Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230322e302f32332d3233203d3e20323632373239.roa
File:                     3137372e39322e3230322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          iFm8Jssae6opk8A5L11vj04GDP4K98WUt82ndJenOXA=
Subject key identifier:   F7:18:77:CB:ED:96:05:65:2C:41:E0:CF:E2:1D:4F:FF:18:59:0A:57
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       5F8548F80CC2320E2B631172484255116D728D40
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:59 +0000
ROA not before:           Mon 18 May 2026 15:02:59 +0000
ROA not after:            Mon 17 May 2027 15:07:59 +0000
asID:                     262729
IP address blocks:        177.92.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:48:f8:0c:c2:32:0e:2b:63:11:72:48:42:55:11:6d:72:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:59 2026 GMT
            Not After : May 17 15:07:59 2027 GMT
        Subject: CN=F71877CBED9605652C41E0CFE21D4FFF18590A57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:56:37:5e:b3:13:f2:1a:a1:fd:50:b4:f0:
                    50:10:5c:6a:23:0d:15:41:48:7a:17:f2:1c:24:ef:
                    f7:4f:41:5f:8e:96:8a:2d:70:82:01:61:4f:4d:7f:
                    0a:5d:03:86:b4:31:15:d0:97:72:95:85:1a:91:97:
                    22:af:48:fe:36:6b:d3:6d:ca:8b:46:47:50:ce:1f:
                    82:2d:e6:7d:18:09:41:b7:17:74:20:40:dc:e7:7f:
                    ab:60:65:05:d6:50:e1:2e:b0:d8:20:91:2b:09:de:
                    8f:48:39:ff:29:25:fc:d7:76:31:65:d3:2e:b0:44:
                    70:bd:47:34:b7:58:28:63:97:50:b5:e6:a1:a0:3b:
                    03:50:9b:14:81:e0:4b:2f:36:14:82:15:c2:4b:e2:
                    f8:47:e1:a7:7e:16:da:21:9e:3b:fb:f3:a2:50:d5:
                    87:3c:36:ed:60:f4:00:4c:43:7b:3a:07:45:11:62:
                    4c:ba:9e:21:c6:78:43:5e:8c:f9:5a:ea:e4:5a:cf:
                    95:98:ab:fe:ab:bb:e6:0e:c8:47:36:54:41:2a:61:
                    38:6e:a8:16:b8:2f:cd:ae:9f:3f:04:c2:cc:c3:a9:
                    1d:83:09:b3:10:21:3a:64:17:f0:21:33:2f:67:0b:
                    df:11:77:46:a0:71:2d:56:ab:81:8b:23:ed:4e:20:
                    32:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:77:CB:ED:96:05:65:2C:41:E0:CF:E2:1D:4F:FF:18:59:0A:57
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3137372e39322e3230322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.92.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ae:2d:79:19:d1:8c:04:69:ed:3d:04:a4:ed:2d:31:db:28:
         44:5b:dd:cc:bd:55:ba:41:3d:12:91:b0:3c:c2:fe:8d:98:de:
         b5:8b:8a:f5:5f:ec:4a:58:44:67:13:23:fd:4a:ef:50:8b:47:
         7b:ef:c1:6b:c7:19:80:c7:e5:e2:64:ab:2f:35:f1:16:88:d4:
         03:4a:8d:3a:a3:65:11:fb:fd:f5:b6:3f:d2:5a:52:e8:e9:4c:
         e5:34:3c:16:d0:5e:08:d2:5f:a3:0a:3e:a0:38:d8:3a:b2:a6:
         90:43:57:d9:dd:57:c2:79:8e:6c:e9:7e:35:94:44:ed:b2:94:
         af:1a:b5:a6:68:3f:e0:25:90:e7:f2:23:7b:51:7d:9b:44:a3:
         40:bc:76:d8:e1:6a:15:28:db:b8:45:2d:c7:28:2d:a5:eb:02:
         00:2d:74:31:f1:45:81:36:8f:56:4d:26:f0:1b:58:53:12:c3:
         fb:a9:89:83:96:45:a3:49:06:bd:33:a1:c2:c8:48:21:7b:67:
         94:ea:84:0d:47:d3:95:f7:da:bc:65:0e:66:a2:15:a9:5f:19:
         93:bd:fd:a8:5f:01:0b:3d:ec:12:c6:c7:c8:79:18:7a:48:62:
         eb:99:1b:5a:22:9a:65:71:c4:56:a9:46:e2:b5:76:a8:3c:76:
         69:06:d0:88
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX4VI+AzCMg4rYxFySEJVEW1yjUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAyNTlaFw0yNzA1MTcxNTA3NTlaMDMxMTAvBgNV
BAMTKEY3MTg3N0NCRUQ5NjA1NjUyQzQxRTBDRkUyMUQ0RkZGMTg1OTBBNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIGlY3XrMT8hqh/VC08FAQXGoj
DRVBSHoX8hwk7/dPQV+OlootcIIBYU9NfwpdA4a0MRXQl3KVhRqRlyKvSP42a9Nt
yotGR1DOH4It5n0YCUG3F3QgQNznf6tgZQXWUOEusNggkSsJ3o9IOf8pJfzXdjFl
0y6wRHC9RzS3WChjl1C15qGgOwNQmxSB4EsvNhSCFcJL4vhH4ad+Ftohnjv786JQ
1Yc8Nu1g9ABMQ3s6B0URYky6niHGeENejPla6uRaz5WYq/6ru+YOyEc2VEEqYThu
qBa4L82unz8EwszDqR2DCbMQITpkF/AhMy9nC98Rd0agcS1Wq4GLI+1OIDK/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9xh3y+2WBWUsQeDP4h1P/xhZClcwHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzNzM3MmUzOTMyMmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxXMowDQYJKoZIhvcNAQELBQADggEBAAuuLXkZ
0YwEae09BKTtLTHbKERb3cy9VbpBPRKRsDzC/o2Y3rWLivVf7EpYRGcTI/1K71CL
R3vvwWvHGYDH5eJkqy818RaI1ANKjTqjZRH7/fW2P9JaUujpTOU0PBbQXgjSX6MK
PqA42DqyppBDV9ndV8J5jmzpfjWURO2ylK8ataZoP+AlkOfyI3tRfZtEo0C8dtjh
ahUo27hFLccoLaXrAgAtdDHxRYE2j1ZNJvAbWFMSw/upiYOWRaNJBr0zocLISCF7
Z5TqhA1H05X32rxlDmaiFalfGZO9/ahfAQs97BLGx8h5GHpIYuuZG1oimmVxxFap
RuK1dqg8dmkG0Ig=
-----END CERTIFICATE-----
Generated at Sun May 24 16:19:04 2026 by rpki-client