Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa
File:                     3230312e37372e3132382e302f32302d3234203d3e203238363534.roa (raw, json)
Hash identifier:          m/Q3WM7Cj0J9nG455c41oaTUbls9BuYXK7guYZ/6ZZA=
Subject key identifier:   1B:08:E5:00:D6:1D:4E:B3:54:AF:F4:9C:A9:6C:A0:14:FB:EC:A4:A4
Certificate issuer:       /CN=909BA09D1557C8C734FFC182266E36889410A11D
Certificate serial:       314FABFEA0AA75B51F0C6E6C3242894289BBD446
Authority key identifier: 90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa
Signing time:             Mon 27 Apr 2026 13:14:47 +0000
ROA not before:           Mon 27 Apr 2026 13:09:47 +0000
ROA not after:            Mon 26 Apr 2027 13:14:47 +0000
asID:                     28654
IP address blocks:        201.77.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.crl
                          rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:4f:ab:fe:a0:aa:75:b5:1f:0c:6e:6c:32:42:89:42:89:bb:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909BA09D1557C8C734FFC182266E36889410A11D
        Validity
            Not Before: Apr 27 13:09:47 2026 GMT
            Not After : Apr 26 13:14:47 2027 GMT
        Subject: CN=1B08E500D61D4EB354AFF49CA96CA014FBECA4A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:fa:c0:e0:d0:f3:58:a9:1d:26:38:c2:f2:
                    8e:68:1a:5d:e1:5f:d9:3f:16:c7:0b:a2:88:eb:22:
                    4f:1e:a3:e0:30:59:f2:b6:45:2b:63:fc:34:e3:5f:
                    1b:89:5d:13:bf:58:45:83:73:49:ef:d6:cd:0d:d5:
                    4c:e3:8c:47:d1:5a:39:7f:1e:21:b1:a4:c1:da:fe:
                    2e:c7:79:3b:b7:26:ca:01:c5:be:a6:28:7c:67:c2:
                    0a:c1:37:fb:b1:5e:27:94:e5:d0:7f:91:78:85:fb:
                    65:31:08:f7:3f:ed:cf:f7:39:77:d4:93:fd:43:4a:
                    e6:62:f0:3a:d7:1f:9f:23:05:5f:84:6f:51:03:1b:
                    7d:b6:b2:59:a6:a1:2d:8c:e8:9d:7f:12:ee:67:d9:
                    3d:5d:d8:a9:1b:e4:70:8e:42:af:84:77:8a:5e:79:
                    89:1f:7b:28:4b:57:eb:6e:d7:d8:91:d4:59:78:54:
                    6a:7f:02:46:72:e5:77:af:18:e6:bd:32:bb:c5:f3:
                    56:56:f0:37:2c:65:a2:df:9e:7e:62:12:99:79:50:
                    6c:89:35:66:60:85:7c:d2:42:1e:28:a8:d4:41:6b:
                    3d:2e:0b:8c:f4:0b:69:75:04:54:5d:2d:48:d7:8e:
                    63:2b:d6:c0:c4:f9:9f:a7:2f:0d:fe:4c:de:09:4a:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:08:E5:00:D6:1D:4E:B3:54:AF:F4:9C:A9:6C:A0:14:FB:EC:A4:A4
            X509v3 Authority Key Identifier:
                keyid:90:9B:A0:9D:15:57:C8:C7:34:FF:C1:82:26:6E:36:88:94:10:A1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/909BA09D1557C8C734FFC182266E36889410A11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/909BA09D1557C8C734FFC182266E36889410A11D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PPEdxcfhaGG3Foz3jMtjENPfG9KnQ5J2F5sBJLexX4J/0/3230312e37372e3132382e302f32302d3234203d3e203238363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:e1:c8:d1:7b:4d:a8:9e:93:bc:a7:22:c8:ce:3e:a2:5e:
         99:83:55:1e:bc:ff:a7:57:ae:69:d4:83:34:11:f9:01:01:e1:
         63:c6:b4:ce:da:0c:c4:aa:34:5d:c8:d4:5b:a7:10:4c:b2:75:
         fe:bb:08:e6:e9:36:4c:f0:5f:48:15:f2:1d:3b:33:2d:ff:c6:
         8f:eb:2d:31:e7:de:e9:c2:f6:f3:18:24:17:7a:e4:60:19:6e:
         8e:93:10:77:2b:c7:c9:21:ce:d7:47:3d:bc:a1:36:91:93:b5:
         08:f5:31:59:23:8d:9a:08:e0:ca:ff:7f:c8:d9:e0:f9:6f:77:
         d0:79:cb:fc:cb:e2:8f:c2:dd:c3:80:83:3a:97:39:d4:c6:a5:
         13:fe:41:60:fc:aa:00:b6:46:05:49:3f:fd:b4:98:04:c1:67:
         ec:89:48:ba:f1:fc:cf:52:7b:54:00:84:5f:c3:35:cf:9e:f3:
         6d:3a:d4:9a:14:ce:df:87:2c:0e:0b:e6:60:20:86:fc:d2:da:
         93:3b:ff:56:5b:4f:df:0a:8e:91:a7:c5:3a:95:e3:f1:2a:b6:
         cb:d1:71:cb:9d:ee:80:1f:20:25:98:67:8d:53:c6:52:51:5d:
         7c:04:d4:fc:e7:97:39:6d:9d:bc:ce:20:7f:de:80:e3:af:60:
         98:59:dc:fa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMU+r/qCqdbUfDG5sMkKJQom71EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTA5QkEwOUQxNTU3QzhDNzM0RkZDMTgyMjY2RTM2ODg5
NDEwQTExRDAeFw0yNjA0MjcxMzA5NDdaFw0yNzA0MjYxMzE0NDdaMDMxMTAvBgNV
BAMTKDFCMDhFNTAwRDYxRDRFQjM1NEFGRjQ5Q0E5NkNBMDE0RkJFQ0E0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEfrA4NDzWKkdJjjC8o5oGl3h
X9k/FscLoojrIk8eo+AwWfK2RStj/DTjXxuJXRO/WEWDc0nv1s0N1UzjjEfRWjl/
HiGxpMHa/i7HeTu3JsoBxb6mKHxnwgrBN/uxXieU5dB/kXiF+2UxCPc/7c/3OXfU
k/1DSuZi8DrXH58jBV+Eb1EDG322slmmoS2M6J1/Eu5n2T1d2Kkb5HCOQq+Ed4pe
eYkfeyhLV+tu19iR1Fl4VGp/AkZy5XevGOa9MrvF81ZW8DcsZaLfnn5iEpl5UGyJ
NWZghXzSQh4oqNRBaz0uC4z0C2l1BFRdLUjXjmMr1sDE+Z+nLw3+TN4JSiFFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGwjlANYdTrNUr/ScqWygFPvspKQwHwYDVR0j
BBgwFoAUkJugnRVXyMc0/8GCJm42iJQQoR0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBQRWR4Y2ZoYUdHM0ZvejNqTXRqRU5QZkc5S25RNUoyRjVzQkpMZXhY
NEovMC85MDlCQTA5RDE1NTdDOEM3MzRGRkMxODIyNjZFMzY4ODk0MTBBMTFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkwOUJBMDlEMTU1N0M4Qzcz
NEZGQzE4MjI2NkUzNjg4OTQxMEExMUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQUEVkeGNmaGFHRzNGb3ozak10akVOUGZHOUtuUTVKMkY1c0JKTGV4WDRKLzAv
MzIzMDMxMmUzNzM3MmUzMTMyMzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEyU2AMA0GCSqGSIb3DQEBCwUAA4IBAQAl8eHI0XtN
qJ6TvKciyM4+ol6Zg1UevP+nV65p1IM0EfkBAeFjxrTO2gzEqjRdyNRbpxBMsnX+
uwjm6TZM8F9IFfIdOzMt/8aP6y0x597pwvbzGCQXeuRgGW6OkxB3K8fJIc7XRz28
oTaRk7UI9TFZI42aCODK/3/I2eD5b3fQecv8y+KPwt3DgIM6lznUxqUT/kFg/KoA
tkYFST/9tJgEwWfsiUi68fzPUntUAIRfwzXPnvNtOtSaFM7fhywOC+ZgIIb80tqT
O/9WW0/fCo6Rp8U6lePxKrbL0XHLne6AHyAlmGeNU8ZSUV18BNT855c5bZ28ziB/
3oDjr2CYWdz6
-----END CERTIFICATE-----
Generated at Wed May 13 16:23:58 2026 by rpki-client