Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e3139322e302f32312d3234203d3e20323632373733.roa
File:                     3137372e38362e3139322e302f32312d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          YXy39oNMuHL5OaNk+Whe8PyNT6x9oLTTXfLog2O47GE=
Subject key identifier:   70:D7:02:58:67:E4:AD:EE:98:F1:17:7C:77:9D:0F:0E:62:0F:8C:47
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       4659207CB3F376D6051AEBC7BB713CAFF0DA978E
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e3139322e302f32312d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:53:34 +0000
ROA not before:           Fri 14 Aug 2026 19:48:34 +0000
ROA not after:            Fri 13 Aug 2027 19:53:34 +0000
asID:                     262773
IP address blocks:        177.86.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 15:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:59:20:7c:b3:f3:76:d6:05:1a:eb:c7:bb:71:3c:af:f0:da:97:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:48:34 2026 GMT
            Not After : Aug 13 19:53:34 2027 GMT
        Subject: CN=70D7025867E4ADEE98F1177C779D0F0E620F8C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:e3:91:ed:cf:1c:89:79:d7:ce:bf:c4:79:
                    e6:8b:1d:28:2c:fc:07:dc:9c:3c:f7:ee:44:c8:d5:
                    58:24:84:14:4a:13:99:06:74:4c:a9:9b:3b:e9:47:
                    05:1f:fc:b5:e0:42:c2:2c:45:fe:33:10:81:e6:cf:
                    88:4b:a4:00:b3:64:ba:a8:6b:c3:e4:da:d5:87:8f:
                    28:37:c3:af:88:0a:68:55:38:47:5d:64:eb:39:16:
                    9d:31:6e:9a:79:5a:d9:80:2b:4a:da:e8:9e:59:58:
                    84:ba:b1:cb:24:89:28:da:8a:57:a1:5c:22:06:d2:
                    ef:40:51:22:7f:05:87:a9:94:9c:14:92:6d:63:e1:
                    c3:31:d1:99:4e:4b:45:93:d8:21:16:63:bf:f9:35:
                    4e:d2:cd:57:34:80:df:24:6e:97:81:f9:57:c1:91:
                    70:2a:42:4b:d5:88:7e:b0:51:95:73:d2:b5:6a:46:
                    a6:83:9d:e2:b6:4d:2c:52:f4:f9:8c:17:93:58:78:
                    f8:37:60:1e:47:4e:23:d3:c6:36:bc:51:e8:23:d3:
                    b2:e1:fc:aa:96:86:b3:30:cc:1a:79:eb:5f:3a:1c:
                    9b:a5:5a:47:3a:44:29:bb:6a:f0:17:ee:47:8a:57:
                    03:52:55:c7:68:72:a4:1c:75:4a:b6:72:90:67:08:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:02:58:67:E4:AD:EE:98:F1:17:7C:77:9D:0F:0E:62:0F:8C:47
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3137372e38362e3139322e302f32312d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:ce:82:56:9d:10:d4:7d:9c:39:7d:28:54:da:c4:99:60:16:
         17:23:55:61:05:51:fd:17:1a:8e:c6:2e:f7:98:ee:2d:6c:29:
         43:08:c9:15:f7:0d:78:c1:7b:f1:97:6a:79:98:74:73:54:20:
         11:d5:1b:2c:ab:01:0e:89:41:e7:6e:ea:93:6b:79:5d:0f:2b:
         4f:89:39:99:d8:e7:b8:89:ee:99:10:59:ca:3a:39:1a:5a:ab:
         25:e6:e8:10:70:79:98:67:aa:75:e7:fd:58:d6:63:eb:e9:d4:
         e6:99:ba:56:1a:44:ca:0b:7e:17:30:51:da:47:02:1c:a8:32:
         ed:29:b4:c0:43:53:cf:33:5b:16:d0:c4:ee:fb:96:c2:7a:31:
         f3:a7:0d:d4:16:8f:7f:d6:ab:6c:dd:eb:3f:43:50:90:e2:14:
         1c:8b:49:ef:9f:f1:8a:d6:f3:1c:5c:0d:f7:67:e3:09:fd:c2:
         ee:76:5f:d8:a7:6b:f2:a6:4b:0d:b7:8f:fa:a2:f7:90:1b:8a:
         af:44:13:f0:1d:d1:67:51:ed:06:37:83:ad:93:63:e0:e0:87:
         1e:6a:d3:a6:bc:df:19:32:2f:87:dd:cf:c7:78:32:db:f1:64:
         6d:37:9e:38:41:1e:4c:ba:6a:6f:f6:27:7f:57:ce:43:8e:1f:
         17:88:35:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURlkgfLPzdtYFGuvHu3E8r/Dal44wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNjA4MTQxOTQ4MzRaFw0yNzA4MTMxOTUzMzRaMDMxMTAvBgNV
BAMTKDcwRDcwMjU4NjdFNEFERUU5OEYxMTc3Qzc3OUQwRjBFNjIwRjhDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpb+OR7c8ciXnXzr/EeeaLHSgs
/AfcnDz37kTI1VgkhBRKE5kGdEypmzvpRwUf/LXgQsIsRf4zEIHmz4hLpACzZLqo
a8Pk2tWHjyg3w6+ICmhVOEddZOs5Fp0xbpp5WtmAK0ra6J5ZWIS6scskiSjaileh
XCIG0u9AUSJ/BYeplJwUkm1j4cMx0ZlOS0WT2CEWY7/5NU7SzVc0gN8kbpeB+VfB
kXAqQkvViH6wUZVz0rVqRqaDneK2TSxS9PmMF5NYePg3YB5HTiPTxja8Uegj07Lh
/KqWhrMwzBp56186HJulWkc6RCm7avAX7keKVwNSVcdocqQcdUq2cpBnCGvlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcNcCWGfkre6Y8Rd8d50PDmIPjEcwHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNzM3MmUzODM2MmUzMTM5MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAOxVsAwDQYJKoZIhvcNAQELBQADggEBAEfOglad
ENR9nDl9KFTaxJlgFhcjVWEFUf0XGo7GLveY7i1sKUMIyRX3DXjBe/GXanmYdHNU
IBHVGyyrAQ6JQedu6pNreV0PK0+JOZnY57iJ7pkQWco6ORpaqyXm6BBweZhnqnXn
/VjWY+vp1OaZulYaRMoLfhcwUdpHAhyoMu0ptMBDU88zWxbQxO77lsJ6MfOnDdQW
j3/Wq2zd6z9DUJDiFByLSe+f8YrW8xxcDfdn4wn9wu52X9ina/KmSw23j/qi95Ab
iq9EE/Ad0WdR7QY3g62TY+Dghx5q06a83xkyL4fdz8d4MtvxZG03njhBHky6am/2
J39XzkOOHxeINY4=
-----END CERTIFICATE-----
Generated at Tue Aug 25 17:15:13 2026 by rpki-client