Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa
File:                     3137372e39332e3139322e302f31392d3234203d3e203533303735.roa (raw, json)
Hash identifier:          teDhKsfze6ZhAYVfbrl2Pf4B+Xkf3FdiUBib6dQP6bU=
Subject key identifier:   AC:73:B6:49:BE:EF:2B:1C:36:E7:F7:73:99:E1:2D:7B:A4:D3:AA:94
Certificate issuer:       /CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
Certificate serial:       708F0DAFCC8CDE87136F54972E5596E50C283A75
Authority key identifier: AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa
Signing time:             Wed 14 Oct 2026 00:00:15 +0000
ROA not before:           Tue 13 Oct 2026 23:55:15 +0000
ROA not after:            Wed 13 Oct 2027 00:00:15 +0000
asID:                     53075
IP address blocks:        177.93.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl
                          rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 10:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:8f:0d:af:cc:8c:de:87:13:6f:54:97:2e:55:96:e5:0c:28:3a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB13EC0D6D610051E770A7056856BDE9A8A2CA21
        Validity
            Not Before: Oct 13 23:55:15 2026 GMT
            Not After : Oct 13 00:00:15 2027 GMT
        Subject: CN=AC73B649BEEF2B1C36E7F77399E12D7BA4D3AA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:41:64:44:11:a5:ed:1a:a6:cf:61:cb:2f:
                    e8:50:26:c8:24:02:ed:ab:58:c9:eb:fd:d0:0a:9d:
                    c3:c4:bb:55:63:eb:07:18:72:d6:fd:90:39:3d:58:
                    bd:1b:8e:56:cb:22:aa:56:71:0a:61:a7:17:fb:2f:
                    71:29:86:e7:09:30:f2:c3:53:0a:26:c5:c1:e7:e5:
                    9f:c4:40:33:9f:a1:0c:1a:7c:52:cc:e2:7a:4b:c5:
                    37:d0:bf:01:a3:48:29:3a:73:94:de:ca:37:65:a7:
                    ee:4d:8b:fa:be:bd:3e:a8:92:c0:ad:05:3f:18:e0:
                    47:01:3b:e9:d2:7b:60:63:fc:33:47:76:a7:70:74:
                    e2:71:10:43:bf:f5:3a:6e:64:dc:a7:eb:06:c8:c1:
                    1f:be:e1:1c:09:4b:a3:d4:2e:6a:9c:e9:2a:84:c6:
                    59:c1:0c:50:31:6b:a1:28:b6:ed:a3:25:ef:64:8b:
                    47:fe:20:39:a0:d6:25:0e:f6:84:90:38:01:47:52:
                    51:99:77:c1:bb:c4:11:86:85:16:da:fe:c4:8d:11:
                    c0:23:ef:28:be:c5:51:4e:a6:9a:9b:5f:2e:5e:7c:
                    4f:b1:47:ef:59:ed:e9:96:85:43:fe:f9:37:3f:ba:
                    36:58:0d:84:ba:c7:98:a6:d0:d1:c0:8d:f7:c2:d3:
                    41:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:73:B6:49:BE:EF:2B:1C:36:E7:F7:73:99:E1:2D:7B:A4:D3:AA:94
            X509v3 Authority Key Identifier:
                keyid:AB:13:EC:0D:6D:61:00:51:E7:70:A7:05:68:56:BD:E9:A8:A2:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB13EC0D6D610051E770A7056856BDE9A8A2CA21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/32Lr825WA6utmJPbsKShRgMgy4mYVcTtyKVZJiUTKU6A/0/3137372e39332e3139322e302f31392d3234203d3e203533303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:84:17:c7:60:48:08:a8:e7:7c:05:46:3c:2a:47:21:0f:e8:
         50:46:13:5e:2c:c7:66:8f:d8:67:c8:c0:3c:54:d6:e3:66:f2:
         8a:c0:98:e4:1b:6e:3d:a4:b7:68:8f:b9:e6:62:d3:50:41:20:
         16:88:37:e2:04:8e:7b:3d:02:1c:53:21:27:da:23:56:99:38:
         37:94:01:d4:43:41:cc:34:d0:6c:95:7c:a4:9b:bf:ec:b4:1f:
         f9:3a:fa:98:5b:91:62:df:36:16:bd:45:96:ca:67:e2:61:3b:
         a5:da:c6:ee:72:d0:3d:65:72:8a:b6:9c:2a:74:f0:2a:9d:24:
         ef:f2:f9:b9:d9:d5:4a:dd:e5:66:c9:d2:8a:0f:14:26:f1:e5:
         6c:54:a5:fd:4b:26:81:30:0f:b1:b5:86:a8:39:b5:ea:5d:61:
         0b:1d:ea:49:3b:73:2d:96:15:4f:08:1d:37:4c:83:45:bc:bb:
         da:2a:03:e2:89:09:83:93:47:8d:de:0e:b3:1a:a0:e9:31:f6:
         ca:63:b2:27:02:b5:c5:ae:03:86:83:fd:23:90:99:92:36:5f:
         4d:77:b5:e1:a6:52:fb:27:16:92:ca:98:dd:fb:e7:d6:a1:95:
         58:29:a7:1a:4b:18:4e:f0:01:f4:2a:6d:e2:5a:ad:25:9f:87:
         30:a2:13:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcI8Nr8yM3ocTb1SXLlWW5QwoOnUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUIxM0VDMEQ2RDYxMDA1MUU3NzBBNzA1Njg1NkJERTlB
OEEyQ0EyMTAeFw0yNjEwMTMyMzU1MTVaFw0yNzEwMTMwMDAwMTVaMDMxMTAvBgNV
BAMTKEFDNzNCNjQ5QkVFRjJCMUMzNkU3Rjc3Mzk5RTEyRDdCQTREM0FBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMUFkRBGl7Rqmz2HLL+hQJsgk
Au2rWMnr/dAKncPEu1Vj6wcYctb9kDk9WL0bjlbLIqpWcQphpxf7L3EphucJMPLD
UwomxcHn5Z/EQDOfoQwafFLM4npLxTfQvwGjSCk6c5Teyjdlp+5Ni/q+vT6oksCt
BT8Y4EcBO+nSe2Bj/DNHdqdwdOJxEEO/9TpuZNyn6wbIwR++4RwJS6PULmqc6SqE
xlnBDFAxa6Eotu2jJe9ki0f+IDmg1iUO9oSQOAFHUlGZd8G7xBGGhRba/sSNEcAj
7yi+xVFOppqbXy5efE+xR+9Z7emWhUP++Tc/ujZYDYS6x5im0NHAjffC00ELAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrHO2Sb7vKxw25/dzmeEte6TTqpQwHwYDVR0j
BBgwFoAUqxPsDW1hAFHncKcFaFa96aiiyiEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzJMcjgyNVdBNnV0bUpQYnNLU2hSZ01neTRtWVZjVHR5S1ZaSmlVVEtV
NkEvMC9BQjEzRUMwRDZENjEwMDUxRTc3MEE3MDU2ODU2QkRFOUE4QTJDQTIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FCMTNFQzBENkQ2MTAwNTFF
NzcwQTcwNTY4NTZCREU5QThBMkNBMjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzMyTHI4MjVXQTZ1dG1KUGJzS1NoUmdNZ3k0bVlWY1R0eUtWWkppVVRLVTZBLzAv
MzEzNzM3MmUzOTMzMmUzMTM5MzIyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFsV3AMA0GCSqGSIb3DQEBCwUAA4IBAQCZhBfHYEgI
qOd8BUY8KkchD+hQRhNeLMdmj9hnyMA8VNbjZvKKwJjkG249pLdoj7nmYtNQQSAW
iDfiBI57PQIcUyEn2iNWmTg3lAHUQ0HMNNBslXykm7/stB/5OvqYW5Fi3zYWvUWW
ymfiYTul2sbuctA9ZXKKtpwqdPAqnSTv8vm52dVK3eVmydKKDxQm8eVsVKX9SyaB
MA+xtYaoObXqXWELHepJO3MtlhVPCB03TINFvLvaKgPiiQmDk0eN3g6zGqDpMfbK
Y7InArXFrgOGg/0jkJmSNl9Nd7XhplL7JxaSypjd++fWoZVYKacaSxhO8AH0Km3i
Wq0ln4cwohPb
-----END CERTIFICATE-----
Generated at Mon Oct 26 21:42:22 2026 by rpki-client