Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3137382e302f32342d3234203d3e20323632363439.roa
File:                     3137372e3130352e3137382e302f32342d3234203d3e20323632363439.roa (raw, json)
Hash identifier:          JetLWXvt9jxcEW5udgbH5Kzl5h9YqDTT+kz4qYYdP5k=
Subject key identifier:   58:78:57:08:C6:D9:C8:50:AC:9E:7E:65:02:94:4C:8C:C2:4C:BC:D1
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       3C435320734E589C9BA9F35064D1632FDA9851AC
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3137382e302f32342d3234203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:13 +0000
ROA not before:           Tue 28 Jul 2026 13:33:13 +0000
ROA not after:            Tue 27 Jul 2027 13:38:13 +0000
asID:                     262649
IP address blocks:        177.105.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:53:20:73:4e:58:9c:9b:a9:f3:50:64:d1:63:2f:da:98:51:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:13 2026 GMT
            Not After : Jul 27 13:38:13 2027 GMT
        Subject: CN=58785708C6D9C850AC9E7E6502944C8CC24CBCD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:1d:57:7d:73:77:e4:66:ad:65:88:27:a9:
                    13:a0:e3:34:ab:64:08:1e:ca:c1:9a:05:75:ce:83:
                    60:ab:02:e2:72:4b:06:38:5a:26:ee:00:91:2e:e9:
                    b3:82:53:bb:b2:b6:c5:f9:5f:d7:67:b5:c1:1a:6d:
                    92:05:3a:14:8d:c7:fb:fa:08:10:fe:8a:db:a9:f7:
                    37:48:76:b6:89:14:33:e4:af:76:e7:76:85:03:0a:
                    c6:1a:8f:fc:45:30:75:3a:10:25:e7:7c:1a:4c:60:
                    c2:d0:70:59:3b:20:bc:d7:f1:96:56:3e:ce:57:c2:
                    82:c8:c8:69:e3:90:88:5d:31:6a:d5:21:d0:21:d1:
                    1a:90:11:86:0f:71:53:0b:e6:45:41:e8:bb:1e:56:
                    9c:ed:d8:ff:8b:e6:1b:5b:3b:43:27:4d:b7:e2:e1:
                    ef:71:85:5e:cd:0a:a4:09:af:19:b1:d2:27:77:64:
                    5d:6d:85:71:25:f7:8b:85:9b:55:9d:d4:39:e6:6f:
                    ee:ab:67:97:3e:52:fc:18:e9:a6:1c:de:9f:52:6f:
                    ac:b7:14:3d:28:c3:a5:64:d0:ba:bc:e2:39:cb:10:
                    98:a8:7a:94:20:9d:12:9b:62:02:c4:37:13:f7:09:
                    9f:ee:aa:8a:e2:b8:2e:02:a0:46:a2:77:6b:90:20:
                    e3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:57:08:C6:D9:C8:50:AC:9E:7E:65:02:94:4C:8C:C2:4C:BC:D1
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3137382e302f32342d3234203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:6a:9e:9f:73:97:6d:69:8d:2e:ae:4c:52:33:05:e1:0e:
