Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa
File:                     3137372e35332e32382e302f32342d3234203d3e20323730383635.roa (raw, json)
Hash identifier:          XJ0Ko91IDMShzUo5iSTixChgWo9O1iySQLWpHarAN94=
Subject key identifier:   08:D8:28:AE:0F:8B:D2:D1:C6:BD:1D:B2:24:DB:52:DC:03:E5:0C:BB
Certificate issuer:       /CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0
Certificate serial:       7642009325D6D285E3108B46670E69A0C7355AA2
Authority key identifier: 7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa
Signing time:             Sat 03 Oct 2026 00:12:05 +0000
ROA not before:           Sat 03 Oct 2026 00:07:05 +0000
ROA not after:            Sat 02 Oct 2027 00:12:05 +0000
asID:                     270865
IP address blocks:        177.53.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl
                          rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 13:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:42:00:93:25:d6:d2:85:e3:10:8b:46:67:0e:69:a0:c7:35:5a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0
        Validity
            Not Before: Oct  3 00:07:05 2026 GMT
            Not After : Oct  2 00:12:05 2027 GMT
        Subject: CN=08D828AE0F8BD2D1C6BD1DB224DB52DC03E50CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:24:76:d3:bf:ae:00:50:a7:96:e3:74:a7:
                    e2:96:a3:6c:d9:3a:04:9f:53:82:df:d7:ea:72:69:
                    4b:d6:37:9c:a2:0d:f7:c7:a0:7c:54:3d:a9:84:28:
                    b9:7d:54:85:f7:8d:04:fa:92:d3:fd:00:1b:c9:47:
                    14:b5:12:bf:d1:9b:b6:3e:b5:e1:cf:5f:ae:c5:dd:
                    c2:59:a9:2f:b3:5b:9b:92:17:73:c3:da:93:50:49:
                    7b:90:75:95:e1:d1:1c:a8:da:4b:b3:e5:c6:44:dc:
                    fb:c2:97:2c:0e:fa:15:04:0a:ae:51:27:63:c6:5e:
                    61:c0:35:8e:40:16:2b:25:e9:75:11:ba:b2:16:eb:
                    b0:9a:f3:e8:2a:14:fd:6e:7a:af:d8:08:f0:51:94:
                    46:ef:69:d1:f2:e3:f1:9c:36:07:a1:02:0c:cb:be:
                    e3:75:1e:bb:88:c2:a2:a5:bb:cb:a1:ca:d3:86:54:
                    18:3d:49:96:b9:90:d2:10:46:44:0b:6d:61:66:46:
                    77:cf:24:78:77:de:89:90:7a:37:e1:4c:b0:36:2e:
                    a5:67:40:3c:e4:03:90:03:8f:1a:5d:19:d1:0d:85:
                    ed:0d:31:7e:9e:b4:c6:e9:db:11:df:76:f5:b5:b3:
                    c1:b4:fe:f9:06:58:03:61:c9:ce:5a:38:9b:df:38:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D8:28:AE:0F:8B:D2:D1:C6:BD:1D:B2:24:DB:52:DC:03:E5:0C:BB
            X509v3 Authority Key Identifier:
                keyid:7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/3137372e35332e32382e302f32342d3234203d3e20323730383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:b0:78:17:2b:13:69:cd:80:ce:7b:68:d1:a5:19:f8:dd:
         7a:fa:f5:f7:71:94:1e:7b:af:a2:6d:c9:39:66:0b:9b:92:3b:
         55:1b:e5:7c:13:f7:5d:c9:ea:61:12:ed:e2:00:d9:2d:da:6c:
         f8:2d:28:08:ce:6f:e2:f1:3b:cd:96:16:25:88:d6:ee:1f:ef:
         cc:8d:96:5f:3f:e9:05:83:40:9c:86:68:af:14:c4:5e:fd:b6:
         49:7b:19:13:7a:e3:06:c3:81:55:84:51:87:9a:6b:71:1f:54:
         6b:21:e2:c5:c2:80:f6:91:ec:78:14:3e:25:7b:e3:f9:3e:b5:
         a8:1f:ef:2a:07:35:46:89:6d:36:17:00:6a:91:68:ec:3b:07:
         99:53:e6:92:77:04:f0:8a:3c:58:59:6b:35:20:e8:1e:16:18:
         f1:ed:91:cd:7b:36:95:93:8f:c2:be:fc:66:33:a7:0d:a3:00:
         c4:d8:bf:d0:1d:e3:09:00:c5:cd:6d:04:71:86:0b:06:6e:bc:
         e9:c0:f6:2b:1d:1c:63:bc:d8:d4:9a:6e:a2:02:b3:14:1f:49:
         9d:70:40:69:d7:2b:9c:6c:21:a6:c6:8d:39:64:06:32:94:2a:
         df:82:a3:bf:83:b3:75:17:28:4a:5c:60:66:28:54:32:bd:bc:
         bc:2c:e3:13
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdkIAkyXW0oXjEItGZw5poMc1WqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U3QTk2QkE2QzQwODc3RTVCNEVCREM1MEVDMjMyQzZE
RkM0NkRFMDAeFw0yNjEwMDMwMDA3MDVaFw0yNzEwMDIwMDEyMDVaMDMxMTAvBgNV
BAMTKDA4RDgyOEFFMEY4QkQyRDFDNkJEMURCMjI0REI1MkRDMDNFNTBDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZyR207+uAFCnluN0p+KWo2zZ
OgSfU4Lf1+pyaUvWN5yiDffHoHxUPamEKLl9VIX3jQT6ktP9ABvJRxS1Er/Rm7Y+
teHPX67F3cJZqS+zW5uSF3PD2pNQSXuQdZXh0Ryo2kuz5cZE3PvClywO+hUECq5R
J2PGXmHANY5AFisl6XURurIW67Ca8+gqFP1ueq/YCPBRlEbvadHy4/GcNgehAgzL
vuN1HruIwqKlu8uhytOGVBg9SZa5kNIQRkQLbWFmRnfPJHh33omQejfhTLA2LqVn
QDzkA5ADjxpdGdENhe0NMX6etMbp2xHfdvW1s8G0/vkGWANhyc5aOJvfONaVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCNgorg+L0tHGvR2yJNtS3APlDLswHwYDVR0j
BBgwFoAUfnqWumxAh35bTr3FDsIyxt/EbeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5MQkQ5NHJRNk5KNWhZRFNRNGY5TVQ5cGtxYWRmdTlGQnNhd1NWVm1x
TnMvMC83RTdBOTZCQTZDNDA4NzdFNUI0RUJEQzUwRUMyMzJDNkRGQzQ2REUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdFN0E5NkJBNkM0MDg3N0U1
QjRFQkRDNTBFQzIzMkM2REZDNDZERTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuTEJEOTRyUTZOSjVoWURTUTRmOU1UOXBrcWFkZnU5RkJzYXdTVlZtcU5zLzAv
MzEzNzM3MmUzNTMzMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTUcMA0GCSqGSIb3DQEBCwUAA4IBAQAGDLB4FysT
ac2Aznto0aUZ+N16+vX3cZQee6+ibck5ZgubkjtVG+V8E/ddyephEu3iANkt2mz4
LSgIzm/i8TvNlhYliNbuH+/MjZZfP+kFg0CchmivFMRe/bZJexkTeuMGw4FVhFGH
mmtxH1RrIeLFwoD2kex4FD4le+P5PrWoH+8qBzVGiW02FwBqkWjsOweZU+aSdwTw
ijxYWWs1IOgeFhjx7ZHNezaVk4/CvvxmM6cNowDE2L/QHeMJAMXNbQRxhgsGbrzp
wPYrHRxjvNjUmm6iArMUH0mdcEBp1yucbCGmxo05ZAYylCrfgqO/g7N1FyhKXGBm
KFQyvby8LOMT
-----END CERTIFICATE-----
Generated at Wed Oct 28 19:46:15 2026 by rpki-client