Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa
File:                     3137372e382e39362e302f32302d3231203d3e203533313837.roa (raw, json)
Hash identifier:          gTgLJRlXMkqflHZhwNeLr0E0NczB/lnrwy4cp5V2m/0=
Subject key identifier:   CD:DE:52:F6:DB:19:39:D5:13:16:50:AD:FF:34:F2:59:73:AA:51:E5
Certificate issuer:       /CN=6F7D8AE9AD04B92F95B440AF01346CFC36C90542
Certificate serial:       52450BD45175E4A5FACB31D1F1324C572DF4B8E0
Authority key identifier: 6F:7D:8A:E9:AD:04:B9:2F:95:B4:40:AF:01:34:6C:FC:36:C9:05:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa
Signing time:             Wed 15 Apr 2026 18:25:01 +0000
ROA not before:           Wed 15 Apr 2026 18:20:01 +0000
ROA not after:            Wed 14 Apr 2027 18:25:01 +0000
asID:                     53187
IP address blocks:        177.8.96.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.crl
                          rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:45:0b:d4:51:75:e4:a5:fa:cb:31:d1:f1:32:4c:57:2d:f4:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F7D8AE9AD04B92F95B440AF01346CFC36C90542
        Validity
            Not Before: Apr 15 18:20:01 2026 GMT
            Not After : Apr 14 18:25:01 2027 GMT
        Subject: CN=CDDE52F6DB1939D5131650ADFF34F25973AA51E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ce:d3:13:2b:eb:e2:a0:a7:17:da:e9:10:b3:
                    8b:5e:9d:b6:5a:a5:14:06:79:8c:2d:57:b1:d1:c3:
                    d9:f9:22:60:b9:9f:09:fc:9a:9e:25:3b:e9:41:5d:
                    d5:74:6a:f5:4f:cf:40:59:02:cb:32:32:77:c7:a6:
                    d3:a5:e4:8d:ce:c0:33:5f:f5:15:47:c7:ac:2a:bb:
                    83:2b:22:82:e4:bc:ef:f5:fb:e0:0f:36:f8:d4:02:
                    44:60:b0:a2:0c:03:2a:3f:fe:30:72:c0:a2:ef:4a:
                    fc:ed:3a:00:a7:98:e6:70:6c:93:d7:1d:f5:34:6c:
                    4f:0d:b7:29:39:29:40:a8:1b:54:63:38:8d:cf:3c:
                    c6:ea:3e:f4:71:c6:d5:b3:67:dc:07:18:51:46:9a:
                    d0:95:ad:e1:c8:1a:21:fc:b2:36:a1:f2:05:e0:87:
                    16:81:f7:d3:54:02:db:c8:45:8a:8a:b3:6a:b8:c9:
                    34:06:e7:55:ee:c3:f6:85:7a:23:5b:67:8f:dd:70:
                    6a:28:4e:a3:4e:f9:de:74:ec:03:b6:c5:98:f2:85:
                    71:86:88:c2:da:3b:30:eb:7a:b9:f4:41:a4:11:98:
                    55:03:4a:6a:58:ba:3a:3b:38:91:62:9f:54:29:0a:
                    0d:c1:10:8d:ab:3c:f2:90:2b:c3:67:7d:82:38:7e:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DE:52:F6:DB:19:39:D5:13:16:50:AD:FF:34:F2:59:73:AA:51:E5
            X509v3 Authority Key Identifier:
                keyid:6F:7D:8A:E9:AD:04:B9:2F:95:B4:40:AF:01:34:6C:FC:36:C9:05:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F7D8AE9AD04B92F95B440AF01346CFC36C90542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANJYiZuQVA6B6yThLV8Lmk5Y2vcdhzmdNPxGp96RZ17K/0/3137372e382e39362e302f32302d3231203d3e203533313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:01:74:70:81:6f:b7:71:5e:3f:48:b8:4c:fd:2e:52:84:a2:
         05:db:2f:24:72:0b:af:21:cf:23:0b:e6:04:f2:e0:35:38:9c:
         55:84:2c:90:93:38:78:c1:cc:7c:4d:1c:08:d2:23:bd:85:b6:
         27:c4:76:a6:ce:b5:7d:d7:6d:8a:7d:d2:0b:44:44:3e:d2:e6:
         43:1b:c3:48:09:b3:0f:e3:3b:13:c6:8b:f4:bd:40:14:83:ca:
         e6:66:cc:b5:3c:bc:e5:3b:eb:d3:b0:3a:6f:9e:5a:18:01:e2:
         10:a1:ba:27:49:2d:02:7f:b1:67:23:48:ad:5d:b7:12:46:cd:
         c4:ef:99:00:e1:86:3a:75:47:05:a7:b0:90:b5:55:4b:30:3c:
         b1:ce:5c:1f:33:04:ae:33:7d:a3:47:11:de:59:f1:9d:80:d5:
         a0:0c:b0:47:31:e8:a1:5c:12:17:7c:8b:e8:e7:0e:c3:94:f1:
         86:30:b9:5b:20:dc:67:12:8f:94:5d:70:91:1f:36:78:54:c9:
         6f:90:de:d6:2c:79:15:90:e7:c5:64:a1:50:61:b2:5a:83:99:
         c9:00:96:62:bd:0a:51:82:a8:0f:a6:36:9f:2d:0a:79:c1:59:
         41:a1:71:17:c1:69:2c:de:ef:71:d8:9b:b5:00:db:12:68:8e:
         db:8c:2a:51
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUkUL1FF15KX6yzHR8TJMVy30uOAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkY3RDhBRTlBRDA0QjkyRjk1QjQ0MEFGMDEzNDZDRkMz
NkM5MDU0MjAeFw0yNjA0MTUxODIwMDFaFw0yNzA0MTQxODI1MDFaMDMxMTAvBgNV
BAMTKENEREU1MkY2REIxOTM5RDUxMzE2NTBBREZGMzRGMjU5NzNBQTUxRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWztMTK+vioKcX2ukQs4tenbZa
pRQGeYwtV7HRw9n5ImC5nwn8mp4lO+lBXdV0avVPz0BZAssyMnfHptOl5I3OwDNf
9RVHx6wqu4MrIoLkvO/1++APNvjUAkRgsKIMAyo//jBywKLvSvztOgCnmOZwbJPX
HfU0bE8Ntyk5KUCoG1RjOI3PPMbqPvRxxtWzZ9wHGFFGmtCVreHIGiH8sjah8gXg
hxaB99NUAtvIRYqKs2q4yTQG51Xuw/aFeiNbZ4/dcGooTqNO+d507AO2xZjyhXGG
iMLaOzDrern0QaQRmFUDSmpYujo7OJFin1QpCg3BEI2rPPKQK8NnfYI4fkMxAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUzd5S9tsZOdUTFlCt/zTyWXOqUeUwHwYDVR0j
BBgwFoAUb32K6a0EuS+VtECvATRs/DbJBUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5KWWladVFWQTZCNnlUaExWOExtazVZMnZjZGh6bWROUHhHcDk2Ulox
N0svMC82RjdEOEFFOUFEMDRCOTJGOTVCNDQwQUYwMTM0NkNGQzM2QzkwNTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGN0Q4QUU5QUQwNEI5MkY5
NUI0NDBBRjAxMzQ2Q0ZDMzZDOTA1NDIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOSllpWnVRVkE2QjZ5VGhMVjhMbWs1WTJ2Y2Roem1kTlB4R3A5NlJaMTdLLzAv
MzEzNzM3MmUzODJlMzkzNjJlMzAyZjMyMzAyZDMyMzEyMDNkM2UyMDM1MzMzMTM4
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCGAwDQYJKoZIhvcNAQELBQADggEBABYBdHCBb7dxXj9I
uEz9LlKEogXbLyRyC68hzyML5gTy4DU4nFWELJCTOHjBzHxNHAjSI72FtifEdqbO
tX3XbYp90gtERD7S5kMbw0gJsw/jOxPGi/S9QBSDyuZmzLU8vOU769OwOm+eWhgB
4hChuidJLQJ/sWcjSK1dtxJGzcTvmQDhhjp1RwWnsJC1VUswPLHOXB8zBK4zfaNH
Ed5Z8Z2A1aAMsEcx6KFcEhd8i+jnDsOU8YYwuVsg3GcSj5RdcJEfNnhUyW+Q3tYs
eRWQ58VkoVBhslqDmckAlmK9ClGCqA+mNp8tCnnBWUGhcRfBaSze73HYm7UA2xJo
jtuMKlE=
-----END CERTIFICATE-----
Generated at Wed May 13 18:16:25 2026 by rpki-client