Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa
File:                     3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa (raw, json)
Hash identifier:          4/cYZPBwpHKSS/3y4Hdv4RXd/9v3VfUFvk9Zr63uV6g=
Subject key identifier:   3C:F7:E9:5D:D4:2A:FB:1D:3D:77:70:1E:AC:30:38:8B:44:38:42:E8
Certificate issuer:       /CN=27431F298D6DFE8179639FE397D34A2A47E96D15
Certificate serial:       6573D3D4362EC6C45325A602CEF7F952DEF66856
Authority key identifier: 27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa
Signing time:             Mon 04 May 2026 14:54:02 +0000
ROA not before:           Mon 04 May 2026 14:49:02 +0000
ROA not after:            Mon 03 May 2027 14:54:02 +0000
asID:                     267475
IP address blocks:        192.141.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl
                          rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 09:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:73:d3:d4:36:2e:c6:c4:53:25:a6:02:ce:f7:f9:52:de:f6:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27431F298D6DFE8179639FE397D34A2A47E96D15
        Validity
            Not Before: May  4 14:49:02 2026 GMT
            Not After : May  3 14:54:02 2027 GMT
        Subject: CN=3CF7E95DD42AFB1D3D77701EAC30388B443842E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8f:e2:7d:01:21:8a:14:54:f9:66:50:91:6d:
                    2e:11:ac:02:b9:25:df:91:72:d5:84:fb:84:26:b4:
                    79:58:7d:5a:17:a8:25:df:5b:7d:93:e2:37:3a:e8:
                    45:e9:f2:f9:23:0f:b0:ed:9f:4c:e1:38:db:45:78:
                    53:34:81:7f:94:55:52:73:b6:b0:35:5f:fc:e6:d6:
                    f4:c3:78:94:9c:82:e5:82:ff:b4:ee:3b:d7:9e:d9:
                    9e:45:b6:75:ac:ff:18:52:b4:40:62:38:17:e5:a2:
                    c7:bc:d8:07:59:d9:da:1f:64:3e:a0:6a:58:7f:65:
                    00:01:17:ac:75:4e:4a:f8:2b:70:dc:8a:ba:e2:4c:
                    ac:1b:d5:44:6e:4b:2f:7b:7b:c5:b6:89:35:1b:27:
                    1b:e2:c6:a6:78:72:07:c2:ea:ba:88:69:8e:29:55:
                    97:1f:ed:ca:7c:78:d5:07:21:48:64:52:3e:b2:38:
                    85:70:b5:26:f0:d9:df:13:23:1a:d7:91:4c:19:47:
                    2a:35:f2:ff:2c:7d:0d:9f:77:d7:28:1f:20:33:a9:
                    28:ed:83:27:fa:92:f4:a8:99:77:c3:2e:30:09:c7:
                    2d:30:a2:fe:0f:e8:eb:44:ff:3d:f2:35:ae:c0:5e:
                    4a:55:94:8b:45:4d:e7:16:35:39:92:c0:29:d2:49:
                    78:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F7:E9:5D:D4:2A:FB:1D:3D:77:70:1E:AC:30:38:8B:44:38:42:E8
            X509v3 Authority Key Identifier:
