Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa
File:                     3137392e34382e31322e302f32322d3232203d3e20323731313630.roa (raw, json)
Hash identifier:          u+/aMz96Tv5ij4acoKOUxVw09Re1m27/pQcsJEWlGLo=
Subject key identifier:   89:3F:E1:3C:8C:4E:BA:9E:CD:14:EB:72:4B:E8:C6:0C:E9:24:D8:34
Certificate issuer:       /CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
Certificate serial:       43FB87C414626E2B961A3F65727CD07F2A7E345F
Authority key identifier: D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa
Signing time:             Mon 16 Mar 2026 20:03:02 +0000
ROA not before:           Mon 16 Mar 2026 19:58:02 +0000
ROA not after:            Mon 15 Mar 2027 20:03:02 +0000
asID:                     271160
IP address blocks:        179.48.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl
                          rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fb:87:c4:14:62:6e:2b:96:1a:3f:65:72:7c:d0:7f:2a:7e:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1171AF24520C9934655F1D0B335CC88750F0C2F
        Validity
            Not Before: Mar 16 19:58:02 2026 GMT
            Not After : Mar 15 20:03:02 2027 GMT
        Subject: CN=893FE13C8C4EBA9ECD14EB724BE8C60CE924D834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:95:c8:da:2a:b8:9d:78:9a:1b:e3:64:51:20:
                    ef:66:69:ba:2f:5f:44:fe:cf:cb:d2:9d:b0:ee:79:
                    55:63:2c:e3:d2:8c:cf:19:73:ad:48:de:e9:3b:73:
                    a7:cd:6c:19:71:20:0d:dd:61:9c:c2:09:a8:c3:ff:
                    c4:12:f2:68:f7:e1:00:8c:f3:b0:0c:56:54:a4:80:
                    0d:8e:46:60:ae:bd:ca:3c:a4:6a:fb:20:37:bf:15:
                    87:30:97:9c:4a:71:15:6b:66:3f:f8:86:8c:f5:72:
                    c7:10:fd:0a:65:7e:ef:a4:9b:c5:8a:24:aa:e9:a2:
                    19:91:42:b4:59:f4:47:ee:d4:97:ce:62:9f:b4:14:
                    54:43:9a:db:2c:81:e8:00:fb:c1:b5:9c:99:8d:1c:
                    1e:8d:16:df:45:cb:90:0b:8b:aa:93:d2:a3:64:93:
                    89:b8:22:a3:4a:f0:d1:ca:bf:9c:09:d9:7c:35:0a:
                    f0:36:1e:97:a3:53:40:85:23:1c:b0:37:d6:80:ab:
                    91:22:ed:21:e4:4c:ec:7b:4c:d5:2f:e6:8a:ac:fd:
                    69:83:c9:02:21:09:17:b5:1c:25:c4:26:a1:d7:e5:
                    e2:a2:6a:9d:d3:bc:06:cd:77:c7:5a:13:7a:37:c9:
                    ca:7c:fe:2f:0b:a4:52:f1:ed:e4:37:1e:9a:e7:0b:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:E1:3C:8C:4E:BA:9E:CD:14:EB:72:4B:E8:C6:0C:E9:24:D8:34
            X509v3 Authority Key Identifier:
                keyid:D1:17:1A:F2:45:20:C9:93:46:55:F1:D0:B3:35:CC:88:75:0F:0C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/D1171AF24520C9934655F1D0B335CC88750F0C2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1171AF24520C9934655F1D0B335CC88750F0C2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JdJqFcNay3drrJm6r8DDs3VGNWdJLfrQe86Z3dWcefV/0/3137392e34382e31322e302f32322d3232203d3e20323731313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:97:31:8e:60:6e:c5:64:cf:83:20:44:cc:2b:34:66:cc:
