Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa
File:                     3137302e38332e3134302e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          preNOXX17GloOxwwEsZvbsHw6yuyYDhduqa2SscgdNI=
Subject key identifier:   C4:A1:49:F3:7F:AE:88:CD:C9:14:29:25:9E:D0:77:49:2A:D1:6F:23
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       5EA7D996F0A3329775E401DA6E5ACD4F0444ECDC
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        170.83.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a7:d9:96:f0:a3:32:97:75:e4:01:da:6e:5a:cd:4f:04:44:ec:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=C4A149F37FAE88CDC91429259ED077492AD16F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:66:52:a2:1a:27:26:d7:9b:dc:4a:46:06:
                    19:8b:3d:e3:aa:af:11:a9:f7:38:bf:7d:dc:df:51:
                    44:6a:35:10:d7:98:0c:70:2c:09:7a:ab:51:2c:17:
                    5c:c9:3f:30:31:86:9c:c8:2f:76:ad:aa:c9:86:ed:
                    7a:4b:38:42:16:3d:c0:df:ef:84:01:b6:02:4b:fe:
                    c4:0e:02:06:d4:20:0b:3e:72:7c:bb:73:b3:a5:88:
                    80:6b:9c:ea:2f:fc:45:48:be:60:d9:b6:9f:17:d7:
                    6a:90:c6:87:ca:10:26:4d:98:75:42:62:54:ef:ec:
                    a5:d4:3a:39:cc:8b:59:19:ce:67:86:f7:4e:ef:d5:
                    eb:ce:74:af:01:2b:64:d9:9b:4b:77:40:7e:2c:76:
                    d1:84:f7:96:18:81:10:62:cf:39:ee:18:ef:70:5a:
                    f9:04:01:5d:d4:ba:33:cb:17:8a:6d:38:25:b5:bd:
                    49:d2:1b:89:8d:3f:40:ee:d3:76:b0:4a:a2:9d:bd:
                    f8:18:21:ea:13:d8:71:a4:a3:d1:ed:1d:c3:25:53:
                    7d:28:cb:a6:fd:8f:78:cc:e1:99:87:60:a3:d2:74:
                    92:fb:af:2a:45:d0:1f:69:46:54:c6:40:2d:50:03:
                    c3:67:93:f9:78:af:67:1a:99:fb:2e:bc:62:90:8b:
                    14:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A1:49:F3:7F:AE:88:CD:C9:14:29:25:9E:D0:77:49:2A:D1:6F:23
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3137302e38332e3134302e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:52:ed:2e:c1:b8:a3:b3:e0:d3:84:72:0a:4a:67:27:ae:79:
         67:5d:9a:40:54:ef:83:79:fe:3a:04:79:17:26:b3:60:34:37:
         48:9d:9b:09:fb:a5:a4:4b:c8:d4:3e:64:1b:f4:cf:ef:f1:54:
         61:af:47:43:40:0e:85:7a:e7:77:7d:a5:e7:82:0b:37:57:8b:
         b2:e9:f1:c1:d0:3f:e5:7e:4d:27:79:7a:b3:88:93:73:6e:f7:
         6b:dc:8c:e2:79:82:5e:fb:61:94:7d:14:97:51:9d:4c:0b:0f:
         ff:5c:95:a4:c7:c6:a2:9f:e3:48:41:b3:0f:4a:7d:cc:2c:ee:
         66:52:44:03:92:1a:a7:43:60:50:e4:f3:a7:f8:c1:85:c6:c4:
         a3:b0:09:77:ab:44:db:e7:e2:68:d6:93:68:ba:e7:53:cf:63:
         13:bf:0a:c6:cf:ef:3a:e1:fe:6f:8b:9c:64:81:59:99:29:85:
         8e:cd:5a:ea:e6:b7:72:86:73:85:89:ea:51:8c:f1:7c:48:8a:
         93:6b:18:fd:6c:44:6d:12:f0:cd:bc:fb:28:16:68:9f:92:38:
         be:1a:91:ee:75:ce:f5:3a:58:23:b6:8f:ec:41:72:27:33:9c:
         3a:7e:fd:db:f8:d6:7e:a3:b6:ce:92:fd:d6:e7:25:6f:6f:d9:
         ee:02:e4:e6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXqfZlvCjMpd15AHablrNTwRE7NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTBaFw0yNzA3MTYyMTAxMTBaMDMxMTAvBgNV
BAMTKEM0QTE0OUYzN0ZBRTg4Q0RDOTE0MjkyNTlFRDA3NzQ5MkFEMTZGMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0HmZSohonJteb3EpGBhmLPeOq
rxGp9zi/fdzfUURqNRDXmAxwLAl6q1EsF1zJPzAxhpzIL3atqsmG7XpLOEIWPcDf
74QBtgJL/sQOAgbUIAs+cny7c7OliIBrnOov/EVIvmDZtp8X12qQxofKECZNmHVC
YlTv7KXUOjnMi1kZzmeG907v1evOdK8BK2TZm0t3QH4sdtGE95YYgRBizznuGO9w
WvkEAV3UujPLF4ptOCW1vUnSG4mNP0Du03awSqKdvfgYIeoT2HGko9HtHcMlU30o
y6b9j3jM4ZmHYKPSdJL7rypF0B9pRlTGQC1QA8Nnk/l4r2camfsuvGKQixSdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxKFJ83+uiM3JFCklntB3SSrRbyMwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNzMwMmUzODMzMmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqlOMMA0GCSqGSIb3DQEBCwUAA4IBAQB2Uu0uwbij
s+DThHIKSmcnrnlnXZpAVO+Def46BHkXJrNgNDdInZsJ+6WkS8jUPmQb9M/v8VRh
r0dDQA6Feud3faXnggs3V4uy6fHB0D/lfk0neXqziJNzbvdr3IzieYJe+2GUfRSX
UZ1MCw//XJWkx8ain+NIQbMPSn3MLO5mUkQDkhqnQ2BQ5POn+MGFxsSjsAl3q0Tb
5+Jo1pNouudTz2MTvwrGz+864f5vi5xkgVmZKYWOzVrq5rdyhnOFiepRjPF8SIqT
axj9bERtEvDNvPsoFmifkji+GpHudc71Olgjto/sQXInM5w6fv3b+NZ+o7bOkv3W
5yVvb9nuAuTm
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:01 2026 by rpki-client