Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32342d3234203d3e203532353536.roa
File:                     3137372e38352e3235342e302f32342d3234203d3e203532353536.roa (raw, json)
Hash identifier:          WBaMRUzv7UE4aQBNHyxiL2zS+fe7ujSuJnpZVXOSUpU=
Subject key identifier:   05:13:D1:EC:1D:F2:04:E2:7E:CE:E9:80:26:03:7B:24:30:85:A8:8D
Certificate issuer:       /CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
Certificate serial:       505BB2090AC26F937A0E5D485F5812EBFEDD3594
Authority key identifier: B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32342d3234203d3e203532353536.roa
Signing time:             Thu 16 Jul 2026 15:07:01 +0000
ROA not before:           Thu 16 Jul 2026 15:02:01 +0000
ROA not after:            Thu 15 Jul 2027 15:07:01 +0000
asID:                     52556
IP address blocks:        177.85.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl
                          rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:57:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5b:b2:09:0a:c2:6f:93:7a:0e:5d:48:5f:58:12:eb:fe:dd:35:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B292A52EAC77C988CF0243DEEA9EA118F282902C
        Validity
            Not Before: Jul 16 15:02:01 2026 GMT
            Not After : Jul 15 15:07:01 2027 GMT
        Subject: CN=0513D1EC1DF204E27ECEE98026037B243085A88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:a1:fc:9c:1c:cf:eb:83:51:13:b5:7d:b2:
                    96:77:1a:95:f5:b1:68:27:56:ba:86:22:f3:18:f1:
                    d4:f7:b8:a5:5b:95:59:51:99:d1:06:d0:dc:4b:e4:
                    75:f8:18:72:ed:c8:d3:46:e8:6f:f1:c8:ae:ef:b5:
                    97:ad:3a:5e:7f:8c:df:ab:36:8b:e3:6e:27:07:ac:
                    83:08:d9:19:3e:83:ee:07:4b:c7:7b:33:f8:0d:9f:
                    4b:ab:b7:ef:aa:5f:64:69:d6:fc:f7:3d:80:1f:34:
                    b8:e6:93:b8:f7:ae:12:d3:6b:67:fd:c0:92:3d:32:
                    4f:6e:41:56:ef:c2:83:0c:00:fa:41:e4:98:a5:e9:
                    18:79:86:ef:fd:2f:4e:07:7e:62:1c:75:f2:04:64:
                    52:8b:09:24:a0:c2:8f:d7:c8:e9:fc:d7:c7:eb:db:
                    dc:1a:78:6c:4d:cf:a4:47:df:84:55:2e:05:b3:1f:
                    f1:12:02:bb:c3:68:a6:8c:9c:14:09:db:27:0e:f4:
                    de:53:36:55:a2:66:8c:6f:48:be:81:8e:b8:23:ff:
                    3f:c1:9c:41:c4:d6:8b:15:4d:5f:cd:70:32:07:98:
                    49:79:50:49:74:fe:0e:41:9d:40:73:4e:70:b8:cb:
                    2a:bc:9f:68:a9:31:be:5f:64:99:54:97:2c:46:85:
                    a1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:13:D1:EC:1D:F2:04:E2:7E:CE:E9:80:26:03:7B:24:30:85:A8:8D
            X509v3 Authority Key Identifier:
