Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32302d3234203d3e203532373933.roa
File:                     3137372e3230302e3134342e302f32302d3234203d3e203532373933.roa (raw, json)
Hash identifier:          Oa5olfifQSNLjPXKrBbae89/E1BGcOP5RMf6tiNgfAY=
Subject key identifier:   56:D8:1D:48:6D:95:51:0F:89:D9:87:A7:D2:E7:9F:C4:3F:F7:18:7E
Certificate issuer:       /CN=5688F3FAC1EC985FB4D5812BA68EF1CE69A89009
Certificate serial:       3726843C900A44EF924E30F09762BE477BF51CA2
Authority key identifier: 56:88:F3:FA:C1:EC:98:5F:B4:D5:81:2B:A6:8E:F1:CE:69:A8:90:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32302d3234203d3e203532373933.roa
Signing time:             Fri 19 Jun 2026 14:33:33 +0000
ROA not before:           Fri 19 Jun 2026 14:28:33 +0000
ROA not after:            Fri 18 Jun 2027 14:33:33 +0000
asID:                     52793
IP address blocks:        177.200.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.crl
                          rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:26:84:3c:90:0a:44:ef:92:4e:30:f0:97:62:be:47:7b:f5:1c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5688F3FAC1EC985FB4D5812BA68EF1CE69A89009
        Validity
            Not Before: Jun 19 14:28:33 2026 GMT
            Not After : Jun 18 14:33:33 2027 GMT
        Subject: CN=56D81D486D95510F89D987A7D2E79FC43FF7187E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:00:a9:94:40:cb:91:09:cc:ce:2b:f6:6b:dd:
                    dd:f1:68:25:39:a8:9f:35:33:5c:20:d2:c5:7a:2f:
                    7d:62:f8:e1:98:ca:74:52:a5:4a:29:58:98:62:00:
                    0d:79:33:31:86:b1:77:b6:cf:18:55:39:2d:05:60:
                    8c:64:e0:3f:a6:61:3f:9d:ef:af:c9:6e:38:66:78:
                    71:48:15:72:49:5d:01:74:27:b7:98:ea:a8:38:f3:
                    e3:82:79:df:f5:f7:c4:f0:11:5d:71:fc:27:92:6b:
                    5c:d4:4c:96:91:96:11:c7:16:2b:46:01:d8:47:e1:
                    33:a7:45:0c:f4:ca:9f:6e:4b:b2:b9:0f:8f:27:72:
                    1e:b1:ff:f8:f4:9e:7f:0b:22:ac:29:c9:2c:de:d4:
                    bb:d1:06:fd:7d:ff:0c:2c:bd:cf:cd:5f:4c:64:2f:
                    87:a0:50:f4:2a:d2:ab:32:3a:e2:5e:e0:d7:a0:af:
                    c4:2a:a2:71:eb:3b:79:f2:b5:d2:b1:58:8b:8e:a5:
                    c1:3f:d4:78:56:ba:c5:c8:c5:09:23:a8:7f:36:56:
                    73:7b:64:04:6e:33:48:dd:cf:1f:dd:b0:34:48:59:
                    97:58:59:e7:df:88:78:a5:66:f1:4c:ad:a4:25:ea:
                    ea:62:b2:bf:3e:b8:72:47:8a:6c:bc:d4:be:ab:3b:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:1D:48:6D:95:51:0F:89:D9:87:A7:D2:E7:9F:C4:3F:F7:18:7E
            X509v3 Authority Key Identifier:
                keyid:56:88:F3:FA:C1:EC:98:5F:B4:D5:81:2B:A6:8E:F1:CE:69:A8:90:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5688F3FAC1EC985FB4D5812BA68EF1CE69A89009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G57tfaFeCe3C13HqKkLDD3fGvGPFgEe6Dz2wXR1CKmqj/0/3137372e3230302e3134342e302f32302d3234203d3e203532373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         47:6e:a9:99:72:f4:37:5a:06:89:81:59:cc:f9:1b:86:9e:0b:
         8d:ad:95:cd:dc:0d:f4:52:a8:53:d5:a8:45:d2:a7:26:36:01:
         97:f3:5a:ab:7a:24:57:81:c0:14:15:ba:96:23:47:83:85:72:
         3c:6f:1d:63:32:58:90:68:a1:62:cc:cc:33:75:63:63:46:aa:
         80:5a:be:0e:42:33:e2:ff:04:61:35:2d:26:00:0a:f6:c0:dd:
         a5:71:10:2f:51:12:6c:21:27:13:22:2a:69:a3:fb:65:22:34:
         f7:7b:ba:fb:f3:f7:d6:e3:cf:b3:7d:11:a3:db:8b:81:64:e1:
         30:96:7d:9f:39:ac:da:57:f4:8d:e4:f2:40:3d:0e:df:c4:4c:
         ac:16:b7:fd:6a:27:70:0f:40:35:61:00:9a:d1:a3:e9:08:15:
         f1:19:0b:80:d6:a3:1e:0d:65:ac:8f:b0:53:63:c3:16:4f:4b:
         94:07:26:fe:7c:12:74:64:2d:dd:f3:1f:84:80:dd:88:71:93:
         e9:2f:90:b6:47:46:3c:13:99:cc:5e:f7:61:6a:2d:e9:22:fe:
         77:2b:a1:71:97:4d:8f:ff:ff:cd:0b:72:d7:85:96:29:d5:d8:
         91:df:c5:54:b4:48:28:91:97:00:ed:b1:29:e6:f7:d7:d8:dd:
         49:1b:75:4a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNyaEPJAKRO+STjDwl2K+R3v1HKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY4OEYzRkFDMUVDOTg1RkI0RDU4MTJCQTY4RUYxQ0U2
OUE4OTAwOTAeFw0yNjA2MTkxNDI4MzNaFw0yNzA2MTgxNDMzMzNaMDMxMTAvBgNV
BAMTKDU2RDgxRDQ4NkQ5NTUxMEY4OUQ5ODdBN0QyRTc5RkM0M0ZGNzE4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJAKmUQMuRCczOK/Zr3d3xaCU5
qJ81M1wg0sV6L31i+OGYynRSpUopWJhiAA15MzGGsXe2zxhVOS0FYIxk4D+mYT+d
76/JbjhmeHFIFXJJXQF0J7eY6qg48+OCed/198TwEV1x/CeSa1zUTJaRlhHHFitG
AdhH4TOnRQz0yp9uS7K5D48nch6x//j0nn8LIqwpySze1LvRBv19/wwsvc/NX0xk
L4egUPQq0qsyOuJe4Negr8QqonHrO3nytdKxWIuOpcE/1HhWusXIxQkjqH82VnN7
ZARuM0jdzx/dsDRIWZdYWeffiHilZvFMraQl6upisr8+uHJHimy81L6rOx2TAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVtgdSG2VUQ+J2Yen0uefxD/3GH4wHwYDVR0j
BBgwFoAUVojz+sHsmF+01YErpo7xzmmokAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzU3dGZhRmVDZTNDMTNIcUtrTEREM2ZHdkdQRmdFZTZEejJ3WFIxQ0tt
cWovMC81Njg4RjNGQUMxRUM5ODVGQjRENTgxMkJBNjhFRjFDRTY5QTg5MDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2ODhGM0ZBQzFFQzk4NUZC
NEQ1ODEyQkE2OEVGMUNFNjlBODkwMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1N3RmYUZlQ2UzQzEzSHFLa0xERDNmR3ZHUEZnRWU2RHoyd1hSMUNLbXFqLzAv
MzEzNzM3MmUzMjMwMzAyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzIzNzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxyJAwDQYJKoZIhvcNAQELBQADggEBAEduqZly
9DdaBomBWcz5G4aeC42tlc3cDfRSqFPVqEXSpyY2AZfzWqt6JFeBwBQVupYjR4OF
cjxvHWMyWJBooWLMzDN1Y2NGqoBavg5CM+L/BGE1LSYACvbA3aVxEC9REmwhJxMi
Kmmj+2UiNPd7uvvz99bjz7N9EaPbi4Fk4TCWfZ85rNpX9I3k8kA9Dt/ETKwWt/1q
J3APQDVhAJrRo+kIFfEZC4DWox4NZayPsFNjwxZPS5QHJv58EnRkLd3zH4SA3Yhx
k+kvkLZHRjwTmcxe92FqLeki/ncroXGXTY///80LcteFlinV2JHfxVS0SCiRlwDt
sSnm99fY3UkbdUo=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:52 2026 by rpki-client