Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/3137372e3232312e39362e302f32302d3332203d3e203532363534.roa
File:                     3137372e3232312e39362e302f32302d3332203d3e203532363534.roa (raw, json)
Hash identifier:          z8nJilC8ai9VRIBj+ybaGkw+ATD5H3RnMyjyY+REd7g=
Subject key identifier:   43:2C:96:6D:5A:13:7D:AF:B2:D2:93:C2:67:5E:7A:74:ED:30:BC:5F
Certificate issuer:       /CN=B36412BFA2E018A568277A58C32CDDE3B826763B
Certificate serial:       070F9BDFA9E51A395B9A7ADE4E717B9005ECB33F
Authority key identifier: B3:64:12:BF:A2:E0:18:A5:68:27:7A:58:C3:2C:DD:E3:B8:26:76:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/3137372e3232312e39362e302f32302d3332203d3e203532363534.roa
Signing time:             Fri 24 Apr 2026 19:41:20 +0000
ROA not before:           Fri 24 Apr 2026 19:36:20 +0000
ROA not after:            Fri 23 Apr 2027 19:41:20 +0000
asID:                     52654
IP address blocks:        177.221.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.crl
                          rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:04:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0f:9b:df:a9:e5:1a:39:5b:9a:7a:de:4e:71:7b:90:05:ec:b3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36412BFA2E018A568277A58C32CDDE3B826763B
        Validity
            Not Before: Apr 24 19:36:20 2026 GMT
            Not After : Apr 23 19:41:20 2027 GMT
        Subject: CN=432C966D5A137DAFB2D293C2675E7A74ED30BC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:2f:b3:92:99:5d:81:f1:1b:35:93:fc:56:
                    87:d5:7d:20:43:fe:fe:ea:98:73:2c:be:bd:4a:55:
                    30:f0:f5:e8:40:27:24:95:ba:90:a9:a4:99:9b:d2:
                    fd:95:4f:48:e4:fb:b8:23:dd:8d:1f:95:fb:90:51:
                    fe:a7:9d:d6:62:78:00:42:ea:8e:81:d2:4b:ba:3a:
                    4d:6f:92:b9:5d:fe:b0:4d:4d:fc:55:64:79:b3:cb:
                    81:6d:b3:87:7c:ac:7a:18:29:b8:fc:3b:4b:8e:ec:
                    6b:7a:ae:09:83:d9:e0:c9:36:b9:9a:d4:1a:a5:a5:
                    08:4f:53:d5:f8:3c:e3:54:d5:26:98:01:cc:e0:03:
                    6e:5f:54:a5:02:1b:ec:27:da:ff:c0:fb:e2:43:34:
                    18:0b:04:18:3e:77:dd:f2:fc:fb:a9:44:3f:e1:83:
                    99:93:8e:2b:c7:2b:25:6d:ef:17:9a:c3:36:c2:8c:
                    42:75:e0:e7:af:b7:04:3a:3a:16:26:96:e6:12:bc:
                    e5:9e:3e:43:e6:6f:3f:84:5e:50:c9:52:d4:d2:4d:
                    d3:77:a9:85:5a:24:ca:c8:f5:ff:4b:ae:3d:6d:e5:
                    3a:77:7f:f1:18:cb:1f:3b:fc:ad:08:dc:ce:e1:0f:
                    3b:8e:44:87:3e:e3:d0:a9:db:6c:6b:11:2c:07:ab:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:96:6D:5A:13:7D:AF:B2:D2:93:C2:67:5E:7A:74:ED:30:BC:5F
            X509v3 Authority Key Identifier:
