Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3233203d3e20323632333031.roa
File:                     3137372e38372e3131362e302f32332d3233203d3e20323632333031.roa (raw, json)
Hash identifier:          vCsfaO56XhmhhnxibjXWXvO5gqxzYmg3br9xNP2Eb6E=
Subject key identifier:   59:1C:77:5C:09:68:96:C5:36:4D:BB:B8:E4:1D:18:AC:53:53:8C:CC
Certificate issuer:       /CN=852019550F65300604B78703987278200F8E079E
Certificate serial:       FDB6ED33D868AD67631FB17DDAA33DA281D3D8
Authority key identifier: 85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3233203d3e20323632333031.roa
Signing time:             Fri 07 Aug 2026 14:06:26 +0000
ROA not before:           Fri 07 Aug 2026 14:01:26 +0000
ROA not after:            Fri 06 Aug 2027 14:06:26 +0000
asID:                     262301
IP address blocks:        177.87.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl
                          rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fd:b6:ed:33:d8:68:ad:67:63:1f:b1:7d:da:a3:3d:a2:81:d3:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=852019550F65300604B78703987278200F8E079E
        Validity
            Not Before: Aug  7 14:01:26 2026 GMT
            Not After : Aug  6 14:06:26 2027 GMT
        Subject: CN=591C775C096896C5364DBBB8E41D18AC53538CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:ed:36:34:5d:94:f5:8d:97:31:c9:b1:50:
                    3a:af:e9:78:6a:25:22:18:14:cc:fe:5c:50:31:7d:
                    dd:c6:4c:98:c8:1f:e0:15:9c:6e:64:6c:d9:3e:16:
                    0c:15:17:76:dc:9e:c2:80:d3:e7:28:e6:01:66:ca:
                    05:d8:43:fe:3a:3a:5b:90:10:56:4e:7c:1a:05:60:
                    27:71:3d:80:6f:76:ce:d7:a7:8d:d2:76:4d:c3:53:
                    55:27:eb:6c:a0:ee:36:4e:49:91:6f:a7:d3:94:f3:
                    ae:bd:9b:17:77:a1:6f:b8:fd:86:0e:1e:aa:0a:5e:
                    20:9a:54:f8:b6:b6:38:3e:d0:d0:76:36:3c:e8:37:
                    0c:b7:eb:47:54:a9:2b:2d:2f:33:d5:04:ac:16:b2:
                    54:0e:f0:cd:f1:28:ef:f4:10:c1:2c:49:f8:80:af:
                    f4:be:eb:3f:24:d3:69:60:16:67:85:e0:25:0e:c0:
                    35:f9:a4:cf:66:5a:25:80:71:63:c1:06:38:af:73:
                    c0:e6:d1:58:33:4f:30:e9:ec:56:9e:7d:40:2d:e4:
                    bf:06:29:7d:3f:ac:1c:49:43:5f:53:42:74:d7:03:
                    1e:dc:ef:cc:02:c3:74:3f:3d:86:27:71:76:22:aa:
                    0d:e0:2b:87:a6:d4:f7:c1:03:b0:2c:24:fc:7b:df:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:77:5C:09:68:96:C5:36:4D:BB:B8:E4:1D:18:AC:53:53:8C:CC
            X509v3 Authority Key Identifier:
                keyid:85:20:19:55:0F:65:30:06:04:B7:87:03:98:72:78:20:0F:8E:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/852019550F65300604B78703987278200F8E079E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/852019550F65300604B78703987278200F8E079E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/3137372e38372e3131362e302f32332d3233203d3e20323632333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:38:aa:89:c0:50:94:9a:50:10:eb:9c:44:34:70:30:7e:ce:
