Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32322e302f32332d3233203d3e20323634323934.roa
File:                     3137372e3130372e32322e302f32332d3233203d3e20323634323934.roa (raw, json)
Hash identifier:          bAWSPtC5FedA+8AhhUiDko9hdQ1pJRqfrBvRtLOgDwk=
Subject key identifier:   D2:9C:AE:AE:75:31:1E:4F:07:38:AA:00:5F:2C:0A:F3:C6:F9:1A:AB
Certificate issuer:       /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial:       2DA862F478C3FED0F21D8B1D5AB785E6797BDFDB
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32322e302f32332d3233203d3e20323634323934.roa
Signing time:             Wed 25 Mar 2026 13:37:17 +0000
ROA not before:           Wed 25 Mar 2026 13:32:17 +0000
ROA not after:            Wed 24 Mar 2027 13:37:17 +0000
asID:                     264294
IP address blocks:        177.107.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a8:62:f4:78:c3:fe:d0:f2:1d:8b:1d:5a:b7:85:e6:79:7b:df:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
        Validity
            Not Before: Mar 25 13:32:17 2026 GMT
            Not After : Mar 24 13:37:17 2027 GMT
        Subject: CN=D29CAEAE75311E4F0738AA005F2C0AF3C6F91AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:0f:dc:ae:0d:88:26:11:4f:a4:95:c7:38:
                    bf:70:0f:fb:57:f2:5b:73:ee:56:f7:db:84:f3:42:
                    ef:4a:45:bf:d2:6b:5e:5e:49:dc:ba:b8:78:b2:39:
                    25:c7:24:1c:64:ec:6b:d3:5e:25:75:81:b5:ab:9f:
                    c8:df:3a:04:1f:80:06:02:1b:b5:fc:98:5d:ba:73:
                    2c:1e:44:24:93:27:d1:0b:e6:48:57:ab:a4:d0:57:
                    56:29:28:b5:98:34:3b:f8:58:28:9c:b9:88:cc:1a:
                    5f:6c:59:98:69:12:0d:9f:e0:19:2e:e5:97:f4:e5:
                    bb:2d:0d:0d:15:f1:fa:4c:83:e3:d4:62:17:c3:80:
                    01:6b:59:87:1b:1f:62:8e:b5:b8:24:82:25:40:d2:
                    d5:f8:f8:d6:03:3e:fd:b5:e9:bb:36:3a:f6:3d:4b:
                    8c:cc:66:4b:01:90:01:f7:c3:b3:e8:e1:ad:6c:0f:
                    1f:53:ae:05:1a:b7:59:d7:e4:fb:03:28:99:85:bb:
                    26:9d:7a:b9:ad:31:6d:f2:5c:7f:0b:8c:9c:5b:67:
                    bd:84:26:28:3e:c4:97:64:1d:a8:99:2c:51:dc:40:
                    7a:1d:b6:bb:ed:7a:22:53:9c:d7:a2:ed:b7:20:fa:
                    0a:79:09:b1:8f:36:6c:60:77:46:a5:83:55:3a:e3:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9C:AE:AE:75:31:1E:4F:07:38:AA:00:5F:2C:0A:F3:C6:F9:1A:AB
            X509v3 Authority Key Identifier:
                keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3137372e3130372e32322e302f32332d3233203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:6f:49:4c:8e:74:fd:59:fd:db:a4:76:ab:0b:bf:17:d5:d9:
         8f:26:12:64:08:8d:b3:d4:9e:48:95:93:f7:b7:8a:9d:2b:bc:
         05:86:3f:86:04:dc:85:51:69:6b:2a:12:97:1c:97:41:3c:21:
         49:b2:f2:69:0b:c1:ca:24:92:93:5e:a6:a0:86:2b:65:fa:d3:
         13:56:76:18:b5:e7:3e:b0:b0:69:57:19:ea:4b:ad:75:51:91:
         e0:25:56:4f:c6:8d:a6:8c:a5:60:27:99:6f:1d:8f:59:0d:54:
         b2:a8:89:2e:39:eb:d7:d9:13:ae:7a:ec:92:16:43:ea:4d:a8:
         4c:8a:ab:10:81:96:7f:1a:3c:d7:79:f3:01:bd:70:7c:2d:bb:
         ed:ef:d8:15:75:1e:bf:f2:ee:62:8d:92:3e:a8:e0:99:54:73:
         68:0e:2b:81:84:7b:15:d1:80:dd:7a:21:a7:5a:c4:c1:38:f8:
         1e:90:fa:ef:87:a5:aa:80:aa:03:4a:a3:c0:dc:a9:0f:94:70:
         db:6f:b2:15:9a:3a:3d:e3:94:29:17:b1:03:a1:6c:91:6e:85:
         c6:56:91:c0:e9:64:c1:0b:66:0d:a9:f4:56:19:e5:d8:86:87:
         ce:a2:9b:5a:25:85:55:a7:85:16:1d:da:ba:e9:e2:f6:89:8d:
         a5:1e:cd:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULahi9HjD/tDyHYsdWreF5nl739swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlFNzUyODAwRjhCRjczNDUzQ0VBMDU1NDA2RENDNUY2
MTMzMEYxOTAeFw0yNjAzMjUxMzMyMTdaFw0yNzAzMjQxMzM3MTdaMDMxMTAvBgNV
BAMTKEQyOUNBRUFFNzUzMTFFNEYwNzM4QUEwMDVGMkMwQUYzQzZGOTFBQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13g/crg2IJhFPpJXHOL9wD/tX
8ltz7lb324TzQu9KRb/Sa15eSdy6uHiyOSXHJBxk7GvTXiV1gbWrn8jfOgQfgAYC
G7X8mF26cyweRCSTJ9EL5khXq6TQV1YpKLWYNDv4WCicuYjMGl9sWZhpEg2f4Bku
5Zf05bstDQ0V8fpMg+PUYhfDgAFrWYcbH2KOtbgkgiVA0tX4+NYDPv216bs2OvY9
S4zMZksBkAH3w7Po4a1sDx9TrgUat1nX5PsDKJmFuyadermtMW3yXH8LjJxbZ72E
Jig+xJdkHaiZLFHcQHodtrvteiJTnNei7bcg+gp5CbGPNmxgd0alg1U646QpAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0pyurnUxHk8HOKoAXywK88b5GqswHwYDVR0j
BBgwFoAUKedSgA+L9zRTzqBVQG3MX2EzDxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZ4NDh4TGoyNnR1cmtUVWhxWHpjQlNhczJ4bkVRb2h6cVZkYUtkRFFL
QXYvMC8yOUU3NTI4MDBGOEJGNzM0NTNDRUEwNTU0MDZEQ0M1RjYxMzMwRjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RTc1MjgwMEY4QkY3MzQ1
M0NFQTA1NTQwNkRDQzVGNjEzMzBGMTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2eDQ4eExqMjZ0dXJrVFVocVh6Y0JTYXMyeG5FUW9oenFWZGFLZERRS0F2LzAv
MzEzNzM3MmUzMTMwMzcyZTMyMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGxaxYwDQYJKoZIhvcNAQELBQADggEBAABvSUyO
dP1Z/dukdqsLvxfV2Y8mEmQIjbPUnkiVk/e3ip0rvAWGP4YE3IVRaWsqEpccl0E8
IUmy8mkLwcokkpNepqCGK2X60xNWdhi15z6wsGlXGepLrXVRkeAlVk/GjaaMpWAn
mW8dj1kNVLKoiS4569fZE6567JIWQ+pNqEyKqxCBln8aPNd58wG9cHwtu+3v2BV1
Hr/y7mKNkj6o4JlUc2gOK4GEexXRgN16IadaxME4+B6Q+u+HpaqAqgNKo8DcqQ+U
cNtvshWaOj3jlCkXsQOhbJFuhcZWkcDpZMELZg2p9FYZ5diGh86im1olhVWnhRYd
2rrp4vaJjaUezY0=
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:39 2026 by rpki-client