                keyid:B3:64:12:BF:A2:E0:18:A5:68:27:7A:58:C3:2C:DD:E3:B8:26:76:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/B36412BFA2E018A568277A58C32CDDE3B826763B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B36412BFA2E018A568277A58C32CDDE3B826763B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6nLbY8nMzZUCWLzUSEuJsr4K4oB6EEQVegQC9Jr9ZQwX/0/3137372e3232312e39362e302f32302d3332203d3e203532363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:50:83:c0:1c:a0:10:23:cf:75:03:b9:6d:15:fa:2d:4d:
         36:af:24:d3:c6:ca:0e:06:88:e5:ca:8d:c6:a5:86:8b:92:b0:
         27:cf:7e:84:8d:ce:5b:07:eb:47:c8:8f:9b:f2:24:8e:ef:63:
         a7:85:ca:84:b7:62:b4:67:cf:c1:3a:0a:6b:37:e0:f8:b5:8a:
         28:28:97:ff:b1:63:6a:fc:fc:80:85:9f:40:f7:71:15:c1:eb:
         63:47:56:be:e0:7b:22:4f:91:ca:ee:64:f7:ce:ea:43:7d:42:
         2d:7c:b0:d2:37:d8:55:c4:d9:0a:92:01:14:9a:2a:ed:cc:b7:
         7f:fc:ad:11:cb:12:3d:0c:8d:dd:af:57:8b:b0:5b:95:14:58:
         fe:4a:c3:4b:f9:1f:e0:92:51:f4:74:1d:68:69:cd:1f:30:87:
         52:01:a7:c8:df:ee:f9:af:fe:4b:c6:bb:ea:7e:29:44:8c:b6:
         ba:ce:1a:9c:9c:d8:d1:2b:3d:8f:00:fc:18:96:2e:49:2d:b9:
         14:ed:af:52:93:d3:26:42:67:65:2d:16:4b:9a:a4:52:85:24:
         bf:96:4b:7f:f6:33:3a:c6:b1:94:10:e8:45:ae:ba:e8:20:8a:
         73:73:b7:5d:25:f2:f4:f2:c9:62:53:8b:74:6d:c0:d9:7c:62:
         e8:38:a5:19
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBw+b36nlGjlbmnreTnF7kAXssz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2NDEyQkZBMkUwMThBNTY4Mjc3QTU4QzMyQ0RERTNC
ODI2NzYzQjAeFw0yNjA0MjQxOTM2MjBaFw0yNzA0MjMxOTQxMjBaMDMxMTAvBgNV
BAMTKDQzMkM5NjZENUExMzdEQUZCMkQyOTNDMjY3NUU3QTc0RUQzMEJDNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQS+zkpldgfEbNZP8VofVfSBD
/v7qmHMsvr1KVTDw9ehAJySVupCppJmb0v2VT0jk+7gj3Y0flfuQUf6nndZieABC
6o6B0ku6Ok1vkrld/rBNTfxVZHmzy4Fts4d8rHoYKbj8O0uO7Gt6rgmD2eDJNrma
1BqlpQhPU9X4PONU1SaYAczgA25fVKUCG+wn2v/A++JDNBgLBBg+d93y/PupRD/h
g5mTjivHKyVt7xeawzbCjEJ14OevtwQ6OhYmluYSvOWePkPmbz+EXlDJUtTSTdN3
qYVaJMrI9f9Lrj1t5Tp3f/EYyx87/K0I3M7hDzuORIc+49Cp22xrESwHq/odAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQyyWbVoTfa+y0pPCZ156dO0wvF8wHwYDVR0j
BBgwFoAUs2QSv6LgGKVoJ3pYwyzd47gmdjswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNm5MYlk4bk16WlVDV0x6VVNFdUpzcjRLNG9CNkVFUVZlZ1FDOUpyOVpR
d1gvMC9CMzY0MTJCRkEyRTAxOEE1NjgyNzdBNThDMzJDRERFM0I4MjY3NjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzNjQxMkJGQTJFMDE4QTU2
ODI3N0E1OEMzMkNEREUzQjgyNjc2M0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZuTGJZOG5NelpVQ1dMelVTRXVKc3I0SzRvQjZFRVFWZWdRQzlKcjlaUXdYLzAv
MzEzNzM3MmUzMjMyMzEyZTM5MzYyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMy
MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsd1gMA0GCSqGSIb3DQEBCwUAA4IBAQARe1CDwByg
ECPPdQO5bRX6LU02ryTTxsoOBojlyo3GpYaLkrAnz36Ejc5bB+tHyI+b8iSO72On
hcqEt2K0Z8/BOgprN+D4tYooKJf/sWNq/PyAhZ9A93EVwetjR1a+4HsiT5HK7mT3
zupDfUItfLDSN9hVxNkKkgEUmirtzLd//K0RyxI9DI3dr1eLsFuVFFj+SsNL+R/g
klH0dB1oac0fMIdSAafI3+75r/5LxrvqfilEjLa6zhqcnNjRKz2PAPwYli5JLbkU
7a9Sk9MmQmdlLRZLmqRShSS/lkt/9jM6xrGUEOhFrrroIIpzc7ddJfL08sliU4t0
bcDZfGLoOKUZ
-----END CERTIFICATE-----
Generated at Wed May 13 18:19:01 2026 by rpki-client