Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3234203d3e20323632373733.roa
File:                     3137372e32322e3234382e302f32322d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          Y11b6Bo2D8i/2mtfdHYVR9U6C1AU0V9dm7EDdXyO4r0=
Subject key identifier:   F3:98:48:25:BC:A6:A5:F5:ED:6C:68:F7:82:67:59:EB:73:9F:AC:B3
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       53F3728089C3E07074B65B4491F427FC61A9ED15
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:45:20 +0000
ROA not before:           Fri 14 Aug 2026 19:40:20 +0000
ROA not after:            Fri 13 Aug 2027 19:45:20 +0000
asID:                     262773
IP address blocks:        177.22.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f3:72:80:89:c3:e0:70:74:b6:5b:44:91:f4:27:fc:61:a9:ed:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:40:20 2026 GMT
            Not After : Aug 13 19:45:20 2027 GMT
        Subject: CN=F3984825BCA6A5F5ED6C68F7826759EB739FACB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:58:4c:c4:5f:96:01:7a:68:a7:bf:fb:72:c7:
                    81:88:50:10:df:86:8f:e4:19:60:be:e8:5b:52:9a:
                    ff:d4:a5:53:b6:33:43:0f:0d:e0:a6:91:43:e9:90:
                    dc:62:51:b0:c1:bd:46:47:eb:c6:27:57:41:c1:c6:
                    6c:4a:d0:e4:45:18:ee:88:3a:1b:64:64:e3:bb:0d:
                    72:6c:fb:31:b2:fc:da:a8:01:32:3b:b5:55:d7:5e:
                    92:81:2e:b0:dd:73:73:50:8d:e9:ab:78:ec:1b:9b:
                    bd:63:12:38:b4:52:ad:d7:ea:e5:61:b4:9c:c3:00:
                    e5:3d:ea:68:31:75:ef:02:b9:b0:2a:95:3b:43:68:
                    02:8f:35:21:1a:03:d6:71:0e:0b:62:da:a0:0a:8a:
                    4e:bd:4a:96:38:5a:76:41:aa:92:ab:35:1a:16:ed:
                    da:b5:11:7f:e4:32:42:1c:6f:89:ce:99:dd:6d:13:
                    4a:bb:1e:c6:ca:41:aa:78:c6:8b:29:fe:3f:03:e2:
                    91:d3:de:e4:e3:bc:28:fd:2d:70:76:72:dd:a5:b4:
                    fa:76:0b:d3:6c:61:33:b0:cf:ad:35:64:d1:48:03:
                    84:3e:d2:08:05:15:ba:b1:5a:66:55:01:9a:3e:a5:
                    98:48:2a:e9:c5:e5:c2:fc:03:ad:b7:46:1b:b9:bc:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:98:48:25:BC:A6:A5:F5:ED:6C:68:F7:82:67:59:EB:73:9F:AC:B3
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e32322e3234382e302f32322d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:66:56:6a:51:0e:43:2c:df:c0:dc:ed:b3:c4:aa:f3:59:
         c6:ea:88:21:66:c4:d2:bc:27:7d:59:89:35:1f:16:54:1f:d9:
         af:1f:65:b4:84:76:8d:f8:7d:bd:ef:ab:97:dd:4e:fb:05:23:
         fc:2a:bf:29:ec:7c:d5:18:f0:a0:7f:a2:aa:20:81:81:45:6b:
         47:ed:ac:a9:97:94:8a:21:3d:00:45:fd:c7:c5:67:10:96:ce:
         d5:a2:81:f6:d2:ab:03:ec:85:fc:b5:a1:a6:9b:45:5d:0f:df:
         c7:62:4d:6a:12:34:65:c4:dc:7d:95:07:20:42:11:50:d8:a1:
         f3:67:8c:3b:9a:c5:04:7f:2c:b5:f7:fc:3d:7d:07:2f:ee:cb:
         54:36:62:28:a4:ad:d8:ce:49:9d:96:b7:ff:3a:ce:26:e6:e8:
         7d:e1:8f:62:98:63:7b:e8:1e:88:9f:df:ea:5e:ab:7b:82:56:
         0f:04:19:e8:f1:61:1e:77:8a:64:b4:ad:54:3e:2c:5d:99:c0:
         ca:58:5e:48:4f:ba:59:4f:45:31:0e:d8:41:7a:b7:e2:e8:b3:
         4f:71:8b:fc:f6:7f:c5:f2:d3:0f:eb:30:ba:99:bd:b0:3f:98:
         c4:4f:cb:26:25:34:8c:50:ee:e3:bb:23:91:63:3d:e8:43:cf:
         c1:24:ab:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUU/NygInD4HB0tltEkfQn/GGp7RUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNjA4MTQxOTQwMjBaFw0yNzA4MTMxOTQ1MjBaMDMxMTAvBgNV
BAMTKEYzOTg0ODI1QkNBNkE1RjVFRDZDNjhGNzgyNjc1OUVCNzM5RkFDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvWEzEX5YBeminv/tyx4GIUBDf
ho/kGWC+6FtSmv/UpVO2M0MPDeCmkUPpkNxiUbDBvUZH68YnV0HBxmxK0ORFGO6I
OhtkZOO7DXJs+zGy/NqoATI7tVXXXpKBLrDdc3NQjemreOwbm71jEji0Uq3X6uVh
tJzDAOU96mgxde8CubAqlTtDaAKPNSEaA9ZxDgti2qAKik69SpY4WnZBqpKrNRoW
7dq1EX/kMkIcb4nOmd1tE0q7HsbKQap4xosp/j8D4pHT3uTjvCj9LXB2ct2ltPp2
C9NsYTOwz601ZNFIA4Q+0ggFFbqxWmZVAZo+pZhIKunF5cL8A623Rhu5vPrRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU85hIJbympfXtbGj3gmdZ63OfrLMwHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNzM3MmUzMjMyMmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxFvgwDQYJKoZIhvcNAQELBQADggEBAIY6ZlZq
UQ5DLN/A3O2zxKrzWcbqiCFmxNK8J31ZiTUfFlQf2a8fZbSEdo34fb3vq5fdTvsF
I/wqvynsfNUY8KB/oqoggYFFa0ftrKmXlIohPQBF/cfFZxCWztWigfbSqwPshfy1
oaabRV0P38diTWoSNGXE3H2VByBCEVDYofNnjDuaxQR/LLX3/D19By/uy1Q2Yiik
rdjOSZ2Wt/86zibm6H3hj2KYY3voHoif3+peq3uCVg8EGejxYR53imS0rVQ+LF2Z
wMpYXkhPullPRTEO2EF6t+Los09xi/z2f8Xy0w/rMLqZvbA/mMRPyyYlNIxQ7uO7
I5FjPehDz8Ekq20=
-----END CERTIFICATE-----
Generated at Tue Aug 25 20:22:58 2026 by rpki-client