15:08:44:41:64:84:4b:7e:4f:
                    b6:4f:ac:a4:8d:12:33:50:a7:20:13:d2:f0:a6:ca:
                    de:26:a7:54:91:86:5a:81:ab:df:3e:49:2f:a2:66:
                    b6:f5:26:7f:50:73:80:b2:e1:25:64:64:48:f8:60:
                    59:cd:6f:06:21:66:65:66:cc:a4:7a:b6:9a:2a:0e:
                    57:6f:de:a3:d8:03:d4:0f:11:9c:12:df:8b:0f:ad:
                    b1:08:44:16:cf:9b:29:55:bb:d3:c1:82:0e:f8:89:
                    50:da:1e:d2:d2:ff:7f:11:dd:aa:b7:1d:2d:5a:e3:
                    e0:53:11:ef:67:2d:b4:7f:cc:ae:ee:84:a9:99:e2:
                    56:7b:37:53:1a:66:6a:b7:22:17:69:01:80:ba:b1:
                    0c:14:5b:be:47:42:34:a3:49:28:e5:d7:d2:8e:9b:
                    f7:2a:48:ba:cb:04:64:56:3c:75:9f:0a:0d:dc:8e:
                    42:7e:c3:f8:6e:e9:d0:04:5b:9f:e1:7d:0e:09:b3:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:C6:0C:7A:C2:A6:96:56:FE:98:08:C0:FD:64:8A:86:65:B1:42
            X509v3 Authority Key Identifier:
                keyid:42:C6:99:47:9C:53:A3:D3:6D:21:D1:07:79:B0:8C:5E:FF:64:8D:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/42C699479C53A3D36D21D10779B08C5EFF648DD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42C699479C53A3D36D21D10779B08C5EFF648DD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKt9sjDDTe3qdqK1MyyzWFTa2nSU9rUJQ2S5S6vBv2JW/0/3137372e3132382e3137392e302f32342d3234203d3e20323634393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:b8:ea:92:ba:cc:e4:34:f4:19:e4:a2:96:75:26:c1:8f:
         c9:cc:3d:b6:6c:70:4b:b0:f8:d9:ca:4a:88:46:9b:6e:12:1a:
         04:bb:d7:ad:25:ec:56:7e:08:9f:c4:15:a9:c3:f0:b5:81:8f:
         84:69:30:77:d2:33:75:31:86:d4:b3:c8:a3:d9:59:ba:fa:6f:
         12:7d:6c:cc:9b:9c:52:22:83:9b:49:35:6f:51:cd:b1:26:9a:
         f9:0a:33:17:d2:ae:c5:7e:3c:0a:f9:7d:42:00:4e:a0:9b:08:
         80:d7:bf:e1:6b:98:3b:ee:3c:0f:0f:d2:ea:d8:ca:cb:2b:90:
         d0:3e:85:f4:28:ac:b3:5c:86:c9:2d:91:e5:f9:78:e4:51:ad:
         76:73:d9:a8:98:1b:11:ed:24:5f:6d:57:4b:fc:96:16:1c:af:
         c1:a8:33:75:7b:7b:45:aa:4d:fa:79:43:ee:3b:73:06:ba:78:
         51:b1:3e:25:aa:05:72:69:b9:ff:f2:82:e4:1c:43:0d:9b:44:
         b9:00:06:9c:1a:29:c9:ee:a4:bd:19:13:65:9b:26:d3:a6:61:
         12:a0:67:7e:0b:2b:6e:08:b4:25:e0:a6:a8:55:6a:4d:06:d0:
         af:e1:85:89:66:f9:bf:42:d0:97:30:75:84:58:f9:14:3f:86:
         af:18:82:01
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUX1YPk7HzjzFZCBh7Eurr8oj63PAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDJDNjk5NDc5QzUzQTNEMzZEMjFEMTA3NzlCMDhDNUVG
RjY0OERENjAeFw0yNjA2MTcxNTEyMDZaFw0yNzA2MTYxNTE3MDZaMDMxMTAvBgNV
BAMTKDU1RDlDNjBDN0FDMkE2OTY1NkZFOTgwOEMwRkQ2NDhBODY2NUIxNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezN3B2xxy/lvXi2kJiNW3ey46
T8fJISKqeU2VjeOZfZDAa0sSe4v0rdUzFjWXOsC1Bt1GacKgYMWnAuX9J9JU/xUI
REFkhEt+T7ZPrKSNEjNQpyAT0vCmyt4mp1SRhlqBq98+SS+iZrb1Jn9Qc4Cy4SVk
ZEj4YFnNbwYhZmVmzKR6tpoqDldv3qPYA9QPEZwS34sPrbEIRBbPmylVu9PBgg74
iVDaHtLS/38R3aq3HS1a4+BTEe9nLbR/zK7uhKmZ4lZ7N1MaZmq3IhdpAYC6sQwU
W75HQjSjSSjl19KOm/cqSLrLBGRWPHWfCg3cjkJ+w/hu6dAEW5/hfQ4Js5EZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVdnGDHrCppZW/pgIwP1kioZlsUIwHwYDVR0j
BBgwFoAUQsaZR5xTo9NtIdEHebCMXv9kjdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0t0OXNqRERUZTNxZHFLMU15eXpXRlRhMm5TVTlyVUpRMlM1UzZ2QnYy
SlcvMC80MkM2OTk0NzlDNTNBM0QzNkQyMUQxMDc3OUIwOEM1RUZGNjQ4REQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQyQzY5OTQ3OUM1M0EzRDM2
RDIxRDEwNzc5QjA4QzVFRkY2NDhERDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NLdDlzakREVGUzcWRxSzFNeXl6V0ZUYTJuU1U5clVKUTJTNVM2dkJ2MkpXLzAv
MzEzNzM3MmUzMTMyMzgyZTMxMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGAszANBgkqhkiG9w0BAQsFAAOCAQEAMuG4
6pK6zOQ09BnkopZ1JsGPycw9tmxwS7D42cpKiEabbhIaBLvXrSXsVn4In8QVqcPw
tYGPhGkwd9IzdTGG1LPIo9lZuvpvEn1szJucUiKDm0k1b1HNsSaa+QozF9KuxX48
Cvl9QgBOoJsIgNe/4WuYO+48Dw/S6tjKyyuQ0D6F9Ciss1yGyS2R5fl45FGtdnPZ
qJgbEe0kX21XS/yWFhyvwagzdXt7RapN+nlD7jtzBrp4UbE+JaoFcmm5//KC5BxD
DZtEuQAGnBopye6kvRkTZZsm06ZhEqBnfgsrbgi0JeCmqFVqTQbQr+GFiWb5v0LQ
lzB1hFj5FD+GrxiCAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:10:51 2026 by rpki-client