Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa
File:                     3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa (raw, json)
Hash identifier:          rwsjpt3v/cKN6ybsz3/VWV2Cp5xllHQ1w4JsPmiji1A=
Subject key identifier:   1B:2D:5E:61:31:7E:3F:58:93:27:FB:7E:32:8A:9B:65:02:35:86:31
Certificate issuer:       /CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
Certificate serial:       61D0889D5C288CF6D0AD0CF5C8F09FBE3C06C104
Authority key identifier: CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa
Signing time:             Wed 18 Mar 2026 14:33:07 +0000
ROA not before:           Wed 18 Mar 2026 14:28:07 +0000
ROA not after:            Wed 17 Mar 2027 14:33:07 +0000
asID:                     262316
IP address blocks:        177.124.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl
                          rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 22:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d0:88:9d:5c:28:8c:f6:d0:ad:0c:f5:c8:f0:9f:be:3c:06:c1:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Validity
            Not Before: Mar 18 14:28:07 2026 GMT
            Not After : Mar 17 14:33:07 2027 GMT
        Subject: CN=1B2D5E61317E3F589327FB7E328A9B6502358631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c3:7e:39:d7:93:68:ca:ac:6f:0e:59:1d:01:
                    27:47:aa:10:85:58:df:87:3a:ea:75:52:ec:08:ef:
                    ed:50:24:30:1c:9f:e1:75:2e:7a:ab:f9:3f:5d:07:
                    83:bb:68:5d:60:96:84:b7:bd:57:0b:04:ed:43:27:
                    43:96:39:2f:01:a1:f8:f9:a8:6c:e4:37:42:7a:b4:
                    ec:72:31:91:ac:63:b2:d0:c3:e5:8f:ea:61:39:15:
                    3c:d1:79:04:e9:1b:65:0d:ec:fe:b3:e7:bd:82:4b:
                    1e:e8:54:d9:45:47:9f:7b:00:5c:39:44:0f:1b:ea:
                    4f:1c:d5:a8:90:8b:f4:c1:aa:be:f9:96:bb:3b:b9:
                    ae:50:ea:68:f4:ad:25:81:40:b8:93:06:71:3c:36:
                    f1:10:f1:f5:61:92:82:2e:40:2a:55:a5:df:bc:a8:
                    2f:35:77:57:40:b4:ff:a1:28:82:21:89:6e:f1:5f:
                    48:5d:25:df:c9:77:ba:f2:0e:18:57:76:3e:ff:b6:
                    4b:45:90:04:dd:88:76:d6:b3:dd:ff:c6:0c:a6:c0:
                    95:60:fa:35:61:f5:d9:80:b8:8d:28:31:d6:b5:2e:
                    4f:5b:61:8b:79:2e:68:78:68:75:e2:4a:f7:4f:54:
                    1b:5b:4c:1a:25:10:a7:29:6b:81:46:60:a0:c6:40:
                    e4:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2D:5E:61:31:7E:3F:58:93:27:FB:7E:32:8A:9B:65:02:35:86:31
            X509v3 Authority Key Identifier:
                keyid:CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3137372e3132342e34382e302f32322d3234203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:cb:58:61:05:6c:24:be:93:4e:56:c2:9b:9f:ed:79:20:b7:
         ac:f2:d0:27:ac:f7:61:b2:5a:98:31:8b:7b:c6:c4:b0:4c:f0:
         23:b6:67:62:b5:38:19:a4:28:8c:4a:55:8d:ae:45:2d:bb:5c:
         4d:62:ea:f9:fb:b9:d6:96:75:83:01:b2:fe:b1:6a:f7:70:c7:
         48:44:9a:7b:73:d5:ab:1c:f1:94:94:14:da:73:b8:4b:2b:96:
         2f:a5:e6:d5:81:5d:41:41:fc:05:f0:5d:e2:cb:5c:75:c3:16:
         89:83:ee:c0:94:1d:17:cc:20:5e:fc:9b:c4:63:b9:ad:74:12:
         1f:65:d6:1f:5c:12:d5:e0:3a:31:ff:db:3b:d5:15:00:4c:8b:
         9e:95:49:8d:43:fe:c1:c4:fe:ed:4a:ee:8c:54:b6:dd:89:72:
         ca:e0:0d:43:b4:5f:8e:b8:4c:ae:c8:2f:8e:8f:bb:ea:28:c9:
         9d:53:53:97:b6:9b:75:66:8d:3a:c5:d3:3b:d3:e9:ab:cd:0b:
         53:c1:03:d2:04:c8:32:85:33:6e:1c:15:91:62:66:a0:05:f2:
         57:50:26:d4:15:a8:23:b1:95:69:66:be:ea:4c:ee:b0:4e:2f:
         b3:6e:c4:89:38:1f:1a:d1:8c:af:76:3d:ef:3e:b1:c6:af:88:
         02:6b:9f:f8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYdCInVwojPbQrQz1yPCfvjwGwQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0I5MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4
OURFQjFERTAeFw0yNjAzMTgxNDI4MDdaFw0yNzAzMTcxNDMzMDdaMDMxMTAvBgNV
BAMTKDFCMkQ1RTYxMzE3RTNGNTg5MzI3RkI3RTMyOEE5QjY1MDIzNTg2MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAw34515NoyqxvDlkdASdHqhCF
WN+HOup1UuwI7+1QJDAcn+F1Lnqr+T9dB4O7aF1gloS3vVcLBO1DJ0OWOS8Bofj5
qGzkN0J6tOxyMZGsY7LQw+WP6mE5FTzReQTpG2UN7P6z572CSx7oVNlFR597AFw5
RA8b6k8c1aiQi/TBqr75lrs7ua5Q6mj0rSWBQLiTBnE8NvEQ8fVhkoIuQCpVpd+8
qC81d1dAtP+hKIIhiW7xX0hdJd/Jd7ryDhhXdj7/tktFkATdiHbWs93/xgymwJVg
+jVh9dmAuI0oMda1Lk9bYYt5Lmh4aHXiSvdPVBtbTBolEKcpa4FGYKDGQOTNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGy1eYTF+P1iTJ/t+MoqbZQI1hjEwHwYDVR0j
BBgwFoAUy5Jgx6vNfIkRmw9hxgnjE4nesd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DQjkyNjBDN0FCQ0Q3Qzg5MTE5QjBGNjFDNjA5RTMxMzg5REVCMURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NCOTI2MEM3QUJDRDdDODkx
MTlCMEY2MUM2MDlFMzEzODlERUIxREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzNzM3MmUzMTMyMzQyZTM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxfDAwDQYJKoZIhvcNAQELBQADggEBABTLWGEF
bCS+k05Wwpuf7Xkgt6zy0Ces92GyWpgxi3vGxLBM8CO2Z2K1OBmkKIxKVY2uRS27
XE1i6vn7udaWdYMBsv6xavdwx0hEmntz1asc8ZSUFNpzuEsrli+l5tWBXUFB/AXw
XeLLXHXDFomD7sCUHRfMIF78m8Rjua10Eh9l1h9cEtXgOjH/2zvVFQBMi56VSY1D
/sHE/u1K7oxUtt2JcsrgDUO0X464TK7IL46Pu+ooyZ1TU5e2m3VmjTrF0zvT6avN
C1PBA9IEyDKFM24cFZFiZqAF8ldQJtQVqCOxlWlmvupM7rBOL7NuxIk4HxrRjK92
Pe8+scaviAJrn/g=
-----END CERTIFICATE-----
Generated at Fri Mar 27 06:47:27 2026 by rpki-client