Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
File:                     3137372e36362e382e302f32312d3234203d3e20323632343836.roa (raw, json)
Hash identifier:          VBGF1GJhXa+4AWHkwOHlxUAnAnZp2MhPyy10QbRjrDA=
Subject key identifier:   93:10:55:2A:A2:5F:25:70:69:1E:09:CA:38:EC:57:B6:45:C7:1E:CC
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       39674E813C55109AB7AD257B2D095394AAA63CC2
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa
Signing time:             Wed 12 Aug 2026 17:45:04 +0000
ROA not before:           Wed 12 Aug 2026 17:40:04 +0000
ROA not after:            Wed 11 Aug 2027 17:45:04 +0000
asID:                     262486
IP address blocks:        177.66.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl
                          rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:67:4e:81:3c:55:10:9a:b7:ad:25:7b:2d:09:53:94:aa:a6:3c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Aug 12 17:40:04 2026 GMT
            Not After : Aug 11 17:45:04 2027 GMT
        Subject: CN=9310552AA25F2570691E09CA38EC57B645C71ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:96:8c:90:02:58:4b:0b:77:4a:7c:c5:96:
                    78:d7:05:39:91:24:a5:39:70:c2:73:60:14:c5:56:
                    11:44:b0:af:c9:c8:51:85:3a:32:7e:19:7e:82:48:
                    a8:3f:77:db:fd:49:bc:cb:dd:60:37:6b:1e:6c:67:
                    ab:ad:33:c1:6a:48:12:0a:5b:b7:88:de:3e:0c:ef:
                    90:f9:97:65:c4:03:a1:1a:0a:be:54:32:f3:64:6e:
                    82:60:dd:e8:87:01:7f:a6:a4:18:88:ee:73:49:bd:
                    b9:bd:5f:5a:e0:6f:ed:2f:f1:51:65:08:ac:2e:54:
                    3b:9a:8c:74:e3:ea:a1:f2:6e:f7:c9:55:7b:4a:14:
                    68:e8:f8:f3:4d:7b:ea:ab:f6:7c:55:aa:8f:f2:3c:
                    9a:67:c1:fc:aa:80:d1:45:77:47:32:a4:2a:47:83:
                    87:8e:8b:93:c7:7f:8c:de:7d:9c:b5:f2:2e:95:29:
                    de:da:de:50:5e:d7:c1:83:0c:af:93:97:ea:1a:dc:
                    be:42:74:bd:e0:67:91:ca:6d:8f:a7:45:f7:f4:60:
                    9c:54:a7:9b:b6:c9:a7:4f:e4:b3:25:1b:74:f3:31:
                    fc:8e:d5:58:5c:2b:28:67:1b:6a:ce:b0:fd:96:60:
                    08:d1:a1:5a:19:39:7a:f1:16:25:b9:78:66:54:00:
                    d3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:55:2A:A2:5F:25:70:69:1E:09:CA:38:EC:57:B6:45:C7:1E:CC
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/3137372e36362e382e302f32312d3234203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:64:db:d1:8a:ab:52:33:1f:94:f0:0f:34:c3:4d:30:26:f8:
         84:b2:01:00:70:8a:2e:96:e6:a8:21:84:cf:a4:3c:78:78:ac:
         ea:a1:5e:d1:ba:6e:8f:35:6b:78:04:c7:39:a3:7d:28:76:9e:
         0a:dc:f5:78:5b:e9:7a:85:6d:bc:e0:52:7e:4a:59:9a:f8:07:
         63:0d:a6:7c:dd:3d:87:b2:ff:39:eb:96:df:38:66:74:cb:e4:
         9c:bb:c3:2b:48:5f:04:b8:c0:89:70:14:fe:ab:5b:73:6c:d9:
         e9:95:23:a1:21:e1:6e:d2:89:3b:c1:42:67:31:65:b1:22:10:
         01:52:59:19:56:ff:d0:fc:6f:1d:51:b6:cc:d9:bb:c8:b2:b2:
         83:14:f9:01:1e:00:fb:c7:cc:4a:d3:2e:82:44:a8:30:1b:7c:
         f1:65:b7:21:6f:c2:fc:dd:63:eb:d0:7b:13:f2:32:ab:db:3a:
         5f:ea:26:65:35:d3:cd:41:6e:f2:f8:6b:d5:6d:95:f3:18:be:
         ca:1c:54:08:74:a1:2e:e2:d6:88:c6:42:3a:c4:68:7b:80:d0:
         0d:63:7d:7c:e5:9c:cb:8b:3c:ce:da:52:b5:dc:5e:70:4c:e6:
         a9:69:a1:fa:c8:6d:27:b2:c9:9e:95:93:aa:e4:ac:08:4b:4c:
         52:c6:1f:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOWdOgTxVEJq3rSV7LQlTlKqmPMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRFMjIxMkU4MTE5QTg4RjgyOTAzMERCQTk1MzBENzkw
ODBBQkI5MzAeFw0yNjA4MTIxNzQwMDRaFw0yNzA4MTExNzQ1MDRaMDMxMTAvBgNV
BAMTKDkzMTA1NTJBQTI1RjI1NzA2OTFFMDlDQTM4RUM1N0I2NDVDNzFFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0v5aMkAJYSwt3SnzFlnjXBTmR
JKU5cMJzYBTFVhFEsK/JyFGFOjJ+GX6CSKg/d9v9SbzL3WA3ax5sZ6utM8FqSBIK
W7eI3j4M75D5l2XEA6EaCr5UMvNkboJg3eiHAX+mpBiI7nNJvbm9X1rgb+0v8VFl
CKwuVDuajHTj6qHybvfJVXtKFGjo+PNNe+qr9nxVqo/yPJpnwfyqgNFFd0cypCpH
g4eOi5PHf4zefZy18i6VKd7a3lBe18GDDK+Tl+oa3L5CdL3gZ5HKbY+nRff0YJxU
p5u2yadP5LMlG3TzMfyO1VhcKyhnG2rOsP2WYAjRoVoZOXrxFiW5eGZUANM5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUkxBVKqJfJXBpHgnKOOxXtkXHHswwHwYDVR0j
BBgwFoAUBOIhLoEZqI+CkDDbqVMNeQgKu5MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JOdU5MeFRNZHVqSEpncGNreGVidWZqNDF6RlFWQkc3RmJKeFBOQlZW
Q04vMC8wNEUyMjEyRTgxMTlBODhGODI5MDMwREJBOTUzMEQ3OTA4MEFCQjkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0RTIyMTJFODExOUE4OEY4
MjkwMzBEQkE5NTMwRDc5MDgwQUJCOTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCTnVOTHhUTWR1akhKZ3Bja3hlYnVmajQxekZRVkJHN0ZiSnhQTkJWVkNOLzAv
MzEzNzM3MmUzNjM2MmUzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMjM0
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA7FCCDANBgkqhkiG9w0BAQsFAAOCAQEAJGTb0YqrUjMf
lPAPNMNNMCb4hLIBAHCKLpbmqCGEz6Q8eHis6qFe0bpujzVreATHOaN9KHaeCtz1
eFvpeoVtvOBSfkpZmvgHYw2mfN09h7L/OeuW3zhmdMvknLvDK0hfBLjAiXAU/qtb
c2zZ6ZUjoSHhbtKJO8FCZzFlsSIQAVJZGVb/0PxvHVG2zNm7yLKygxT5AR4A+8fM
StMugkSoMBt88WW3IW/C/N1j69B7E/Iyq9s6X+omZTXTzUFu8vhr1W2V8xi+yhxU
CHShLuLWiMZCOsRoe4DQDWN9fOWcy4s8ztpStdxecEzmqWmh+shtJ7LJnpWTquSs
CEtMUsYfUw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 19:01:40 2026 by rpki-client