Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32332d3233203d3e203631383531.roa
File:                     3230312e3134392e3132362e302f32332d3233203d3e203631383531.roa (raw, json)
Hash identifier:          6KthE67StHKMnyWFjAzGLPbBSsps66kkF37pIpMwl84=
Subject key identifier:   D9:1A:25:8E:37:CF:44:78:C3:36:93:4A:B7:D1:68:50:57:76:5E:FC
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       551914C6411C170FD7050F096C1FD61291954748
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32332d3233203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:02:13 +0000
ROA not before:           Wed 22 Jul 2026 21:57:13 +0000
ROA not after:            Wed 21 Jul 2027 22:02:13 +0000
asID:                     61851
IP address blocks:        201.149.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:19:14:c6:41:1c:17:0f:d7:05:0f:09:6c:1f:d6:12:91:95:47:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 21:57:13 2026 GMT
            Not After : Jul 21 22:02:13 2027 GMT
        Subject: CN=D91A258E37CF4478C336934AB7D1685057765EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:44:9b:8e:e2:76:0a:d6:42:67:8a:92:a1:fc:
                    66:bb:59:a0:9b:66:80:09:c8:c3:7e:c6:c4:c5:d1:
                    43:43:ae:86:b8:f0:39:65:75:1e:f8:41:44:83:52:
                    c2:45:d4:98:04:98:f0:9c:9b:45:22:51:aa:95:76:
                    21:6d:54:94:29:83:0e:fe:f9:61:0d:02:ba:c5:ee:
                    2e:c3:80:3f:e9:35:e9:f4:9b:04:93:a9:e0:ea:64:
                    82:7f:c8:99:4b:52:85:f2:53:05:21:34:dd:13:de:
                    69:93:fb:3e:3c:ba:3d:35:a5:62:9b:ea:22:a0:4d:
                    8b:43:31:c3:3c:57:ad:39:a4:e9:93:61:3c:41:39:
                    71:c9:0d:12:f1:23:86:55:65:01:0d:5d:2d:9a:fa:
                    cd:21:86:c1:bc:04:38:40:d2:fc:72:2d:ae:f2:0f:
                    a4:3c:61:6e:be:0f:de:f7:3b:63:f9:d7:8c:90:bb:
                    9c:23:aa:79:0e:80:d2:28:cb:88:5b:ac:33:01:fb:
                    8b:85:3e:e1:fe:cf:dc:78:d0:99:f7:99:38:32:c2:
                    87:d5:84:b5:b4:76:aa:af:56:d3:41:b5:2c:eb:bb:
                    b8:8a:99:51:93:6a:8d:66:9f:90:43:1d:6c:96:75:
                    a2:35:bc:cf:0e:d9:75:a7:aa:8c:d6:e8:27:26:41:
                    40:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1A:25:8E:37:CF:44:78:C3:36:93:4A:B7:D1:68:50:57:76:5E:FC
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132362e302f32332d3233203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:c2:cc:0b:3b:30:6d:48:c6:0b:3f:7f:c3:46:98:a4:e1:de:
         8d:82:a9:37:88:07:6c:08:a2:dd:26:76:5b:62:6a:3f:a9:e6:
         6f:6a:3a:b6:24:8f:75:34:a2:43:53:eb:3c:36:0d:85:af:e1:
         8d:40:cd:16:6a:eb:42:47:d2:e4:09:64:2c:62:f3:7a:c3:f1:
         45:71:40:1f:8a:de:bf:01:3c:ee:40:4b:1f:4f:0a:2e:12:d3:
         90:65:46:83:95:c0:bc:c0:49:40:59:c8:cb:4c:ef:c4:bd:2a:
         09:a0:71:d4:af:9c:43:ec:c9:e5:43:93:7a:51:e1:99:e9:b5:
         ad:23:ff:1b:17:67:d3:ed:3f:b6:98:ef:2f:0b:83:00:a7:36:
         c7:e8:5b:c3:22:67:d8:08:98:16:42:40:90:f5:39:6b:62:b8:
         2e:e8:2e:0e:97:b0:85:2f:6d:2a:b5:8e:de:45:ff:1c:b0:32:
         ac:ca:ea:dc:bf:07:8d:7c:09:64:ef:40:65:66:f5:77:88:0e:
         c4:62:39:26:8e:cc:c2:04:9b:58:53:19:8e:47:88:6c:f8:f9:
         c3:1d:10:99:ad:57:96:02:b1:17:6b:b3:26:ac:33:43:73:44:
         1e:b7:d1:1c:22:10:5b:47:a0:2c:35:4b:62:34:ce:08:e6:3d:
         93:b9:19:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVRkUxkEcFw/XBQ8JbB/WEpGVR0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkM2NkQzNzVCOTY3NTEzNkU3QzY4QkFBQzRGMkREREIy
Q0U0RTE2NzAeFw0yNjA3MjIyMTU3MTNaFw0yNzA3MjEyMjAyMTNaMDMxMTAvBgNV
BAMTKEQ5MUEyNThFMzdDRjQ0NzhDMzM2OTM0QUI3RDE2ODUwNTc3NjVFRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRJuO4nYK1kJnipKh/Ga7WaCb
ZoAJyMN+xsTF0UNDroa48DlldR74QUSDUsJF1JgEmPCcm0UiUaqVdiFtVJQpgw7+
+WENArrF7i7DgD/pNen0mwSTqeDqZIJ/yJlLUoXyUwUhNN0T3mmT+z48uj01pWKb
6iKgTYtDMcM8V605pOmTYTxBOXHJDRLxI4ZVZQENXS2a+s0hhsG8BDhA0vxyLa7y
D6Q8YW6+D973O2P514yQu5wjqnkOgNIoy4hbrDMB+4uFPuH+z9x40Jn3mTgywofV
hLW0dqqvVtNBtSzru7iKmVGTao1mn5BDHWyWdaI1vM8O2XWnqozW6CcmQUCbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2RoljjfPRHjDNpNKt9FoUFd2XvwwHwYDVR0j
BBgwFoAUbGbTdblnUTbnxouqxPLd2yzk4WcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOU1lNzgyWWFacUV3V0YzdVBFSzlrR0g3b0E4a0FzRjlSa2lxdDZUZGpR
QjkvMC82QzY2RDM3NUI5Njc1MTM2RTdDNjhCQUFDNEYyREREQjJDRTRFMTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZDNjZEMzc1Qjk2NzUxMzZF
N0M2OEJBQUM0RjJERERCMkNFNEUxNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlNZTc4MllhWnFFd1dGM3VQRUs5a0dIN29BOGtBc0Y5UmtpcXQ2VGRqUUI5LzAv
MzIzMDMxMmUzMTM0MzkyZTMxMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzODM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJlX4wDQYJKoZIhvcNAQELBQADggEBAKDCzAs7
MG1Ixgs/f8NGmKTh3o2CqTeIB2wIot0mdltiaj+p5m9qOrYkj3U0okNT6zw2DYWv
4Y1AzRZq60JH0uQJZCxi83rD8UVxQB+K3r8BPO5ASx9PCi4S05BlRoOVwLzASUBZ
yMtM78S9KgmgcdSvnEPsyeVDk3pR4Znpta0j/xsXZ9PtP7aY7y8LgwCnNsfoW8Mi
Z9gImBZCQJD1OWtiuC7oLg6XsIUvbSq1jt5F/xywMqzK6ty/B418CWTvQGVm9XeI
DsRiOSaOzMIEm1hTGY5HiGz4+cMdEJmtV5YCsRdrsyasM0NzRB630RwiEFtHoCw1
S2I0zgjmPZO5GQ8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:06:22 2026 by rpki-client