Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
File:                     3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa (raw, json)
Hash identifier:          aFYqj5xGonj/2pdipePNsvBLghexvEZlfaDkmY2f4Ck=
Subject key identifier:   6C:45:B6:88:4E:EE:8D:C6:CF:CF:CA:3D:80:5A:D8:D9:AD:2F:B6:A0
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       411D540D7450524F41C8C5EEADE72F7A56ECF9BB
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa
Signing time:             Sat 04 Jul 2026 13:43:51 +0000
ROA not before:           Sat 04 Jul 2026 13:38:51 +0000
ROA not after:            Sat 03 Jul 2027 13:43:51 +0000
asID:                     262669
IP address blocks:        177.22.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1d:54:0d:74:50:52:4f:41:c8:c5:ee:ad:e7:2f:7a:56:ec:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul  4 13:38:51 2026 GMT
            Not After : Jul  3 13:43:51 2027 GMT
        Subject: CN=6C45B6884EEE8DC6CFCFCA3D805AD8D9AD2FB6A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:09:c1:66:11:a7:cb:2d:86:a0:ea:1e:fb:
                    1e:9d:6c:82:a0:6d:30:f6:34:97:c2:ca:42:64:8b:
                    6f:e8:99:6c:84:3d:70:59:b0:a8:bf:24:87:0f:b6:
                    50:bd:0d:31:ed:56:cf:b0:39:a9:c9:94:f8:6f:b4:
                    7f:33:aa:da:a5:f5:98:5c:41:5e:91:82:cc:71:7c:
                    6f:8f:c8:e5:c0:bd:fe:f8:e5:5a:2b:45:ce:6f:78:
                    20:c6:bc:13:61:37:bf:56:b1:7f:34:f9:3d:d3:4c:
                    3d:db:3e:9f:cd:e0:da:63:f9:8a:db:b3:f1:6c:b2:
                    91:da:b7:22:e9:9a:4a:40:af:57:3b:a5:d7:a8:20:
                    79:96:d8:cb:f7:6e:34:8a:21:c1:ce:e4:24:85:b2:
                    be:08:b6:f5:40:00:8b:aa:71:ae:80:48:1a:a8:ae:
                    bf:dd:b4:50:c0:30:64:60:ec:50:c0:76:94:e3:b2:
                    56:a4:47:30:06:9a:35:56:97:26:4d:a2:57:2f:b8:
                    56:80:0c:72:86:46:c2:76:53:51:f3:20:21:eb:52:
                    22:25:00:9b:68:67:e8:e7:80:03:ea:c3:b4:46:27:
                    e8:e1:12:ff:f5:a1:c2:84:07:dc:f9:07:c3:53:81:
                    b9:0b:f1:5b:80:35:c7:a0:97:84:1e:0d:df:d9:2e:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:B6:88:4E:EE:8D:C6:CF:CF:CA:3D:80:5A:D8:D9:AD:2F:B6:A0
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/3137372e32322e3232342e302f32302d3234203d3e20323632363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a8:88:6a:96:f8:2b:93:27:13:ef:f1:1b:8c:f8:5c:d5:3b:05:
         62:8c:be:86:4e:92:34:62:80:77:2f:0c:1b:99:42:ee:0d:ad:
         85:21:7b:b2:93:79:5c:c3:d2:b7:1e:7b:e7:82:18:4e:7a:b1:
         57:7f:48:ed:06:a9:25:2d:cb:3b:1e:51:15:0c:a9:0c:a6:7d:
         0f:58:6b:54:5b:91:3a:fd:7e:5a:e4:46:5b:61:71:df:5c:e7:
         d9:03:31:41:89:6f:0f:b5:72:d9:8a:21:c0:17:25:59:92:e4:
         dd:a7:02:dd:f9:db:28:c1:3c:9b:24:10:95:c3:b5:d4:ef:29:
         1b:a3:42:3c:15:36:f3:d4:43:69:60:0f:dd:4e:ad:08:53:f6:
         94:bc:ba:99:7a:7d:7e:e2:08:88:ad:d0:6b:66:5e:d9:07:f5:
         29:68:1c:7c:71:f0:1b:c7:ed:4c:3d:54:03:62:92:78:a4:39:
         6d:47:95:ed:17:a7:41:55:31:fc:80:d6:df:ad:35:d0:b1:28:
         af:ba:69:c6:cf:1f:19:2d:a0:16:10:71:06:a0:cb:66:0d:63:
         94:56:e4:40:16:e4:e3:2e:7e:85:71:4c:a2:7b:6e:cf:14:38:
         1d:27:45:98:09:3e:c1:9b:0f:d0:14:53:21:1a:d4:c0:ad:12:
         c6:04:c0:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQR1UDXRQUk9ByMXurecvelbs+bswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNjA3MDQxMzM4NTFaFw0yNzA3MDMxMzQzNTFaMDMxMTAvBgNV
BAMTKDZDNDVCNjg4NEVFRThEQzZDRkNGQ0EzRDgwNUFEOEQ5QUQyRkI2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4wnBZhGnyy2GoOoe+x6dbIKg
bTD2NJfCykJki2/omWyEPXBZsKi/JIcPtlC9DTHtVs+wOanJlPhvtH8zqtql9Zhc
QV6RgsxxfG+PyOXAvf745VorRc5veCDGvBNhN79WsX80+T3TTD3bPp/N4Npj+Yrb
s/FsspHatyLpmkpAr1c7pdeoIHmW2Mv3bjSKIcHO5CSFsr4ItvVAAIuqca6ASBqo
rr/dtFDAMGRg7FDAdpTjslakRzAGmjVWlyZNolcvuFaADHKGRsJ2U1HzICHrUiIl
AJtoZ+jngAPqw7RGJ+jhEv/1ocKEB9z5B8NTgbkL8VuANcegl4QeDd/ZLoJlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbEW2iE7ujcbPz8o9gFrY2a0vtqAwHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl0Z0hGcllxb3RrbnJ6R05IQTIycVBYQXJiVDIyVXNwVEdjWnJpRE42ZmdVLzAv
MzEzNzM3MmUzMjMyMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxFuAwDQYJKoZIhvcNAQELBQADggEBAKiIapb4
K5MnE+/xG4z4XNU7BWKMvoZOkjRigHcvDBuZQu4NrYUhe7KTeVzD0rcee+eCGE56
sVd/SO0GqSUtyzseURUMqQymfQ9Ya1RbkTr9flrkRlthcd9c59kDMUGJbw+1ctmK
IcAXJVmS5N2nAt352yjBPJskEJXDtdTvKRujQjwVNvPUQ2lgD91OrQhT9pS8upl6
fX7iCIit0GtmXtkH9SloHHxx8BvH7Uw9VANiknikOW1Hle0Xp0FVMfyA1t+tNdCx
KK+6acbPHxktoBYQcQagy2YNY5RW5EAW5OMufoVxTKJ7bs8UOB0nRZgJPsGbD9AU
UyEa1MCtEsYEwPk=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:59:19 2026 by rpki-client