Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
File:                     3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa (raw, json)
Hash identifier:          d7yxewTtGyJeKubG13E8M9tZO1qrJ6IlLhx43tHDrJ8=
Subject key identifier:   9F:82:E9:EA:C7:70:A7:D0:F9:9E:89:77:B5:6B:C3:90:52:4A:F3:D2
Certificate issuer:       /CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E
Certificate serial:       046AB8BDFD25F25FB6E853FAA000D601B4F0B143
Authority key identifier: 4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa
Signing time:             Fri 19 Jun 2026 14:53:30 +0000
ROA not before:           Fri 19 Jun 2026 14:48:30 +0000
ROA not after:            Fri 18 Jun 2027 14:53:30 +0000
asID:                     271192
IP address blocks:        179.42.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl
                          rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6a:b8:bd:fd:25:f2:5f:b6:e8:53:fa:a0:00:d6:01:b4:f0:b1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E381BD703B94AA7B06975FB0FC88364AA7BA29E
        Validity
            Not Before: Jun 19 14:48:30 2026 GMT
            Not After : Jun 18 14:53:30 2027 GMT
        Subject: CN=9F82E9EAC770A7D0F99E8977B56BC390524AF3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:0a:32:e4:aa:e7:1d:d1:8a:95:b1:51:b5:
                    21:85:04:19:ea:6f:8e:80:ad:f7:74:d7:08:aa:d4:
                    8b:e2:4e:f8:b2:ff:6e:07:76:c8:59:89:96:b3:6f:
                    03:d6:16:cd:c5:47:66:5d:95:26:e0:59:62:d7:00:
                    6b:65:19:9a:83:e1:15:c0:e0:59:21:ed:b8:ca:a0:
                    c4:25:3e:b5:3e:b5:ad:8e:26:8a:d1:66:85:1f:be:
                    41:5e:1a:f8:14:35:e6:1e:fd:8b:36:65:85:c1:33:
                    31:25:02:7c:ee:af:91:6f:c8:7c:c3:12:41:c5:a0:
                    7f:63:59:16:a0:65:15:95:06:d5:55:ad:86:e1:f5:
                    fd:6a:72:72:83:f4:54:0c:60:06:27:cc:37:2c:c3:
                    13:81:09:18:a5:9e:97:38:c3:ea:6e:66:3f:6c:68:
                    b7:53:8b:d8:da:07:ce:84:71:d9:03:e1:29:c1:2f:
                    5c:8f:f6:8e:19:6a:ee:fe:38:67:21:fe:50:c9:94:
                    1d:3a:2c:3a:1c:e2:55:56:2d:2a:7c:68:24:0a:b9:
                    77:56:91:18:98:50:86:e7:85:b3:ae:1d:57:34:35:
                    b7:90:d6:08:da:e0:d1:ea:6b:77:a3:03:15:2e:32:
                    c8:cb:f6:65:0a:37:37:dd:e1:45:62:24:a2:c6:ec:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:82:E9:EA:C7:70:A7:D0:F9:9E:89:77:B5:6B:C3:90:52:4A:F3:D2
            X509v3 Authority Key Identifier:
                keyid:4E:38:1B:D7:03:B9:4A:A7:B0:69:75:FB:0F:C8:83:64:AA:7B:A2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E381BD703B94AA7B06975FB0FC88364AA7BA29E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8px2w9Vu6W2uDDJotin9CPdL87jSUmNY6tmgx7aCLYak/0/3137392e34322e3135322e302f32322d3234203d3e20323731313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:25:52:c3:d5:cb:c7:33:0b:53:bf:ef:7e:ae:b5:f0:fe:0b:
         51:9a:71:c2:64:e8:d0:8f:eb:1c:ca:68:33:8a:45:3c:32:92:
         81:ef:be:49:f4:fc:ad:81:6e:83:da:ae:6b:f3:70:5b:e5:16:
         da:82:90:cd:28:7f:ef:12:6e:d7:cb:8f:e6:8f:ee:c2:46:a2:
         3a:bd:e4:93:f9:8f:24:20:f5:4c:cc:03:c9:ce:fc:38:e6:23:
         b3:90:40:10:3c:12:3e:e7:bb:e2:d4:3e:8f:15:e6:55:2d:d0:
         af:c7:bd:fa:05:7f:19:22:db:aa:7e:7e:46:b4:b0:00:5d:18:
         d6:e7:10:7f:c6:45:1e:6b:09:ee:67:55:91:6d:c4:c9:79:c2:
         49:57:b6:01:6a:cb:44:68:c7:04:83:24:11:44:d8:f4:22:15:
         55:b3:57:4e:d7:fd:62:e0:98:a3:1b:8b:81:59:25:07:f6:17:
         dc:06:a8:a1:6b:5f:30:f4:98:7d:b6:6f:5e:bc:52:73:b4:3d:
         01:cf:1f:0c:48:15:50:86:40:28:ed:4d:4c:29:69:e0:9e:29:
         35:7e:dc:13:c4:87:2c:3e:0a:7c:22:c1:6a:0f:46:fc:1e:79:
         48:af:99:1c:06:03:3a:ae:5c:86:9c:05:4c:86:c9:86:dd:c4:
         96:d8:04:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBGq4vf0l8l+26FP6oADWAbTwsUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUzODFCRDcwM0I5NEFBN0IwNjk3NUZCMEZDODgzNjRB
QTdCQTI5RTAeFw0yNjA2MTkxNDQ4MzBaFw0yNzA2MTgxNDUzMzBaMDMxMTAvBgNV
BAMTKDlGODJFOUVBQzc3MEE3RDBGOTlFODk3N0I1NkJDMzkwNTI0QUYzRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxgoy5KrnHdGKlbFRtSGFBBnq
b46Arfd01wiq1IviTviy/24HdshZiZazbwPWFs3FR2ZdlSbgWWLXAGtlGZqD4RXA
4Fkh7bjKoMQlPrU+ta2OJorRZoUfvkFeGvgUNeYe/Ys2ZYXBMzElAnzur5FvyHzD
EkHFoH9jWRagZRWVBtVVrYbh9f1qcnKD9FQMYAYnzDcswxOBCRilnpc4w+puZj9s
aLdTi9jaB86EcdkD4SnBL1yP9o4Zau7+OGch/lDJlB06LDoc4lVWLSp8aCQKuXdW
kRiYUIbnhbOuHVc0NbeQ1gja4NHqa3ejAxUuMsjL9mUKNzfd4UViJKLG7G+xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUn4Lp6sdwp9D5nol3tWvDkFJK89IwHwYDVR0j
BBgwFoAUTjgb1wO5SqewaXX7D8iDZKp7op4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHB4Mnc5VnU2VzJ1RERKb3RpbjlDUGRMODdqU1VtTlk2dG1neDdhQ0xZ
YWsvMC80RTM4MUJENzAzQjk0QUE3QjA2OTc1RkIwRkM4ODM2NEFBN0JBMjlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMzgxQkQ3MDNCOTRBQTdC
MDY5NzVGQjBGQzg4MzY0QUE3QkEyOUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhweDJ3OVZ1NlcydURESm90aW45Q1BkTDg3alNVbU5ZNnRtZ3g3YUNMWWFrLzAv
MzEzNzM5MmUzNDMyMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzEzMTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzKpgwDQYJKoZIhvcNAQELBQADggEBAIklUsPV
y8czC1O/736utfD+C1GaccJk6NCP6xzKaDOKRTwykoHvvkn0/K2BboParmvzcFvl
FtqCkM0of+8SbtfLj+aP7sJGojq95JP5jyQg9UzMA8nO/DjmI7OQQBA8Ej7nu+LU
Po8V5lUt0K/HvfoFfxki26p+fka0sABdGNbnEH/GRR5rCe5nVZFtxMl5wklXtgFq
y0RoxwSDJBFE2PQiFVWzV07X/WLgmKMbi4FZJQf2F9wGqKFrXzD0mH22b168UnO0
PQHPHwxIFVCGQCjtTUwpaeCeKTV+3BPEhyw+CnwiwWoPRvweeUivmRwGAzquXIac
BUyGyYbdxJbYBPc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:19:07 2026 by rpki-client