Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa
File:                     3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa (raw, json)
Hash identifier:          h/8DgcPDNH2YGdZkgXOJMqmTeDdaVBghNx8UN9yVbJQ=
Subject key identifier:   6D:34:50:83:FF:23:10:21:F2:D7:F7:32:4D:87:EF:86:A7:01:9F:17
Certificate issuer:       /CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
Certificate serial:       5725D53337754BD7C2CA4770A4BAC155555721D6
Authority key identifier: 0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa
Signing time:             Tue 08 Sep 2026 00:10:36 +0000
ROA not before:           Tue 08 Sep 2026 00:05:36 +0000
ROA not after:            Tue 07 Sep 2027 00:10:36 +0000
asID:                     272713
IP address blocks:        177.129.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl
                          rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 02:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:25:d5:33:37:75:4b:d7:c2:ca:47:70:a4:ba:c1:55:55:57:21:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D544ED42C6259C03F729BAE35330B8BC76BC251
        Validity
            Not Before: Sep  8 00:05:36 2026 GMT
            Not After : Sep  7 00:10:36 2027 GMT
        Subject: CN=6D345083FF231021F2D7F7324D87EF86A7019F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:e4:c4:e3:33:00:e8:9e:e0:45:f1:8f:59:
                    fd:4e:d7:85:8b:6c:f9:11:d6:d1:ed:1a:f5:25:f2:
                    58:c7:4f:78:ad:c8:17:59:fc:4f:51:63:c1:1c:f0:
                    99:b3:9a:39:14:50:41:92:12:5e:0c:8c:cb:96:87:
                    14:ae:f2:82:92:1b:b0:67:6a:ce:ed:4c:a6:1e:24:
                    55:a5:ae:ad:f7:0d:ff:3c:bc:1d:ee:5c:22:90:b6:
                    9f:86:89:9c:a6:76:29:8e:f5:f7:d9:97:66:5e:d8:
                    cb:69:7f:c4:38:88:4b:2d:86:fd:f4:3d:7c:ea:c7:
                    73:06:28:9a:d9:6b:33:48:01:82:56:83:4a:a4:e5:
                    e5:db:d8:0c:88:56:10:02:f8:55:09:d8:bb:92:c8:
                    91:63:bf:34:0b:06:42:14:d8:49:7d:eb:e3:79:67:
                    61:a4:1c:dc:1d:30:28:0e:92:64:09:65:30:a8:fb:
                    ed:d9:3f:f4:18:ec:a0:07:12:10:84:5e:0b:26:a8:
                    8a:c3:a4:a3:cc:00:56:86:5f:b5:0a:bf:36:ea:77:
                    a8:92:42:f8:8c:d1:9c:a7:7d:cf:0c:df:2a:58:5a:
                    a8:e8:46:52:a0:f7:81:57:e4:df:48:50:09:db:32:
                    33:da:1a:23:0e:91:15:14:36:2c:ad:cf:7d:84:88:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:34:50:83:FF:23:10:21:F2:D7:F7:32:4D:87:EF:86:A7:01:9F:17
            X509v3 Authority Key Identifier:
                keyid:0D:54:4E:D4:2C:62:59:C0:3F:72:9B:AE:35:33:0B:8B:C7:6B:C2:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/0D544ED42C6259C03F729BAE35330B8BC76BC251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D544ED42C6259C03F729BAE35330B8BC76BC251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AEW2qazv5FQMr3ahV5paxiyWhsTC1z9T2ykL44V9LXpy/0/3137372e3132392e36342e302f32342d3234203d3e20323732373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:76:f2:5e:51:38:3d:75:0b:4f:9a:34:cc:d6:1b:16:46:c7:
         80:79:bd:ae:1a:68:f4:47:a7:10:ca:58:b1:5e:bf:08:89:01:
         1a:36:a5:2c:bf:fa:a3:41:8b:91:06:43:da:a6:e5:fe:13:e4:
         f1:b9:bb:ea:23:8e:7c:c3:b2:ad:a8:be:74:53:0d:1f:c9:1a:
         eb:a5:ec:dd:24:15:dc:49:62:8c:be:0c:84:09:53:4d:9e:94:
         49:d1:e9:e9:ea:d5:fa:3d:c1:f6:5e:40:c3:09:17:89:dd:ca:
         3c:c3:83:4a:31:d6:e5:9f:2f:72:e6:0a:13:b2:8e:65:f7:d1:
         04:7d:be:db:8f:4a:84:24:f8:8e:b6:9e:e0:3b:de:2b:86:c2:
         de:5e:ff:0a:4a:2e:87:62:6e:5e:26:8b:93:4a:8a:bd:f7:db:
         ac:0d:e4:e9:6d:9c:1d:b2:04:f2:33:7a:85:1a:62:23:f0:1a:
         ad:18:96:7a:c1:cc:79:b0:20:d2:48:fb:4c:93:7d:85:b5:22:
         59:61:db:02:f0:f6:bb:1d:a6:d2:38:51:e7:33:e8:2f:3f:41:
         86:5f:97:6a:d6:8e:4b:47:fd:58:96:33:70:b1:5d:02:5e:5e:
         1d:f8:2b:8f:8e:b0:f6:76:f5:2f:9d:0d:bb:99:14:e5:7c:cc:
         3a:66:a9:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVyXVMzd1S9fCykdwpLrBVVVXIdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ1NDRFRDQyQzYyNTlDMDNGNzI5QkFFMzUzMzBCOEJD
NzZCQzI1MTAeFw0yNjA5MDgwMDA1MzZaFw0yNzA5MDcwMDEwMzZaMDMxMTAvBgNV
BAMTKDZEMzQ1MDgzRkYyMzEwMjFGMkQ3RjczMjREODdFRjg2QTcwMTlGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82OTE4zMA6J7gRfGPWf1O14WL
bPkR1tHtGvUl8ljHT3ityBdZ/E9RY8Ec8JmzmjkUUEGSEl4MjMuWhxSu8oKSG7Bn
as7tTKYeJFWlrq33Df88vB3uXCKQtp+GiZymdimO9ffZl2Ze2Mtpf8Q4iEsthv30
PXzqx3MGKJrZazNIAYJWg0qk5eXb2AyIVhAC+FUJ2LuSyJFjvzQLBkIU2El96+N5
Z2GkHNwdMCgOkmQJZTCo++3ZP/QY7KAHEhCEXgsmqIrDpKPMAFaGX7UKvzbqd6iS
QviM0Zynfc8M3ypYWqjoRlKg94FX5N9IUAnbMjPaGiMOkRUUNiytz32EiAFVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbTRQg/8jECHy1/cyTYfvhqcBnxcwHwYDVR0j
BBgwFoAUDVRO1CxiWcA/cpuuNTMLi8drwlEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUVXMnFhenY1RlFNcjNhaFY1cGF4aXlXaHNUQzF6OVQyeWtMNDRWOUxY
cHkvMC8wRDU0NEVENDJDNjI1OUMwM0Y3MjlCQUUzNTMzMEI4QkM3NkJDMjUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBENTQ0RUQ0MkM2MjU5QzAz
RjcyOUJBRTM1MzMwQjhCQzc2QkMyNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FFVzJxYXp2NUZRTXIzYWhWNXBheGl5V2hzVEMxejlUMnlrTDQ0VjlMWHB5LzAv
MzEzNzM3MmUzMTMyMzkyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzIzNzMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgUAwDQYJKoZIhvcNAQELBQADggEBAGN28l5R
OD11C0+aNMzWGxZGx4B5va4aaPRHpxDKWLFevwiJARo2pSy/+qNBi5EGQ9qm5f4T
5PG5u+ojjnzDsq2ovnRTDR/JGuul7N0kFdxJYoy+DIQJU02elEnR6enq1fo9wfZe
QMMJF4ndyjzDg0ox1uWfL3LmChOyjmX30QR9vtuPSoQk+I62nuA73iuGwt5e/wpK
Lodibl4mi5NKir3326wN5OltnB2yBPIzeoUaYiPwGq0YlnrBzHmwINJI+0yTfYW1
Illh2wLw9rsdptI4Uecz6C8/QYZfl2rWjktH/ViWM3CxXQJeXh34K4+OsPZ29S+d
DbuZFOV8zDpmqcI=
-----END CERTIFICATE-----
Generated at Sun Oct 18 02:26:27 2026 by rpki-client