Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3332203d3e203532393133.roa
File:                     3137302e3234362e3136342e302f32322d3332203d3e203532393133.roa (raw, json)
Hash identifier:          xVGuh8ZqUun2aFWgV6zGTet20avfAQx18DeSH9cUFXo=
Subject key identifier:   11:31:17:6C:47:AD:ED:7C:E7:A5:CC:78:75:CE:E7:43:D7:38:DF:05
Certificate issuer:       /CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
Certificate serial:       25CD0ABB6F5413745E1B030F1146E53866931DDA
Authority key identifier: 60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3332203d3e203532393133.roa
Signing time:             Mon 04 May 2026 20:18:40 +0000
ROA not before:           Mon 04 May 2026 20:13:40 +0000
ROA not after:            Mon 03 May 2027 20:18:40 +0000
asID:                     52913
IP address blocks:        170.246.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 04:52:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:cd:0a:bb:6f:54:13:74:5e:1b:03:0f:11:46:e5:38:66:93:1d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE
        Validity
            Not Before: May  4 20:13:40 2026 GMT
            Not After : May  3 20:18:40 2027 GMT
        Subject: CN=1131176C47ADED7CE7A5CC7875CEE743D738DF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b5:ef:88:5f:10:45:ff:cc:87:1f:11:20:85:
                    bf:85:2e:a3:7e:ac:08:ce:48:a7:83:08:6a:0c:0b:
                    60:da:e1:19:ca:63:21:b8:f8:17:f4:57:4d:1b:03:
                    bd:0f:2a:e4:8c:47:78:00:2e:11:b7:62:8a:85:a8:
                    b5:db:23:ce:37:e4:86:48:65:64:a3:6e:a2:b2:a9:
                    e2:da:2c:24:e0:f1:05:8d:c2:00:e2:10:f3:4a:96:
                    aa:8e:4b:c2:fa:f1:74:c1:74:ce:ac:f2:72:c5:62:
                    af:c8:5c:ef:b5:65:01:13:0a:71:b2:60:af:9d:7c:
                    9c:27:4b:e2:d2:8f:76:03:01:4b:63:6e:4b:db:7e:
                    4b:a4:5e:24:24:ca:89:2f:e8:17:3e:36:7a:ae:92:
                    50:5b:d9:ca:1d:07:f5:88:02:23:d1:15:b3:bb:57:
                    25:77:5e:5e:ef:17:1c:e8:2b:94:dd:d3:67:c0:2f:
                    fd:e3:1b:27:02:39:57:a7:83:c4:92:a0:10:a8:b2:
                    ec:0e:2a:6d:ef:3e:4a:34:b3:02:f1:db:3b:d6:d5:
                    12:c2:a9:56:f0:f9:b4:f4:9d:fb:28:ca:57:8f:7e:
                    d1:98:8d:c9:c0:2e:00:90:c4:d9:e1:88:c7:3c:55:
                    37:07:33:79:d1:b3:bc:15:ba:14:4c:41:bc:97:34:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:31:17:6C:47:AD:ED:7C:E7:A5:CC:78:75:CE:E7:43:D7:38:DF:05
            X509v3 Authority Key Identifier:
                keyid:60:CB:1A:8F:EC:A3:BA:79:84:AB:DC:02:AD:DF:32:E3:D0:B9:FA:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60CB1A8FECA3BA7984ABDC02ADDF32E3D0B9FACE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/3137302e3234362e3136342e302f32322d3332203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:37:fe:b6:95:7b:b1:12:ac:1c:f5:91:81:bc:68:46:33:e5:
         51:fb:d1:50:82:6b:81:f4:0c:43:40:8a:a3:07:c4:6c:5f:f5:
         d2:49:91:62:70:48:dd:bc:44:15:53:39:62:6e:69:dd:c7:f5:
         d2:7d:96:11:18:34:1f:22:87:8b:30:ee:25:11:1b:ce:21:c5:
         6a:bd:34:7b:b1:5b:6a:52:d3:94:ba:36:3e:81:dc:8a:53:4b:
         cf:3b:57:a0:83:ff:b4:6c:cc:10:a0:dd:53:72:74:46:98:4d:
         6d:68:d9:7d:3b:6f:d9:f1:13:e6:a5:a9:76:de:17:4d:f9:26:
         8c:89:75:2b:1d:b2:34:cf:3d:03:9c:15:a4:af:20:2d:fe:1d:
         30:1c:3f:96:af:7c:0a:f5:8f:6f:54:b8:0d:7d:81:95:25:79:
         82:7c:da:8a:2c:1c:93:f3:60:dd:d5:b2:7f:78:12:c6:6f:67:
         22:12:19:62:3e:2d:f2:2a:ab:70:c2:45:36:90:28:13:af:a7:
         80:c9:e6:b8:2f:40:45:22:80:22:51:d2:fb:d6:f9:75:9a:67:
         57:9d:5b:26:04:e8:40:a4:9f:b9:d4:84:4a:b7:7a:c6:f7:41:
         6a:9c:72:17:16:78:48:90:2e:22:46:d7:9e:6b:dc:2c:76:6c:
         af:4e:5d:b2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJc0Ku29UE3ReGwMPEUblOGaTHdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjBDQjFBOEZFQ0EzQkE3OTg0QUJEQzAyQURERjMyRTNE
MEI5RkFDRTAeFw0yNjA1MDQyMDEzNDBaFw0yNzA1MDMyMDE4NDBaMDMxMTAvBgNV
BAMTKDExMzExNzZDNDdBREVEN0NFN0E1Q0M3ODc1Q0VFNzQzRDczOERGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqte+IXxBF/8yHHxEghb+FLqN+
rAjOSKeDCGoMC2Da4RnKYyG4+Bf0V00bA70PKuSMR3gALhG3YoqFqLXbI8435IZI
ZWSjbqKyqeLaLCTg8QWNwgDiEPNKlqqOS8L68XTBdM6s8nLFYq/IXO+1ZQETCnGy
YK+dfJwnS+LSj3YDAUtjbkvbfkukXiQkyokv6Bc+NnquklBb2codB/WIAiPRFbO7
VyV3Xl7vFxzoK5Td02fAL/3jGycCOVeng8SSoBCosuwOKm3vPko0swLx2zvW1RLC
qVbw+bT0nfsoylePftGYjcnALgCQxNnhiMc8VTcHM3nRs7wVuhRMQbyXNB/hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUETEXbEet7Xznpcx4dc7nQ9c43wUwHwYDVR0j
BBgwFoAUYMsaj+yjunmEq9wCrd8y49C5+s4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NWd1JheEQzU3dacEV0dUxkRk1MY056d2FDM0ZCdXJXVUFOZFc3bTRM
TnIvMC82MENCMUE4RkVDQTNCQTc5ODRBQkRDMDJBRERGMzJFM0QwQjlGQUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwQ0IxQThGRUNBM0JBNzk4
NEFCREMwMkFEREYzMkUzRDBCOUZBQ0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTVndSYXhEM1N3WnBFdHVMZEZNTGNOendhQzNGQnVyV1VBTmRXN200TE5yLzAv
MzEzNzMwMmUzMjM0MzYyZTMxMzYzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzOTMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq9qQwDQYJKoZIhvcNAQELBQADggEBAJs3/raV
e7ESrBz1kYG8aEYz5VH70VCCa4H0DENAiqMHxGxf9dJJkWJwSN28RBVTOWJuad3H
9dJ9lhEYNB8ih4sw7iURG84hxWq9NHuxW2pS05S6Nj6B3IpTS887V6CD/7RszBCg
3VNydEaYTW1o2X07b9nxE+alqXbeF035JoyJdSsdsjTPPQOcFaSvIC3+HTAcP5av
fAr1j29UuA19gZUleYJ82oosHJPzYN3Vsn94EsZvZyISGWI+LfIqq3DCRTaQKBOv
p4DJ5rgvQEUigCJR0vvW+XWaZ1edWyYE6ECkn7nUhEq3esb3QWqcchcWeEiQLiJG
155r3Cx2bK9OXbI=
-----END CERTIFICATE-----
Generated at Wed May 13 17:01:43 2026 by rpki-client