         d1:73:ba:47:d9:ba:0a:7c:a3:b3:5f:fd:29:0a:6a:eb:cd:06:
         bc:28:36:b3:eb:90:7b:4f:05:ba:8b:a1:fe:25:7d:3c:5a:5b:
         8b:34:e3:9c:d5:87:db:cc:b9:66:5d:5b:ea:0d:23:14:60:61:
         1f:6e:62:7e:5f:89:cf:0c:04:49:5f:6b:06:a6:a4:5d:3d:28:
         9f:06:a6:f5:64:0d:e4:75:c5:be:42:1f:86:d3:2d:97:58:59:
         98:60:f4:1c:76:23:1f:b3:84:3c:14:49:e6:53:cb:14:0b:63:
         1a:49:78:21:d2:74:d5:25:5e:4a:2d:43:58:94:d8:08:42:ab:
         f9:7e:9c:9c:59:9e:c8:d8:15:2e:0f:ee:45:dd:11:d8:3e:d8:
         f8:fa:3a:d4:81:46:98:db:86:96:aa:49:39:77:89:7b:37:ab:
         d4:be:ae:08:21:7d:77:9b:b5:8d:34:5a:2e:d0:81:8b:5f:ab:
         09:e2:1b:fb:b5:3a:73:a8:97:ea:3c:46:84:5a:f8:9e:73:e6:
         1b:c2:62:29:00:a5:be:ff:8f:1d:3f:c9:18:47:73:7f:18:27:
         b5:96:8c:00:91:36:14:c8:a2:2e:c6:95:ae:59:50:f5:f2:95:
         2e:be:4b:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ/uHxBRibiuWGj9lcnzQfyp+NF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExNzFBRjI0NTIwQzk5MzQ2NTVGMUQwQjMzNUNDODg3
NTBGMEMyRjAeFw0yNjAzMTYxOTU4MDJaFw0yNzAzMTUyMDAzMDJaMDMxMTAvBgNV
BAMTKDg5M0ZFMTNDOEM0RUJBOUVDRDE0RUI3MjRCRThDNjBDRTkyNEQ4MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflcjaKrideJob42RRIO9mabov
X0T+z8vSnbDueVVjLOPSjM8Zc61I3uk7c6fNbBlxIA3dYZzCCajD/8QS8mj34QCM
87AMVlSkgA2ORmCuvco8pGr7IDe/FYcwl5xKcRVrZj/4hoz1cscQ/Qplfu+km8WK
JKrpohmRQrRZ9Efu1JfOYp+0FFRDmtssgegA+8G1nJmNHB6NFt9Fy5ALi6qT0qNk
k4m4IqNK8NHKv5wJ2Xw1CvA2HpejU0CFIxywN9aAq5Ei7SHkTOx7TNUv5oqs/WmD
yQIhCRe1HCXEJqHX5eKiap3TvAbNd8daE3o3ycp8/i8LpFLx7eQ3HprnCzwFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiT/hPIxOup7NFOtyS+jGDOkk2DQwHwYDVR0j
BBgwFoAU0Rca8kUgyZNGVfHQszXMiHUPDC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEpkSnFGY05heTNkcnJKbTZyOEREczNWR05XZEpMZnJRZTg2WjNkV2Nl
ZlYvMC9EMTE3MUFGMjQ1MjBDOTkzNDY1NUYxRDBCMzM1Q0M4ODc1MEYwQzJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMTcxQUYyNDUyMEM5OTM0
NjU1RjFEMEIzMzVDQzg4NzUwRjBDMkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhKZEpxRmNOYXkzZHJySm02cjhERHMzVkdOV2RKTGZyUWU4NlozZFdjZWZWLzAv
MzEzNzM5MmUzNDM4MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszAMMA0GCSqGSIb3DQEBCwUAA4IBAQBhtZcxjmBu
xWTPgyBEzCs0ZszRc7pH2boKfKOzX/0pCmrrzQa8KDaz65B7TwW6i6H+JX08WluL
NOOc1YfbzLlmXVvqDSMUYGEfbmJ+X4nPDARJX2sGpqRdPSifBqb1ZA3kdcW+Qh+G
0y2XWFmYYPQcdiMfs4Q8FEnmU8sUC2MaSXgh0nTVJV5KLUNYlNgIQqv5fpycWZ7I
2BUuD+5F3RHYPtj4+jrUgUaY24aWqkk5d4l7N6vUvq4IIX13m7WNNFou0IGLX6sJ
4hv7tTpzqJfqPEaEWviec+YbwmIpAKW+/48dP8kYR3N/GCe1lowAkTYUyKIuxpWu
WVD18pUuvksO
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:55:35 2026 by rpki-client