Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33342e302f32332d3233203d3e20323632383432.roa
File:                     3137372e31302e33342e302f32332d3233203d3e20323632383432.roa (raw, json)
Hash identifier:          t9rRaBIEIxUbpJLWVC4hf8Ued+AOxrIeEVPffIMvrL0=
Subject key identifier:   6D:4C:B9:59:BC:1B:6B:93:A3:EC:C3:B5:37:1A:34:CD:95:FB:4B:1A
Certificate issuer:       /CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
Certificate serial:       2C5B95230AF3714F82C2F24F47F8D4329911B0D8
Authority key identifier: 86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33342e302f32332d3233203d3e20323632383432.roa
Signing time:             Fri 10 Jul 2026 14:23:23 +0000
ROA not before:           Fri 10 Jul 2026 14:18:23 +0000
ROA not after:            Fri 09 Jul 2027 14:23:23 +0000
asID:                     262842
IP address blocks:        177.10.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl
                          rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:29:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5b:95:23:0a:f3:71:4f:82:c2:f2:4f:47:f8:d4:32:99:11:b0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8625EDFECC2AA2B8D072C068E04439ABC40AC5E8
        Validity
            Not Before: Jul 10 14:18:23 2026 GMT
            Not After : Jul  9 14:23:23 2027 GMT
        Subject: CN=6D4CB959BC1B6B93A3ECC3B5371A34CD95FB4B1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c7:93:54:59:5e:20:b6:79:18:27:68:41:11:
                    c9:64:2a:3d:c8:6a:15:4f:5a:f3:2b:f8:a2:c2:cb:
                    2f:ac:78:93:b8:18:a4:92:43:5d:43:d3:25:60:78:
                    18:d6:3f:4b:77:0d:0b:57:59:db:ce:99:89:6f:f6:
                    ac:0a:df:df:4e:03:c4:c2:69:85:bc:c7:a2:ae:e8:
                    b3:a7:85:67:34:00:06:94:20:ef:47:35:80:74:35:
                    98:eb:da:ce:f8:ad:d9:50:44:62:1b:35:55:46:45:
                    91:d2:0e:92:e1:1b:eb:e2:8c:8b:32:24:31:55:2d:
                    67:76:2a:b8:1c:39:49:79:01:86:40:18:13:ed:14:
                    eb:06:f0:a6:56:c4:6c:fd:05:c8:bd:95:aa:53:66:
                    87:b0:4b:9e:09:47:e9:04:08:8d:23:73:c9:cf:67:
                    2a:ae:32:2e:59:d8:25:f4:fc:08:f4:13:3a:bb:84:
                    07:0a:2a:49:25:07:e0:2b:da:45:be:f3:c0:54:2c:
                    8c:30:2f:06:9d:ce:42:f3:ab:47:7f:ef:53:10:2e:
                    96:3e:dc:58:37:36:30:54:36:e7:cd:a7:36:c4:f0:
                    c1:b5:93:b6:cd:82:29:f9:2c:e8:77:68:5a:ae:d9:
                    90:63:e5:68:6e:fd:a7:ee:74:c2:2e:f2:b5:26:14:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:B9:59:BC:1B:6B:93:A3:EC:C3:B5:37:1A:34:CD:95:FB:4B:1A
            X509v3 Authority Key Identifier:
