Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138312e302f32342d3332203d3e20323632363439.roa
File:                     3137372e3130352e3138312e302f32342d3332203d3e20323632363439.roa (raw, json)
Hash identifier:          JK9N4Orz/J6PhMq9gfCuUS1YTtBmeQZzaNowozfEYkQ=
Subject key identifier:   12:63:18:B9:0C:BE:F2:36:81:55:BE:31:8E:5C:4C:B0:8C:6C:C5:7B
Certificate issuer:       /CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
Certificate serial:       6B3BBC473D8C958248173D7BD2F65B0E8D938968
Authority key identifier: B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138312e302f32342d3332203d3e20323632363439.roa
Signing time:             Tue 28 Jul 2026 13:38:11 +0000
ROA not before:           Tue 28 Jul 2026 13:33:11 +0000
ROA not after:            Tue 27 Jul 2027 13:38:11 +0000
asID:                     262649
IP address blocks:        177.105.181.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl
                          rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:bc:47:3d:8c:95:82:48:17:3d:7b:d2:f6:5b:0e:8d:93:89:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8
        Validity
            Not Before: Jul 28 13:33:11 2026 GMT
            Not After : Jul 27 13:38:11 2027 GMT
        Subject: CN=126318B90CBEF2368155BE318E5C4CB08C6CC57B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b7:03:88:1b:3e:16:af:c2:ad:f9:88:a5:57:
                    cc:b7:17:af:e3:cc:b0:c4:aa:a1:cd:5b:44:3a:3b:
                    f7:d5:03:91:09:4b:5d:1c:c0:06:07:1a:a9:83:56:
                    c9:b5:9f:e2:f7:06:40:23:ef:58:94:34:b8:55:2c:
                    ea:26:69:de:51:6c:c4:be:53:aa:b0:41:7f:b2:9d:
                    5f:14:6f:d6:7b:82:e9:d0:1a:55:38:d1:2e:72:71:
                    f5:ff:0f:1b:c9:7d:78:1e:27:5c:0f:30:c5:72:d1:
                    0e:0b:15:68:f9:21:6c:bf:6c:aa:23:0e:1f:76:8c:
                    24:e0:09:01:68:34:bb:9e:73:f3:5d:5b:86:ad:3a:
                    7c:e9:52:94:93:bf:34:af:c2:be:e3:c6:d4:a4:e7:
                    8d:0b:bb:0a:b0:24:3d:c4:9c:40:fa:5f:4c:c3:3c:
                    fd:62:20:fe:b2:c2:01:af:29:9b:62:f3:9e:c7:12:
                    85:f9:c8:26:7d:50:cd:6d:f6:10:e5:b4:4f:a5:16:
                    e9:fb:6c:26:58:90:99:0f:62:ce:e2:d3:45:28:aa:
                    a1:df:d1:c7:92:5e:aa:2d:35:10:f9:81:cf:3a:9a:
                    be:d0:57:c7:9a:02:89:e5:62:a5:14:ee:c7:f2:d9:
                    2c:18:6c:b6:0f:9b:8f:11:e5:37:7b:f5:6f:41:6f:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:63:18:B9:0C:BE:F2:36:81:55:BE:31:8E:5C:4C:B0:8C:6C:C5:7B
            X509v3 Authority Key Identifier:
                keyid:B9:2F:5B:16:D8:2D:9F:6A:2A:1E:EA:0D:BB:8A:B0:1E:90:47:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B92F5B16D82D9F6A2A1EEA0DBB8AB01E90472AC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/3/3137372e3130352e3138312e302f32342d3332203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:cf:81:03:7f:ee:f1:51:68:04:b1:91:90:db:8c:b6:98:1b:
         02:3b:0e:12:64:49:95:7c:87:6a:cf:76:17:43:e1:8b:ec:20:
         ab:50:bf:77:b3:9d:f0:29:43:be:9d:3b:7a:a8:04:f7:7e:0b:
         5e:42:a7:16:cf:8a:0b:e0:71:95:a5:4e:c4:04:fd:01:b4:0f:
         7b:55:cf:85:8d:3c:a9:94:b4:4b:f2:f9:aa:92:06:25:b5:58:
         b5:e4:cd:f5:21:34:4f:7a:71:a5:bb:a0:6d:e2:ff:90:35:66:
         5c:24:1a:be:af:77:ff:bc:d1:3c:e8:5d:fa:26:18:c5:86:b3:
         4f:e9:e3:a9:94:6d:15:6b:ec:d7:66:0b:cf:ed:3a:4e:bf:62:
         73:3e:ec:db:78:58:46:1f:78:a2:78:66:eb:ca:df:80:97:24:
         2a:e1:2f:6b:f0:ec:2a:0c:82:11:29:22:46:ab:d3:d2:f5:f8:
         83:de:10:65:8b:ba:88:f4:a5:95:63:df:cc:d1:68:78:64:01:
         7a:0a:44:13:16:25:7e:5b:85:54:4b:8a:dc:5d:e4:58:21:62:
         5a:60:ca:71:96:97:90:2e:73:d1:72:64:83:5b:6c:78:e8:a2:
         18:7d:5e:b6:33:82:a1:3a:37:b1:fa:d8:2c:ac:59:11:4b:4a:
         ec:32:ec:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUazu8Rz2MlYJIFz170vZbDo2TiWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyRjVCMTZEODJEOUY2QTJBMUVFQTBEQkI4QUIwMUU5
MDQ3MkFDODAeFw0yNjA3MjgxMzMzMTFaFw0yNzA3MjcxMzM4MTFaMDMxMTAvBgNV
BAMTKDEyNjMxOEI5MENCRUYyMzY4MTU1QkUzMThFNUM0Q0IwOEM2Q0M1N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGtwOIGz4Wr8Kt+YilV8y3F6/j
zLDEqqHNW0Q6O/fVA5EJS10cwAYHGqmDVsm1n+L3BkAj71iUNLhVLOomad5RbMS+
U6qwQX+ynV8Ub9Z7gunQGlU40S5ycfX/DxvJfXgeJ1wPMMVy0Q4LFWj5IWy/bKoj
Dh92jCTgCQFoNLuec/NdW4atOnzpUpSTvzSvwr7jxtSk540LuwqwJD3EnED6X0zD
PP1iIP6ywgGvKZti857HEoX5yCZ9UM1t9hDltE+lFun7bCZYkJkPYs7i00UoqqHf
0ceSXqotNRD5gc86mr7QV8eaAonlYqUU7sfy2SwYbLYPm48R5Td79W9BbwvZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUEmMYuQy+8jaBVb4xjlxMsIxsxXswHwYDVR0j
BBgwFoAUuS9bFtgtn2oqHuoNu4qwHpBHKsgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hETHk3Y1hrcldXWjZScUt2OUN2S2Z2dVlwQ2FHOFJKVDYxRmduSlBn
M3QvMy9COTJGNUIxNkQ4MkQ5RjZBMkExRUVBMERCQjhBQjAxRTkwNDcyQUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MkY1QjE2RDgyRDlGNkEy
QTFFRUEwREJCOEFCMDFFOTA0NzJBQzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4REx5N2NYa3JXV1o2UnFLdjlDdktmdnVZcENhRzhSSlQ2MUZnbkpQZzN0LzMv
MzEzNzM3MmUzMTMwMzUyZTMxMzgzMTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM2MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALFptTANBgkqhkiG9w0BAQsFAAOCAQEAOM+B
A3/u8VFoBLGRkNuMtpgbAjsOEmRJlXyHas92F0Phi+wgq1C/d7Od8ClDvp07eqgE
934LXkKnFs+KC+BxlaVOxAT9AbQPe1XPhY08qZS0S/L5qpIGJbVYteTN9SE0T3px
pbugbeL/kDVmXCQavq93/7zRPOhd+iYYxYazT+njqZRtFWvs12YLz+06Tr9icz7s
23hYRh94onhm68rfgJckKuEva/DsKgyCESkiRqvT0vX4g94QZYu6iPSllWPfzNFo
eGQBegpEExYlfluFVEuK3F3kWCFiWmDKcZaXkC5z0XJkg1tseOiiGH1etjOCoTo3
sfrYLKxZEUtK7DLsKw==
-----END CERTIFICATE-----