                keyid:B2:92:A5:2E:AC:77:C9:88:CF:02:43:DE:EA:9E:A1:18:F2:82:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/B292A52EAC77C988CF0243DEEA9EA118F282902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B292A52EAC77C988CF0243DEEA9EA118F282902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3goevRhVsytYVAR6AzYnyCd5pjFSULsieN1d3qjGuz4r/0/3137372e38352e3235342e302f32342d3234203d3e203532353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:94:44:4f:fb:c8:cc:3f:cc:5b:f7:2b:98:09:99:f6:69:
         8b:51:94:84:20:15:d2:82:17:73:69:7b:88:3f:52:ed:ee:61:
         a4:c3:16:f5:47:35:6e:64:37:2e:3d:87:27:5d:3e:c6:cb:75:
         53:df:42:c1:c2:cf:3b:d9:04:62:d0:83:c8:81:37:b5:75:99:
         a7:5d:14:55:01:9e:27:30:2e:37:e2:14:b1:6f:fc:44:b5:c6:
         9e:72:71:14:d1:9d:e5:05:ce:b3:83:cd:1b:e4:6c:70:51:f7:
         1d:e9:0e:7c:06:66:d7:f2:5a:1f:34:ed:58:01:1e:35:aa:e1:
         37:2b:88:e0:54:e4:81:8a:fb:a4:f7:45:89:a5:50:d9:9a:fb:
         99:ec:51:86:a0:ad:7e:f5:d0:00:ba:b2:7f:b4:61:e4:cb:d3:
         2e:aa:97:37:58:19:65:05:04:03:2e:53:5b:e3:0a:65:78:24:
         9a:52:05:1b:69:46:3b:dc:94:3a:45:f9:f9:bd:30:2c:88:d7:
         84:e8:47:ed:e2:38:8f:6a:66:d1:27:71:86:ea:70:b7:02:ab:
         7b:79:88:e6:58:4c:12:15:69:29:c6:ea:73:0d:53:91:1a:bd:
         fa:88:b1:9e:a3:2a:50:c0:e4:84:a8:f3:bc:df:6e:a4:3c:bf:
         b8:ef:4f:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUFuyCQrCb5N6Dl1IX1gS6/7dNZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5MkE1MkVBQzc3Qzk4OENGMDI0M0RFRUE5RUExMThG
MjgyOTAyQzAeFw0yNjA3MTYxNTAyMDFaFw0yNzA3MTUxNTA3MDFaMDMxMTAvBgNV
BAMTKDA1MTNEMUVDMURGMjA0RTI3RUNFRTk4MDI2MDM3QjI0MzA4NUE4OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHqH8nBzP64NRE7V9spZ3GpX1
sWgnVrqGIvMY8dT3uKVblVlRmdEG0NxL5HX4GHLtyNNG6G/xyK7vtZetOl5/jN+r
NovjbicHrIMI2Rk+g+4HS8d7M/gNn0urt++qX2Rp1vz3PYAfNLjmk7j3rhLTa2f9
wJI9Mk9uQVbvwoMMAPpB5Jil6Rh5hu/9L04HfmIcdfIEZFKLCSSgwo/XyOn818fr
29waeGxNz6RH34RVLgWzH/ESArvDaKaMnBQJ2ycO9N5TNlWiZoxvSL6Bjrgj/z/B
nEHE1osVTV/NcDIHmEl5UEl0/g5BnUBzTnC4yyq8n2ipMb5fZJlUlyxGhaGpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBRPR7B3yBOJ+zumAJgN7JDCFqI0wHwYDVR0j
BBgwFoAUspKlLqx3yYjPAkPe6p6hGPKCkCwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2dvZXZSaFZzeXRZVkFSNkF6WW55Q2Q1cGpGU1VMc2llTjFkM3FqR3V6
NHIvMC9CMjkyQTUyRUFDNzdDOTg4Q0YwMjQzREVFQTlFQTExOEYyODI5MDJDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyOTJBNTJFQUM3N0M5ODhD
RjAyNDNERUVBOUVBMTE4RjI4MjkwMkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNnb2V2UmhWc3l0WVZBUjZBellueUNkNXBqRlNVTHNpZU4xZDNxakd1ejRyLzAv
MzEzNzM3MmUzODM1MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzUzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsVX+MA0GCSqGSIb3DQEBCwUAA4IBAQBc25RET/vI
zD/MW/crmAmZ9mmLUZSEIBXSghdzaXuIP1Lt7mGkwxb1RzVuZDcuPYcnXT7Gy3VT
30LBws872QRi0IPIgTe1dZmnXRRVAZ4nMC434hSxb/xEtcaecnEU0Z3lBc6zg80b
5GxwUfcd6Q58BmbX8lofNO1YAR41quE3K4jgVOSBivuk90WJpVDZmvuZ7FGGoK1+
9dAAurJ/tGHky9Muqpc3WBllBQQDLlNb4wpleCSaUgUbaUY73JQ6Rfn5vTAsiNeE
6Eft4jiPambRJ3GG6nC3Aqt7eYjmWEwSFWkpxupzDVORGr36iLGeoypQwOSEqPO8
326kPL+470/5
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:42:44 2026 by rpki-client