Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
File:                     3137372e3132382e32392e302f32342d3234203d3e203532363331.roa (raw, json)
Hash identifier:          /f5pfzwdwRfMt7ENRCWO0InJVqWeOzMCfDIYkNqWs8w=
Subject key identifier:   EC:26:B8:2C:50:87:9F:B1:D7:7A:3B:3B:4A:20:D2:3C:74:E9:8D:32
Certificate issuer:       /CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
Certificate serial:       2C701F064D9309F7D406FFEB324D39DE5918A654
Authority key identifier: C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa
Signing time:             Sat 04 Apr 2026 17:01:22 +0000
ROA not before:           Sat 04 Apr 2026 16:56:22 +0000
ROA not after:            Sat 03 Apr 2027 17:01:22 +0000
asID:                     52631
IP address blocks:        177.128.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl
                          rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 11:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:70:1f:06:4d:93:09:f7:d4:06:ff:eb:32:4d:39:de:59:18:a6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67F80DA8A90E92C895CC422DE5A7C9558EC64EC
        Validity
            Not Before: Apr  4 16:56:22 2026 GMT
            Not After : Apr  3 17:01:22 2027 GMT
        Subject: CN=EC26B82C50879FB1D77A3B3B4A20D23C74E98D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:96:a6:60:66:82:fb:68:d9:ab:47:af:7b:
                    8e:2e:f8:2a:d1:01:9c:eb:7c:44:79:a0:75:b4:07:
                    a7:99:34:ba:bd:d4:14:31:36:9e:af:1b:72:64:69:
                    67:3e:e2:aa:63:47:47:de:45:14:a4:3e:76:b6:40:
                    a7:e5:86:99:0b:23:b1:98:71:d0:7e:96:10:3b:3c:
                    c4:83:34:b2:b6:42:42:7e:84:30:9d:c5:43:2b:b6:
                    ec:76:35:ad:0d:8c:19:07:c5:06:e9:9d:bb:c9:80:
                    a5:cd:32:d1:94:34:60:34:43:f4:d8:5f:3e:98:6b:
                    2a:5f:00:53:98:2b:ea:66:4c:ac:73:32:26:6f:d3:
                    86:95:d8:85:88:f6:d4:42:e7:77:95:99:e7:5f:c5:
                    f9:b9:01:e8:1e:48:fe:ec:89:6a:a9:93:7a:e1:6f:
                    00:f2:fa:7f:45:10:d4:1e:46:44:16:ae:c9:16:81:
                    2c:de:d3:68:19:ed:8c:2a:c8:0a:78:b5:09:32:9d:
                    74:fb:ae:f9:28:b6:28:f7:bd:4b:8b:b6:43:64:1c:
                    fd:a3:fc:ef:33:a9:fe:4b:99:4c:76:81:c1:7e:f8:
                    c2:9e:1b:79:6d:ae:2e:1a:07:74:82:85:28:45:bd:
                    8c:8c:68:b5:84:77:ea:90:38:63:37:4c:65:3e:28:
                    28:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:B8:2C:50:87:9F:B1:D7:7A:3B:3B:4A:20:D2:3C:74:E9:8D:32
            X509v3 Authority Key Identifier:
