Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
File:                     3137372e3132382e32342e302f32312d3231203d3e203532363331.roa (raw, json)
Hash identifier:          V6fyf8EofGhDV5VqieZb+P6MdJXE/9F7q+cegDY5Y0E=
Subject key identifier:   3E:6D:DA:12:BB:E9:9E:BF:62:C9:CE:A0:5C:C1:6C:3D:A7:28:6C:3A
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       7D10DA4CE25F9E5BA17643A2D25B0AFC585CAA19
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa
Signing time:             Sat 04 Apr 2026 17:01:25 +0000
ROA not before:           Sat 04 Apr 2026 16:56:25 +0000
ROA not after:            Sat 03 Apr 2027 17:01:25 +0000
asID:                     52631
IP address blocks:        177.128.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:10:da:4c:e2:5f:9e:5b:a1:76:43:a2:d2:5b:0a:fc:58:5c:aa:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:25 2026 GMT
            Not After : Apr  3 17:01:25 2027 GMT
        Subject: CN=3E6DDA12BBE99EBF62C9CEA05CC16C3DA7286C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:29:7e:45:b8:d2:bf:ba:69:bb:83:7a:2c:
                    b6:cf:d4:67:b8:00:69:69:46:5f:5b:98:a2:62:2a:
                    22:5a:e6:72:27:6c:31:4d:d7:ab:7c:9b:33:84:3d:
                    d6:92:69:ba:df:af:12:ec:3f:a1:2c:b6:0a:db:3f:
                    89:f2:da:37:7e:bb:27:fc:84:55:2c:0e:18:be:d7:
                    99:a4:87:5b:7f:67:f6:59:a3:df:95:e7:33:6c:ce:
                    71:41:ef:da:1f:be:a7:2f:fa:be:00:b1:51:7a:55:
                    13:e7:0c:f4:06:ba:7d:1d:f7:5d:e4:7c:d7:4a:2d:
                    9e:07:21:a7:f0:71:0f:3b:4d:bb:0b:1e:05:32:3b:
                    05:9d:20:7c:34:bf:53:b4:cd:d1:f3:9c:03:46:71:
                    35:0b:75:78:07:01:09:f0:a5:0f:1b:eb:1c:f3:72:
                    16:d9:00:ac:92:70:ac:f3:fe:e4:35:b9:40:79:e2:
                    12:38:b1:f3:86:ef:74:14:40:f2:42:6a:20:c7:0d:
                    65:17:ed:bb:35:d5:b8:89:f0:fc:0e:86:a4:d9:16:
                    62:ef:14:d2:34:61:1a:47:74:54:da:37:bd:1a:ce:
                    dd:f4:bb:c7:98:de:95:77:75:19:e3:f2:5d:c0:b7:
                    2a:01:3d:89:59:b8:4a:a7:56:f6:ba:a6:df:ce:d2:
                    98:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:DA:12:BB:E9:9E:BF:62:C9:CE:A0:5C:C1:6C:3D:A7:28:6C:3A
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32342e302f32312d3231203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:11:47:ec:d2:79:29:a0:33:37:d9:56:b0:40:16:cc:5d:
         a9:67:1d:66:b9:ee:0a:08:d5:3b:a9:2c:7b:08:9a:12:60:3a:
         87:94:33:2d:61:a0:27:dd:50:ea:b3:2b:f2:3c:6b:21:87:0a:
         e5:76:24:17:5e:cd:42:e8:63:79:11:b2:b2:01:f4:b8:ef:d7:
         87:31:24:79:17:c2:de:e8:60:9b:dc:e4:42:2c:a0:f4:e7:ef:
         26:e9:d0:fb:c0:b4:49:2a:af:31:d8:e9:1c:47:3b:e1:54:fe:
         d6:bf:72:5b:6f:93:1f:a2:1b:88:0c:64:ec:7b:72:fe:4b:71:
         b5:59:a6:15:a9:a8:79:f5:b6:04:87:23:2a:1d:67:f6:33:0c:
         d9:ad:bc:0f:c3:d8:50:57:89:c7:c1:52:d2:6a:8d:f4:61:91:
         4e:85:c1:30:75:f9:59:87:f9:8c:62:ec:26:ee:76:5b:1c:af:
         a3:6f:d8:b3:2c:31:5b:45:2a:b5:b0:d8:9e:27:88:e9:9f:4d:
         7e:27:9d:20:85:8a:a1:20:7b:c7:85:2b:c1:8b:1c:6f:34:a8:
         b6:2e:54:bf:0b:be:a0:cb:89:f3:03:ab:a7:40:7b:a4:41:76:
         cb:73:b7:77:50:67:5c:ff:81:c5:ac:de:e8:a9:f2:19:ea:d6:
         00:3b:36:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfRDaTOJfnluhdkOi0lsK/FhcqhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RjgwREE4QTkwRTkyQzg5NUNDNDIyREU1QTdDOTU1
OEVDNjRFQzAeFw0yNjA0MDQxNjU2MjVaFw0yNzA0MDMxNzAxMjVaMDMxMTAvBgNV
BAMTKDNFNkREQTEyQkJFOTlFQkY2MkM5Q0VBMDVDQzE2QzNEQTcyODZDM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1Cl+RbjSv7ppu4N6LLbP1Ge4
AGlpRl9bmKJiKiJa5nInbDFN16t8mzOEPdaSabrfrxLsP6EstgrbP4ny2jd+uyf8
hFUsDhi+15mkh1t/Z/ZZo9+V5zNsznFB79ofvqcv+r4AsVF6VRPnDPQGun0d913k
fNdKLZ4HIafwcQ87TbsLHgUyOwWdIHw0v1O0zdHznANGcTULdXgHAQnwpQ8b6xzz
chbZAKyScKzz/uQ1uUB54hI4sfOG73QUQPJCaiDHDWUX7bs11biJ8PwOhqTZFmLv
FNI0YRpHdFTaN70azt30u8eY3pV3dRnj8l3AtyoBPYlZuEqnVva6pt/O0pgRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPm3aErvpnr9iyc6gXMFsPacobDowHwYDVR0j
BBgwFoAUxn+A2oqQ6SyJXMQi3lp8lVjsZOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9DNjdGODBEQThBOTBFOTJDODk1Q0M0MjJERTVBN0M5NTU4RUM2NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2N0Y4MERBOEE5MEU5MkM4
OTVDQzQyMkRFNUE3Qzk1NThFQzY0RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsYAYMA0GCSqGSIb3DQEBCwUAA4IBAQBvoRFH7NJ5
KaAzN9lWsEAWzF2pZx1mue4KCNU7qSx7CJoSYDqHlDMtYaAn3VDqsyvyPGshhwrl
diQXXs1C6GN5EbKyAfS479eHMSR5F8Le6GCb3ORCLKD05+8m6dD7wLRJKq8x2Okc
RzvhVP7Wv3Jbb5MfohuIDGTse3L+S3G1WaYVqah59bYEhyMqHWf2MwzZrbwPw9hQ
V4nHwVLSao30YZFOhcEwdflZh/mMYuwm7nZbHK+jb9izLDFbRSq1sNieJ4jpn01+
J50ghYqhIHvHhSvBixxvNKi2LlS/C76gy4nzA6unQHukQXbLc7d3UGdc/4HFrN7o
qfIZ6tYAOzYk
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:43:05 2026 by rpki-client