Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
File:                     3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa (raw, json)
Hash identifier:          4/+FiCpqhe0pqGebJBI6FjvqOISfVkVksI5QIDOq0ts=
Subject key identifier:   A4:6A:B2:09:1F:C7:01:3C:85:A4:CE:B1:6C:E7:29:E7:18:DA:BF:89
Certificate issuer:       /CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
Certificate serial:       10D69C69353F02770E43B8560E6D79CD7A9CD446
Authority key identifier: DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa
Signing time:             Sun 08 Mar 2026 19:39:09 +0000
ROA not before:           Sun 08 Mar 2026 19:34:09 +0000
ROA not after:            Sun 07 Mar 2027 19:39:09 +0000
asID:                     262462
IP address blocks:        177.105.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl
                          rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d6:9c:69:35:3f:02:77:0e:43:b8:56:0e:6d:79:cd:7a:9c:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD57F54CD0114823ABB5B5203F91EF5EEC26B06F
        Validity
            Not Before: Mar  8 19:34:09 2026 GMT
            Not After : Mar  7 19:39:09 2027 GMT
        Subject: CN=A46AB2091FC7013C85A4CEB16CE729E718DABF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:3e:a9:b9:24:6d:fe:cf:02:b5:47:14:c6:
                    1d:a4:0c:79:29:ae:08:80:78:0a:f9:42:e1:07:1d:
                    f5:db:ab:dd:33:95:95:09:da:d1:b7:59:97:f4:2f:
                    b5:b4:7d:af:aa:d8:d6:a2:f8:57:9d:7f:ff:ea:3a:
                    e9:1c:e0:05:bc:71:5c:ba:fb:e0:b0:9f:54:7d:f2:
                    f3:44:7c:2f:ef:58:06:55:2e:cc:ab:45:d1:1b:16:
                    f2:73:7e:8c:bb:08:c0:87:7e:55:9e:e8:cb:9f:fb:
                    d6:f5:d1:f5:c6:0d:34:51:cb:f0:9e:fa:54:fd:a4:
                    47:d5:f8:0f:dd:30:6b:36:64:a8:18:98:fb:7e:41:
                    ce:2e:04:4c:56:b5:97:97:8c:c3:08:bf:cf:4e:ac:
                    18:d6:05:b9:be:7d:f8:75:50:05:07:ef:a3:20:d3:
                    88:99:9f:b8:1f:d4:3d:64:f8:d0:b0:d2:2a:73:82:
                    51:aa:ca:35:d7:c1:f4:f2:c5:c6:3d:7d:48:23:cb:
                    c6:e5:48:ec:3d:04:c8:42:6e:be:36:1d:fb:22:c3:
                    1a:54:f9:30:cf:4b:2c:7d:80:70:e8:4d:97:07:d8:
                    87:5b:74:6f:e6:db:20:c0:e4:21:4e:11:7b:4b:a9:
                    36:43:66:cf:1f:6c:36:a8:e4:ec:e5:29:b4:83:fd:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6A:B2:09:1F:C7:01:3C:85:A4:CE:B1:6C:E7:29:E7:18:DA:BF:89
            X509v3 Authority Key Identifier:
                keyid:DD:57:F5:4C:D0:11:48:23:AB:B5:B5:20:3F:91:EF:5E:EC:26:B0:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD57F54CD0114823ABB5B5203F91EF5EEC26B06F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3234203d3e20323632343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:0e:8c:62:b8:64:15:55:a6:5f:a0:0c:03:62:b9:68:40:83:
         39:71:ef:cf:18:5b:da:61:ff:0b:28:a5:76:fc:32:31:bb:ac:
         9d:56:53:9f:ea:b5:e9:b3:88:1b:b2:a8:8d:ce:38:be:f1:79:
         2b:88:b1:96:9d:d8:7b:1a:d7:e3:60:f6:92:62:ca:45:22:e8:
         00:8a:a3:6c:7a:44:26:7b:b2:54:5d:5a:40:5b:3a:45:3d:ba:
         7a:7d:54:83:4b:7a:0c:ad:08:9e:e5:16:79:08:f3:9d:17:a7:
         e2:be:13:3a:72:1f:5c:8a:cd:f0:95:55:3b:38:2e:a6:6f:d1:
         fb:75:60:98:0d:8a:bc:8b:5c:83:aa:8d:61:90:a6:4b:21:76:
         94:0f:8f:9f:d4:16:ed:3d:77:9f:85:9e:f4:5f:8d:2d:fe:f4:
         4e:da:98:43:02:a3:d6:0f:2b:16:4c:58:f4:3d:7a:af:46:83:
         34:e6:15:c1:81:98:ff:98:9f:94:38:39:19:f7:60:f8:5a:eb:
         3c:38:8c:59:a5:1c:72:ae:c0:a2:68:ad:5e:1b:a9:d6:b9:2f:
         ae:55:fb:9d:0c:9a:21:43:50:33:ab:d0:8c:0b:28:77:01:71:
         14:6f:91:7a:4f:20:99:8b:89:50:24:71:45:26:4e:a3:6b:27:
         ee:74:87:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUENacaTU/AncOQ7hWDm15zXqc1EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ1N0Y1NENEMDExNDgyM0FCQjVCNTIwM0Y5MUVGNUVF
QzI2QjA2RjAeFw0yNjAzMDgxOTM0MDlaFw0yNzAzMDcxOTM5MDlaMDMxMTAvBgNV
BAMTKEE0NkFCMjA5MUZDNzAxM0M4NUE0Q0VCMTZDRTcyOUU3MThEQUJGODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIj6puSRt/s8CtUcUxh2kDHkp
rgiAeAr5QuEHHfXbq90zlZUJ2tG3WZf0L7W0fa+q2Nai+Fedf//qOukc4AW8cVy6
++Cwn1R98vNEfC/vWAZVLsyrRdEbFvJzfoy7CMCHflWe6Muf+9b10fXGDTRRy/Ce
+lT9pEfV+A/dMGs2ZKgYmPt+Qc4uBExWtZeXjMMIv89OrBjWBbm+ffh1UAUH76Mg
04iZn7gf1D1k+NCw0ipzglGqyjXXwfTyxcY9fUgjy8blSOw9BMhCbr42HfsiwxpU
+TDPSyx9gHDoTZcH2IdbdG/m2yDA5CFOEXtLqTZDZs8fbDao5OzlKbSD/dOtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUpGqyCR/HATyFpM6xbOcp5xjav4kwHwYDVR0j
BBgwFoAU3Vf1TNARSCOrtbUgP5HvXuwmsG8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpvSE1zUkRBMkdNQjRTVVJkcmk5Y29GblBCUUJHNWVpaEtZZ2hGbWJu
VTQvMC9ERDU3RjU0Q0QwMTE0ODIzQUJCNUI1MjAzRjkxRUY1RUVDMjZCMDZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RENTdGNTRDRDAxMTQ4MjNB
QkI1QjUyMDNGOTFFRjVFRUMyNkIwNkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRab0hNc1JEQTJHTUI0U1VSZHJpOWNvRm5QQlFCRzVlaWhLWWdoRm1iblU0LzAv
MzEzNzM3MmUzMTMwMzUyZTMxMzQzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBLFpkDANBgkqhkiG9w0BAQsFAAOCAQEAqg6M
YrhkFVWmX6AMA2K5aECDOXHvzxhb2mH/CyildvwyMbusnVZTn+q16bOIG7Kojc44
vvF5K4ixlp3YexrX42D2kmLKRSLoAIqjbHpEJnuyVF1aQFs6RT26en1Ug0t6DK0I
nuUWeQjznRen4r4TOnIfXIrN8JVVOzgupm/R+3VgmA2KvItcg6qNYZCmSyF2lA+P
n9QW7T13n4We9F+NLf70TtqYQwKj1g8rFkxY9D16r0aDNOYVwYGY/5iflDg5Gfdg
+FrrPDiMWaUccq7AomitXhup1rkvrlX7nQyaIUNQM6vQjAsodwFxFG+Rek8gmYuJ
UCRxRSZOo2sn7nSHhQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:21:59 2026 by rpki-client