Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa
File:                     3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa (raw, json)
Hash identifier:          +b+YR/4RQrik1FOtqnEuy/wzVLYJWyjM+qul+gd62wc=
Subject key identifier:   4F:63:72:27:B7:38:E9:6A:70:5B:B0:03:B1:00:07:18:8B:5A:52:AF
Certificate issuer:       /CN=1AC3AE0AAA47B315A39C83C1840078F635C56169
Certificate serial:       1DD0A46938FEE0757E7519D711C719D7EAE8BE69
Authority key identifier: 1A:C3:AE:0A:AA:47:B3:15:A3:9C:83:C1:84:00:78:F6:35:C5:61:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AC3AE0AAA47B315A39C83C1840078F635C56169.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa
Signing time:             Fri 31 Jul 2026 14:46:18 +0000
ROA not before:           Fri 31 Jul 2026 14:41:18 +0000
ROA not after:            Fri 30 Jul 2027 14:46:18 +0000
asID:                     264255
IP address blocks:        170.245.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/1AC3AE0AAA47B315A39C83C1840078F635C56169.crl
                          rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/1AC3AE0AAA47B315A39C83C1840078F635C56169.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AC3AE0AAA47B315A39C83C1840078F635C56169.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 05:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d0:a4:69:38:fe:e0:75:7e:75:19:d7:11:c7:19:d7:ea:e8:be:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AC3AE0AAA47B315A39C83C1840078F635C56169
        Validity
            Not Before: Jul 31 14:41:18 2026 GMT
            Not After : Jul 30 14:46:18 2027 GMT
        Subject: CN=4F637227B738E96A705BB003B10007188B5A52AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:20:74:f1:89:2d:6e:98:d6:af:ae:67:fb:73:
                    c7:40:fd:a7:df:eb:12:8b:55:c7:20:34:96:3b:5a:
                    17:09:41:24:ca:07:d3:d5:1b:9a:d1:e1:72:13:7e:
                    f3:8b:3c:2b:64:93:ed:a7:cd:44:59:76:3f:16:31:
                    16:af:90:e8:e0:37:bd:9f:d8:5c:55:a6:58:3a:28:
                    7e:ff:a6:50:65:68:2e:0b:2e:d4:6d:c5:02:2b:99:
                    31:a1:31:4e:56:2c:22:1f:8a:c3:3f:a4:c0:56:58:
                    08:5e:77:f8:ef:84:79:7b:12:1f:cd:e1:81:05:8e:
                    fb:be:4a:9e:01:b6:91:b5:7a:3d:bc:24:9f:19:c8:
                    43:02:f7:e1:64:c7:87:fa:fc:9c:92:8c:6e:aa:c8:
                    91:c9:f2:63:c0:59:84:a4:34:16:04:c1:71:6e:60:
                    2a:2d:f7:0e:b4:95:85:26:75:1f:62:5b:a4:af:79:
                    1c:be:c9:91:74:ca:c0:d5:f3:d8:62:ad:c2:58:8c:
                    5e:9f:61:d1:38:ff:31:f6:67:4b:5a:7a:76:c7:8a:
                    96:5f:50:d2:fb:5b:67:4f:e3:12:07:19:e4:83:97:
                    76:38:d5:0a:bd:ae:08:b0:43:f4:70:a4:eb:61:c9:
                    b4:b3:d6:44:3b:4b:b4:36:8d:92:ab:72:05:2b:56:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:72:27:B7:38:E9:6A:70:5B:B0:03:B1:00:07:18:8B:5A:52:AF
            X509v3 Authority Key Identifier:
                keyid:1A:C3:AE:0A:AA:47:B3:15:A3:9C:83:C1:84:00:78:F6:35:C5:61:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/1AC3AE0AAA47B315A39C83C1840078F635C56169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AC3AE0AAA47B315A39C83C1840078F635C56169.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/3137302e3234352e36382e302f32322d3332203d3e20323634323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:2d:eb:2f:a2:33:d1:73:0e:99:26:be:7d:1d:c8:59:0d:
         5c:f7:10:7c:2b:78:36:5f:be:16:af:9b:99:a1:2b:9d:20:e0:
         c1:ba:03:e7:53:1b:71:90:4c:e3:8b:92:59:86:e6:19:6a:5b:
         e4:25:d8:65:f8:e7:ec:bb:f9:e8:1e:48:97:06:7b:3d:04:19:
         f7:0f:6b:48:a0:19:20:20:c7:73:fd:b8:f6:38:f3:3f:64:6d:
         52:77:8e:fd:2e:5f:fb:47:18:5f:77:29:5d:ef:bc:f2:4b:40:
         07:d7:49:af:aa:b1:4a:30:9b:96:18:cd:45:d5:d4:2f:72:e4:
         55:97:d8:d5:ca:f3:f1:c8:b8:31:84:55:45:f4:ba:24:12:21:
         dc:0e:28:b5:84:c2:ac:f3:64:e1:b0:9d:2c:c3:8c:d4:72:c0:
         65:93:b1:52:fe:48:14:25:65:e6:8b:52:63:b3:87:c0:14:c8:
         dd:75:2e:24:e3:dd:1e:0b:92:c3:7f:19:15:a8:76:8f:3b:59:
         e8:f7:13:c9:c2:a9:1d:4f:1b:87:d6:88:31:30:88:67:87:ff:
         b0:87:84:19:9a:d5:ab:f5:d0:26:7f:5b:b7:7d:d0:2b:96:7e:
         29:5e:a2:a9:5f:29:34:4f:79:a4:e2:58:ba:18:89:92:f8:94:
         63:21:74:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHdCkaTj+4HV+dRnXEccZ1+rovmkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUFDM0FFMEFBQTQ3QjMxNUEzOUM4M0MxODQwMDc4RjYz
NUM1NjE2OTAeFw0yNjA3MzExNDQxMThaFw0yNzA3MzAxNDQ2MThaMDMxMTAvBgNV
BAMTKDRGNjM3MjI3QjczOEU5NkE3MDVCQjAwM0IxMDAwNzE4OEI1QTUyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIHTxiS1umNavrmf7c8dA/aff
6xKLVccgNJY7WhcJQSTKB9PVG5rR4XITfvOLPCtkk+2nzURZdj8WMRavkOjgN72f
2FxVplg6KH7/plBlaC4LLtRtxQIrmTGhMU5WLCIfisM/pMBWWAhed/jvhHl7Eh/N
4YEFjvu+Sp4BtpG1ej28JJ8ZyEMC9+Fkx4f6/JySjG6qyJHJ8mPAWYSkNBYEwXFu
YCot9w60lYUmdR9iW6SveRy+yZF0ysDV89hircJYjF6fYdE4/zH2Z0taenbHipZf
UNL7W2dP4xIHGeSDl3Y41Qq9rgiwQ/RwpOthybSz1kQ7S7Q2jZKrcgUrVp9hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUT2NyJ7c46WpwW7ADsQAHGItaUq8wHwYDVR0j
BBgwFoAUGsOuCqpHsxWjnIPBhAB49jXFYWkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkVKWkhTYXBwcnVnbnkzdm52OUJjNFphdFJDZkZrU3k2SnM2OHlSb3VT
TkMvMC8xQUMzQUUwQUFBNDdCMzE1QTM5QzgzQzE4NDAwNzhGNjM1QzU2MTY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFBQzNBRTBBQUE0N0IzMTVB
MzlDODNDMTg0MDA3OEY2MzVDNTYxNjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pFSlpIU2FwcHJ1Z255M3ZudjlCYzRaYXRSQ2ZGa1N5NkpzNjh5Um91U05DLzAv
MzEzNzMwMmUzMjM0MzUyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9UQwDQYJKoZIhvcNAQELBQADggEBAIeNLesv
ojPRcw6ZJr59HchZDVz3EHwreDZfvhavm5mhK50g4MG6A+dTG3GQTOOLklmG5hlq
W+Ql2GX45+y7+egeSJcGez0EGfcPa0igGSAgx3P9uPY48z9kbVJ3jv0uX/tHGF93
KV3vvPJLQAfXSa+qsUowm5YYzUXV1C9y5FWX2NXK8/HIuDGEVUX0uiQSIdwOKLWE
wqzzZOGwnSzDjNRywGWTsVL+SBQlZeaLUmOzh8AUyN11LiTj3R4LksN/GRWodo87
Wej3E8nCqR1PG4fWiDEwiGeH/7CHhBma1av10CZ/W7d90CuWfileoqlfKTRPeaTi
WLoYiZL4lGMhdAI=
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:12:21 2026 by rpki-client