Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          hermyPrDQvCSzpsIdq1sxSBoTlAgpexhdHFHseBP6lg=
Subject key identifier:   55:A0:12:BB:A7:36:05:F3:05:96:72:A2:D8:34:78:C4:B3:F9:BB:52
Certificate issuer:       /CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
Certificate serial:       3ABD66A9E72DCE77594A28A1FB313B28911432E7
Authority key identifier: C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
Signing time:             Wed 26 Aug 2026 15:48:17 +0000
ROA not before:           Wed 26 Aug 2026 15:43:17 +0000
ROA not after:            Wed 25 Aug 2027 15:48:17 +0000
asID:                     262393
IP address blocks:        177.190.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl
                          rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 23:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bd:66:a9:e7:2d:ce:77:59:4a:28:a1:fb:31:3b:28:91:14:32:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5
        Validity
            Not Before: Aug 26 15:43:17 2026 GMT
            Not After : Aug 25 15:48:17 2027 GMT
        Subject: CN=55A012BBA73605F3059672A2D83478C4B3F9BB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2e:41:4e:eb:13:82:1d:be:72:1d:10:22:1d:
                    c6:80:69:b7:e8:ce:b3:0f:29:f5:35:d5:58:af:0f:
                    22:3a:9a:e6:91:57:b6:8b:eb:0b:85:88:35:f7:28:
                    e7:23:70:34:c8:03:aa:54:ec:9f:db:13:37:29:ff:
                    7d:93:e9:b0:27:2b:f1:48:2e:50:e1:7b:fa:12:14:
                    f4:3e:13:be:28:96:c7:0a:8b:ed:ae:03:f2:7b:07:
                    7c:3b:93:f1:45:8c:63:4a:64:33:79:d3:43:b4:ca:
                    ca:17:e6:5c:4b:af:1b:cd:f2:63:d1:6c:d0:25:22:
                    db:5e:ea:d0:df:8d:c7:2e:18:0e:d5:bb:26:7c:6a:
                    24:84:34:09:0f:88:64:7d:0b:4a:93:4a:da:30:97:
                    46:56:ba:c7:76:4a:fc:29:61:1a:85:01:70:42:99:
                    d7:42:4a:27:2c:ed:f6:f9:86:27:56:54:90:cc:5b:
                    23:4e:0d:ab:eb:85:0e:ed:05:a4:d7:1c:73:81:85:
                    ce:76:e9:82:f5:90:68:f7:99:2a:f2:d2:fc:77:20:
                    52:4a:d7:7d:b1:90:5c:33:43:91:af:7c:9d:ca:fd:
                    92:f6:5c:d4:06:ff:02:7c:e9:5e:53:51:cb:0a:94:
                    58:ee:e3:e2:94:3c:3e:d9:1f:e3:2a:da:26:ba:0d:
                    e0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A0:12:BB:A7:36:05:F3:05:96:72:A2:D8:34:78:C4:B3:F9:BB:52
            X509v3 Authority Key Identifier:
                keyid:C8:BB:1F:3C:7B:10:67:76:97:D3:67:58:61:F5:8E:C5:E4:C4:B1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8BB1F3C7B10677697D3675861F58EC5E4C4B1E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/1/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:7b:15:00:f7:e3:dc:0d:fa:16:4f:3e:64:39:75:32:52:
         85:07:22:99:63:14:47:57:a1:27:91:8c:a4:3e:ad:d9:1d:db:
         f3:72:4c:7a:6e:48:1b:ac:50:19:e1:67:fe:55:b7:df:18:3d:
         e7:b5:20:03:a4:11:41:8c:cf:ea:75:55:da:cf:8e:ca:59:9d:
         e8:f9:87:12:0a:8c:86:ad:81:e8:4a:17:3b:0c:42:15:a1:32:
         14:68:86:07:f2:64:77:5a:63:2f:e6:6b:d7:16:3d:7a:d9:dd:
         3e:e6:96:ee:00:ea:08:45:cf:09:1d:92:9b:4d:ba:c1:e4:6b:
         4b:81:88:b6:06:ae:ac:2e:cb:5d:2c:64:69:3e:37:5f:12:2d:
         3c:5b:0d:80:0f:a9:47:95:d2:d2:2e:3f:76:e5:63:53:0a:2b:
         4a:07:93:d0:08:bc:c9:31:e7:3f:05:f4:01:d3:36:10:c4:2f:
         25:2d:5a:a1:69:07:aa:7e:87:87:17:56:d8:d9:a4:4f:b0:c6:
         01:57:f3:c4:38:31:48:ca:61:89:2b:11:09:f4:f2:7c:31:5a:
         12:18:b0:cb:8b:6d:d0:4e:44:00:aa:bc:78:ac:6d:33:c9:7a:
         71:96:71:e0:7f:0f:56:03:f2:76:06:e9:25:96:2a:9b:e8:1c:
         f4:b7:26:93
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOr1mqectzndZSiih+zE7KJEUMucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhCQjFGM0M3QjEwNjc3Njk3RDM2NzU4NjFGNThFQzVF
NEM0QjFFNTAeFw0yNjA4MjYxNTQzMTdaFw0yNzA4MjUxNTQ4MTdaMDMxMTAvBgNV
BAMTKDU1QTAxMkJCQTczNjA1RjMwNTk2NzJBMkQ4MzQ3OEM0QjNGOUJCNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLkFO6xOCHb5yHRAiHcaAabfo
zrMPKfU11VivDyI6muaRV7aL6wuFiDX3KOcjcDTIA6pU7J/bEzcp/32T6bAnK/FI
LlDhe/oSFPQ+E74olscKi+2uA/J7B3w7k/FFjGNKZDN500O0ysoX5lxLrxvN8mPR
bNAlItte6tDfjccuGA7VuyZ8aiSENAkPiGR9C0qTStowl0ZWusd2SvwpYRqFAXBC
mddCSics7fb5hidWVJDMWyNODavrhQ7tBaTXHHOBhc526YL1kGj3mSry0vx3IFJK
132xkFwzQ5GvfJ3K/ZL2XNQG/wJ86V5TUcsKlFju4+KUPD7ZH+Mq2ia6DeBBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVaASu6c2BfMFlnKi2DR4xLP5u1IwHwYDVR0j
BBgwFoAUyLsfPHsQZ3aX02dYYfWOxeTEseUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMS9DOEJCMUYzQzdCMTA2Nzc2OTdEMzY3NTg2MUY1OEVDNUU0QzRCMUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4QkIxRjNDN0IxMDY3NzY5
N0QzNjc1ODYxRjU4RUM1RTRDNEIxRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzEv
MzEzNzM3MmUzMTM5MzAyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALG+8DANBgkqhkiG9w0BAQsFAAOCAQEAU297
FQD349wN+hZPPmQ5dTJShQcimWMUR1ehJ5GMpD6t2R3b83JMem5IG6xQGeFn/lW3
3xg957UgA6QRQYzP6nVV2s+Oylmd6PmHEgqMhq2B6EoXOwxCFaEyFGiGB/Jkd1pj
L+Zr1xY9etndPuaW7gDqCEXPCR2Sm026weRrS4GItgaurC7LXSxkaT43XxItPFsN
gA+pR5XS0i4/duVjUworSgeT0Ai8yTHnPwX0AdM2EMQvJS1aoWkHqn6HhxdW2Nmk
T7DGAVfzxDgxSMphiSsRCfTyfDFaEhiwy4tt0E5EAKq8eKxtM8l6cZZx4H8PVgPy
dgbpJZYqm+gc9Lcmkw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:30:33 2026 by rpki-client