Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39352e302f32342d3234203d3e20323632383035.roa
File:                     3137372e3132382e39352e302f32342d3234203d3e20323632383035.roa (raw, json)
Hash identifier:          G0uEdf09MHAoweNTND86tTockv4N+jsISU/giVYw9QM=
Subject key identifier:   3E:D1:1D:87:69:83:EB:ED:DB:9E:D3:05:BA:09:3A:43:F3:38:67:35
Certificate issuer:       /CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
Certificate serial:       56C3DB9DD93D26E06DC2F3B22F96B6AD8E7CBCC9
Authority key identifier: F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39352e302f32342d3234203d3e20323632383035.roa
Signing time:             Thu 13 Aug 2026 19:37:30 +0000
ROA not before:           Thu 13 Aug 2026 19:32:30 +0000
ROA not after:            Thu 12 Aug 2027 19:37:30 +0000
asID:                     262805
IP address blocks:        177.128.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl
                          rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:db:9d:d9:3d:26:e0:6d:c2:f3:b2:2f:96:b6:ad:8e:7c:bc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7ECED1FAE9A90D251231BC04051D1B557DF53FB
        Validity
            Not Before: Aug 13 19:32:30 2026 GMT
            Not After : Aug 12 19:37:30 2027 GMT
        Subject: CN=3ED11D876983EBEDDB9ED305BA093A43F3386735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bd:0f:1c:7e:c3:0b:55:cc:07:05:31:d7:32:
                    0b:7d:b1:a6:47:9a:c1:86:09:78:25:34:25:3a:d8:
                    15:86:60:d7:34:b4:61:8e:e8:25:a7:0c:c9:b9:0d:
                    5c:79:03:c7:3f:2f:f0:ec:dd:fd:ec:90:4f:db:05:
                    45:b4:b4:da:12:1a:c3:65:f4:b8:a5:17:99:92:4e:
                    9f:0f:cf:01:9f:e1:05:b1:a6:e4:9a:eb:09:d5:df:
                    04:48:ea:f5:75:6d:c2:f6:1e:62:e0:0f:3b:d1:3e:
                    e7:0e:16:1c:a2:e1:5d:71:47:95:bb:36:b0:fb:68:
                    b1:cc:db:be:9f:a7:83:28:50:47:56:7c:1e:36:43:
                    99:38:9e:92:6e:b6:17:fc:4a:4b:4a:af:7f:64:fa:
                    c6:ab:2b:78:c2:38:1c:84:55:4b:6a:70:a2:51:7b:
                    b7:62:10:34:84:61:6a:0e:8e:1a:26:91:dd:db:a1:
                    0c:32:af:41:64:f4:3e:cb:4c:7d:00:33:ba:a4:87:
                    27:14:20:a0:1e:92:35:5f:b2:34:2f:37:1e:f0:0e:
                    f6:b1:28:0d:e5:29:b0:0b:3f:14:f3:f9:5f:9c:de:
                    2a:fc:4a:10:f5:1a:ea:a1:af:76:3d:cb:a4:6c:08:
                    8f:8a:60:0c:09:8e:85:dc:8e:63:06:a5:d0:f4:66:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D1:1D:87:69:83:EB:ED:DB:9E:D3:05:BA:09:3A:43:F3:38:67:35
            X509v3 Authority Key Identifier:
