Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          C3o0IUo40ogZk0oV3LYm6VZNEBpPrEd1Gzpn2Ir+NDI=
Subject key identifier:   90:44:D1:E0:31:D1:9A:3B:0A:05:91:2F:0F:63:AF:C7:CC:6A:1B:72
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       575333E6213A7B4DCA01413436BB01FAED9B65E5
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:01 +0000
ROA not before:           Mon 18 May 2026 15:03:01 +0000
ROA not after:            Mon 17 May 2027 15:08:01 +0000
asID:                     262729
IP address blocks:        177.92.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:53:33:e6:21:3a:7b:4d:ca:01:41:34:36:bb:01:fa:ed:9b:65:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:01 2026 GMT
            Not After : May 17 15:08:01 2027 GMT
        Subject: CN=9044D1E031D19A3B0A05912F0F63AFC7CC6A1B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:01:5c:fc:56:bc:6b:ce:26:0f:ed:74:40:
                    29:39:86:63:69:55:d2:90:4a:66:9d:eb:f2:dd:07:
                    03:f3:e3:84:b7:24:71:bc:97:c9:05:01:d1:06:a2:
                    d4:c0:80:8b:03:d1:65:da:b4:ff:15:3f:d5:4a:a0:
                    a0:1b:a5:4e:33:00:00:00:5f:a5:11:ff:1e:49:1b:
                    6c:b9:b9:23:5b:04:55:1e:f1:76:33:70:fa:c0:c3:
                    4b:e1:3e:ef:b4:14:67:b5:b1:e6:99:7e:ca:81:0c:
                    ab:1e:85:f8:ee:aa:1c:30:d5:5a:ec:19:b7:20:45:
                    71:3b:e1:61:89:54:af:2f:34:c2:00:da:66:03:90:
                    3a:0c:81:21:17:b6:02:9d:97:b6:d1:45:92:39:3c:
                    16:de:1a:fd:39:b6:a8:ca:5d:63:a3:74:0e:5e:8f:
                    42:62:0e:1e:e9:60:6d:21:8f:7b:e3:11:20:32:07:
                    90:ef:c0:7f:29:2f:82:0c:ba:e1:48:16:df:68:e6:
                    f6:d0:99:2f:4f:f5:01:fa:4e:16:bb:0f:5f:10:6c:
                    30:f5:41:08:8d:f7:f2:e8:a1:58:bb:2c:08:5c:40:
                    97:62:db:3a:42:53:c0:76:dd:61:75:01:2d:c5:7e:
                    61:d8:01:f0:0e:c2:91:e1:8a:c4:5a:22:37:0e:b9:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:44:D1:E0:31:D1:9A:3B:0A:05:91:2F:0F:63:AF:C7:CC:6A:1B:72
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3139362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:58:58:08:58:1e:09:53:bc:4a:da:28:e7:79:7d:ee:90:fb:
         e6:0d:19:a9:7b:88:01:09:47:6e:47:2f:5a:a7:5e:32:a4:ff:
         1b:60:00:26:18:7a:53:24:0a:96:3d:42:15:1c:2d:73:a6:d0:
         4c:4c:77:6a:6d:00:84:7e:29:8c:8f:fe:e9:ac:2c:2d:29:9e:
         27:1e:3d:5b:42:53:26:ab:4e:53:46:02:ec:56:da:cd:c5:59:
         ae:aa:9a:49:29:5a:95:e1:08:b7:e7:58:2f:f5:4a:5c:45:38:
         79:ad:c5:41:2f:af:e4:4e:ed:a2:38:41:3b:b1:f9:e8:a9:18:
         3f:70:38:bd:82:f7:f4:6f:38:d5:62:5d:d8:82:55:f6:27:86:
         3e:00:ad:b8:51:16:04:69:59:d1:03:0b:38:8c:fc:f4:0b:0f:
         8a:2c:f2:59:6f:c7:a9:54:2e:18:b4:5d:cb:df:f5:16:10:79:
         ac:b8:40:cd:3e:1e:bf:1d:61:d7:ab:6f:3a:0d:be:dc:d2:5a:
         32:bb:d4:33:4b:37:6b:a4:95:87:6e:7b:ae:b4:72:2c:63:61:
         cc:49:d2:06:5a:51:2b:8b:35:aa:62:9b:0d:4e:5e:66:62:67:
         23:e4:2f:08:e2:d9:4f:6b:07:10:49:ca:35:f4:49:d7:81:fc:
         b7:b5:13:71
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV1Mz5iE6e03KAUE0NrsB+u2bZeUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAzMDFaFw0yNzA1MTcxNTA4MDFaMDMxMTAvBgNV
BAMTKDkwNDREMUUwMzFEMTlBM0IwQTA1OTEyRjBGNjNBRkM3Q0M2QTFCNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5wFc/Fa8a84mD+10QCk5hmNp
VdKQSmad6/LdBwPz44S3JHG8l8kFAdEGotTAgIsD0WXatP8VP9VKoKAbpU4zAAAA
X6UR/x5JG2y5uSNbBFUe8XYzcPrAw0vhPu+0FGe1seaZfsqBDKsehfjuqhww1Vrs
GbcgRXE74WGJVK8vNMIA2mYDkDoMgSEXtgKdl7bRRZI5PBbeGv05tqjKXWOjdA5e
j0JiDh7pYG0hj3vjESAyB5DvwH8pL4IMuuFIFt9o5vbQmS9P9QH6Tha7D18QbDD1
QQiN9/LooVi7LAhcQJdi2zpCU8B23WF1AS3FfmHYAfAOwpHhisRaIjcOuVJTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkETR4DHRmjsKBZEvD2Ovx8xqG3IwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzNzM3MmUzOTMyMmUzMTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxXMQwDQYJKoZIhvcNAQELBQADggEBAGBYWAhY
HglTvEraKOd5fe6Q++YNGal7iAEJR25HL1qnXjKk/xtgACYYelMkCpY9QhUcLXOm
0ExMd2ptAIR+KYyP/umsLC0pnicePVtCUyarTlNGAuxW2s3FWa6qmkkpWpXhCLfn
WC/1SlxFOHmtxUEvr+RO7aI4QTux+eipGD9wOL2C9/RvONViXdiCVfYnhj4ArbhR
FgRpWdEDCziM/PQLD4os8llvx6lULhi0Xcvf9RYQeay4QM0+Hr8dYderbzoNvtzS
WjK71DNLN2uklYdue660cixjYcxJ0gZaUSuLNapimw1OXmZiZyPkLwji2U9rBxBJ
yjX0SdeB/Le1E3E=
-----END CERTIFICATE-----
Generated at Sun May 24 17:11:58 2026 by rpki-client