Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa
File:                     3137372e3130312e38382e302f32342d3234203d3e203533303437.roa (raw, json)
Hash identifier:          iXzGaxM96gPaTDkRupklsQKkVZJa2in3uAu7Qgvx3qM=
Subject key identifier:   71:1D:65:25:07:8D:34:DB:AB:B1:F6:07:C8:E5:4C:44:35:2D:D2:FE
Certificate issuer:       /CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
Certificate serial:       57FDC4E167596B40BDCF2C835246C68A8D79082A
Authority key identifier: D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa
Signing time:             Thu 08 Oct 2026 13:39:41 +0000
ROA not before:           Thu 08 Oct 2026 13:34:41 +0000
ROA not after:            Thu 07 Oct 2027 13:39:41 +0000
asID:                     53047
IP address blocks:        177.101.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl
                          rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fd:c4:e1:67:59:6b:40:bd:cf:2c:83:52:46:c6:8a:8d:79:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D450338A4C47BD95A7EEB48BDDA5C1B9765226F1
        Validity
            Not Before: Oct  8 13:34:41 2026 GMT
            Not After : Oct  7 13:39:41 2027 GMT
        Subject: CN=711D6525078D34DBABB1F607C8E54C44352DD2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:04:5e:8d:d8:87:f9:71:00:19:f7:a7:05:be:
                    f1:b9:40:aa:1a:8f:0d:8a:5d:f9:c8:d7:d3:cf:f9:
                    da:80:b0:ba:ef:b6:2a:7a:fe:3f:56:49:ab:0e:45:
                    f5:39:8a:24:74:f9:98:37:d4:d5:fa:dc:bf:2c:df:
                    49:20:87:43:f1:3e:6f:ea:8c:53:96:89:ef:61:a4:
                    8b:c0:40:93:cb:18:82:99:c9:f2:8b:6f:31:f5:97:
                    3b:cb:a6:9a:85:bb:cd:e8:30:66:d5:93:37:50:63:
                    5a:a9:64:0c:8d:85:96:88:ef:a5:fa:3f:1a:17:51:
                    70:c3:15:cc:54:58:32:c5:b2:ac:8d:5f:3e:02:bc:
                    74:14:a8:17:bd:af:0a:e7:ad:33:45:ef:7c:d3:3f:
                    59:7b:ab:52:15:a6:6a:08:21:ca:05:e0:eb:27:ee:
                    8d:e4:52:f7:7a:01:18:a2:b7:d6:99:ee:06:81:f6:
                    d8:3e:ed:1b:b0:9f:ff:eb:a7:f1:10:c8:8b:3b:eb:
                    1f:c9:df:c4:89:05:a3:42:b8:57:78:b7:b2:ed:7f:
                    5e:cd:1c:fd:80:7a:6a:67:22:0a:5b:f7:62:f0:17:
                    4f:94:7b:cd:25:aa:96:ff:01:54:1a:cd:41:05:6a:
                    00:07:23:92:a9:20:35:f9:b9:f2:a0:1d:7b:3b:4d:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1D:65:25:07:8D:34:DB:AB:B1:F6:07:C8:E5:4C:44:35:2D:D2:FE
            X509v3 Authority Key Identifier:
                keyid:D4:50:33:8A:4C:47:BD:95:A7:EE:B4:8B:DD:A5:C1:B9:76:52:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D450338A4C47BD95A7EEB48BDDA5C1B9765226F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/3137372e3130312e38382e302f32342d3234203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:75:74:06:30:2a:05:70:f0:91:26:7e:50:0c:e9:d6:09:78:
         b0:30:44:aa:3b:d4:f4:24:2e:49:83:3d:7e:45:a1:86:c5:cd:
         d1:8c:5d:4e:fb:01:e3:93:ae:dc:17:42:7f:d9:e1:6a:a3:ae:
         74:3a:2a:87:54:1b:2f:e0:72:f3:80:dc:6d:28:9d:63:6b:5b:
         9d:ed:0f:fd:ca:da:4d:cc:94:56:05:34:e5:df:89:7e:25:6b:
         54:12:49:e7:9d:5d:6b:56:95:6a:cb:99:ca:31:2e:61:e3:5f:
         a4:69:77:33:82:d1:4c:f2:86:3c:54:8e:d2:1b:8f:dd:62:f5:
         2c:e7:8e:6a:0b:d9:da:1c:6a:31:9a:a0:55:01:76:b2:3c:a5:
         25:d0:20:24:9b:92:b9:3e:21:c5:1f:62:04:71:2d:8b:38:54:
         e3:79:36:33:46:96:96:18:3b:ed:ed:d6:e5:53:19:3e:ee:4f:
         82:bc:ed:43:6f:d8:c9:67:af:ae:08:e2:80:30:42:df:a7:46:
         d3:6b:1d:20:3c:cc:6e:ed:77:ea:df:cb:6e:05:ca:91:e6:0c:
         26:c9:7a:4e:49:4a:f4:9b:aa:61:60:2a:ea:f5:cb:2b:82:93:
         34:9d:6d:63:8b:cd:b5:04:d7:42:92:b6:97:0d:50:a9:16:9a:
         5b:1a:b0:67
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV/3E4WdZa0C9zyyDUkbGio15CCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ1MDMzOEE0QzQ3QkQ5NUE3RUVCNDhCRERBNUMxQjk3
NjUyMjZGMTAeFw0yNjEwMDgxMzM0NDFaFw0yNzEwMDcxMzM5NDFaMDMxMTAvBgNV
BAMTKDcxMUQ2NTI1MDc4RDM0REJBQkIxRjYwN0M4RTU0QzQ0MzUyREQyRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BF6N2If5cQAZ96cFvvG5QKoa
jw2KXfnI19PP+dqAsLrvtip6/j9WSasORfU5iiR0+Zg31NX63L8s30kgh0PxPm/q
jFOWie9hpIvAQJPLGIKZyfKLbzH1lzvLppqFu83oMGbVkzdQY1qpZAyNhZaI76X6
PxoXUXDDFcxUWDLFsqyNXz4CvHQUqBe9rwrnrTNF73zTP1l7q1IVpmoIIcoF4Osn
7o3kUvd6ARiit9aZ7gaB9tg+7Ruwn//rp/EQyIs76x/J38SJBaNCuFd4t7Ltf17N
HP2AempnIgpb92LwF0+Ue80lqpb/AVQazUEFagAHI5KpIDX5ufKgHXs7TSyDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcR1lJQeNNNursfYHyOVMRDUt0v4wHwYDVR0j
BBgwFoAU1FAzikxHvZWn7rSL3aXBuXZSJvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlhIb21GaDJwQlJyMkFaeHdaZGJZcFRqcEx1Ujlxa1JlRHhDUVRTZFlC
SmcvMC9ENDUwMzM4QTRDNDdCRDk1QTdFRUI0OEJEREE1QzFCOTc2NTIyNkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0NTAzMzhBNEM0N0JEOTVB
N0VFQjQ4QkREQTVDMUI5NzY1MjI2RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZYSG9tRmgycEJScjJBWnh3WmRiWXBUanBMdVI5cWtSZUR4Q1FUU2RZQkpnLzAv
MzEzNzM3MmUzMTMwMzEyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsWVYMA0GCSqGSIb3DQEBCwUAA4IBAQCqdXQGMCoF
cPCRJn5QDOnWCXiwMESqO9T0JC5Jgz1+RaGGxc3RjF1O+wHjk67cF0J/2eFqo650
OiqHVBsv4HLzgNxtKJ1ja1ud7Q/9ytpNzJRWBTTl34l+JWtUEknnnV1rVpVqy5nK
MS5h41+kaXczgtFM8oY8VI7SG4/dYvUs545qC9naHGoxmqBVAXayPKUl0CAkm5K5
PiHFH2IEcS2LOFTjeTYzRpaWGDvt7dblUxk+7k+CvO1Db9jJZ6+uCOKAMELfp0bT
ax0gPMxu7Xfq38tuBcqR5gwmyXpOSUr0m6phYCrq9csrgpM0nW1ji821BNdCkraX
DVCpFppbGrBn
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:10:43 2026 by rpki-client