Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa
File:                     3137372e3132352e37332e302f32342d3234203d3e203532373636.roa (raw, json)
Hash identifier:          CVEdJbuSDwFz1t6sgI8Kx99XMaOFFaLDGC7DFuQ9hlc=
Subject key identifier:   1F:24:60:67:3A:D9:F6:B4:BB:F2:1F:5A:E1:9A:F1:27:C6:DA:2C:29
Certificate issuer:       /CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
Certificate serial:       5F006A51953040E5A97D767CA432346727F17B8F
Authority key identifier: DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa
Signing time:             Fri 13 Mar 2026 14:18:56 +0000
ROA not before:           Fri 13 Mar 2026 14:13:56 +0000
ROA not after:            Fri 12 Mar 2027 14:18:56 +0000
asID:                     52766
IP address blocks:        177.125.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl
                          rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 19:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:00:6a:51:95:30:40:e5:a9:7d:76:7c:a4:32:34:67:27:f1:7b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE
        Validity
            Not Before: Mar 13 14:13:56 2026 GMT
            Not After : Mar 12 14:18:56 2027 GMT
        Subject: CN=1F2460673AD9F6B4BBF21F5AE19AF127C6DA2C29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:28:17:42:f5:10:24:3f:db:b7:b7:ce:46:
                    de:6c:bc:e8:ab:ae:f0:73:14:e9:b0:77:48:69:2b:
                    7f:dc:02:03:7e:fa:a4:d4:76:5d:f4:01:00:04:6f:
                    5f:86:5a:88:4e:fb:ee:c0:49:fe:c9:3b:3f:42:e0:
                    ea:55:85:6f:07:b1:c9:a0:6b:ae:4c:12:0d:a7:0b:
                    bf:2a:46:67:2b:34:9c:28:9b:bf:24:af:11:d0:20:
                    65:9c:38:3b:ed:7c:4d:57:21:71:f6:c1:06:8e:bc:
                    44:40:43:50:8b:81:a1:92:84:4e:15:97:cb:50:cf:
                    9f:79:16:0f:ef:c1:83:1c:a2:f9:75:ec:ea:30:d9:
                    bd:cf:f3:2d:bc:1a:e5:96:0b:cd:fd:ba:12:08:d7:
                    b2:ab:58:3d:ab:75:0f:de:74:70:cb:f4:b6:75:9b:
                    16:51:7f:ea:71:fd:d3:76:63:4d:f6:96:fa:87:fc:
                    68:93:e0:83:0a:44:50:3d:ab:bf:f6:c1:be:bd:1e:
                    81:5c:8a:2b:e5:c6:d3:e9:ac:7f:9e:0e:bd:a1:8d:
                    f1:ff:80:d4:11:d1:6a:8b:9b:bc:3d:6b:2c:50:79:
                    d8:e3:a5:bd:7b:10:b9:a0:91:fe:69:d4:cb:b4:9e:
                    bb:37:66:94:dc:ce:d8:92:54:f3:09:00:42:94:14:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:60:67:3A:D9:F6:B4:BB:F2:1F:5A:E1:9A:F1:27:C6:DA:2C:29
            X509v3 Authority Key Identifier:
                keyid:DB:A9:BB:6F:D5:67:A5:08:3B:7B:A0:BB:07:CD:31:21:0F:3C:8B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBA9BB6FD567A5083B7BA0BB07CD31210F3C8BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CPPZuPjiuQBYkv3BaKVNqqK5t27ziqp9fhBWSSeEofV/0/3137372e3132352e37332e302f32342d3234203d3e203532373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0f:91:51:26:5f:53:68:cf:9d:37:6f:be:b6:0c:6d:a8:ce:
         6c:7e:61:a6:42:b6:6f:84:19:4f:82:3f:f0:29:28:5c:d5:45:
         6b:b1:54:39:45:e5:cf:c9:10:ae:c6:3d:e7:47:4a:f9:92:81:
         c2:dc:72:b6:f5:e0:d4:e5:fb:17:4d:80:97:b0:f9:72:36:0c:
         35:01:b8:aa:24:d2:b7:53:18:10:ed:d9:f7:15:d6:4d:4f:28:
         7a:c2:46:3e:bd:59:d1:e3:c9:c9:7e:91:fb:c4:11:85:12:05:
         99:97:07:9e:88:7a:4f:66:86:00:56:b3:77:d5:66:0d:12:b0:
         0a:45:22:6b:70:99:84:1f:30:24:c9:1d:15:e2:5b:f0:71:f6:
         8b:72:a3:30:cc:c1:e1:06:3e:d7:99:eb:6c:69:07:4b:f7:60:
         75:3c:be:91:70:e6:d3:ec:eb:3f:4c:51:60:c6:5c:07:58:7b:
         5a:ea:72:cd:25:25:92:4c:98:41:4e:45:24:bb:61:32:11:d5:
         c8:81:79:20:53:08:7e:e3:17:f1:66:6a:98:3c:85:29:e0:5e:
         27:fb:7b:61:b8:3f:f8:17:3b:33:3b:3d:73:bf:ec:0a:26:ab:
         77:70:1c:2f:33:38:5f:84:80:cd:2e:48:76:56:c4:eb:24:0a:
         dd:28:8d:45
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXwBqUZUwQOWpfXZ8pDI0Zyfxe48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJBOUJCNkZENTY3QTUwODNCN0JBMEJCMDdDRDMxMjEw
RjNDOEJFRTAeFw0yNjAzMTMxNDEzNTZaFw0yNzAzMTIxNDE4NTZaMDMxMTAvBgNV
BAMTKDFGMjQ2MDY3M0FEOUY2QjRCQkYyMUY1QUUxOUFGMTI3QzZEQTJDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JigXQvUQJD/bt7fORt5svOir
rvBzFOmwd0hpK3/cAgN++qTUdl30AQAEb1+GWohO++7ASf7JOz9C4OpVhW8Hscmg
a65MEg2nC78qRmcrNJwom78krxHQIGWcODvtfE1XIXH2wQaOvERAQ1CLgaGShE4V
l8tQz595Fg/vwYMcovl17Oow2b3P8y28GuWWC839uhII17KrWD2rdQ/edHDL9LZ1
mxZRf+px/dN2Y032lvqH/GiT4IMKRFA9q7/2wb69HoFciivlxtPprH+eDr2hjfH/
gNQR0WqLm7w9ayxQedjjpb17ELmgkf5p1Mu0nrs3ZpTcztiSVPMJAEKUFHKTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUHyRgZzrZ9rS78h9a4ZrxJ8baLCkwHwYDVR0j
BBgwFoAU26m7b9VnpQg7e6C7B80xIQ88i+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0NQUFp1UGppdVFCWWt2M0JhS1ZOcXFLNXQyN3ppcXA5ZmhCV1NTZUVv
ZlYvMC9EQkE5QkI2RkQ1NjdBNTA4M0I3QkEwQkIwN0NEMzEyMTBGM0M4QkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RCQTlCQjZGRDU2N0E1MDgz
QjdCQTBCQjA3Q0QzMTIxMEYzQzhCRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNDUFBadVBqaXVRQllrdjNCYUtWTnFxSzV0Mjd6aXFwOWZoQldTU2VFb2ZWLzAv
MzEzNzM3MmUzMTMyMzUyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX1JMA0GCSqGSIb3DQEBCwUAA4IBAQCiD5FRJl9T
aM+dN2++tgxtqM5sfmGmQrZvhBlPgj/wKShc1UVrsVQ5ReXPyRCuxj3nR0r5koHC
3HK29eDU5fsXTYCXsPlyNgw1AbiqJNK3UxgQ7dn3FdZNTyh6wkY+vVnR48nJfpH7
xBGFEgWZlweeiHpPZoYAVrN31WYNErAKRSJrcJmEHzAkyR0V4lvwcfaLcqMwzMHh
Bj7XmetsaQdL92B1PL6RcObT7Os/TFFgxlwHWHta6nLNJSWSTJhBTkUku2EyEdXI
gXkgUwh+4xfxZmqYPIUp4F4n+3thuD/4FzszOz1zv+wKJqt3cBwvMzhfhIDNLkh2
VsTrJArdKI1F
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:17:00 2026 by rpki-client