Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3137372e35352e3136302e302f32322d3232203d3e20323632353037.roa
File:                     3137372e35352e3136302e302f32322d3232203d3e20323632353037.roa (raw, json)
Hash identifier:          4FDY0PGDlp3dWoy+Wn3vi2MrM+elsJwEZQC3eFw2sxA=
Subject key identifier:   50:E3:DD:7B:15:3A:42:FE:5D:7E:65:D9:74:5E:12:ED:F4:6E:AC:F8
Certificate issuer:       /CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
Certificate serial:       0EA0F759CE6DCF47F5B69B3505670B44DA312238
Authority key identifier: 3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3137372e35352e3136302e302f32322d3232203d3e20323632353037.roa
Signing time:             Mon 14 Sep 2026 10:58:02 +0000
ROA not before:           Mon 14 Sep 2026 10:53:02 +0000
ROA not after:            Mon 13 Sep 2027 10:58:02 +0000
asID:                     262507
IP address blocks:        177.55.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl
                          rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:15:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a0:f7:59:ce:6d:cf:47:f5:b6:9b:35:05:67:0b:44:da:31:22:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8
        Validity
            Not Before: Sep 14 10:53:02 2026 GMT
            Not After : Sep 13 10:58:02 2027 GMT
        Subject: CN=50E3DD7B153A42FE5D7E65D9745E12EDF46EACF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:df:f0:40:fb:4a:08:a1:f0:1a:60:af:b7:
                    e2:9b:15:91:6e:71:06:9d:27:54:f0:30:c3:bf:7f:
                    97:68:c1:4e:fe:b7:24:ef:87:c1:2c:c7:95:2b:7a:
                    7a:a7:e6:b9:e4:eb:bf:99:36:84:c0:4e:0a:e5:ed:
                    c3:78:57:ed:91:70:1d:65:89:2c:61:3d:dc:a2:4c:
                    b8:62:60:d2:cb:98:39:ee:78:7e:24:c4:01:a3:7a:
                    86:ec:84:17:b0:22:2a:1b:78:14:7e:19:42:9d:d7:
                    9f:1d:3e:20:68:84:0f:5e:5f:4a:7d:dc:a8:d2:58:
                    4e:b5:94:a8:40:b3:1f:4b:5b:e7:03:71:af:1e:6c:
                    19:4d:d2:33:27:35:87:f0:79:4b:b7:4d:ae:99:64:
                    9d:26:0b:7c:0b:51:36:bc:4c:aa:ea:9b:11:c6:76:
                    9c:00:f4:b0:4a:c4:28:e9:dc:27:d8:90:68:47:1a:
                    fe:4e:52:22:1a:9a:61:4c:01:1a:2b:1c:bd:85:10:
                    0e:ed:22:e7:d6:a0:01:bd:1e:46:34:11:cf:db:6b:
                    1d:13:0e:fd:84:e2:fc:06:f4:d1:0f:f9:ae:f7:e4:
                    78:1c:79:b5:3b:60:95:b3:72:6a:50:b2:de:54:46:
                    35:bb:15:f6:78:a9:c6:95:34:26:b6:ce:d8:c5:30:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E3:DD:7B:15:3A:42:FE:5D:7E:65:D9:74:5E:12:ED:F4:6E:AC:F8
            X509v3 Authority Key Identifier:
                keyid:3A:E3:ED:D4:6F:60:50:39:FD:AC:CA:A3:13:2D:B6:91:5B:B2:A8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3AE3EDD46F605039FDACCAA3132DB6915BB2A8D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R887NsyxtjBRp2dX4g67duHi2TUak2CkTftbfpeppks/1/3137372e35352e3136302e302f32322d3232203d3e20323632353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:84:9d:62:5b:c2:0c:43:66:a0:79:f3:64:81:17:98:60:ad:
         3a:88:51:2d:b0:7d:d0:25:0b:8f:de:3e:55:30:56:30:f7:14:
         03:03:87:ba:03:65:43:2a:c6:76:69:a2:e9:f2:f9:bf:a1:03:
         1e:34:38:e6:55:fe:55:fb:43:b2:be:1d:35:33:48:7a:f0:6d:
         e8:5a:1e:42:14:fa:00:cc:f6:5d:b2:71:20:da:a2:ce:f3:3a:
         d0:dd:5e:bf:dd:25:01:1d:67:01:e5:37:90:32:5e:a5:82:bd:
         ff:05:38:f3:46:2d:ce:de:ee:95:04:78:7b:38:81:f6:5a:0d:
         ee:8a:8c:0e:ee:9f:a9:43:0e:17:86:26:34:40:99:27:b4:f8:
         87:24:43:6a:30:00:7e:29:c9:6b:c5:f8:68:26:82:4e:39:b7:
         e6:5b:7c:d4:23:80:aa:a6:84:ef:9e:3b:cf:3d:a4:ad:8b:fb:
         fd:f0:c6:68:ca:ca:8f:8f:7d:24:e9:aa:9e:a6:13:76:46:56:
         2f:97:ad:91:59:58:a7:8d:82:e0:e5:d3:68:14:d5:be:e5:d7:
         34:f5:9e:cd:3b:08:d8:11:40:a0:b0:c7:1f:8d:a7:a0:e4:5d:
         66:24:14:5b:de:53:2c:6b:78:59:70:95:cd:93:c3:a9:b8:49:
         43:2c:7f:27
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDqD3Wc5tz0f1tps1BWcLRNoxIjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FFM0VERDQ2RjYwNTAzOUZEQUNDQUEzMTMyREI2OTE1
QkIyQThEODAeFw0yNjA5MTQxMDUzMDJaFw0yNzA5MTMxMDU4MDJaMDMxMTAvBgNV
BAMTKDUwRTNERDdCMTUzQTQyRkU1RDdFNjVEOTc0NUUxMkVERjQ2RUFDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L9/wQPtKCKHwGmCvt+KbFZFu
cQadJ1TwMMO/f5dowU7+tyTvh8Esx5Urenqn5rnk67+ZNoTATgrl7cN4V+2RcB1l
iSxhPdyiTLhiYNLLmDnueH4kxAGjeobshBewIiobeBR+GUKd158dPiBohA9eX0p9
3KjSWE61lKhAsx9LW+cDca8ebBlN0jMnNYfweUu3Ta6ZZJ0mC3wLUTa8TKrqmxHG
dpwA9LBKxCjp3CfYkGhHGv5OUiIammFMARorHL2FEA7tIufWoAG9HkY0Ec/bax0T
Dv2E4vwG9NEP+a735HgcebU7YJWzcmpQst5URjW7FfZ4qcaVNCa2ztjFMIvBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUOPdexU6Qv5dfmXZdF4S7fRurPgwHwYDVR0j
BBgwFoAUOuPt1G9gUDn9rMqjEy22kVuyqNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1I4ODdOc3l4dGpCUnAyZFg0ZzY3ZHVIaTJUVWFrMkNrVGZ0YmZwZXBw
a3MvMS8zQUUzRURENDZGNjA1MDM5RkRBQ0NBQTMxMzJEQjY5MTVCQjJBOEQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBRTNFREQ0NkY2MDUwMzlG
REFDQ0FBMzEzMkRCNjkxNUJCMkE4RDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSODg3TnN5eHRqQlJwMmRYNGc2N2R1SGkyVFVhazJDa1RmdGJmcGVwcGtzLzEv
MzEzNzM3MmUzNTM1MmUzMTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxN6AwDQYJKoZIhvcNAQELBQADggEBABGEnWJb
wgxDZqB582SBF5hgrTqIUS2wfdAlC4/ePlUwVjD3FAMDh7oDZUMqxnZpouny+b+h
Ax40OOZV/lX7Q7K+HTUzSHrwbehaHkIU+gDM9l2ycSDaos7zOtDdXr/dJQEdZwHl
N5AyXqWCvf8FOPNGLc7e7pUEeHs4gfZaDe6KjA7un6lDDheGJjRAmSe0+IckQ2ow
AH4pyWvF+Ggmgk45t+ZbfNQjgKqmhO+eO889pK2L+/3wxmjKyo+PfSTpqp6mE3ZG
Vi+XrZFZWKeNguDl02gU1b7l1zT1ns07CNgRQKCwxx+Np6DkXWYkFFveUyxreFlw
lc2Tw6m4SUMsfyc=
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:08:01 2026 by rpki-client