                keyid:27:43:1F:29:8D:6D:FE:81:79:63:9F:E3:97:D3:4A:2A:47:E9:6D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/27431F298D6DFE8179639FE397D34A2A47E96D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27431F298D6DFE8179639FE397D34A2A47E96D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/3139322e3134312e3139322e302f32322d3234203d3e20323637343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:98:b1:c7:79:a7:3e:1e:00:4d:64:f8:2d:1a:06:fe:92:ed:
         d5:e4:f6:f9:9b:23:82:56:b1:f6:e1:d0:91:83:e5:18:01:4b:
         37:08:87:60:27:24:ce:5e:de:9d:ad:79:9a:9b:7e:4f:0b:fe:
         2d:c4:08:eb:0a:98:01:b8:11:a0:15:82:ca:f4:63:c7:79:48:
         9c:5d:b0:9b:05:57:46:5b:65:73:01:e9:61:b5:2c:0f:e0:58:
         59:4e:a4:0c:84:a6:54:73:03:e3:9a:28:59:96:fe:c6:b8:2d:
         16:bc:2c:c7:66:02:29:95:c7:5b:a3:8a:35:45:d3:6d:12:3e:
         3d:b5:16:2b:20:16:ed:5f:a3:5d:29:ff:4f:d8:25:b2:5a:72:
         3e:45:fc:22:44:42:41:d6:fd:98:61:6e:88:60:c4:dd:c2:59:
         c9:d0:5b:38:eb:af:32:c4:ed:36:ef:3b:5d:0e:22:d1:9d:0c:
         7e:c4:c4:ff:dd:4b:5a:8a:f1:b8:ef:23:d8:a0:4a:c9:bf:e9:
         fa:5d:b6:eb:e5:05:37:0f:b8:3b:0a:45:ee:41:c0:8d:e3:6e:
         2e:4f:68:54:42:07:52:37:0c:d4:d2:27:05:2d:30:05:b9:08:
         ba:33:d3:bc:50:48:1e:43:49:03:c7:f4:2a:cc:c7:4e:52:8c:
         6c:94:04:66
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZXPT1DYuxsRTJaYCzvf5Ut72aFYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0MzFGMjk4RDZERkU4MTc5NjM5RkUzOTdEMzRBMkE0
N0U5NkQxNTAeFw0yNjA1MDQxNDQ5MDJaFw0yNzA1MDMxNDU0MDJaMDMxMTAvBgNV
BAMTKDNDRjdFOTVERDQyQUZCMUQzRDc3NzAxRUFDMzAzODhCNDQzODQyRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwj+J9ASGKFFT5ZlCRbS4RrAK5
Jd+RctWE+4QmtHlYfVoXqCXfW32T4jc66EXp8vkjD7Dtn0zhONtFeFM0gX+UVVJz
trA1X/zm1vTDeJScguWC/7TuO9ee2Z5FtnWs/xhStEBiOBflose82AdZ2dofZD6g
alh/ZQABF6x1Tkr4K3DcirriTKwb1URuSy97e8W2iTUbJxvixqZ4cgfC6rqIaY4p
VZcf7cp8eNUHIUhkUj6yOIVwtSbw2d8TIxrXkUwZRyo18v8sfQ2fd9coHyAzqSjt
gyf6kvSomXfDLjAJxy0wov4P6OtE/z3yNa7AXkpVlItFTecWNTmSwCnSSXj7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPPfpXdQq+x09d3AerDA4i0Q4QugwHwYDVR0j
BBgwFoAUJ0MfKY1t/oF5Y5/jl9NKKkfpbRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0JkVVkxN01wTkFuWjlZZ1JGNmtFdVR1Skx3RjdRYlpvckZqNFhzZVpR
VjcvMC8yNzQzMUYyOThENkRGRTgxNzk2MzlGRTM5N0QzNEEyQTQ3RTk2RDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NDMxRjI5OEQ2REZFODE3
OTYzOUZFMzk3RDM0QTJBNDdFOTZEMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdCZFVZMTdNcE5Bblo5WWdSRjZrRXVUdUpMd0Y3UWJab3JGajRYc2VaUVY3LzAv
MzEzOTMyMmUzMTM0MzEyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAsCNwDANBgkqhkiG9w0BAQsFAAOCAQEAfZix
x3mnPh4ATWT4LRoG/pLt1eT2+Zsjglax9uHQkYPlGAFLNwiHYCckzl7ena15mpt+
Twv+LcQI6wqYAbgRoBWCyvRjx3lInF2wmwVXRltlcwHpYbUsD+BYWU6kDISmVHMD
45ooWZb+xrgtFrwsx2YCKZXHW6OKNUXTbRI+PbUWKyAW7V+jXSn/T9glslpyPkX8
IkRCQdb9mGFuiGDE3cJZydBbOOuvMsTtNu87XQ4i0Z0MfsTE/91LWorxuO8j2KBK
yb/p+l226+UFNw+4OwpF7kHAjeNuLk9oVEIHUjcM1NInBS0wBbkIujPTvFBIHkNJ
A8f0KszHTlKMbJQEZg==
-----END CERTIFICATE-----
Generated at Wed May 13 18:29:51 2026 by rpki-client