                keyid:F7:EC:ED:1F:AE:9A:90:D2:51:23:1B:C0:40:51:D1:B5:57:DF:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F7ECED1FAE9A90D251231BC04051D1B557DF53FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMdwkUTGaqZKHUp9wBdK1xkxLThrr4exFMkDWoJfNucy/0/3137372e3132382e39352e302f32342d3234203d3e20323632383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:ec:e7:75:ab:e5:0b:d7:1a:51:17:17:be:55:c8:ac:cd:
         f5:15:7b:87:86:25:13:dd:01:ca:a1:14:f5:c9:2b:b3:b1:6a:
         43:54:2e:04:13:81:80:2f:6c:6c:db:fb:29:d3:fc:0d:4a:8e:
         c7:d6:0b:ab:ea:0a:07:91:30:c5:1a:43:de:c4:6c:1a:bf:73:
         ba:1b:26:70:0a:65:71:d7:ca:46:f8:6a:d5:25:84:d8:66:02:
         6d:8f:bf:66:f5:b3:fb:cd:65:f9:99:7d:3f:77:36:3f:a8:53:
         e9:5f:53:dd:6f:69:0f:95:91:1d:7f:75:27:3e:fe:a4:c9:b6:
         22:87:74:4e:6b:bd:41:11:c2:9b:b5:2d:0f:90:97:a7:1c:95:
         94:da:3f:57:c7:dd:04:a6:61:4d:b5:29:23:49:4b:f9:de:87:
         c0:69:69:95:27:48:ea:c0:e7:92:20:0c:bb:32:b0:87:9b:cc:
         63:3c:b9:98:37:05:6a:3e:66:81:8d:94:27:df:9a:54:4c:c4:
         d4:00:11:14:d6:19:2d:a9:d4:84:78:a1:a3:33:df:c4:1a:a6:
         6d:fb:df:92:8a:09:b1:ed:9f:d7:d7:fa:99:1f:ec:89:48:1d:
         ea:1b:16:13:21:6f:54:b2:fe:f2:a3:de:6b:42:1d:10:f8:ec:
         0d:c6:48:34
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVsPbndk9JuBtwvOyL5a2rY58vMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdFQ0VEMUZBRTlBOTBEMjUxMjMxQkMwNDA1MUQxQjU1
N0RGNTNGQjAeFw0yNjA4MTMxOTMyMzBaFw0yNzA4MTIxOTM3MzBaMDMxMTAvBgNV
BAMTKDNFRDExRDg3Njk4M0VCRUREQjlFRDMwNUJBMDkzQTQzRjMzODY3MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDovQ8cfsMLVcwHBTHXMgt9saZH
msGGCXglNCU62BWGYNc0tGGO6CWnDMm5DVx5A8c/L/Ds3f3skE/bBUW0tNoSGsNl
9LilF5mSTp8PzwGf4QWxpuSa6wnV3wRI6vV1bcL2HmLgDzvRPucOFhyi4V1xR5W7
NrD7aLHM276fp4MoUEdWfB42Q5k4npJuthf8SktKr39k+sarK3jCOByEVUtqcKJR
e7diEDSEYWoOjhomkd3boQwyr0Fk9D7LTH0AM7qkhycUIKAekjVfsjQvNx7wDvax
KA3lKbALPxTz+V+c3ir8ShD1Guqhr3Y9y6RsCI+KYAwJjoXcjmMGpdD0ZpjpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPtEdh2mD6+3bntMFugk6Q/M4ZzUwHwYDVR0j
BBgwFoAU9+ztH66akNJRIxvAQFHRtVffU/swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1kd2tVVEdhcVpLSFVwOXdCZEsxeGt4TFRocnI0ZXhGTWtEV29KZk51
Y3kvMC9GN0VDRUQxRkFFOUE5MEQyNTEyMzFCQzA0MDUxRDFCNTU3REY1M0ZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y3RUNFRDFGQUU5QTkwRDI1
MTIzMUJDMDQwNTFEMUI1NTdERjUzRkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNZHdrVVRHYXFaS0hVcDl3QmRLMXhreExUaHJyNGV4Rk1rRFdvSmZOdWN5LzAv
MzEzNzM3MmUzMTMyMzgyZTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgF8wDQYJKoZIhvcNAQELBQADggEBAIoq7Od1
q+UL1xpRFxe+VciszfUVe4eGJRPdAcqhFPXJK7OxakNULgQTgYAvbGzb+ynT/A1K
jsfWC6vqCgeRMMUaQ97EbBq/c7obJnAKZXHXykb4atUlhNhmAm2Pv2b1s/vNZfmZ
fT93Nj+oU+lfU91vaQ+VkR1/dSc+/qTJtiKHdE5rvUERwpu1LQ+Ql6cclZTaP1fH
3QSmYU21KSNJS/neh8BpaZUnSOrA55IgDLsysIebzGM8uZg3BWo+ZoGNlCffmlRM
xNQAERTWGS2p1IR4oaMz38Qapm3735KKCbHtn9fX+pkf7IlIHeobFhMhb1Sy/vKj
3mtCHRD47A3GSDQ=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:18:55 2026 by rpki-client