Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa
File:                     3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa (raw, json)
Hash identifier:          LgEabzAuCRjlATA/NBN/4Y8DQgT+Ty6j2mkvmicrVqs=
Subject key identifier:   79:32:55:0D:55:E1:DB:EF:71:44:FE:64:22:A9:0F:A7:5D:5B:0D:65
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       2641421AC27F3CC8483077D1659E6E6B2E52BEAA
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:05 +0000
ROA not before:           Fri 14 Aug 2026 17:51:05 +0000
ROA not after:            Fri 13 Aug 2027 17:56:05 +0000
asID:                     264886
IP address blocks:        179.108.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 08:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:41:42:1a:c2:7f:3c:c8:48:30:77:d1:65:9e:6e:6b:2e:52:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:05 2026 GMT
            Not After : Aug 13 17:56:05 2027 GMT
        Subject: CN=7932550D55E1DBEF7144FE6422A90FA75D5B0D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:b4:b9:71:52:d0:10:5a:40:01:00:96:16:
                    32:e1:e6:d6:a0:61:54:bf:dc:a5:14:36:44:8d:d5:
                    e6:0f:1e:57:03:96:e9:3c:b2:38:18:a3:fd:a4:75:
                    76:97:6f:a3:6e:ca:dc:34:e7:fc:42:68:ac:dd:8c:
                    9c:bc:13:3e:99:72:e3:0f:19:c3:fd:46:f0:11:9b:
                    ca:d9:8d:d7:18:d8:da:61:20:b2:ec:1a:4b:7d:a1:
                    bf:e5:38:be:44:b5:e7:72:20:c9:e4:fe:a3:f6:5e:
                    0e:7c:d0:b5:51:9d:19:00:a2:5a:80:57:34:1c:97:
                    6f:04:b2:ca:46:08:1b:45:8a:9d:b2:10:26:24:36:
                    99:fd:03:ee:7e:e2:72:20:c7:7a:a5:e1:0e:63:ba:
                    40:b1:83:10:81:25:79:11:18:98:3a:fd:f4:8e:33:
                    c3:85:1d:d9:89:0a:d8:b7:6b:1b:6a:32:bd:0a:93:
                    83:bc:d6:58:54:87:74:bb:6a:11:ca:66:f1:02:10:
                    88:df:6e:5b:82:df:73:d7:7e:0a:40:a8:e3:31:be:
                    9f:00:58:a7:01:89:41:ef:8b:f8:24:79:88:5e:f9:
                    1b:89:9b:b0:35:af:a7:9a:86:ad:ef:2a:47:7c:8c:
                    1e:5c:ff:b2:18:c8:12:f9:16:b1:3c:32:5e:88:14:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:32:55:0D:55:E1:DB:EF:71:44:FE:64:22:A9:0F:A7:5D:5B:0D:65
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34362e302f32332d3233203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:c6:a6:1f:0e:48:d1:f6:e9:05:33:1f:2d:48:48:eb:b1:
         0f:e5:40:aa:97:0e:48:91:66:4b:d4:f7:1d:e9:3f:c9:92:57:
         bf:f6:d3:4a:8a:3c:00:2d:63:29:c6:4a:c5:30:6c:c6:70:c2:
         b7:6f:6e:6c:f7:de:27:cb:ea:02:f6:e2:35:09:65:42:18:76:
         03:02:bf:55:b3:c5:09:19:ef:4e:24:4b:a8:b9:a4:10:6b:29:
         14:4b:29:79:e4:30:b5:6d:37:74:50:0a:0a:f4:de:20:2e:3b:
         4a:62:7a:d9:85:20:10:17:5d:2c:16:dc:c3:a2:96:11:31:d8:
         e9:48:ab:4d:91:c0:a1:f8:a8:fd:20:4e:2c:dd:81:3e:01:75:
         c5:4b:1f:2b:f6:4d:bc:51:09:13:79:6f:8e:65:38:8e:b2:81:
         85:86:35:c4:83:e0:88:60:21:09:d7:b0:f8:c6:04:fb:19:1f:
         0f:e5:02:9b:4f:a9:e6:39:f5:c6:7f:84:f6:3d:d5:3f:0c:a0:
         fa:01:64:2b:00:74:55:d8:0c:0e:a9:3f:fa:c2:66:59:52:a1:
         d8:2b:93:ed:93:7f:d6:54:0f:57:84:20:72:69:e2:ce:99:cb:
         b6:08:f7:fb:fa:3e:67:88:96:96:b7:b9:f4:26:41:fa:99:39:
         1e:ff:25:ba
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUJkFCGsJ/PMhIMHfRZZ5uay5SvqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4
NUQ2M0REMjAeFw0yNjA4MTQxNzUxMDVaFw0yNzA4MTMxNzU2MDVaMDMxMTAvBgNV
BAMTKDc5MzI1NTBENTVFMURCRUY3MTQ0RkU2NDIyQTkwRkE3NUQ1QjBENjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGRLS5cVLQEFpAAQCWFjLh5tag
YVS/3KUUNkSN1eYPHlcDluk8sjgYo/2kdXaXb6Nuytw05/xCaKzdjJy8Ez6ZcuMP
GcP9RvARm8rZjdcY2NphILLsGkt9ob/lOL5EtedyIMnk/qP2Xg580LVRnRkAolqA
VzQcl28EsspGCBtFip2yECYkNpn9A+5+4nIgx3ql4Q5jukCxgxCBJXkRGJg6/fSO
M8OFHdmJCti3axtqMr0Kk4O81lhUh3S7ahHKZvECEIjfbluC33PXfgpAqOMxvp8A
WKcBiUHvi/gkeYhe+RuJm7A1r6eahq3vKkd8jB5c/7IYyBL5FrE8Ml6IFOC5AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUeTJVDVXh2+9xRP5kIqkPp11bDWUwHwYDVR0j
BBgwFoAUCbdPWuCpyWhwWc+QV1enA4XWPdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzAvMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4NUQ2M0REMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wOUI3NEY1QUUwQTlDOTY4NzA1
OUNGOTA1NzU3QTcwMzg1RDYzREQyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzAvMzEz
NzM5MmUzMTMwMzgyZTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGzbC4wDQYJKoZIhvcNAQELBQADggEBAI4dxqYfDkjR
9ukFMx8tSEjrsQ/lQKqXDkiRZkvU9x3pP8mSV7/200qKPAAtYynGSsUwbMZwwrdv
bmz33ifL6gL24jUJZUIYdgMCv1WzxQkZ704kS6i5pBBrKRRLKXnkMLVtN3RQCgr0
3iAuO0pietmFIBAXXSwW3MOilhEx2OlIq02RwKH4qP0gTizdgT4BdcVLHyv2TbxR
CRN5b45lOI6ygYWGNcSD4IhgIQnXsPjGBPsZHw/lAptPqeY59cZ/hPY91T8MoPoB
ZCsAdFXYDA6pP/rCZllSodgrk+2Tf9ZUD1eEIHJp4s6Zy7YI9/v6PmeIlpa3ufQm
QfqZOR7/Jbo=
-----END CERTIFICATE-----
Generated at Wed Aug 26 19:53:42 2026 by rpki-client