Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
File:                     3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa (raw, json)
Hash identifier:          JhHB+xxVUbKLcaCoeUzwu0w/Pe5DLRp0VWKc/ql+lPA=
Subject key identifier:   6B:47:EB:4A:50:B2:8D:3E:7B:68:72:0F:DB:7F:77:51:11:03:A3:69
Certificate issuer:       /CN=7336DC1127729AD49FE01A63CEC536366EA09DF7
Certificate serial:       138BF256F11BED35E8DD778DF844B09DD1593D66
Authority key identifier: 73:36:DC:11:27:72:9A:D4:9F:E0:1A:63:CE:C5:36:36:6E:A0:9D:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7336DC1127729AD49FE01A63CEC536366EA09DF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa
Signing time:             Fri 14 Aug 2026 19:23:26 +0000
ROA not before:           Fri 14 Aug 2026 19:18:26 +0000
ROA not after:            Fri 13 Aug 2027 19:23:26 +0000
asID:                     263324
IP address blocks:        177.86.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/7336DC1127729AD49FE01A63CEC536366EA09DF7.crl
                          rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/7336DC1127729AD49FE01A63CEC536366EA09DF7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7336DC1127729AD49FE01A63CEC536366EA09DF7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 18:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:8b:f2:56:f1:1b:ed:35:e8:dd:77:8d:f8:44:b0:9d:d1:59:3d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7336DC1127729AD49FE01A63CEC536366EA09DF7
        Validity
            Not Before: Aug 14 19:18:26 2026 GMT
            Not After : Aug 13 19:23:26 2027 GMT
        Subject: CN=6B47EB4A50B28D3E7B68720FDB7F77511103A369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:a6:ed:d5:71:c4:f4:d8:d9:c7:4e:f2:cf:
                    0d:4a:9b:6c:26:24:88:4e:52:41:8f:c9:0f:cd:c9:
                    f3:20:73:05:78:b5:72:02:17:7f:e0:a3:95:cd:32:
                    7e:3f:2f:83:66:12:f0:8f:fa:57:c8:11:7e:db:4d:
                    d1:d8:f7:cc:06:92:88:bb:61:69:71:00:bf:b8:96:
                    a0:00:ec:9c:14:74:92:37:33:4d:9b:31:15:f3:79:
                    ec:df:ea:12:76:fb:9e:10:92:64:da:f3:fd:ca:f2:
                    3c:7a:29:0c:ef:13:51:fc:39:d4:7e:11:3d:0b:2e:
                    ca:53:0e:b5:57:50:e5:15:20:02:d8:21:53:d8:6f:
                    7e:3d:85:c3:d9:86:2e:00:2d:de:8c:7c:f3:37:9f:
                    cb:52:14:21:e1:98:23:57:06:8f:16:76:7f:8c:7e:
                    c6:88:a7:9f:2a:ab:d1:32:e2:25:cc:bf:81:99:53:
                    ce:09:81:16:81:cf:ae:7a:b9:9b:7d:fc:16:f1:90:
                    97:03:5c:17:55:eb:6e:bb:89:29:39:17:e3:02:41:
                    c1:67:67:4e:8d:75:33:15:b4:89:86:3e:f6:b7:5e:
                    66:e3:f1:6d:9c:38:84:f3:9b:c1:1c:fe:7e:24:4f:
                    c8:14:58:3a:bb:26:1a:2e:fa:0b:83:f4:94:07:26:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:47:EB:4A:50:B2:8D:3E:7B:68:72:0F:DB:7F:77:51:11:03:A3:69
            X509v3 Authority Key Identifier:
                keyid:73:36:DC:11:27:72:9A:D4:9F:E0:1A:63:CE:C5:36:36:6E:A0:9D:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/7336DC1127729AD49FE01A63CEC536366EA09DF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7336DC1127729AD49FE01A63CEC536366EA09DF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/3137372e38362e3135362e302f32322d3234203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:66:3c:8c:8a:5b:f5:c8:d7:c2:a7:a6:1f:e0:78:f6:4f:
         35:4e:70:f0:c4:33:6a:47:2b:c7:a5:c1:e2:d2:63:6e:d9:77:
         41:cc:7a:2d:42:d8:2e:bc:01:b2:e0:33:d5:68:2d:c0:36:30:
         9a:da:0e:a7:87:03:03:0d:d5:80:66:36:48:1e:50:36:60:da:
         32:70:34:13:47:59:21:26:82:05:f0:a0:da:65:be:13:de:33:
         b7:99:a5:4b:19:d6:ce:10:15:7c:ba:80:5c:33:62:2c:a4:e1:
         ba:aa:37:fd:76:b7:33:9b:44:36:22:f3:ae:d9:77:ff:c5:39:
         8e:7a:36:d0:0c:5e:23:e9:d5:70:4e:24:9d:48:e2:53:75:46:
         ad:fd:a4:22:24:b3:5c:3b:2f:15:d1:41:1b:10:1f:38:f6:5b:
         4e:60:50:11:1d:f7:73:68:f9:82:2e:eb:5b:58:2b:18:82:b7:
         20:09:12:3e:13:4b:30:98:fe:14:7b:fd:41:c1:44:59:34:c2:
         48:24:e8:d0:b3:c8:28:1f:ed:0c:bd:19:76:a3:29:9c:d9:1a:
         55:48:e2:d7:42:76:2d:63:c3:05:bd:18:4b:90:d7:46:74:ed:
         0f:63:6e:89:b2:a5:21:28:28:10:0b:91:d0:f2:b2:d9:27:d3:
         41:7d:b9:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUE4vyVvEb7TXo3XeN+ESwndFZPWYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMzNkRDMTEyNzcyOUFENDlGRTAxQTYzQ0VDNTM2MzY2
RUEwOURGNzAeFw0yNjA4MTQxOTE4MjZaFw0yNzA4MTMxOTIzMjZaMDMxMTAvBgNV
BAMTKDZCNDdFQjRBNTBCMjhEM0U3QjY4NzIwRkRCN0Y3NzUxMTEwM0EzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHu6bt1XHE9NjZx07yzw1Km2wm
JIhOUkGPyQ/NyfMgcwV4tXICF3/go5XNMn4/L4NmEvCP+lfIEX7bTdHY98wGkoi7
YWlxAL+4lqAA7JwUdJI3M02bMRXzeezf6hJ2+54QkmTa8/3K8jx6KQzvE1H8OdR+
ET0LLspTDrVXUOUVIALYIVPYb349hcPZhi4ALd6MfPM3n8tSFCHhmCNXBo8Wdn+M
fsaIp58qq9Ey4iXMv4GZU84JgRaBz656uZt9/BbxkJcDXBdV6267iSk5F+MCQcFn
Z06NdTMVtImGPva3Xmbj8W2cOITzm8Ec/n4kT8gUWDq7Jhou+guD9JQHJk5dAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa0frSlCyjT57aHIP2393UREDo2kwHwYDVR0j
BBgwFoAUczbcESdymtSf4BpjzsU2Nm6gnfcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3VqalRScm83cWRWRjZ5Vjd0aWhBUXphc2Q3Rlg3eHdrMjRZc2V1R1NK
clkvMC83MzM2REMxMTI3NzI5QUQ0OUZFMDFBNjNDRUM1MzYzNjZFQTA5REY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczMzZEQzExMjc3MjlBRDQ5
RkUwMUE2M0NFQzUzNjM2NkVBMDlERjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ampUUnJvN3FkVkY2eVY3dGloQVF6YXNkN0ZYN3h3azI0WXNldUdTSnJZLzAv
MzEzNzM3MmUzODM2MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxVpwwDQYJKoZIhvcNAQELBQADggEBAI6oZjyM
ilv1yNfCp6Yf4Hj2TzVOcPDEM2pHK8elweLSY27Zd0HMei1C2C68AbLgM9VoLcA2
MJraDqeHAwMN1YBmNkgeUDZg2jJwNBNHWSEmggXwoNplvhPeM7eZpUsZ1s4QFXy6
gFwzYiyk4bqqN/12tzObRDYi867Zd//FOY56NtAMXiPp1XBOJJ1I4lN1Rq39pCIk
s1w7LxXRQRsQHzj2W05gUBEd93No+YIu61tYKxiCtyAJEj4TSzCY/hR7/UHBRFk0
wkgk6NCzyCgf7Qy9GXajKZzZGlVI4tdCdi1jwwW9GEuQ10Z07Q9jbomypSEoKBAL
kdDystkn00F9uXI=
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:46:58 2026 by rpki-client