Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa
File:                     3137372e38352e3235342e302f32332d3233203d3e203532353536.roa (raw, json)
Hash identifier:          YXrs+1gHT2TzZlXREHBBXBzK+ZUTrNeBXwGFSWULydw=
Subject key identifier:   BA:64:6B:D2:68:A7:04:7E:3F:DF:B8:DC:1B:8A:7F:94:F7:BE:A1:C9
Certificate issuer:       /CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
Certificate serial:       017912F6BAA89B35F25A787595F16C14AE44DFEE
Authority key identifier: B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa
Signing time:             Thu 16 Jul 2026 15:07:02 +0000
ROA not before:           Thu 16 Jul 2026 15:02:02 +0000
ROA not after:            Thu 15 Jul 2027 15:07:02 +0000
asID:                     52556
IP address blocks:        177.85.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl
                          rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:79:12:f6:ba:a8:9b:35:f2:5a:78:75:95:f1:6c:14:ae:44:df:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
        Validity
            Not Before: Jul 16 15:02:02 2026 GMT
            Not After : Jul 15 15:07:02 2027 GMT
        Subject: CN=BA646BD268A7047E3FDFB8DC1B8A7F94F7BEA1C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:af:79:08:b8:a2:58:b4:08:19:cc:2a:d4:
                    b1:c0:28:de:02:63:6f:1b:61:73:00:6f:04:42:5d:
                    59:84:68:90:3a:bf:6f:32:2b:91:0f:ff:a9:8a:9d:
                    1b:df:94:eb:2d:c8:af:72:c0:e2:ca:8a:b1:0e:dd:
                    bd:cf:ff:f6:bc:6f:ae:85:2c:e6:1d:a8:c1:be:ce:
                    53:5a:c5:b2:8b:90:f2:80:ac:a4:f1:31:b9:96:c9:
                    6b:d6:d2:95:c7:c0:fe:83:28:5f:bf:9a:5c:b4:2c:
                    17:06:79:f5:5c:81:47:ed:5d:14:9f:2a:7f:8d:59:
                    60:e1:a6:7a:d6:dc:cd:d0:dc:c3:db:50:6c:9e:9f:
                    d9:fd:9e:7b:7c:e4:9b:e4:75:62:d5:7b:04:56:4d:
                    19:9a:7f:4b:77:78:54:59:08:0e:67:d9:ea:2a:7c:
                    f0:39:5b:cd:3c:dd:ad:4c:4c:66:9a:48:a3:d2:fc:
                    a9:a5:2a:2a:0d:6d:48:5c:0a:f7:57:27:df:c4:3e:
                    67:81:40:fa:90:27:12:cb:79:b0:dc:5d:51:e2:f6:
                    97:bf:0e:12:86:48:b1:f8:74:aa:ba:6b:26:b8:da:
                    c4:50:9a:ef:0d:a5:96:5c:01:5f:99:e5:c1:1a:ce:
                    3b:3f:df:1c:0e:32:38:28:22:45:b7:ee:54:31:09:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:64:6B:D2:68:A7:04:7E:3F:DF:B8:DC:1B:8A:7F:94:F7:BE:A1:C9
            X509v3 Authority Key Identifier:
                keyid:B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32332d3233203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:f5:22:53:67:b2:42:7d:26:58:98:5e:b7:9c:8e:0b:8d:d5:
         89:65:8a:d0:99:0f:03:cf:e8:4c:e4:af:12:f5:b3:86:83:ae:
         24:40:55:78:57:a4:22:e3:90:30:04:7e:b8:a0:7f:fa:bc:e7:
         f5:f8:99:7d:83:cb:f5:9f:79:e9:73:f6:d7:0d:b9:e7:84:7b:
         72:63:de:27:0d:4f:5f:ff:bd:74:4e:2d:63:37:08:a8:3f:5c:
         ce:14:24:07:5b:3a:d1:05:55:b3:0a:f8:ee:38:28:ac:08:fc:
         48:8e:4b:05:f9:d7:da:6b:d8:fc:3d:8d:33:97:c7:f9:02:b3:
         b1:26:b1:18:0e:fa:c1:25:33:77:65:54:d6:fd:a2:62:a6:ff:
         47:ee:31:00:f5:a8:2f:10:24:7a:53:78:d2:7c:82:33:f8:3a:
         41:b4:9e:b0:ee:3d:9d:a2:d6:9b:f9:98:79:5e:0c:87:f5:1e:
         f0:b7:cd:cc:3d:fe:b5:77:67:63:58:60:21:10:16:b9:f5:a6:
         4b:4a:0c:46:b4:3f:29:ec:03:c9:7f:a4:21:d0:80:e7:a1:51:
         77:9b:d6:5f:c5:56:86:5d:5e:9d:2e:85:74:0a:b0:5c:66:7a:
         9d:a0:99:01:65:76:33:24:5a:5a:87:33:53:35:d3:cc:22:d0:
         80:03:c4:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAXkS9rqomzXyWnh1lfFsFK5E3+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5MkE1MkVBQzc3Qzk4OENGMDI0M0RFRUE5RUExMThG
MjgyOTAyQzAeFw0yNjA3MTYxNTAyMDJaFw0yNzA3MTUxNTA3MDJaMDMxMTAvBgNV
BAMTKEJBNjQ2QkQyNjhBNzA0N0UzRkRGQjhEQzFCOEE3Rjk0RjdCRUExQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0695CLiiWLQIGcwq1LHAKN4C
Y28bYXMAbwRCXVmEaJA6v28yK5EP/6mKnRvflOstyK9ywOLKirEO3b3P//a8b66F
LOYdqMG+zlNaxbKLkPKArKTxMbmWyWvW0pXHwP6DKF+/mly0LBcGefVcgUftXRSf
Kn+NWWDhpnrW3M3Q3MPbUGyen9n9nnt85JvkdWLVewRWTRmaf0t3eFRZCA5n2eoq
fPA5W8083a1MTGaaSKPS/KmlKioNbUhcCvdXJ9/EPmeBQPqQJxLLebDcXVHi9pe/
DhKGSLH4dKq6aya42sRQmu8NpZZcAV+Z5cEazjs/3xwOMjgoIkW37lQxCWLBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUumRr0minBH4/37jcG4p/lPe+ockwHwYDVR0j
BBgwFoAUspKlLqx3yYjPAkPe6p6hGPKCkCwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9CMjkyQTUyRUFDNzdDOTg4Q0YwMjQzREVFQTlFQTExOEYyODI5MDJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyOTJBNTJFQUM3N0M5ODhD
RjAyNDNERUVBOUVBMTE4RjI4MjkwMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsVX+MA0GCSqGSIb3DQEBCwUAA4IBAQCJ9SJTZ7JC
fSZYmF63nI4LjdWJZYrQmQ8Dz+hM5K8S9bOGg64kQFV4V6Qi45AwBH64oH/6vOf1
+Jl9g8v1n3npc/bXDbnnhHtyY94nDU9f/710Ti1jNwioP1zOFCQHWzrRBVWzCvju
OCisCPxIjksF+dfaa9j8PY0zl8f5ArOxJrEYDvrBJTN3ZVTW/aJipv9H7jEA9agv
ECR6U3jSfIIz+DpBtJ6w7j2dotab+Zh5XgyH9R7wt83MPf61d2djWGAhEBa59aZL
SgxGtD8p7APJf6Qh0IDnoVF3m9ZfxVaGXV6dLoV0CrBcZnqdoJkBZXYzJFpahzNT
NdPMItCAA8QY
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:50:48 2026 by rpki-client