Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133332e302f32342d3234203d3e20323632343234.roa
File:                     3137372e34342e3133332e302f32342d3234203d3e20323632343234.roa (raw, json)
Hash identifier:          q/CvMiM3SrvCrsZBQq3b3aQKJ4/s2/kPfAmBzwu8r1A=
Subject key identifier:   39:16:AD:D8:72:B8:8C:3C:B9:2F:F8:08:8D:17:43:A8:04:E4:F8:13
Certificate issuer:       /CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
Certificate serial:       072BA772FD02A78285D866DB29FE4386F275C5BC
Authority key identifier: BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133332e302f32342d3234203d3e20323632343234.roa
Signing time:             Mon 02 Mar 2026 22:31:46 +0000
ROA not before:           Mon 02 Mar 2026 22:26:46 +0000
ROA not after:            Mon 01 Mar 2027 22:31:46 +0000
asID:                     262424
IP address blocks:        177.44.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl
                          rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2b:a7:72:fd:02:a7:82:85:d8:66:db:29:fe:43:86:f2:75:c5:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0
        Validity
            Not Before: Mar  2 22:26:46 2026 GMT
            Not After : Mar  1 22:31:46 2027 GMT
        Subject: CN=3916ADD872B88C3CB92FF8088D1743A804E4F813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8e:bd:7b:ff:98:24:a6:51:3d:70:d1:f4:1c:
                    42:23:26:12:d4:2f:bc:8f:95:19:fd:c1:e4:e8:d5:
                    9d:46:cb:ab:dc:67:58:a0:4b:2a:20:0a:aa:cf:64:
                    e7:e1:41:39:c0:60:0e:5f:c7:6a:eb:48:53:5f:5c:
                    67:21:5b:6a:8b:f4:3b:48:f4:1a:d8:d2:76:df:e6:
                    19:7e:d7:4f:03:16:67:9f:c8:33:52:85:9a:1b:05:
                    66:b1:0b:b8:f7:87:e9:a9:63:94:7b:b3:43:fa:19:
                    65:5d:ab:a7:bf:70:a1:c4:20:63:2c:36:92:5d:0d:
                    d1:e4:6b:e5:b7:68:05:7d:54:e5:61:87:07:46:89:
                    b8:50:7a:34:c0:46:f5:8d:92:3e:bb:af:9e:93:e6:
                    ce:39:42:14:2b:f8:2a:7a:8b:0c:0a:4e:d0:68:e1:
                    27:5c:ce:1a:26:cb:bb:b8:31:0d:0a:19:e2:d0:92:
                    50:e4:e1:55:46:eb:eb:97:a2:a1:87:b3:4d:8e:1f:
                    c9:61:b5:81:f7:31:47:a1:8c:77:27:ec:35:b2:4a:
                    df:50:72:6b:e0:31:60:ca:64:d7:ca:d4:51:df:4a:
                    0e:7f:15:5e:99:4d:b3:a9:43:18:b4:83:f1:fe:2c:
                    92:a6:c4:d7:a9:72:cc:e6:51:c9:9a:df:a1:0c:f5:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:16:AD:D8:72:B8:8C:3C:B9:2F:F8:08:8D:17:43:A8:04:E4:F8:13
            X509v3 Authority Key Identifier:
                keyid:BC:B9:95:CE:EA:05:AD:BF:EB:8D:71:B1:A0:0A:EB:D5:69:81:21:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCB995CEEA05ADBFEB8D71B1A00AEBD5698121E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDkqKxeS4vayrRxpVPifocmZVVxnVyRUjFauNVRTBB/0/3137372e34342e3133332e302f32342d3234203d3e20323632343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:eb:4f:18:e3:9e:e9:62:dc:83:b6:83:49:76:c3:cc:85:
         0f:c9:ec:25:9b:1d:b0:37:ae:15:d5:cf:b0:e8:52:d5:71:a6:
         64:85:6a:53:b6:93:9a:4e:87:9b:7a:7f:09:80:ea:e2:3a:16:
         02:f4:cd:20:4b:48:ae:99:6d:0b:16:59:36:71:4b:e9:28:9f:
         ee:85:e2:ed:5c:2e:d2:68:ec:4a:b0:ae:bd:5d:a2:72:9c:b3:
         11:f2:0c:d8:11:80:9a:6b:e8:b0:50:f9:ec:dd:8f:e9:e4:9c:
         ac:71:4b:60:5b:91:68:0a:d4:f3:61:75:68:be:03:12:8c:ef:
         1e:96:3e:30:85:ab:c2:e9:b1:60:84:9d:dd:e0:e2:75:e1:50:
         28:03:c7:e5:3a:dd:37:6d:cd:c3:b6:9f:d8:9b:4a:e9:56:a7:
         80:1a:54:0c:6b:7d:31:0b:8f:4e:ff:8b:76:6e:2f:c8:97:1e:
         28:34:24:db:bf:7d:d3:88:c5:b4:44:e1:8c:9c:e2:99:99:e9:
         26:91:3f:95:73:7f:21:de:b9:4e:57:e7:aa:07:29:09:96:06:
         9b:33:57:12:53:64:ce:8b:b1:cf:64:d2:bb:86:a1:00:2a:26:
         49:3f:95:b7:83:9e:16:97:40:9f:ec:5e:1a:c3:4e:de:28:e4:
         25:8b:c5:bd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUByuncv0Cp4KF2GbbKf5DhvJ1xbwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNCOTk1Q0VFQTA1QURCRkVCOEQ3MUIxQTAwQUVCRDU2
OTgxMjFFMDAeFw0yNjAzMDIyMjI2NDZaFw0yNzAzMDEyMjMxNDZaMDMxMTAvBgNV
BAMTKDM5MTZBREQ4NzJCODhDM0NCOTJGRjgwODhEMTc0M0E4MDRFNEY4MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5jr17/5gkplE9cNH0HEIjJhLU
L7yPlRn9weTo1Z1Gy6vcZ1igSyogCqrPZOfhQTnAYA5fx2rrSFNfXGchW2qL9DtI
9BrY0nbf5hl+108DFmefyDNShZobBWaxC7j3h+mpY5R7s0P6GWVdq6e/cKHEIGMs
NpJdDdHka+W3aAV9VOVhhwdGibhQejTARvWNkj67r56T5s45QhQr+Cp6iwwKTtBo
4Sdczhomy7u4MQ0KGeLQklDk4VVG6+uXoqGHs02OH8lhtYH3MUehjHcn7DWySt9Q
cmvgMWDKZNfK1FHfSg5/FV6ZTbOpQxi0g/H+LJKmxNepcszmUcma36EM9XMjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUORat2HK4jDy5L/gIjRdDqATk+BMwHwYDVR0j
BBgwFoAUvLmVzuoFrb/rjXGxoArr1WmBIeAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXV1RGtxS3hlUzR2YXlyUnhwVlBpZm9jbVpWVnhuVnlSVWpGYXVOVlJU
QkIvMC9CQ0I5OTVDRUVBMDVBREJGRUI4RDcxQjFBMDBBRUJENTY5ODEyMUUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDQjk5NUNFRUEwNUFEQkZF
QjhENzFCMUEwMEFFQkQ1Njk4MTIxRTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1dURrcUt4ZVM0dmF5clJ4cFZQaWZvY21aVlZ4blZ5UlVqRmF1TlZSVEJCLzAv
MzEzNzM3MmUzNDM0MmUzMTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxLIUwDQYJKoZIhvcNAQELBQADggEBAGSN608Y
457pYtyDtoNJdsPMhQ/J7CWbHbA3rhXVz7DoUtVxpmSFalO2k5pOh5t6fwmA6uI6
FgL0zSBLSK6ZbQsWWTZxS+kon+6F4u1cLtJo7Eqwrr1donKcsxHyDNgRgJpr6LBQ
+ezdj+nknKxxS2BbkWgK1PNhdWi+AxKM7x6WPjCFq8LpsWCEnd3g4nXhUCgDx+U6
3TdtzcO2n9ibSulWp4AaVAxrfTELj07/i3ZuL8iXHig0JNu/fdOIxbRE4Yyc4pmZ
6SaRP5VzfyHeuU5X56oHKQmWBpszVxJTZM6Lsc9k0ruGoQAqJkk/lbeDnhaXQJ/s
XhrDTt4o5CWLxb0=
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:01:50 2026 by rpki-client