Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32312d3231203d3e203533303437.roa (raw, json)
Hash identifier:          OwlfzjfZOLOcn+QTRSSvZfwOU+tJZwW7S+hyHmCOVBE=
Subject key identifier:   E0:19:85:04:71:C8:27:04:B5:02:E0:2B:B7:16:F4:C2:10:12:F8:D2
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       0BB3AA4EB3B1613E9694B3E80401CC8F137C347A
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:43 +0000
ROA not before:           Thu 08 Oct 2026 13:34:43 +0000
ROA not after:            Thu 07 Oct 2027 13:39:43 +0000
asID:                     53047
IP address blocks:        177.101.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b3:aa:4e:b3:b1:61:3e:96:94:b3:e8:04:01:cc:8f:13:7c:34:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:43 2026 GMT
            Not After : Oct  7 13:39:43 2027 GMT
        Subject: CN=E019850471C82704B502E02BB716F4C21012F8D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:47:7f:25:24:d9:ac:08:d2:41:82:e7:5f:c7:
                    2b:82:2f:7b:ba:83:55:57:32:33:bf:bb:ae:d4:59:
                    c8:5c:99:b8:4e:91:f7:37:30:e2:93:10:53:48:c8:
                    92:ef:b4:d2:3d:4c:32:88:82:09:c3:10:33:97:8e:
                    f0:b0:8c:b0:04:f8:9a:fd:01:ea:ff:15:52:c9:16:
                    18:0c:6e:e2:d6:de:05:b7:60:59:93:25:7d:e5:1e:
                    03:da:61:6a:f3:24:34:f5:d5:76:d7:44:dc:a8:b6:
                    c1:42:76:d2:9d:03:17:1e:bf:1d:7d:20:05:62:a4:
                    0b:62:6b:11:4f:92:a8:0a:83:6c:5f:f8:c9:1c:26:
                    31:bc:5e:d3:a8:ee:3d:d5:18:a7:4d:a7:0c:14:32:
                    c7:d5:0f:44:2f:85:b3:06:db:46:01:8a:28:d9:b2:
                    d3:60:b9:a3:a2:71:97:6d:02:b8:6a:20:c9:c6:ec:
                    25:c4:30:2a:b0:4b:9e:d0:25:68:70:4a:4e:d5:1c:
                    87:56:68:57:00:8c:24:eb:b4:18:f2:ef:31:47:45:
                    e3:56:a5:41:8b:4e:53:f1:58:59:1e:eb:01:09:59:
                    26:b5:7f:5f:2b:f5:0c:b3:2a:1c:21:1d:61:ee:0f:
                    21:50:6f:ea:42:d2:6f:0e:c6:a5:3f:53:ab:8b:5e:
                    f8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:19:85:04:71:C8:27:04:B5:02:E0:2B:B7:16:F4:C2:10:12:F8:D2
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32312d3231203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:16:59:9b:d9:df:44:3e:f9:31:89:18:5e:a4:bc:73:b7:3c:
         2f:f2:d0:a6:71:08:f9:e4:59:89:4f:8b:1b:3e:cb:25:a3:d6:
         6e:9c:48:e6:cd:cf:38:b4:16:e8:d3:1a:16:56:2a:bd:78:5f:
         f3:78:22:ad:e8:48:78:74:2a:5f:e1:82:de:9b:20:60:ac:06:
         ef:0f:2e:bc:11:05:47:7d:aa:2c:8b:14:59:a7:8a:87:33:9d:
         c1:c4:0b:58:03:38:8d:69:a9:a3:dd:32:fd:de:ef:70:75:ea:
         a1:af:b6:c8:4e:1f:ce:7a:c9:f2:d9:f8:b3:53:16:36:84:51:
         fe:78:0a:e1:c7:d5:7a:8e:20:30:56:6a:84:fc:e4:17:82:b0:
         0d:0a:57:58:01:9c:2e:5c:f0:7a:cb:ed:17:7d:df:61:cd:76:
         43:fb:51:ba:f6:2f:09:aa:80:2e:13:16:10:de:61:3b:08:5c:
         3a:74:11:26:d9:b6:18:d9:44:c8:20:ba:dc:3f:89:9f:9d:70:
         8c:ac:0e:2c:8b:4a:34:55:d1:66:af:1d:3d:d2:6b:c1:e0:37:
         ee:47:98:75:27:88:04:48:62:40:07:93:4c:7b:30:0f:81:a7:
         93:75:9a:92:2d:ea:5a:32:14:36:cf:c4:12:56:e2:95:63:f0:
         d4:83:df:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC7OqTrOxYT6WlLPoBAHMjxN8NHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNjEwMDgxMzM0NDNaFw0yNzEwMDcxMzM5NDNaMDMxMTAvBgNV
BAMTKEUwMTk4NTA0NzFDODI3MDRCNTAyRTAyQkI3MTZGNEMyMTAxMkY4RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgR38lJNmsCNJBgudfxyuCL3u6
g1VXMjO/u67UWchcmbhOkfc3MOKTEFNIyJLvtNI9TDKIggnDEDOXjvCwjLAE+Jr9
Aer/FVLJFhgMbuLW3gW3YFmTJX3lHgPaYWrzJDT11XbXRNyotsFCdtKdAxcevx19
IAVipAtiaxFPkqgKg2xf+MkcJjG8XtOo7j3VGKdNpwwUMsfVD0QvhbMG20YBiijZ
stNguaOicZdtArhqIMnG7CXEMCqwS57QJWhwSk7VHIdWaFcAjCTrtBjy7zFHReNW
pUGLTlPxWFke6wEJWSa1f18r9QyzKhwhHWHuDyFQb+pC0m8OxqU/U6uLXvhrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4BmFBHHIJwS1AuArtxb0whAS+NIwHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsWVYMA0GCSqGSIb3DQEBCwUAA4IBAQBPFlmb2d9E
PvkxiRhepLxztzwv8tCmcQj55FmJT4sbPsslo9ZunEjmzc84tBbo0xoWViq9eF/z
eCKt6Eh4dCpf4YLemyBgrAbvDy68EQVHfaosixRZp4qHM53BxAtYAziNaamj3TL9
3u9wdeqhr7bITh/Oesny2fizUxY2hFH+eArhx9V6jiAwVmqE/OQXgrANCldYAZwu
XPB6y+0Xfd9hzXZD+1G69i8JqoAuExYQ3mE7CFw6dBEm2bYY2UTIILrcP4mfnXCM
rA4si0o0VdFmrx090mvB4DfuR5h1J4gESGJAB5NMezAPgaeTdZqSLepaMhQ2z8QS
VuKVY/DUg9+D
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:58:30 2026 by rpki-client