Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/3230312e37372e3135302e302f32342d3234203d3e203631363031.roa
File:                     3230312e37372e3135302e302f32342d3234203d3e203631363031.roa (raw, json)
Hash identifier:          /fWDnAWy8gDZyiA3J6m3z5bkdol+KD+zED85B/x3Exo=
Subject key identifier:   6D:EA:AB:CB:F6:37:F2:3A:5C:D4:5A:9B:5A:CB:89:3A:DF:7B:EC:0F
Certificate issuer:       /CN=ED138B01F4B95F1ECC64354CC310BF641EEADEE3
Certificate serial:       64F54CA5E54A9F5A4FE3CF079778B762DE687150
Authority key identifier: ED:13:8B:01:F4:B9:5F:1E:CC:64:35:4C:C3:10:BF:64:1E:EA:DE:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/3230312e37372e3135302e302f32342d3234203d3e203631363031.roa
Signing time:             Fri 20 Mar 2026 19:33:14 +0000
ROA not before:           Fri 20 Mar 2026 19:28:14 +0000
ROA not after:            Fri 19 Mar 2027 19:33:14 +0000
asID:                     61601
IP address blocks:        201.77.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.crl
                          rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 18:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f5:4c:a5:e5:4a:9f:5a:4f:e3:cf:07:97:78:b7:62:de:68:71:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED138B01F4B95F1ECC64354CC310BF641EEADEE3
        Validity
            Not Before: Mar 20 19:28:14 2026 GMT
            Not After : Mar 19 19:33:14 2027 GMT
        Subject: CN=6DEAABCBF637F23A5CD45A9B5ACB893ADF7BEC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:35:71:e2:c2:92:76:85:b5:41:52:4a:5c:
                    93:d7:02:d9:4b:de:49:27:31:65:e9:0c:05:be:9f:
                    8e:a4:e8:b6:5a:26:bc:d7:56:e4:05:59:88:ba:ce:
                    48:d9:74:f9:65:d1:7b:4f:ee:50:06:47:5b:25:f1:
                    55:83:7b:9e:aa:d7:09:66:28:c5:79:79:75:2b:6d:
                    8d:2e:09:23:46:6a:1b:91:6f:34:60:17:a7:e5:52:
                    86:e9:4d:ee:da:a6:8d:5e:6c:a0:02:e7:25:f3:45:
                    11:05:16:25:5d:86:b1:42:ca:8c:bd:c2:18:f3:83:
                    a5:89:b9:0b:48:2c:ad:07:69:00:d6:75:95:02:8b:
                    31:3a:47:34:ad:99:eb:86:ab:07:3f:ea:70:2c:01:
                    19:5a:88:85:01:58:fb:e4:c3:4d:f8:30:e1:8a:d9:
                    79:4b:51:82:73:67:ca:42:e7:3a:87:f9:64:79:75:
                    2f:2a:47:68:be:d0:6c:6b:d6:6f:ad:15:59:63:b6:
                    df:e7:66:0d:a9:48:d1:57:5e:25:92:a7:2b:c4:bd:
                    a7:f2:22:cf:21:7d:da:0e:ea:3f:30:a2:bb:39:02:
                    b0:9e:ac:62:9d:5a:a0:ef:8a:a2:47:b7:89:3e:0e:
                    54:d7:67:af:4d:cf:02:a7:d3:38:22:10:59:bc:d6:
                    76:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EA:AB:CB:F6:37:F2:3A:5C:D4:5A:9B:5A:CB:89:3A:DF:7B:EC:0F
            X509v3 Authority Key Identifier:
                keyid:ED:13:8B:01:F4:B9:5F:1E:CC:64:35:4C:C3:10:BF:64:1E:EA:DE:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED138B01F4B95F1ECC64354CC310BF641EEADEE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/65ZL4bbJtYd8Z8Da7MCrNCnroSbHuWkx7eVSXZbBYkus/0/3230312e37372e3135302e302f32342d3234203d3e203631363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:2b:f1:7b:7a:ec:31:3b:aa:4f:c7:26:a3:86:10:37:9e:
         54:d2:08:fb:d8:72:cc:a4:62:13:50:65:00:0c:2b:e2:88:62:
         a8:d8:43:13:4e:bf:5a:8d:d6:46:88:c8:b6:8c:16:2f:08:df:
         1d:33:9d:85:10:b0:a3:65:5d:03:c2:b2:79:fd:1b:3d:c8:36:
         05:6f:8e:62:9c:e3:ca:c4:d2:08:da:1e:61:ed:c6:2f:c0:0c:
         5f:74:ce:f7:b6:4f:e4:ec:e6:f9:22:e9:88:de:e2:b1:b8:15:
         e4:da:fe:c0:b3:43:1f:cd:fe:6a:de:36:52:66:c9:95:bf:87:
         77:5f:64:1a:7d:f1:6f:36:5c:1e:16:aa:26:18:c7:3b:f5:0d:
         3e:1e:8f:37:0f:e5:0b:a3:b8:11:65:eb:8d:d1:45:f4:13:96:
         f4:2d:f1:98:4f:cc:56:14:67:cb:76:74:9a:ae:f7:d1:bd:8b:
         9e:c6:a2:c1:34:dc:99:25:e7:30:43:9e:43:ed:f0:01:aa:8f:
         12:fe:16:69:8f:1e:58:85:2d:a6:13:17:fc:e1:0c:ef:b3:8a:
         4b:66:98:92:3b:75:35:ca:48:d2:ba:d7:b9:3d:d9:80:56:7b:
         13:55:34:a7:f3:8a:42:2c:f1:a1:93:8a:59:f3:0d:4e:31:d6:
         ef:5c:8f:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZPVMpeVKn1pP488Hl3i3Yt5ocVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQxMzhCMDFGNEI5NUYxRUNDNjQzNTRDQzMxMEJGNjQx
RUVBREVFMzAeFw0yNjAzMjAxOTI4MTRaFw0yNzAzMTkxOTMzMTRaMDMxMTAvBgNV
BAMTKDZERUFBQkNCRjYzN0YyM0E1Q0Q0NUE5QjVBQ0I4OTNBREY3QkVDMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwDVx4sKSdoW1QVJKXJPXAtlL
3kknMWXpDAW+n46k6LZaJrzXVuQFWYi6zkjZdPll0XtP7lAGR1sl8VWDe56q1wlm
KMV5eXUrbY0uCSNGahuRbzRgF6flUobpTe7apo1ebKAC5yXzRREFFiVdhrFCyoy9
whjzg6WJuQtILK0HaQDWdZUCizE6RzStmeuGqwc/6nAsARlaiIUBWPvkw034MOGK
2XlLUYJzZ8pC5zqH+WR5dS8qR2i+0Gxr1m+tFVljtt/nZg2pSNFXXiWSpyvEvafy
Is8hfdoO6j8wors5ArCerGKdWqDviqJHt4k+DlTXZ69NzwKn0zgiEFm81nZNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUbeqry/Y38jpc1FqbWsuJOt977A8wHwYDVR0j
BBgwFoAU7ROLAfS5Xx7MZDVMwxC/ZB7q3uMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjVaTDRiYkp0WWQ4WjhEYTdNQ3JOQ25yb1NiSHVXa3g3ZVZTWFpiQllr
dXMvMC9FRDEzOEIwMUY0Qjk1RjFFQ0M2NDM1NENDMzEwQkY2NDFFRUFERUUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEMTM4QjAxRjRCOTVGMUVD
QzY0MzU0Q0MzMTBCRjY0MUVFQURFRTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY1Wkw0YmJKdFlkOFo4RGE3TUNyTkNucm9TYkh1V2t4N2VWU1haYkJZa3VzLzAv
MzIzMDMxMmUzNzM3MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyU2WMA0GCSqGSIb3DQEBCwUAA4IBAQBOJSvxe3rs
MTuqT8cmo4YQN55U0gj72HLMpGITUGUADCviiGKo2EMTTr9ajdZGiMi2jBYvCN8d
M52FELCjZV0DwrJ5/Rs9yDYFb45inOPKxNII2h5h7cYvwAxfdM73tk/k7Ob5IumI
3uKxuBXk2v7As0Mfzf5q3jZSZsmVv4d3X2QaffFvNlweFqomGMc79Q0+Ho83D+UL
o7gRZeuN0UX0E5b0LfGYT8xWFGfLdnSarvfRvYuexqLBNNyZJecwQ55D7fABqo8S
/hZpjx5YhS2mExf84Qzvs4pLZpiSO3U1ykjSute5PdmAVnsTVTSn84pCLPGhk4pZ
8w1OMdbvXI8C
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:49 2026 by rpki-client