Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa (raw, json)
Hash identifier:          QD395sZRK0+BtaB3sdPrw0h+exar/rdzP0XeOdGDcLo=
Subject key identifier:   8F:D0:02:F4:18:41:E2:ED:ED:59:44:A3:7B:D9:05:A8:97:9F:46:ED
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       63ABA0AF0672DFF2E2A0BD59FACF701FD8A6D0B2
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:08 +0000
ROA not before:           Wed 22 Jul 2026 21:57:08 +0000
ROA not after:            Wed 21 Jul 2027 22:02:08 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ab:a0:af:06:72:df:f2:e2:a0:bd:59:fa:cf:70:1f:d8:a6:d0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:08 2026 GMT
            Not After : Jul 21 22:02:08 2027 GMT
        Subject: CN=8FD002F41841E2EDED5944A37BD905A8979F46ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:79:bf:57:3e:d9:df:8c:50:4a:a2:c3:22:
                    e6:a6:14:92:74:34:69:73:4a:27:b8:ea:62:f6:d4:
                    05:a5:78:a6:25:b6:e0:0e:a0:02:97:85:1e:6f:19:
                    b0:c2:e8:a2:5a:21:2f:ce:6a:40:4d:09:c5:f4:70:
                    ca:04:2f:ea:c3:fc:d6:2d:92:14:b6:34:7d:7d:fd:
                    9d:0c:00:a6:52:9b:4e:48:80:5c:57:9e:a4:85:9b:
                    fc:7c:af:c2:04:44:7d:6b:de:0c:c0:fd:a9:2d:73:
                    1a:1e:0e:33:a6:89:d7:06:e6:7a:89:c0:37:b1:a4:
                    9d:91:5b:8d:25:73:61:90:a2:b4:81:a1:90:4f:1a:
                    cb:13:c0:4d:e1:0d:7d:8b:c8:bf:5b:08:45:0e:74:
                    34:e6:7c:66:da:ae:06:3d:a0:6c:ad:00:04:54:20:
                    7d:25:a2:fd:55:14:bf:8c:c5:ae:1b:a0:6f:31:d5:
                    14:00:c3:96:cb:0a:f2:df:85:d4:42:c3:15:33:00:
                    ab:a5:f3:de:c7:21:a1:48:2a:05:5c:f8:f9:40:8b:
                    c8:1b:6f:36:e0:77:d3:90:a1:39:5d:d0:12:5b:76:
                    68:84:32:9b:6d:6b:04:7a:87:fe:f7:de:3a:5f:96:
                    35:ba:c1:f0:97:24:ec:01:3d:5a:50:54:07:8d:e7:
                    a1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D0:02:F4:18:41:E2:ED:ED:59:44:A3:7B:D9:05:A8:97:9F:46:ED
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3232203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:d7:7a:d9:9e:89:18:2e:46:67:0e:10:8a:02:44:b8:eb:34:
         52:e4:a0:1b:ab:22:72:f9:45:39:f7:89:ec:38:c1:a0:8d:d8:
         25:ce:b5:8e:8c:8f:93:1c:f2:59:b9:c0:57:fb:a7:82:2e:ab:
         25:41:13:4d:eb:5a:d1:22:bd:08:26:5f:3a:b8:2d:07:c9:d2:
         75:7c:88:61:51:7f:6e:7f:cc:72:ed:6f:9d:00:e9:a4:8a:ba:
         b9:7a:d5:9b:e3:ba:2f:92:a0:c0:30:bc:b9:94:02:04:51:3e:
         fb:69:2c:cb:3f:16:65:07:d1:de:ec:a4:25:31:a1:09:46:b0:
         bd:1d:11:83:67:21:78:62:fe:67:2b:34:07:73:d7:95:d8:50:
         a3:8a:f2:6f:34:1c:eb:1a:88:78:3d:aa:bb:de:7a:0c:d9:14:
         e8:95:2d:bb:e4:25:c1:71:67:31:9c:93:6c:ca:2f:42:aa:6a:
         73:92:40:2f:57:c8:d2:ec:f7:48:62:ef:b3:30:1f:bf:7f:ba:
         02:a6:63:09:d6:51:25:74:57:ac:3b:49:c3:66:ad:f6:a1:5d:
         69:09:86:51:2f:4b:9d:ea:4c:21:ef:1a:37:b2:ce:6c:bc:6a:
         18:62:f6:8f:4b:ce:a1:cb:95:86:3d:18:ae:3b:f0:d7:c3:e5:
         68:2b:e8:1d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY6ugrwZy3/LioL1Z+s9wH9im0LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MDhaFw0yNzA3MjEyMjAyMDhaMDMxMTAvBgNV
BAMTKDhGRDAwMkY0MTg0MUUyRURFRDU5NDRBMzdCRDkwNUE4OTc5RjQ2RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkXm/Vz7Z34xQSqLDIuamFJJ0
NGlzSie46mL21AWleKYltuAOoAKXhR5vGbDC6KJaIS/OakBNCcX0cMoEL+rD/NYt
khS2NH19/Z0MAKZSm05IgFxXnqSFm/x8r8IERH1r3gzA/aktcxoeDjOmidcG5nqJ
wDexpJ2RW40lc2GQorSBoZBPGssTwE3hDX2LyL9bCEUOdDTmfGbargY9oGytAARU
IH0lov1VFL+Mxa4boG8x1RQAw5bLCvLfhdRCwxUzAKul897HIaFIKgVc+PlAi8gb
bzbgd9OQoTld0BJbdmiEMpttawR6h/733jpfljW6wfCXJOwBPVpQVAeN56EPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj9AC9BhB4u3tWUSje9kFqJefRu0wHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzODM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlXwwDQYJKoZIhvcNAQELBQADggEBACTXetme
iRguRmcOEIoCRLjrNFLkoBurInL5RTn3iew4waCN2CXOtY6Mj5Mc8lm5wFf7p4Iu
qyVBE03rWtEivQgmXzq4LQfJ0nV8iGFRf25/zHLtb50A6aSKurl61Zvjui+SoMAw
vLmUAgRRPvtpLMs/FmUH0d7spCUxoQlGsL0dEYNnIXhi/mcrNAdz15XYUKOK8m80
HOsaiHg9qrveegzZFOiVLbvkJcFxZzGck2zKL0KqanOSQC9XyNLs90hi77MwH79/
ugKmYwnWUSV0V6w7ScNmrfahXWkJhlEvS53qTCHvGjeyzmy8ahhi9o9LzqHLlYY9
GK478NfD5Wgr6B0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:40:13 2026 by rpki-client