Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32342d3234203d3e20323731323435.roa
File:                     3137302e3234372e3138362e302f32342d3234203d3e20323731323435.roa (raw, json)
Hash identifier:          rHisK/QnPsxXqdR+ZUot2fIUOVjvZ/QZxYOP5C41x/w=
Subject key identifier:   B6:50:F3:32:0D:FB:07:C1:9F:79:27:66:26:A8:C0:36:A8:EB:BC:1D
Certificate issuer:       /CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
Certificate serial:       4AEE73245FEF7FF3CEC09C577C898FAD23442179
Authority key identifier: 8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32342d3234203d3e20323731323435.roa
Signing time:             Sat 18 Apr 2026 22:52:49 +0000
ROA not before:           Sat 18 Apr 2026 22:47:49 +0000
ROA not after:            Sat 17 Apr 2027 22:52:49 +0000
asID:                     271245
IP address blocks:        170.247.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl
                          rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ee:73:24:5f:ef:7f:f3:ce:c0:9c:57:7c:89:8f:ad:23:44:21:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D39F8CCB33329EF8E9212724B977C9857DAFBC4
        Validity
            Not Before: Apr 18 22:47:49 2026 GMT
            Not After : Apr 17 22:52:49 2027 GMT
        Subject: CN=B650F3320DFB07C19F79276626A8C036A8EBBC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:0e:51:60:64:10:44:12:ae:78:fb:a2:4c:
                    6c:5e:30:88:a6:98:e1:ac:f3:9f:d0:ce:49:1e:9f:
                    28:bd:f5:a1:ee:2d:89:01:a0:c8:c0:95:6a:60:e2:
                    90:1e:52:98:2a:9f:ea:3f:e5:e3:00:70:11:f6:4d:
                    43:8b:33:2b:fa:55:bc:19:e3:2d:05:e2:72:f1:78:
                    fa:08:5b:86:31:2e:70:ca:5f:63:53:a8:1a:a7:c5:
                    66:c9:05:eb:aa:cc:f3:19:0d:f0:1c:58:42:fe:f1:
                    c9:d7:78:15:05:5b:49:c8:f6:a1:ca:3a:1c:24:fb:
                    c2:7e:91:62:fc:28:20:5e:78:20:b5:31:21:f9:9f:
                    f0:ec:1a:23:f4:e8:0d:cf:d3:38:17:44:1e:8e:e4:
                    65:bf:1a:9b:2e:12:b4:7a:73:72:ed:86:c3:ae:ae:
                    6f:09:b1:1b:f9:f1:5e:53:3c:a2:4d:12:d1:c3:e4:
                    4e:ee:41:b2:c6:2d:e3:4a:64:b6:75:35:27:a6:2d:
                    c5:83:88:04:65:9a:df:ad:9f:ea:d6:48:3b:b7:d0:
                    29:82:78:21:97:27:ff:0c:aa:02:ac:2b:52:1e:d6:
                    8a:bd:ba:f9:11:d2:77:32:98:31:cf:71:76:64:1c:
                    5b:06:b2:93:e2:ce:32:a6:13:73:61:94:2d:18:55:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:50:F3:32:0D:FB:07:C1:9F:79:27:66:26:A8:C0:36:A8:EB:BC:1D
            X509v3 Authority Key Identifier:
                keyid:8D:39:F8:CC:B3:33:29:EF:8E:92:12:72:4B:97:7C:98:57:DA:FB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D39F8CCB33329EF8E9212724B977C9857DAFBC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gJSbxrS3rs6XAe8LXx7XFZzxWg1kMmriuDMWpsHKhTv/0/3137302e3234372e3138362e302f32342d3234203d3e20323731323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d9:39:29:6d:6b:1b:9e:7f:1a:37:e8:52:a3:a7:06:dc:d7:14:
         44:6b:ef:cb:39:4b:22:cc:fe:34:7a:47:96:1c:38:ba:81:04:
         70:28:1f:94:3a:e1:54:83:18:d5:60:31:04:24:89:d0:81:bd:
         18:c2:d1:60:b5:28:74:f1:bb:7a:3a:31:2c:76:21:52:a5:21:
         93:87:7c:89:a6:28:05:7d:16:14:8b:12:e6:af:59:18:73:f3:
         f6:dd:b0:0f:ff:d9:2c:a0:d7:cd:cd:e0:be:c2:ae:71:53:49:
         b5:59:25:c1:ca:c4:c6:94:9d:f6:6c:c8:a2:53:0e:ca:7f:70:
         3b:37:46:9d:f1:5d:a5:24:64:6b:a7:42:1b:db:2e:ab:f1:ec:
         50:9c:8e:76:0e:7e:18:28:db:15:aa:46:c3:73:c4:f3:06:00:
         82:24:ed:f4:5e:23:84:b9:59:5d:60:20:a1:2c:f9:07:08:25:
         b2:57:f9:eb:dc:4f:46:f3:50:0a:ba:d5:46:d8:ca:88:d9:fe:
         a5:5b:20:08:3e:81:c8:ba:d6:51:6a:81:74:49:52:b5:db:80:
         d6:cd:e3:a6:e0:f5:ce:b5:6e:63:98:67:74:dd:f8:28:6e:e9:
         b9:9c:f1:65:e8:3f:8c:4a:79:2f:9d:c8:1b:de:7f:7f:52:9f:
         f6:50:61:f1
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSu5zJF/vf/POwJxXfImPrSNEIXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQzOUY4Q0NCMzMzMjlFRjhFOTIxMjcyNEI5NzdDOTg1
N0RBRkJDNDAeFw0yNjA0MTgyMjQ3NDlaFw0yNzA0MTcyMjUyNDlaMDMxMTAvBgNV
BAMTKEI2NTBGMzMyMERGQjA3QzE5Rjc5Mjc2NjI2QThDMDM2QThFQkJDMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNzg5RYGQQRBKuePuiTGxeMIim
mOGs85/Qzkkenyi99aHuLYkBoMjAlWpg4pAeUpgqn+o/5eMAcBH2TUOLMyv6VbwZ
4y0F4nLxePoIW4YxLnDKX2NTqBqnxWbJBeuqzPMZDfAcWEL+8cnXeBUFW0nI9qHK
Ohwk+8J+kWL8KCBeeCC1MSH5n/DsGiP06A3P0zgXRB6O5GW/GpsuErR6c3LthsOu
rm8JsRv58V5TPKJNEtHD5E7uQbLGLeNKZLZ1NSemLcWDiARlmt+tn+rWSDu30CmC
eCGXJ/8MqgKsK1Ie1oq9uvkR0ncymDHPcXZkHFsGspPizjKmE3NhlC0YVc8LAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUtlDzMg37B8GfeSdmJqjANqjrvB0wHwYDVR0j
BBgwFoAUjTn4zLMzKe+OkhJyS5d8mFfa+8QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmdKU2J4clMzcnM2WEFlOExYeDdYRlp6eFdnMWtNbXJpdURNV3BzSEto
VHYvMC84RDM5RjhDQ0IzMzMyOUVGOEU5MjEyNzI0Qjk3N0M5ODU3REFGQkM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEMzlGOENDQjMzMzI5RUY4
RTkyMTI3MjRCOTc3Qzk4NTdEQUZCQzQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnSlNieHJTM3JzNlhBZThMWHg3WEZaenhXZzFrTW1yaXVETVdwc0hLaFR2LzAv
MzEzNzMwMmUzMjM0MzcyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTMyMzQzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr3ujANBgkqhkiG9w0BAQsFAAOCAQEA2Tkp
bWsbnn8aN+hSo6cG3NcURGvvyzlLIsz+NHpHlhw4uoEEcCgflDrhVIMY1WAxBCSJ
0IG9GMLRYLUodPG7ejoxLHYhUqUhk4d8iaYoBX0WFIsS5q9ZGHPz9t2wD//ZLKDX
zc3gvsKucVNJtVklwcrExpSd9mzIolMOyn9wOzdGnfFdpSRka6dCG9suq/HsUJyO
dg5+GCjbFapGw3PE8wYAgiTt9F4jhLlZXWAgoSz5Bwglslf569xPRvNQCrrVRtjK
iNn+pVsgCD6ByLrWUWqBdElStduA1s3jpuD1zrVuY5hndN34KG7puZzxZeg/jEp5
L53IG95/f1Kf9lBh8Q==
-----END CERTIFICATE-----
Generated at Wed May 13 17:00:50 2026 by rpki-client