Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135362e302f32342d3234203d3e20323637333138.roa
File:                     3137372e37342e3135362e302f32342d3234203d3e20323637333138.roa (raw, json)
Hash identifier:          PxFpvlwSwkLDUGqU1w7XR5xT7hypN/XYCk9ycwecYR4=
Subject key identifier:   A4:C3:26:09:50:CA:B0:AE:01:4D:01:56:D5:D2:C7:C8:23:0B:77:B9
Certificate issuer:       /CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
Certificate serial:       75E836C76525F7F19959B0F512882C50E914DD02
Authority key identifier: A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135362e302f32342d3234203d3e20323637333138.roa
Signing time:             Thu 17 Sep 2026 13:31:30 +0000
ROA not before:           Thu 17 Sep 2026 13:26:30 +0000
ROA not after:            Thu 16 Sep 2027 13:31:30 +0000
asID:                     267318
IP address blocks:        177.74.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl
                          rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e8:36:c7:65:25:f7:f1:99:59:b0:f5:12:88:2c:50:e9:14:dd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9962FA88F57EBBDA0EB7877C138055B3838BB09
        Validity
            Not Before: Sep 17 13:26:30 2026 GMT
            Not After : Sep 16 13:31:30 2027 GMT
        Subject: CN=A4C3260950CAB0AE014D0156D5D2C7C8230B77B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4b:c7:27:15:97:cd:79:67:c1:24:f3:dc:41:
                    38:eb:66:67:4b:1d:b0:7b:69:fa:22:c9:4f:8b:8b:
                    e5:34:3a:da:9d:57:f1:93:db:53:19:aa:49:98:e5:
                    14:56:8d:bf:50:49:2f:96:ac:3a:9d:d8:19:29:4b:
                    c4:d0:29:1f:82:c7:a8:e8:64:a8:43:40:b2:21:ed:
                    45:94:37:56:1c:1a:8b:1b:bf:a5:f9:c2:d9:a4:ab:
                    73:44:c3:81:c6:61:2e:e1:9b:15:5a:2b:da:f9:38:
                    51:73:8c:16:f0:3b:1e:e3:0c:71:5c:23:40:95:2f:
                    45:88:43:8c:5b:be:9d:78:c8:f9:5d:20:43:c0:50:
                    9a:e2:08:a0:05:53:8a:b1:66:c5:0c:bf:e0:98:3f:
                    d9:9a:a0:a8:cd:0e:72:7b:0c:61:17:cc:05:78:69:
                    6c:0b:71:9e:2c:7e:a1:c8:88:20:b5:37:56:4d:0a:
                    67:07:27:26:84:15:83:ef:3b:c8:5f:bc:0f:6c:85:
                    01:a2:1a:81:da:4b:b6:99:72:e7:38:49:e2:89:14:
                    05:ef:9a:be:99:72:25:1f:ca:3c:21:4b:89:45:5b:
                    a5:f6:13:ae:f9:be:bd:13:44:73:36:76:86:21:d4:
                    24:50:bf:0b:4a:a9:7a:18:fe:f6:3a:5e:04:d2:bb:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C3:26:09:50:CA:B0:AE:01:4D:01:56:D5:D2:C7:C8:23:0B:77:B9
            X509v3 Authority Key Identifier:
                keyid:A9:96:2F:A8:8F:57:EB:BD:A0:EB:78:77:C1:38:05:5B:38:38:BB:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/A9962FA88F57EBBDA0EB7877C138055B3838BB09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9962FA88F57EBBDA0EB7877C138055B3838BB09.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3137372e37342e3135362e302f32342d3234203d3e20323637333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.74.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:01:1c:96:d1:5b:be:41:ac:73:79:ba:7d:9b:e1:79:23:f1:
         a4:58:5e:19:d3:09:55:ee:67:e6:5f:50:f5:7f:57:0b:5b:20:
         26:bf:9e:53:b7:16:91:f9:84:73:7a:72:7a:ab:0e:e3:fa:0c:
         3f:7c:c6:ed:d5:4a:d3:c0:cf:a4:75:b2:fa:92:ea:40:4b:b7:
         c6:fc:99:f6:b5:12:5a:72:ba:1f:10:5f:b6:c2:a1:3e:ac:68:
         f2:dc:3b:70:4e:32:ed:06:06:8a:9f:83:e5:3a:04:35:df:9b:
         eb:69:55:35:c8:9c:0e:e3:6c:28:d9:d4:5e:8b:21:18:0d:ad:
         35:b3:8f:bb:d9:15:78:c8:7e:8e:99:e9:c0:9b:0b:e0:7e:3d:
         7c:d3:12:5f:89:7b:05:a7:fd:bb:fb:cc:31:4f:1b:da:04:20:
         9b:84:15:51:70:ea:a2:70:23:2a:c3:f8:22:f8:8d:ab:d7:63:
         c6:5b:85:74:fd:c5:cd:81:20:d1:8d:56:77:9e:9e:95:06:80:
         dc:c2:32:cc:5a:f3:a7:ed:e1:50:34:ea:75:f0:0a:32:47:97:
         02:eb:7d:81:48:14:c6:c1:a5:31:94:28:0b:b6:ce:c2:92:e9:
         09:c1:34:dc:79:c7:3d:4c:ef:68:bb:e1:bc:38:8f:a3:c3:03:
         b2:96:1b:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdeg2x2Ul9/GZWbD1EogsUOkU3QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTk5NjJGQTg4RjU3RUJCREEwRUI3ODc3QzEzODA1NUIz
ODM4QkIwOTAeFw0yNjA5MTcxMzI2MzBaFw0yNzA5MTYxMzMxMzBaMDMxMTAvBgNV
BAMTKEE0QzMyNjA5NTBDQUIwQUUwMTREMDE1NkQ1RDJDN0M4MjMwQjc3QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkS8cnFZfNeWfBJPPcQTjrZmdL
HbB7afoiyU+Li+U0OtqdV/GT21MZqkmY5RRWjb9QSS+WrDqd2BkpS8TQKR+Cx6jo
ZKhDQLIh7UWUN1YcGosbv6X5wtmkq3NEw4HGYS7hmxVaK9r5OFFzjBbwOx7jDHFc
I0CVL0WIQ4xbvp14yPldIEPAUJriCKAFU4qxZsUMv+CYP9maoKjNDnJ7DGEXzAV4
aWwLcZ4sfqHIiCC1N1ZNCmcHJyaEFYPvO8hfvA9shQGiGoHaS7aZcuc4SeKJFAXv
mr6ZciUfyjwhS4lFW6X2E675vr0TRHM2doYh1CRQvwtKqXoY/vY6XgTSu3XjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUpMMmCVDKsK4BTQFW1dLHyCMLd7kwHwYDVR0j
BBgwFoAUqZYvqI9X672g63h3wTgFWzg4uwkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUwxaldOTGlnV1lNOXhtMzl6ZVpZeHlyTGpUWWZ5cWtHQ2VvRTNYWGha
ekwvMC9BOTk2MkZBODhGNTdFQkJEQTBFQjc4NzdDMTM4MDU1QjM4MzhCQjA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5OTYyRkE4OEY1N0VCQkRB
MEVCNzg3N0MxMzgwNTVCMzgzOEJCMDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVMMWpXTkxpZ1dZTTl4bTM5emVaWXh5ckxqVFlmeXFrR0Nlb0UzWFhoWnpMLzAv
MzEzNzM3MmUzNzM0MmUzMTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxSpwwDQYJKoZIhvcNAQELBQADggEBADEBHJbR
W75BrHN5un2b4Xkj8aRYXhnTCVXuZ+ZfUPV/VwtbICa/nlO3FpH5hHN6cnqrDuP6
DD98xu3VStPAz6R1svqS6kBLt8b8mfa1Elpyuh8QX7bCoT6saPLcO3BOMu0GBoqf
g+U6BDXfm+tpVTXInA7jbCjZ1F6LIRgNrTWzj7vZFXjIfo6Z6cCbC+B+PXzTEl+J
ewWn/bv7zDFPG9oEIJuEFVFw6qJwIyrD+CL4javXY8ZbhXT9xc2BINGNVneenpUG
gNzCMsxa86ft4VA06nXwCjJHlwLrfYFIFMbBpTGUKAu2zsKS6QnBNNx5xz1M72i7
4bw4j6PDA7KWG6Q=
-----END CERTIFICATE-----
Generated at Wed Oct 14 09:54:12 2026 by rpki-client