Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          BLHfYE2whhn3XUiKOR0VOJFJRsyps4xJYMWalIS+kn4=
Subject key identifier:   11:52:37:B5:A1:ED:9D:57:22:77:60:D8:15:70:C1:A8:41:5A:27:7B
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       78F74FD0660B109B0085074700A2D19F9DC53081
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:40 +0000
ROA not before:           Mon 02 Mar 2026 22:26:40 +0000
ROA not after:            Mon 01 Mar 2027 22:31:40 +0000
asID:                     262424
IP address blocks:        177.44.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:4f:d0:66:0b:10:9b:00:85:07:47:00:a2:d1:9f:9d:c5:30:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:40 2026 GMT
            Not After : Mar  1 22:31:40 2027 GMT
        Subject: CN=115237B5A1ED9D57227760D81570C1A8415A277B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:16:c5:9a:67:cc:8b:0a:ea:ef:1c:16:15:
                    89:ca:64:f3:e0:9e:eb:a5:0d:92:22:f6:3f:5e:b4:
                    86:4a:0c:73:2e:65:36:e2:aa:28:90:30:ea:bb:14:
                    fc:33:4c:f7:fe:e2:81:72:3d:2b:6d:ac:0d:af:90:
                    e6:8b:f6:63:1a:62:ed:15:fb:76:8c:7b:0d:51:7b:
                    fd:f8:6f:06:dd:68:f6:0e:77:a1:56:c8:fa:54:ad:
                    83:99:79:1f:98:c5:bc:fc:e2:e2:6c:9f:9e:a6:9f:
                    a3:de:14:79:4d:dd:e5:9f:79:70:0d:e9:2c:54:fe:
                    ac:92:f6:44:7f:3a:e9:06:29:6d:f6:c0:bf:ca:27:
                    87:b4:8e:1c:1f:21:b3:35:46:f6:7f:f5:0b:68:2a:
                    3c:8f:c7:59:8c:21:bb:c3:cc:fc:fc:50:6a:ad:06:
                    7b:78:a8:11:cf:9e:68:d6:ae:05:a6:c3:a6:c3:99:
                    c5:87:da:fb:39:66:d6:34:75:17:9f:ba:0a:c2:67:
                    c5:ec:9b:21:ee:f7:3b:48:29:38:31:2f:5f:29:4b:
                    5e:fa:32:96:79:0c:dd:b0:54:31:e6:48:bd:89:76:
                    e1:d0:6c:48:32:46:47:d8:52:db:4e:7b:32:51:48:
                    a7:b6:86:43:25:c0:00:39:26:93:cb:c3:8d:05:eb:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:37:B5:A1:ED:9D:57:22:77:60:D8:15:70:C1:A8:41:5A:27:7B
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133302e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:17:7f:47:14:e8:b8:60:37:e6:26:f3:38:76:e9:b6:c3:
         f7:af:5c:fe:47:ac:4d:9b:4c:33:98:5f:56:23:37:57:ae:53:
         7c:55:e2:00:e2:9c:3a:85:f4:8f:51:2e:f3:a8:ec:e7:ea:3c:
         80:d6:8e:3b:3b:7a:bf:18:9d:1f:03:f4:c2:a3:8d:34:76:a1:
         aa:fe:86:16:dc:b7:a0:80:b7:a6:1e:34:06:05:a1:27:1b:7e:
         25:7e:9c:08:ec:51:37:1c:bf:e8:f4:35:fa:4c:93:b6:94:24:
         29:77:79:27:e5:7e:5d:59:2f:a0:6a:1a:4b:b8:90:5f:06:ad:
         2e:65:cc:77:22:b6:0a:42:60:8e:52:cc:c7:9b:98:2c:95:64:
         71:f5:3e:f7:a5:3d:20:eb:73:9e:3c:68:55:fe:67:91:81:b6:
         45:84:4f:14:09:19:72:44:90:f4:68:93:bc:9a:38:cc:91:e7:
         27:48:70:06:e7:8b:62:d7:01:31:65:6f:c1:51:0e:14:ff:b8:
         6c:68:ba:3d:3e:6b:08:51:10:ca:df:6c:ba:08:9e:e9:ec:b9:
         12:cc:1d:46:b1:69:24:31:9d:c3:30:99:1a:c7:13:3c:6e:fc:
         13:20:e9:91:f4:1e:7a:6d:6a:63:0d:ab:66:1c:05:68:3d:2b:
         34:e3:1b:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUePdP0GYLEJsAhQdHAKLRn53FMIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNCOTk1Q0VFQTA1QURCRkVCOEQ3MUIxQTAwQUVCRDU2
OTgxMjFFMDAeFw0yNjAzMDIyMjI2NDBaFw0yNzAzMDEyMjMxNDBaMDMxMTAvBgNV
BAMTKDExNTIzN0I1QTFFRDlENTcyMjc3NjBEODE1NzBDMUE4NDE1QTI3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2hbFmmfMiwrq7xwWFYnKZPPg
nuulDZIi9j9etIZKDHMuZTbiqiiQMOq7FPwzTPf+4oFyPSttrA2vkOaL9mMaYu0V
+3aMew1Re/34bwbdaPYOd6FWyPpUrYOZeR+Yxbz84uJsn56mn6PeFHlN3eWfeXAN
6SxU/qyS9kR/OukGKW32wL/KJ4e0jhwfIbM1RvZ/9QtoKjyPx1mMIbvDzPz8UGqt
Bnt4qBHPnmjWrgWmw6bDmcWH2vs5ZtY0dRefugrCZ8XsmyHu9ztIKTgxL18pS176
MpZ5DN2wVDHmSL2JduHQbEgyRkfYUttOezJRSKe2hkMlwAA5JpPLw40F60ZJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEVI3taHtnVcid2DYFXDBqEFaJ3swHwYDVR0j
BBgwFoAUvLmVzuoFrb/rjXGxoArr1WmBIeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC9CQ0I5OTVDRUVBMDVBREJGRUI4RDcxQjFBMDBBRUJENTY5ODEyMUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDQjk5NUNFRUEwNUFEQkZF
QjhENzFCMUEwMEFFQkQ1Njk4MTIxRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzEzNzM3MmUzNDM0MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxLIIwDQYJKoZIhvcNAQELBQADggEBAIvdF39H
FOi4YDfmJvM4dum2w/evXP5HrE2bTDOYX1YjN1euU3xV4gDinDqF9I9RLvOo7Ofq
PIDWjjs7er8YnR8D9MKjjTR2oar+hhbct6CAt6YeNAYFoScbfiV+nAjsUTccv+j0
NfpMk7aUJCl3eSflfl1ZL6BqGku4kF8GrS5lzHcitgpCYI5SzMebmCyVZHH1Pvel
PSDrc548aFX+Z5GBtkWETxQJGXJEkPRok7yaOMyR5ydIcAbni2LXATFlb8FRDhT/
uGxouj0+awhREMrfbLoInunsuRLMHUaxaSQxncMwmRrHEzxu/BMg6ZH0HnptamMN
q2YcBWg9KzTjG+g=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:52 2026 by rpki-client