Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/3137372e3133302e34382e302f32302d3234203d3e203532373437.roa
File:                     3137372e3133302e34382e302f32302d3234203d3e203532373437.roa (raw, json)
Hash identifier:          CBscONrD5l+QY8IVJdO1CksVJp5FR9g5ZravOvmkKLM=
Subject key identifier:   8A:F9:01:5A:31:B7:C2:0E:07:EC:71:72:5F:BB:F7:AE:D4:B6:BA:23
Certificate issuer:       /CN=96AF74DB78984438491FFB3ED895325FAF01A105
Certificate serial:       45A5762EEE8B967A4C4B71FDBA485DA3584698EE
Authority key identifier: 96:AF:74:DB:78:98:44:38:49:1F:FB:3E:D8:95:32:5F:AF:01:A1:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AF74DB78984438491FFB3ED895325FAF01A105.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/3137372e3133302e34382e302f32302d3234203d3e203532373437.roa
Signing time:             Tue 23 Jun 2026 14:47:26 +0000
ROA not before:           Tue 23 Jun 2026 14:42:26 +0000
ROA not after:            Tue 22 Jun 2027 14:47:26 +0000
asID:                     52747
IP address blocks:        177.130.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/96AF74DB78984438491FFB3ED895325FAF01A105.crl
                          rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/96AF74DB78984438491FFB3ED895325FAF01A105.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AF74DB78984438491FFB3ED895325FAF01A105.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 17:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a5:76:2e:ee:8b:96:7a:4c:4b:71:fd:ba:48:5d:a3:58:46:98:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96AF74DB78984438491FFB3ED895325FAF01A105
        Validity
            Not Before: Jun 23 14:42:26 2026 GMT
            Not After : Jun 22 14:47:26 2027 GMT
        Subject: CN=8AF9015A31B7C20E07EC71725FBBF7AED4B6BA23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:36:73:70:ea:2c:98:17:62:85:fa:ab:ed:72:
                    d7:92:72:db:7a:79:82:21:34:55:d4:3e:3d:14:f6:
                    05:41:28:a6:82:33:62:d5:a5:fd:bd:3e:d0:13:83:
                    11:72:0d:9c:30:7b:80:d6:09:97:93:2f:5a:37:43:
                    2c:45:64:06:56:df:06:6b:f4:30:be:87:0b:09:cc:
                    ae:26:ca:0b:75:04:58:98:50:cd:27:8f:65:e1:27:
                    41:75:d4:d1:b9:ea:19:62:65:14:77:0b:ef:0c:1f:
                    eb:b8:92:61:09:2a:43:85:56:77:17:ce:bd:2a:80:
                    14:30:e7:6e:d5:7e:f0:13:3e:3b:87:19:61:c4:b0:
                    f5:f9:95:36:fb:63:4e:67:d1:23:eb:7e:d9:d9:46:
                    db:05:91:c4:d7:fc:f7:6e:b2:63:c4:61:52:0e:28:
                    ba:14:54:c2:ae:c9:3e:70:d8:b7:2a:f6:76:63:2b:
                    95:cb:ab:a9:66:26:01:73:ea:7f:bb:78:8d:d5:ee:
                    f6:6d:30:b4:5e:a6:c1:73:86:38:e2:b2:db:c8:da:
                    1f:91:bf:c1:00:1a:23:c6:ee:fb:72:b6:b0:9b:93:
                    11:ff:4c:8f:60:99:96:15:7c:3c:ec:a5:4e:63:09:
                    46:bf:4b:95:9b:82:47:01:50:bc:96:aa:e4:a2:2e:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:01:5A:31:B7:C2:0E:07:EC:71:72:5F:BB:F7:AE:D4:B6:BA:23
            X509v3 Authority Key Identifier:
                keyid:96:AF:74:DB:78:98:44:38:49:1F:FB:3E:D8:95:32:5F:AF:01:A1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/96AF74DB78984438491FFB3ED895325FAF01A105.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96AF74DB78984438491FFB3ED895325FAF01A105.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhsZ2rsi7sdEyk28SW35zT1dgD7CZXm1HyM5RLfb1sfL/0/3137372e3133302e34382e302f32302d3234203d3e203532373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:a4:c6:33:4a:e6:09:e0:db:52:1f:7d:de:72:c7:cf:81:26:
         0c:36:1c:96:45:5c:c2:e3:d0:7e:71:f0:4d:b4:77:ec:ab:af:
         ab:ec:78:d0:c0:4b:4f:11:9e:e4:6d:f6:e1:b4:24:3b:99:92:
         c1:7b:83:9a:d6:22:16:20:1a:b9:d6:53:66:86:f5:d1:66:d2:
         38:d1:45:f1:c8:0b:14:5a:92:94:4e:1c:10:a6:d5:c9:3a:cf:
         00:08:ea:72:bf:55:3c:b6:c1:8d:5c:f0:81:5e:1e:df:0b:97:
         63:9d:c0:a4:24:9a:90:4e:ef:f1:bd:2e:cf:4d:25:8d:0c:d1:
         56:34:fc:a4:ca:18:2d:df:49:e7:74:9a:bc:d9:66:bf:6d:b5:
         04:a4:bc:bf:6e:f7:83:1b:0c:53:d5:66:c6:22:67:3d:25:70:
         d2:41:8c:17:82:d0:b1:3e:ea:f8:be:7a:c3:d1:74:cf:3c:4b:
         6e:cd:b0:1b:84:2d:18:51:98:5b:ff:5e:26:fc:2e:5d:52:1b:
         2d:cb:35:60:eb:62:27:cb:22:df:a3:d6:c1:e1:d0:fc:a8:13:
         a2:6f:13:07:21:bd:d0:16:8b:11:f9:28:e6:83:69:6b:b8:3c:
         fd:b5:30:be:13:00:3b:1a:e3:e7:43:01:a1:61:af:97:16:69:
         6c:0f:6d:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURaV2Lu6LlnpMS3H9ukhdo1hGmO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZBRjc0REI3ODk4NDQzODQ5MUZGQjNFRDg5NTMyNUZB
RjAxQTEwNTAeFw0yNjA2MjMxNDQyMjZaFw0yNzA2MjIxNDQ3MjZaMDMxMTAvBgNV
BAMTKDhBRjkwMTVBMzFCN0MyMEUwN0VDNzE3MjVGQkJGN0FFRDRCNkJBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDENnNw6iyYF2KF+qvtcteSctt6
eYIhNFXUPj0U9gVBKKaCM2LVpf29PtATgxFyDZwwe4DWCZeTL1o3QyxFZAZW3wZr
9DC+hwsJzK4mygt1BFiYUM0nj2XhJ0F11NG56hliZRR3C+8MH+u4kmEJKkOFVncX
zr0qgBQw527VfvATPjuHGWHEsPX5lTb7Y05n0SPrftnZRtsFkcTX/PdusmPEYVIO
KLoUVMKuyT5w2Lcq9nZjK5XLq6lmJgFz6n+7eI3V7vZtMLRepsFzhjjistvI2h+R
v8EAGiPG7vtytrCbkxH/TI9gmZYVfDzspU5jCUa/S5WbgkcBULyWquSiLrDVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUivkBWjG3wg4H7HFyX7v3rtS2uiMwHwYDVR0j
BBgwFoAUlq9023iYRDhJH/s+2JUyX68BoQUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2hzWjJyc2k3c2RFeWsyOFNXMzV6VDFkZ0Q3Q1pYbTFIeU01UkxmYjFz
ZkwvMC85NkFGNzREQjc4OTg0NDM4NDkxRkZCM0VEODk1MzI1RkFGMDFBMTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk2QUY3NERCNzg5ODQ0Mzg0
OTFGRkIzRUQ4OTUzMjVGQUYwMUExMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0doc1oycnNpN3NkRXlrMjhTVzM1elQxZGdEN0NaWG0xSHlNNVJMZmIxc2ZMLzAv
MzEzNzM3MmUzMTMzMzAyZTM0MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMy
MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsYIwMA0GCSqGSIb3DQEBCwUAA4IBAQDBpMYzSuYJ
4NtSH33ecsfPgSYMNhyWRVzC49B+cfBNtHfsq6+r7HjQwEtPEZ7kbfbhtCQ7mZLB
e4Oa1iIWIBq51lNmhvXRZtI40UXxyAsUWpKUThwQptXJOs8ACOpyv1U8tsGNXPCB
Xh7fC5djncCkJJqQTu/xvS7PTSWNDNFWNPykyhgt30nndJq82Wa/bbUEpLy/bveD
GwxT1WbGImc9JXDSQYwXgtCxPur4vnrD0XTPPEtuzbAbhC0YUZhb/14m/C5dUhst
yzVg62InyyLfo9bB4dD8qBOibxMHIb3QFosR+Sjmg2lruDz9tTC+EwA7GuPnQwGh
Ya+XFmlsD21z
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:57:16 2026 by rpki-client