Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3232203d3e20323632383035.roa
File:                     3137372e3132382e39322e302f32322d3232203d3e20323632383035.roa (raw, json)
Hash identifier:          h4oHElXUByk6cJU4mlomlBYX6VA968YLPaAtK12f44o=
Subject key identifier:   46:B8:BE:AA:4E:3B:C1:99:93:06:AF:61:CA:34:93:FE:8F:A7:26:22
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       37BDCFB3679FBCD6D33AFCB992ECDE4A519472C2
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3232203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:29 +0000
ROA not before:           Thu 13 Aug 2026 19:32:29 +0000
ROA not after:            Thu 12 Aug 2027 19:37:29 +0000
asID:                     262805
IP address blocks:        177.128.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:bd:cf:b3:67:9f:bc:d6:d3:3a:fc:b9:92:ec:de:4a:51:94:72:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:29 2026 GMT
            Not After : Aug 12 19:37:29 2027 GMT
        Subject: CN=46B8BEAA4E3BC1999306AF61CA3493FE8FA72622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:52:f4:5b:74:02:ba:42:70:c3:cd:8f:4b:
                    ed:f5:0c:a4:b4:be:09:ce:c1:37:cb:e0:d3:94:d2:
                    b4:80:6d:30:a3:4d:37:41:87:9e:e0:04:3a:be:1c:
                    3b:5f:05:c9:c5:3c:68:04:f1:d4:3a:f8:1a:cc:60:
                    ca:22:1c:b8:bb:e7:7b:b3:a7:cf:e6:76:01:8c:61:
                    ae:b2:d3:1c:6e:ac:b2:16:d6:eb:ed:f0:4e:8a:fa:
                    15:7f:21:6e:4e:7e:62:84:92:0f:e9:1e:79:0e:6e:
                    a2:e1:b2:04:b2:fd:0b:94:e9:6f:a8:10:3f:c0:76:
                    68:8e:4d:ed:e4:e3:60:c4:5a:07:ca:d6:8f:a9:4c:
                    db:cb:2d:5d:62:c4:bf:57:8b:af:a7:0b:e4:0b:f3:
                    d9:a7:4f:c5:33:86:bc:0b:52:f4:41:73:4a:5b:c0:
                    07:09:bd:da:ca:66:b8:54:6b:70:73:5a:47:4a:8d:
                    29:a4:20:6a:16:fd:d9:a8:ac:d3:1e:46:1f:4b:2d:
                    e6:2e:b8:a5:81:49:53:7b:6d:29:fb:b7:d5:e5:71:
                    8d:08:8b:87:fe:9b:3a:2d:b1:7b:65:94:d8:e5:33:
                    74:35:df:78:65:f1:c5:ff:bf:52:ae:de:8b:d8:b5:
                    61:7b:6c:15:3d:ed:a6:f6:d3:e0:36:56:a2:ba:f4:
                    18:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B8:BE:AA:4E:3B:C1:99:93:06:AF:61:CA:34:93:FE:8F:A7:26:22
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39322e302f32322d3232203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:20:f6:52:de:ef:e6:29:39:3f:a8:92:51:c4:c9:73:cd:06:
         1b:79:79:27:fb:ea:ba:e1:2a:b0:7f:53:85:32:61:7c:10:8e:
         d5:90:af:ba:48:0f:20:9d:87:99:33:c9:c7:38:77:f5:50:80:
         22:c1:ad:37:a7:ad:c2:57:7c:5f:6a:c9:23:3a:6a:18:b3:b6:
         a2:f9:a6:e7:40:2c:b1:6a:bd:f6:54:4d:e1:ec:e1:3c:5f:1e:
         ee:6c:af:6d:f2:7b:34:dc:ee:e4:d9:15:69:3d:c5:09:5a:4d:
         ba:36:73:f4:92:3e:e9:02:87:c3:b0:10:f3:fa:b9:57:14:8f:
         21:d8:52:8d:e7:78:0e:7a:73:42:63:f0:46:60:c3:94:07:b3:
         a3:b8:44:9a:a5:d6:1a:36:84:98:4e:a8:7e:e3:b9:ad:1a:02:
         fd:dd:2b:58:06:19:c6:55:50:b3:95:be:56:b9:69:a3:89:95:
         5f:6e:9a:74:47:17:88:25:d0:43:c6:a7:f1:e4:3b:ed:35:e0:
         0b:42:38:f4:75:62:96:db:9d:53:42:45:f1:10:23:8b:1c:23:
         ef:7a:c8:a0:a9:32:7b:03:d2:ff:15:71:23:ff:2c:ac:c3:67:
         f1:5c:30:f0:fe:c9:7a:da:1e:29:be:66:31:5c:d9:c1:12:92:
         f4:20:90:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN73Ps2efvNbTOvy5kuzeSlGUcsIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdFQ0VEMUZBRTlBOTBEMjUxMjMxQkMwNDA1MUQxQjU1
N0RGNTNGQjAeFw0yNjA4MTMxOTMyMjlaFw0yNzA4MTIxOTM3MjlaMDMxMTAvBgNV
BAMTKDQ2QjhCRUFBNEUzQkMxOTk5MzA2QUY2MUNBMzQ5M0ZFOEZBNzI2MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8FL0W3QCukJww82PS+31DKS0
vgnOwTfL4NOU0rSAbTCjTTdBh57gBDq+HDtfBcnFPGgE8dQ6+BrMYMoiHLi753uz
p8/mdgGMYa6y0xxurLIW1uvt8E6K+hV/IW5OfmKEkg/pHnkObqLhsgSy/QuU6W+o
ED/AdmiOTe3k42DEWgfK1o+pTNvLLV1ixL9Xi6+nC+QL89mnT8UzhrwLUvRBc0pb
wAcJvdrKZrhUa3BzWkdKjSmkIGoW/dmorNMeRh9LLeYuuKWBSVN7bSn7t9XlcY0I
i4f+mzotsXtllNjlM3Q133hl8cX/v1Ku3ovYtWF7bBU97ab20+A2VqK69BhdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURri+qk47wZmTBq9hyjST/o+nJiIwHwYDVR0j
BBgwFoAU9+ztH66akNJRIxvAQFHRtVffU/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1kd2tVVEdhcVpLSFVwOXdCZEsxeGt4TFRocnI0ZXhGTWtEV29KZk51
Y3kvMC9GN0VDRUQxRkFFOUE5MEQyNTEyMzFCQzA0MDUxRDFCNTU3REY1M0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3RUNFRDFGQUU5QTkwRDI1
MTIzMUJDMDQwNTFEMUI1NTdERjUzRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNZHdrVVRHYXFaS0hVcDl3QmRLMXhreExUaHJyNGV4Rk1rRFdvSmZOdWN5LzAv
MzEzNzM3MmUzMTMyMzgyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxgFwwDQYJKoZIhvcNAQELBQADggEBAA0g9lLe
7+YpOT+oklHEyXPNBht5eSf76rrhKrB/U4UyYXwQjtWQr7pIDyCdh5kzycc4d/VQ
gCLBrTenrcJXfF9qySM6ahiztqL5pudALLFqvfZUTeHs4TxfHu5sr23yezTc7uTZ
FWk9xQlaTbo2c/SSPukCh8OwEPP6uVcUjyHYUo3neA56c0Jj8EZgw5QHs6O4RJql
1ho2hJhOqH7jua0aAv3dK1gGGcZVULOVvla5aaOJlV9umnRHF4gl0EPGp/HkO+01
4AtCOPR1YpbbnVNCRfEQI4scI+96yKCpMnsD0v8VcSP/LKzDZ/FcMPD+yXraHim+
ZjFc2cESkvQgkPQ=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:19:28 2026 by rpki-client