Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35382e302f32332d3233203d3e20323632353132.roa
File:                     3137372e36372e35382e302f32332d3233203d3e20323632353132.roa (raw, json)
Hash identifier:          Gc3S7ZJNFOfUZWQlfh5B+UkKCAbCKn70Gd/xqBsHdSw=
Subject key identifier:   F9:BD:CA:1A:07:B6:E1:59:9C:0A:5F:5B:EE:24:CA:95:7F:95:B1:64
Certificate issuer:       /CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
Certificate serial:       5F5BB2B5D3BBAC9B1E7E2CFFE0A115FB6E7D4654
Authority key identifier: 58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35382e302f32332d3233203d3e20323632353132.roa
Signing time:             Thu 01 Oct 2026 13:22:10 +0000
ROA not before:           Thu 01 Oct 2026 13:17:10 +0000
ROA not after:            Thu 30 Sep 2027 13:22:10 +0000
asID:                     262512
IP address blocks:        177.67.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl
                          rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:b2:b5:d3:bb:ac:9b:1e:7e:2c:ff:e0:a1:15:fb:6e:7d:46:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
        Validity
            Not Before: Oct  1 13:17:10 2026 GMT
            Not After : Sep 30 13:22:10 2027 GMT
        Subject: CN=F9BDCA1A07B6E1599C0A5F5BEE24CA957F95B164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:f0:27:c1:a9:07:59:58:1c:de:b4:26:0d:
                    1d:e9:48:12:b6:e4:08:8c:cd:ee:ba:73:a1:54:17:
                    ee:35:2b:75:d4:26:3d:61:e8:e8:c2:a2:5b:1a:ba:
                    6c:18:38:7e:fe:fa:41:86:ce:d5:57:cf:2a:4c:1f:
                    ae:f2:5c:f0:ad:b1:9b:a5:cf:e1:8a:b9:99:18:63:
                    b3:db:46:af:8d:94:e3:5c:dc:89:e1:75:8f:6a:7d:
                    ae:37:57:32:0c:0f:92:39:aa:d2:fe:ee:26:66:eb:
                    66:22:e1:be:83:aa:4a:4c:67:61:ee:02:eb:ca:4f:
                    4f:9c:db:d8:7e:30:b6:db:6a:99:e5:d8:ee:7d:75:
                    ee:5e:8e:59:75:0b:74:f6:b7:c2:80:9d:ae:5f:1b:
                    f1:90:4e:52:e7:47:84:36:2e:55:6b:48:d3:0b:a6:
                    24:a7:df:7f:79:a9:43:8d:da:55:bf:8f:27:51:83:
                    df:19:aa:e5:73:6e:1a:7b:bb:7c:b9:b4:9d:30:d2:
                    12:00:3f:5c:a1:d3:16:33:3e:3f:d5:82:bd:72:80:
                    61:c2:e2:91:9f:b7:c5:08:48:6e:c6:a0:50:c6:a3:
                    d6:7c:6b:1d:aa:70:b0:78:0f:09:5d:f2:89:99:e5:
                    41:04:72:9a:c1:18:42:92:45:7f:c4:31:44:f1:53:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BD:CA:1A:07:B6:E1:59:9C:0A:5F:5B:EE:24:CA:95:7F:95:B1:64
            X509v3 Authority Key Identifier:
                keyid:58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3137372e36372e35382e302f32332d3233203d3e20323632353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:0d:c7:22:95:b4:43:cc:6a:95:a6:61:4d:c0:c3:b3:6a:53:
         c1:30:8b:bb:27:b5:1d:03:a8:97:d9:d3:83:76:91:b6:25:e6:
         13:79:33:eb:47:5f:ad:4c:82:70:17:a6:7d:70:0a:76:53:44:
         7f:3e:e4:87:f0:1a:d6:4a:9a:1d:b8:d3:12:38:bc:a8:2f:65:
         eb:b4:35:54:62:6f:cb:96:4c:cf:ec:51:61:ec:c4:f4:60:97:
         fd:c3:df:c9:4a:f4:3c:d7:48:74:ce:37:ba:5d:cb:c5:61:52:
         3e:df:77:91:36:cc:8f:ed:ed:01:60:20:9c:9a:8d:ba:17:04:
         c4:db:c8:a5:b1:2e:26:37:c0:5c:37:21:5e:80:3d:63:26:96:
         f4:c0:6f:db:db:9d:cc:e3:01:49:42:ca:96:94:39:a8:0e:a3:
         3f:67:83:18:d3:fc:45:c8:25:8c:18:5c:70:2a:a3:10:86:7b:
         43:e9:d4:dd:f0:e2:11:1d:6d:63:e9:b6:9b:e5:b0:5e:86:68:
         a6:26:71:ce:8a:c3:1c:06:d5:40:63:88:80:60:db:04:e2:15:
         fe:e7:a9:61:c9:c6:15:2e:79:b3:30:26:b3:33:6d:c8:e5:ba:
         0e:d2:b2:c5:09:4c:01:7d:cd:79:e8:c4:3d:79:69:79:5a:3b:
         13:0b:58:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX1uytdO7rJsefiz/4KEV+259RlQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg1M0JDRUY2NzU0NUZENzZEMTRENDU4ODlBNDUxN0Qx
QzJBMEVFQjAeFw0yNjEwMDExMzE3MTBaFw0yNzA5MzAxMzIyMTBaMDMxMTAvBgNV
BAMTKEY5QkRDQTFBMDdCNkUxNTk5QzBBNUY1QkVFMjRDQTk1N0Y5NUIxNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1PAnwakHWVgc3rQmDR3pSBK2
5AiMze66c6FUF+41K3XUJj1h6OjColsaumwYOH7++kGGztVXzypMH67yXPCtsZul
z+GKuZkYY7PbRq+NlONc3InhdY9qfa43VzIMD5I5qtL+7iZm62Yi4b6DqkpMZ2Hu
AuvKT0+c29h+MLbbapnl2O59de5ejll1C3T2t8KAna5fG/GQTlLnR4Q2LlVrSNML
piSn3395qUON2lW/jydRg98ZquVzbhp7u3y5tJ0w0hIAP1yh0xYzPj/Vgr1ygGHC
4pGft8UISG7GoFDGo9Z8ax2qcLB4Dwld8omZ5UEEcprBGEKSRX/EMUTxU26dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+b3KGge24VmcCl9b7iTKlX+VsWQwHwYDVR0j
BBgwFoAUWFO872dUX9dtFNRYiaRRfRwqDuswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXJkWng5V3BSenV2OFVLRFRIRzR3TXRYY3M3U0FDMkhWWUFMNDhkN1oy
YmQvMC81ODUzQkNFRjY3NTQ1RkQ3NkQxNEQ0NTg4OUE0NTE3RDFDMkEwRUVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NTNCQ0VGNjc1NDVGRDc2
RDE0RDQ1ODg5QTQ1MTdEMUMyQTBFRUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FyZFp4OVdwUnp1djhVS0RUSEc0d010WGNzN1NBQzJIVllBTDQ4ZDdaMmJkLzAv
MzEzNzM3MmUzNjM3MmUzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzUzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsUM6MA0GCSqGSIb3DQEBCwUAA4IBAQBDDccilbRD
zGqVpmFNwMOzalPBMIu7J7UdA6iX2dODdpG2JeYTeTPrR1+tTIJwF6Z9cAp2U0R/
PuSH8BrWSpoduNMSOLyoL2XrtDVUYm/LlkzP7FFh7MT0YJf9w9/JSvQ810h0zje6
XcvFYVI+33eRNsyP7e0BYCCcmo26FwTE28ilsS4mN8BcNyFegD1jJpb0wG/b253M
4wFJQsqWlDmoDqM/Z4MY0/xFyCWMGFxwKqMQhntD6dTd8OIRHW1j6bab5bBehmim
JnHOisMcBtVAY4iAYNsE4hX+56lhycYVLnmzMCazM23I5boO0rLFCUwBfc156MQ9
eWl5WjsTC1gd
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:48:03 2026 by rpki-client