         13:98:ad:6b:74:a4:9b:6d:f6:ad:cd:41:1f:ee:e4:27:c9:79:
         1c:91:12:c8:fa:fd:e8:f0:21:19:81:b3:a0:dd:85:4e:cf:d9:
         c1:d9:91:56:ac:55:2c:47:26:8c:85:86:cc:69:71:8f:e0:d9:
         74:8f:76:18:a6:25:79:91:84:d7:ad:95:89:9d:c0:26:c0:7c:
         c7:38:b1:bb:a3:31:ba:e7:94:ab:5a:de:e1:46:7e:41:38:ec:
         0b:81:b6:12:d5:19:3c:8e:c3:f0:65:95:75:68:da:a9:fd:9c:
         2e:79:36:37:7c:56:c8:48:92:d7:63:be:9b:77:21:76:61:64:
         04:1b:46:b1:26:b8:1f:73:bd:aa:1d:c3:27:4e:95:0f:ed:5b:
         bd:ac:19:ae:f5:5d:dd:37:be:39:c6:5a:26:d0:c6:2d:1d:0d:
         5d:d6:33:dc:36:15:35:8e:4e:ac:7e:4a:f0:d4:0b:78:62:f3:
         5d:c2:17:4a:b3:2e:41:ed:1d:88:2e:47:28:1e:56:cc:4e:18:
         dc:44:d3:67:ff:ae:55:c4:38:3f:c7:a3:ef:f3:65:38:5c:ce:
         cf:43:0a:4c:39:3d:33:66:53:77:83:b5:6c:5a:8f:05:bd:9c:
         fd:b8:2c:2f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPENTIHNOWJybqfNQZNFjL9qYUawwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyRjVCMTZEODJEOUY2QTJBMUVFQTBEQkI4QUIwMUU5
MDQ3MkFDODAeFw0yNjA3MjgxMzMzMTNaFw0yNzA3MjcxMzM4MTNaMDMxMTAvBgNV
BAMTKDU4Nzg1NzA4QzZEOUM4NTBBQzlFN0U2NTAyOTQ0QzhDQzI0Q0JDRDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ZB1XfXN35GatZYgnqROg4zSr
ZAgeysGaBXXOg2CrAuJySwY4WibuAJEu6bOCU7uytsX5X9dntcEabZIFOhSNx/v6
CBD+itup9zdIdraJFDPkr3bndoUDCsYaj/xFMHU6ECXnfBpMYMLQcFk7ILzX8ZZW
Ps5XwoLIyGnjkIhdMWrVIdAh0RqQEYYPcVML5kVB6LseVpzt2P+L5htbO0MnTbfi
4e9xhV7NCqQJrxmx0id3ZF1thXEl94uFm1Wd1Dnmb+6rZ5c+UvwY6aYc3p9Sb6y3
FD0ow6Vk0Lq84jnLEJioepQgnRKbYgLENxP3CZ/uqoriuC4CoEaid2uQIOOPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUWHhXCMbZyFCsnn5lApRMjMJMvNEwHwYDVR0j
BBgwFoAUuS9bFtgtn2oqHuoNu4qwHpBHKsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hETHk3Y1hrcldXWjZScUt2OUN2S2Z2dVlwQ2FHOFJKVDYxRmduSlBn
M3QvMy9COTJGNUIxNkQ4MkQ5RjZBMkExRUVBMERCQjhBQjAxRTkwNDcyQUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MkY1QjE2RDgyRDlGNkEy
QTFFRUEwREJCOEFCMDFFOTA0NzJBQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4REx5N2NYa3JXV1o2UnFLdjlDdktmdnVZcENhRzhSSlQ2MUZnbkpQZzN0LzMv
MzEzNzM3MmUzMTMwMzUyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFpsjANBgkqhkiG9w0BAQsFAAOCAQEAnJNq
np9zl21pjS6uTFIzBeEOE5ita3Skm232rc1BH+7kJ8l5HJESyPr96PAhGYGzoN2F
Ts/ZwdmRVqxVLEcmjIWGzGlxj+DZdI92GKYleZGE162ViZ3AJsB8xzixu6MxuueU
q1re4UZ+QTjsC4G2EtUZPI7D8GWVdWjaqf2cLnk2N3xWyEiS12O+m3chdmFkBBtG
sSa4H3O9qh3DJ06VD+1bvawZrvVd3Te+OcZaJtDGLR0NXdYz3DYVNY5OrH5K8NQL
eGLzXcIXSrMuQe0diC5HKB5WzE4Y3ETTZ/+uVcQ4P8ej7/NlOFzOz0MKTDk9M2ZT
d4O1bFqPBb2c/bgsLw==
-----END CERTIFICATE-----