Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234352e302f32342d3234203d3e20323733333936.roa
File:                     3137372e32322e3234352e302f32342d3234203d3e20323733333936.roa (raw, json)
Hash identifier:          TxoDnSt2vrmb11N4aLgBxqB1060stxgMmurOEh1DqAU=
Subject key identifier:   90:B7:7A:5A:34:D2:3C:D8:FF:84:43:3D:C1:E2:8A:84:54:5A:2B:EB
Certificate issuer:       /CN=4D3D5BA9F9B5356D2A4244549680670908498017
Certificate serial:       3E45346E91ACF1DB9C861CC13C27678A2556727C
Authority key identifier: 4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234352e302f32342d3234203d3e20323733333936.roa
Signing time:             Thu 08 Oct 2026 17:15:44 +0000
ROA not before:           Thu 08 Oct 2026 17:10:44 +0000
ROA not after:            Thu 07 Oct 2027 17:15:44 +0000
asID:                     273396
IP address blocks:        177.22.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl
                          rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 12:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:34:6e:91:ac:f1:db:9c:86:1c:c1:3c:27:67:8a:25:56:72:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3D5BA9F9B5356D2A4244549680670908498017
        Validity
            Not Before: Oct  8 17:10:44 2026 GMT
            Not After : Oct  7 17:15:44 2027 GMT
        Subject: CN=90B77A5A34D23CD8FF84433DC1E28A84545A2BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:05:78:62:dd:18:8a:0c:5c:a3:49:5b:3c:91:
                    92:0d:98:f1:b8:6e:75:64:26:4f:ea:fd:9f:34:ea:
                    fb:8c:0c:1c:5a:be:75:6e:e9:da:96:b2:fb:56:d5:
                    22:fe:8d:be:cf:50:dd:6c:8d:ea:90:89:36:04:30:
                    ef:eb:9a:84:09:72:45:d7:63:40:88:0d:4b:38:09:
                    60:31:c1:39:9b:a1:5a:1f:1f:0c:c0:df:55:79:81:
                    59:0b:71:ad:04:47:02:8b:d9:f1:2a:ee:99:50:ec:
                    2b:8e:bc:13:39:3a:fc:d0:18:9b:e7:51:bd:07:24:
                    00:ed:07:68:e8:0d:9c:39:19:aa:8b:c4:ad:2b:87:
                    ac:5a:87:f0:a9:5d:0b:1c:42:2a:6b:a2:e1:5b:09:
                    cf:79:63:c6:31:20:5d:32:71:74:cb:a9:ad:f6:b4:
                    32:f6:f4:45:73:ca:7d:07:16:12:ac:53:4c:c6:79:
                    f8:54:5e:aa:3e:a0:c3:a7:96:9e:b6:1a:6f:09:95:
                    e0:26:de:66:76:4b:b9:02:96:14:5e:f3:1b:a6:00:
                    d7:bf:5c:fb:ad:4d:30:f6:c2:bc:35:cc:06:b4:32:
                    d0:f9:d9:be:91:7d:25:c4:5b:5b:3d:ec:9c:45:1a:
                    77:dc:5b:48:43:16:84:2f:35:8c:e9:d5:53:9e:67:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B7:7A:5A:34:D2:3C:D8:FF:84:43:3D:C1:E2:8A:84:54:5A:2B:EB
            X509v3 Authority Key Identifier:
                keyid:4D:3D:5B:A9:F9:B5:35:6D:2A:42:44:54:96:80:67:09:08:49:80:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/4D3D5BA9F9B5356D2A4244549680670908498017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D3D5BA9F9B5356D2A4244549680670908498017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/1/3137372e32322e3234352e302f32342d3234203d3e20323733333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fd:3e:e8:c6:ff:b8:b6:15:7a:86:05:16:f3:fa:42:6a:0d:
         2f:9d:ca:ce:90:a4:ee:7d:34:ae:93:12:43:de:30:21:85:7d:
         47:5c:03:11:18:0e:b5:8e:ea:7a:87:56:e8:d1:87:aa:58:1d:
         fa:19:39:e1:b2:d9:70:28:2b:68:e9:46:82:08:29:47:ab:66:
         bf:d0:6a:6c:42:9a:fa:a6:7e:39:96:14:95:09:9c:30:21:19:
         98:3a:8d:35:7f:fd:ef:1c:32:96:0c:00:20:8c:1a:63:ad:2c:
         a4:9d:f9:1d:9a:fd:48:79:32:c4:e6:2d:42:40:a6:45:39:cf:
         c9:68:b6:3d:56:5c:86:46:a2:88:8d:f0:ac:cb:5d:ec:b0:cc:
         e6:f5:a6:71:bd:63:a5:2b:06:65:31:0b:65:38:3f:15:10:d6:
         8f:d7:7f:a4:07:94:83:2f:a6:7c:b2:12:6d:dc:52:11:a4:92:
         22:f1:66:36:8a:50:d5:13:9d:ca:2a:5d:22:36:a2:82:34:a8:
         79:ad:4e:9a:08:0d:b7:00:c7:c8:9c:3c:76:17:5f:68:7f:55:
         35:9b:16:2e:f9:5f:31:de:95:84:f7:54:c1:9a:44:af:67:d4:
         fc:a7:74:77:7e:97:db:c6:6f:d8:68:6f:3c:a2:d5:44:59:f1:
         48:60:5e:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPkU0bpGs8duchhzBPCdniiVWcnwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzRDVCQTlGOUI1MzU2RDJBNDI0NDU0OTY4MDY3MDkw
ODQ5ODAxNzAeFw0yNjEwMDgxNzEwNDRaFw0yNzEwMDcxNzE1NDRaMDMxMTAvBgNV
BAMTKDkwQjc3QTVBMzREMjNDRDhGRjg0NDMzREMxRTI4QTg0NTQ1QTJCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBXhi3RiKDFyjSVs8kZINmPG4
bnVkJk/q/Z806vuMDBxavnVu6dqWsvtW1SL+jb7PUN1sjeqQiTYEMO/rmoQJckXX
Y0CIDUs4CWAxwTmboVofHwzA31V5gVkLca0ERwKL2fEq7plQ7CuOvBM5OvzQGJvn
Ub0HJADtB2joDZw5GaqLxK0rh6xah/CpXQscQiprouFbCc95Y8YxIF0ycXTLqa32
tDL29EVzyn0HFhKsU0zGefhUXqo+oMOnlp62Gm8JleAm3mZ2S7kClhRe8xumANe/
XPutTTD2wrw1zAa0MtD52b6RfSXEW1s97JxFGnfcW0hDFoQvNYzp1VOeZ3AlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkLd6WjTSPNj/hEM9weKKhFRaK+swHwYDVR0j
BBgwFoAUTT1bqfm1NW0qQkRUloBnCQhJgBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWR3R05nUTRnWHE4d0JUTkhmaE5yRzRRVTJOekpaZ0NSdnZ6OTNRUDh5
WG0vMS80RDNENUJBOUY5QjUzNTZEMkE0MjQ0NTQ5NjgwNjcwOTA4NDk4MDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREM0Q1QkE5RjlCNTM1NkQy
QTQyNDQ1NDk2ODA2NzA5MDg0OTgwMTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Vkd0dOZ1E0Z1hxOHdCVE5IZmhOckc0UVUyTnpKWmdDUnZ2ejkzUVA4eVhtLzEv
MzEzNzM3MmUzMjMyMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzMzMzM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxFvUwDQYJKoZIhvcNAQELBQADggEBAB79PujG
/7i2FXqGBRbz+kJqDS+dys6QpO59NK6TEkPeMCGFfUdcAxEYDrWO6nqHVujRh6pY
HfoZOeGy2XAoK2jpRoIIKUerZr/QamxCmvqmfjmWFJUJnDAhGZg6jTV//e8cMpYM
ACCMGmOtLKSd+R2a/Uh5MsTmLUJApkU5z8lotj1WXIZGooiN8KzLXeywzOb1pnG9
Y6UrBmUxC2U4PxUQ1o/Xf6QHlIMvpnyyEm3cUhGkkiLxZjaKUNUTncoqXSI2ooI0
qHmtTpoIDbcAx8icPHYXX2h/VTWbFi75XzHelYT3VMGaRK9n1PyndHd+l9vGb9ho
bzyi1URZ8UhgXvc=
-----END CERTIFICATE-----
Generated at Thu Oct 29 19:26:11 2026 by rpki-client