                keyid:C6:7F:80:DA:8A:90:E9:2C:89:5C:C4:22:DE:5A:7C:95:58:EC:64:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67F80DA8A90E92C895CC422DE5A7C9558EC64EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGnxH3h8oYh6qif2Tkqxy5zB9aX1PmAyER2xE4uexmuW/0/3137372e3132382e32392e302f32342d3234203d3e203532363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:74:a3:c5:ee:d8:33:8b:e6:5d:ff:97:17:84:0f:bd:15:
         a1:ca:6f:5c:ed:88:4c:44:47:36:17:68:02:4f:ee:8c:0f:e4:
         0d:cc:97:39:35:8c:fe:64:48:f8:36:04:c0:c1:bb:b3:93:57:
         35:84:ab:da:8e:82:f5:fa:42:9d:3b:db:28:16:e9:6d:0b:d9:
         6e:39:6a:76:11:33:2d:ab:68:5a:78:b8:54:6b:7b:fa:3f:47:
         c3:7d:4b:10:c1:b0:55:bf:66:cc:ee:ec:2e:98:0d:b3:dd:b2:
         14:eb:0c:54:18:3d:6e:81:58:cd:3b:3a:29:16:d8:e4:36:f5:
         80:fa:90:5c:07:4f:7a:34:9b:47:2a:df:e4:a6:78:06:c3:4e:
         71:cb:50:77:ae:7e:57:b5:b4:c2:ee:1e:bc:ed:cc:89:1a:7b:
         ad:50:3b:1d:cd:d2:97:f9:6f:62:d0:87:4e:b4:18:91:f1:14:
         4e:3f:b3:89:92:58:9a:92:1b:65:cb:6e:07:3a:5a:fb:bf:84:
         9d:32:65:23:a4:86:79:bc:4f:46:f5:04:b2:d6:2c:d1:10:67:
         e3:48:04:85:6a:cc:6f:fd:78:30:0f:e2:95:e6:b7:c1:dd:49:
         fd:44:81:a8:80:53:53:e0:a4:67:f3:28:cd:d9:99:0f:e0:38:
         7e:6f:82:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULHAfBk2TCffUBv/rMk053lkYplQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY3RjgwREE4QTkwRTkyQzg5NUNDNDIyREU1QTdDOTU1
OEVDNjRFQzAeFw0yNjA0MDQxNjU2MjJaFw0yNzA0MDMxNzAxMjJaMDMxMTAvBgNV
BAMTKEVDMjZCODJDNTA4NzlGQjFENzdBM0IzQjRBMjBEMjNDNzRFOThEMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD37pamYGaC+2jZq0eve44u+CrR
AZzrfER5oHW0B6eZNLq91BQxNp6vG3JkaWc+4qpjR0feRRSkPna2QKflhpkLI7GY
cdB+lhA7PMSDNLK2QkJ+hDCdxUMrtux2Na0NjBkHxQbpnbvJgKXNMtGUNGA0Q/TY
Xz6YaypfAFOYK+pmTKxzMiZv04aV2IWI9tRC53eVmedfxfm5AegeSP7siWqpk3rh
bwDy+n9FENQeRkQWrskWgSze02gZ7YwqyAp4tQkynXT7rvkotij3vUuLtkNkHP2j
/O8zqf5LmUx2gcF++MKeG3ltri4aB3SChShFvYyMaLWEd+qQOGM3TGU+KCi9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7Ca4LFCHn7HXejs7SiDSPHTpjTIwHwYDVR0j
BBgwFoAUxn+A2oqQ6SyJXMQi3lp8lVjsZOwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEdueEgzaDhvWWg2cWlmMlRrcXh5NXpCOWFYMVBtQXlFUjJ4RTR1ZXht
dVcvMC9DNjdGODBEQThBOTBFOTJDODk1Q0M0MjJERTVBN0M5NTU4RUM2NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M2N0Y4MERBOEE5MEU5MkM4
OTVDQzQyMkRFNUE3Qzk1NThFQzY0RUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hHbnhIM2g4b1loNnFpZjJUa3F4eTV6QjlhWDFQbUF5RVIyeEU0dWV4bXVXLzAv
MzEzNzM3MmUzMTMyMzgyZTMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsYAdMA0GCSqGSIb3DQEBCwUAA4IBAQAxPnSjxe7Y
M4vmXf+XF4QPvRWhym9c7YhMREc2F2gCT+6MD+QNzJc5NYz+ZEj4NgTAwbuzk1c1
hKvajoL1+kKdO9soFultC9luOWp2ETMtq2haeLhUa3v6P0fDfUsQwbBVv2bM7uwu
mA2z3bIU6wxUGD1ugVjNOzopFtjkNvWA+pBcB096NJtHKt/kpngGw05xy1B3rn5X
tbTC7h687cyJGnutUDsdzdKX+W9i0IdOtBiR8RROP7OJkliakhtly24HOlr7v4Sd
MmUjpIZ5vE9G9QSy1izREGfjSASFasxv/XgwD+KV5rfB3Un9RIGogFNT4KRn8yjN
2ZkP4Dh+b4Id
-----END CERTIFICATE-----
Generated at Thu Apr 9 14:18:34 2026 by rpki-client