                keyid:86:25:ED:FE:CC:2A:A2:B8:D0:72:C0:68:E0:44:39:AB:C4:0A:C5:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8625EDFECC2AA2B8D072C068E04439ABC40AC5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/3137372e31302e33342e302f32332d3233203d3e20323632383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:de:a4:f7:07:c2:cb:87:15:f2:29:a6:7e:56:60:05:7e:
         38:23:1e:f1:5f:da:be:db:67:ed:44:a2:52:75:9f:5f:6e:35:
         21:42:04:a0:32:5c:13:ed:ad:2e:7d:56:93:8d:a2:8e:f8:c4:
         18:ea:b2:16:17:d8:2c:1d:c0:7e:ee:77:62:08:6c:ae:ef:d4:
         a4:4b:4c:20:d8:8f:e3:f9:99:98:71:db:1e:0e:81:49:5a:47:
         ff:90:13:93:c1:a2:dd:9e:77:2b:52:6b:4b:a8:06:ed:08:8a:
         20:5a:dd:a9:e8:41:1c:32:c6:a1:e9:28:fb:b8:98:e2:1f:87:
         9a:e2:03:9f:20:06:48:f8:08:bb:e8:e2:ef:10:f2:bc:03:70:
         3d:89:c8:66:b6:50:87:12:38:25:ee:25:c8:49:f0:38:b7:6c:
         21:d6:8e:99:b8:f3:e3:29:5b:ad:07:97:7e:52:81:02:e7:c1:
         63:1e:73:f6:bd:bf:d7:d5:0b:e2:00:ba:49:5c:b2:9f:b8:b8:
         a7:5b:bd:57:1a:43:db:4f:c3:2f:49:9f:bf:71:82:af:81:d3:
         13:d8:31:22:a8:02:d5:41:08:4e:7e:79:38:1f:eb:91:13:8e:
         bb:07:16:e6:58:16:c9:e2:82:13:09:ce:2a:8f:75:cf:ee:fd:
         a2:4e:f6:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULFuVIwrzcU+CwvJPR/jUMpkRsNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODYyNUVERkVDQzJBQTJCOEQwNzJDMDY4RTA0NDM5QUJD
NDBBQzVFODAeFw0yNjA3MTAxNDE4MjNaFw0yNzA3MDkxNDIzMjNaMDMxMTAvBgNV
BAMTKDZENENCOTU5QkMxQjZCOTNBM0VDQzNCNTM3MUEzNENEOTVGQjRCMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlx5NUWV4gtnkYJ2hBEclkKj3I
ahVPWvMr+KLCyy+seJO4GKSSQ11D0yVgeBjWP0t3DQtXWdvOmYlv9qwK399OA8TC
aYW8x6Ku6LOnhWc0AAaUIO9HNYB0NZjr2s74rdlQRGIbNVVGRZHSDpLhG+vijIsy
JDFVLWd2KrgcOUl5AYZAGBPtFOsG8KZWxGz9Bci9lapTZoewS54JR+kECI0jc8nP
ZyquMi5Z2CX0/Aj0Ezq7hAcKKkklB+Ar2kW+88BULIwwLwadzkLzq0d/71MQLpY+
3Fg3NjBUNufNpzbE8MG1k7bNgin5LOh3aFqu2ZBj5Whu/afudMIu8rUmFL37AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbUy5Wbwba5Oj7MO1Nxo0zZX7SxowHwYDVR0j
BBgwFoAUhiXt/swqorjQcsBo4EQ5q8QKxegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpUREhuaVc1SnU4d3lwaWVmdWlhS3Y2bW1pNk5QZnJaS01mMnBETG53
bjMvMC84NjI1RURGRUNDMkFBMkI4RDA3MkMwNjhFMDQ0MzlBQkM0MEFDNUU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg2MjVFREZFQ0MyQUEyQjhE
MDcyQzA2OEUwNDQzOUFCQzQwQUM1RTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaVERIbmlXNUp1OHd5cGllZnVpYUt2Nm1taTZOUGZyWktNZjJwRExud24zLzAv
MzEzNzM3MmUzMTMwMmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzgzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsQoiMA0GCSqGSIb3DQEBCwUAA4IBAQBN4N6k9wfC
y4cV8immflZgBX44Ix7xX9q+22ftRKJSdZ9fbjUhQgSgMlwT7a0ufVaTjaKO+MQY
6rIWF9gsHcB+7ndiCGyu79SkS0wg2I/j+ZmYcdseDoFJWkf/kBOTwaLdnncrUmtL
qAbtCIogWt2p6EEcMsah6Sj7uJjiH4ea4gOfIAZI+Ai76OLvEPK8A3A9ichmtlCH
Ejgl7iXISfA4t2wh1o6ZuPPjKVutB5d+UoEC58FjHnP2vb/X1QviALpJXLKfuLin
W71XGkPbT8MvSZ+/cYKvgdMT2DEiqALVQQhOfnk4H+uRE467BxbmWBbJ4oITCc4q
j3XP7v2iTvYh
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:49:59 2026 by rpki-client