Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa
File:                     3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          v/K3r7WeKVop2MNZavXZdC2pmDOEKkOV9VlK8o5wF1g=
Subject key identifier:   46:B4:F3:EB:E8:F2:49:9B:E2:9F:41:4A:D9:78:07:57:2D:4B:6F:B9
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       3712A97730C9889F49D695963FA28614A36D2935
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:12 +0000
ROA not before:           Fri 17 Jul 2026 20:56:12 +0000
ROA not after:            Fri 16 Jul 2027 21:01:12 +0000
asID:                     28649
IP address blocks:        170.231.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:12:a9:77:30:c9:88:9f:49:d6:95:96:3f:a2:86:14:a3:6d:29:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:12 2026 GMT
            Not After : Jul 16 21:01:12 2027 GMT
        Subject: CN=46B4F3EBE8F2499BE29F414AD97807572D4B6FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:91:43:4e:64:1e:2f:4a:1c:16:2a:7d:f3:
                    ff:78:26:b7:60:ac:8b:b0:cf:51:02:14:ed:85:aa:
                    cd:95:5c:8d:01:12:d7:d7:a2:69:a1:17:7d:e4:f4:
                    2f:4c:22:76:77:c9:1c:65:37:b2:4c:78:de:0c:a5:
                    05:9e:6d:8a:37:b6:60:43:31:a7:40:c6:b1:b8:d4:
                    ca:0c:fd:14:e6:a1:a5:31:67:39:ad:62:5e:7b:56:
                    c1:2c:8d:5c:52:7c:67:21:17:82:c2:27:5e:15:30:
                    86:16:78:41:24:7a:f8:b6:40:ac:78:58:8a:c6:5e:
                    86:71:00:97:9e:aa:da:2d:aa:b4:05:ac:18:f1:cf:
                    4d:c8:dd:26:27:ff:22:4d:07:99:00:98:00:21:2b:
                    80:c4:86:36:32:14:b8:66:88:a3:c3:57:db:6f:d1:
                    83:58:81:9c:c8:e5:0a:90:5a:b0:85:8b:6a:24:25:
                    79:55:98:4b:9a:53:b3:86:bb:ca:d6:d3:e1:d0:fb:
                    34:eb:13:c2:d4:0c:31:95:ac:1b:4c:87:32:42:15:
                    16:ea:0d:3d:de:5f:7c:2e:1c:d8:59:4f:7f:8e:1e:
                    f4:15:cf:16:52:cb:c5:72:97:7b:cd:5f:7d:1d:1c:
                    6a:b2:14:e7:22:fd:89:ac:e0:e8:48:69:1d:7d:20:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B4:F3:EB:E8:F2:49:9B:E2:9F:41:4A:D9:78:07:57:2D:4B:6F:B9
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e3233312e3130342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:40:63:64:e7:dd:fe:e4:a6:c2:88:1f:f0:b8:64:1f:19:df:
         d5:25:69:37:57:26:73:7f:40:2b:db:1a:dd:8d:19:21:f3:04:
         1a:5e:74:c5:d5:39:f1:45:8a:40:3e:1d:42:31:94:ad:57:bc:
         89:e4:4d:ea:24:cf:b5:19:a0:f1:22:09:74:21:95:05:46:b4:
         cc:6f:7f:20:28:aa:8a:da:5a:8b:ce:1b:de:5f:7e:be:49:4f:
         21:55:34:35:4f:74:dc:4e:fe:db:26:56:b1:b2:40:b9:fd:29:
         30:6a:00:69:df:1d:ef:35:a3:4b:f3:e2:4e:dc:c0:18:b7:ec:
         33:5d:87:d6:49:14:0e:84:33:6a:4c:a5:8a:e9:58:60:01:ba:
         79:71:16:c3:28:be:06:5f:a6:07:d0:b1:a3:d3:6f:fd:df:c8:
         9f:b5:e0:c4:48:27:2e:db:a9:28:9a:72:68:e4:b1:6e:81:ff:
         ad:00:0f:1f:bc:f6:6a:31:af:cc:a3:b6:df:74:20:2e:5f:cf:
         42:71:97:70:56:74:c5:5c:7f:18:cf:fa:14:3c:2a:6e:88:60:
         5a:06:95:22:7f:d1:27:ba:36:34:99:22:9f:c2:1e:d1:90:61:
         7a:ca:11:68:0b:76:0f:1d:2a:54:ec:20:36:06:83:02:25:cd:
         b8:55:33:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNxKpdzDJiJ9J1pWWP6KGFKNtKTUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTJaFw0yNzA3MTYyMTAxMTJaMDMxMTAvBgNV
BAMTKDQ2QjRGM0VCRThGMjQ5OUJFMjlGNDE0QUQ5NzgwNzU3MkQ0QjZGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59pFDTmQeL0ocFip98/94Jrdg
rIuwz1ECFO2Fqs2VXI0BEtfXommhF33k9C9MInZ3yRxlN7JMeN4MpQWebYo3tmBD
MadAxrG41MoM/RTmoaUxZzmtYl57VsEsjVxSfGchF4LCJ14VMIYWeEEkevi2QKx4
WIrGXoZxAJeeqtotqrQFrBjxz03I3SYn/yJNB5kAmAAhK4DEhjYyFLhmiKPDV9tv
0YNYgZzI5QqQWrCFi2okJXlVmEuaU7OGu8rW0+HQ+zTrE8LUDDGVrBtMhzJCFRbq
DT3eX3wuHNhZT3+OHvQVzxZSy8Vyl3vNX30dHGqyFOci/Yms4OhIaR19IH2nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURrTz6+jySZvin0FK2XgHVy1Lb7kwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKq52gwDQYJKoZIhvcNAQELBQADggEBACdAY2Tn
3f7kpsKIH/C4ZB8Z39UlaTdXJnN/QCvbGt2NGSHzBBpedMXVOfFFikA+HUIxlK1X
vInkTeokz7UZoPEiCXQhlQVGtMxvfyAoqoraWovOG95ffr5JTyFVNDVPdNxO/tsm
VrGyQLn9KTBqAGnfHe81o0vz4k7cwBi37DNdh9ZJFA6EM2pMpYrpWGABunlxFsMo
vgZfpgfQsaPTb/3fyJ+14MRIJy7bqSiacmjksW6B/60ADx+89moxr8yjtt90IC5f
z0Jxl3BWdMVcfxjP+hQ8Km6IYFoGlSJ/0Se6NjSZIp/CHtGQYXrKEWgLdg8dKlTs
IDYGgwIlzbhVM/M=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:37:10 2026 by rpki-client