         cd:d4:f9:f8:fb:01:bb:d3:83:79:b1:0e:8e:67:29:30:4e:01:
         89:27:a5:ec:57:c2:54:c8:66:62:6d:05:cb:e0:0d:b1:52:9c:
         21:a6:54:39:0d:26:b7:bc:fd:99:e9:7f:1a:6a:e8:7e:f0:9e:
         34:6d:05:42:8d:17:54:a5:08:f9:1d:09:6b:4b:7a:82:9a:e1:
         57:3e:97:97:8f:dd:b3:e8:6c:46:b8:0e:b6:48:ce:72:4e:23:
         74:05:84:ca:76:e4:65:d9:77:ea:de:d8:db:a3:53:a6:43:ac:
         e3:ba:e0:4c:0a:a6:f0:bc:6f:56:71:95:3c:72:68:7d:8b:a5:
         30:55:07:38:bd:09:af:0b:58:be:2f:24:c5:ca:b5:4e:ee:04:
         08:db:5a:0b:c7:ed:db:e0:8a:32:f6:a5:35:58:fe:6a:56:78:
         69:73:ad:59:ca:4b:4a:26:c6:1c:9a:d8:ce:8c:62:0c:bd:d9:
         e8:11:75:c3:2a:fc:dd:73:30:28:35:f2:17:ec:31:26:5c:30:
         3f:d2:3b:e3:df:9c:be:9b:41:85:cb:00:b7:67:8d:7f:3d:1a:
         6e:74:09:2c:b0:2c:b9:7a:5c:53:db:7c:60:22:bb:fd:c9:cb:
         de:57:1d:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAP227TPYaK1nYx+xfdqjPaKB09gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMDE5NTUwRjY1MzAwNjA0Qjc4NzAzOTg3Mjc4MjAw
RjhFMDc5RTAeFw0yNjA4MDcxNDAxMjZaFw0yNzA4MDYxNDA2MjZaMDMxMTAvBgNV
BAMTKDU5MUM3NzVDMDk2ODk2QzUzNjREQkJCOEU0MUQxOEFDNTM1MzhDQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Me02NF2U9Y2XMcmxUDqv6Xhq
JSIYFMz+XFAxfd3GTJjIH+AVnG5kbNk+FgwVF3bcnsKA0+co5gFmygXYQ/46OluQ
EFZOfBoFYCdxPYBvds7Xp43Sdk3DU1Un62yg7jZOSZFvp9OU8669mxd3oW+4/YYO
HqoKXiCaVPi2tjg+0NB2NjzoNwy360dUqSstLzPVBKwWslQO8M3xKO/0EMEsSfiA
r/S+6z8k02lgFmeF4CUOwDX5pM9mWiWAcWPBBjivc8Dm0VgzTzDp7FaefUAt5L8G
KX0/rBxJQ19TQnTXAx7c78wCw3Q/PYYncXYiqg3gK4em1PfBA7AsJPx737pvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWRx3XAlolsU2Tbu45B0YrFNTjMwwHwYDVR0j
BBgwFoAUhSAZVQ9lMAYEt4cDmHJ4IA+OB54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVhjUzcxVEtaMjJkenlNUU51dkhha2M5UGJBQkNyRHFxZmpCTm9GeWFI
eUgvMC84NTIwMTk1NTBGNjUzMDA2MDRCNzg3MDM5ODcyNzgyMDBGOEUwNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjAxOTU1MEY2NTMwMDYw
NEI3ODcwMzk4NzI3ODIwMEY4RTA3OUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VYY1M3MVRLWjIyZHp5TVFOdXZIYWtjOVBiQUJDckRxcWZqQk5vRnlhSHlILzAv
MzEzNzM3MmUzODM3MmUzMTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxV3QwDQYJKoZIhvcNAQELBQADggEBAK44qonA
UJSaUBDrnEQ0cDB+zs3U+fj7AbvTg3mxDo5nKTBOAYknpexXwlTIZmJtBcvgDbFS
nCGmVDkNJre8/Znpfxpq6H7wnjRtBUKNF1SlCPkdCWtLeoKa4Vc+l5eP3bPobEa4
DrZIznJOI3QFhMp25GXZd+re2NujU6ZDrOO64EwKpvC8b1ZxlTxyaH2LpTBVBzi9
Ca8LWL4vJMXKtU7uBAjbWgvH7dvgijL2pTVY/mpWeGlzrVnKS0omxhya2M6MYgy9
2egRdcMq/N1zMCg18hfsMSZcMD/SO+PfnL6bQYXLALdnjX89Gm50CSywLLl6XFPb
fGAiu/3Jy95XHak=
-----END CERTIFICATE-----
Generated at Sun Aug 23 17:11:37 2026 by rpki-client