Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa
File:                     3137302e3233382e3138372e302f3234203d3e20323636333338.roa (raw, json)
Hash identifier:          UvuYCzRRu/YxGzmsh/wfq8DFdVg6hz42nYUMP3ItzCI=
Subject key identifier:   65:1B:F3:D6:4B:FC:9A:36:0C:D1:91:3D:28:F2:13:05:B3:38:B1:8F
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       77E5E7877C8472154C125FDD8A0AB0FC8803D12D
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa
Signing time:             Wed 25 Mar 2026 19:00:00 +0000
ROA not before:           Wed 25 Mar 2026 18:55:00 +0000
ROA not after:            Thu 25 Mar 2027 19:00:00 +0000
asID:                     266338
IP address blocks:        170.238.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl
                          rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:e7:87:7c:84:72:15:4c:12:5f:dd:8a:0a:b0:fc:88:03:d1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Mar 25 18:55:00 2026 GMT
            Not After : Mar 25 19:00:00 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:65:bb:d2:68:f4:6c:65:d6:ae:5c:f8:29:
                    bc:83:b5:6b:ae:22:bb:97:7a:b3:04:76:cc:52:cd:
                    bd:d6:50:0c:71:95:34:79:ba:0e:64:7f:32:86:86:
                    f8:a9:ba:49:6b:f0:b9:c2:d1:16:3d:9b:5c:4f:cf:
                    c2:e0:7e:01:81:3b:97:cf:ca:47:bb:05:dc:93:ab:
                    0e:5a:e4:e9:bb:b0:c8:87:96:32:0f:61:c1:b2:5e:
                    a1:39:ea:38:e4:d0:dd:6f:43:a4:fc:13:53:e4:a7:
                    1d:b5:65:2c:c5:ea:ff:2d:22:a0:52:40:df:c0:af:
                    f7:e8:14:ce:7d:6b:e4:24:76:53:13:6c:fd:e0:e5:
                    64:5b:15:fa:11:99:3a:69:80:8c:02:ec:0c:0d:c4:
                    46:19:cb:df:07:6b:41:f5:82:ab:95:a4:80:ea:19:
                    db:33:b1:31:76:7b:3b:2a:03:53:e8:2f:18:62:6b:
                    91:98:59:67:a8:ff:6b:57:37:48:3b:4f:2b:e0:4e:
                    7e:76:94:bd:30:f8:33:7d:a0:03:b3:7c:bd:a9:7b:
                    63:9a:eb:66:7b:72:bb:ae:6e:01:5c:52:02:45:dd:
                    46:6a:1b:0a:7e:e6:e3:2a:b5:1c:af:ec:7b:64:b4:
                    6e:84:15:91:71:00:c4:6c:95:23:60:54:25:a7:a0:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:F3:D6:4B:FC:9A:36:0C:D1:91:3D:28:F2:13:05:B3:38:B1:8F
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138372e302f3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:6e:bc:b6:b3:e1:6f:6e:5f:a0:54:29:86:23:a4:fc:e8:7a:
         34:1b:ca:6c:33:dc:17:2b:d4:70:33:5c:5a:09:0b:fa:90:2b:
         fc:6d:a4:3c:6c:2a:ea:82:46:1a:bd:6d:3d:f5:73:e2:7b:1a:
         49:b2:60:54:b2:3e:ff:5c:b8:79:f4:1b:79:d6:d5:2e:7d:18:
         5b:49:82:49:e4:a6:76:2c:e1:0a:05:4a:cb:c9:bf:89:22:eb:
         b8:01:a6:d9:13:45:3a:b8:3c:71:1d:ea:64:44:e3:09:0d:3f:
         9b:e9:26:9f:d2:d1:46:d6:11:36:9e:bf:62:7a:9e:e0:c9:16:
         31:16:9e:09:23:1e:f3:a8:bb:80:0a:77:2d:2a:85:76:7e:eb:
         ae:e5:9a:7f:94:81:9c:b5:9a:9a:3a:a9:68:63:e5:c2:85:e7:
         d7:97:0d:a9:e9:4d:e8:dc:ec:b0:4d:f9:0b:61:9e:7e:d2:be:
         ec:c4:42:c2:2a:73:43:34:1a:04:43:09:0b:ee:03:12:ea:0f:
         05:9a:d2:47:55:11:ab:7d:75:12:4d:b2:29:52:6c:09:ce:a9:
         cf:df:4c:56:e4:ac:75:f6:e8:6c:31:69:5d:73:71:f0:3b:88:
         79:55:c0:c5:ab:86:c8:1d:32:b3:20:a6:48:b6:91:a9:3e:01:
         d0:93:5b:85
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUd+Xnh3yEchVMEl/digqw/IgD0S0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFMEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZC
Q0QzQzYzNTAeFw0yNjAzMjUxODU1MDBaFw0yNzAzMjUxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTYwNjY1QkJEMjY4RjQ2QzY1
RDZBRTVDRjgyOUJDODNCNTZCQUUyMkJCOTc3QUIzMDQ3NkNDNTJDREJERDY1MDBD
NzE5NTM0NzlCQTBFNjQ3RjMyODY4NkY4QTlCQTQ5NkJGMEI5QzJEMTE2M0Q5QjVD
NEZDRkMyRTA3RTAxODEzQjk3Q0ZDQTQ3QkIwNURDOTNBQjBFNUFFNEU5QkJCMEM4
ODc5NjMyMEY2MUMxQjI1RUExMzlFQTM4RTREMERENkY0M0E0RkMxMzUzRTRBNzFE
QjU2NTJDQzVFQUZGMkQyMkEwNTI0MERGQzBBRkY3RTgxNENFN0Q2QkU0MjQ3NjUz
MTM2Q0ZERTBFNTY0NUIxNUZBMTE5OTNBNjk4MDhDMDJFQzBDMERDNDQ2MTlDQkRG
MDc2QjQxRjU4MkFCOTVBNDgwRUExOURCMzNCMTMxNzY3QjNCMkEwMzUzRTgyRjE4
NjI2QjkxOTg1OTY3QThGRjZCNTczNzQ4M0I0RjJCRTA0RTdFNzY5NEJEMzBGODMz
N0RBMDAzQjM3Q0JEQTk3QjYzOUFFQjY2N0I3MkJCQUU2RTAxNUM1MjAyNDVERDQ2
NkExQjBBN0VFNkUzMkFCNTFDQUZFQzdCNjRCNDZFODQxNTkxNzEwMEM0NkM5NTIz
NjA1NDI1QTdBMDRGMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApgZlu9Jo9Gxl1q5c+Cm8g7VrriK7l3qzBHbMUs291lAMcZU0eboO
ZH8yhob4qbpJa/C5wtEWPZtcT8/C4H4BgTuXz8pHuwXck6sOWuTpu7DIh5YyD2HB
sl6hOeo45NDdb0Ok/BNT5KcdtWUsxer/LSKgUkDfwK/36BTOfWvkJHZTE2z94OVk
WxX6EZk6aYCMAuwMDcRGGcvfB2tB9YKrlaSA6hnbM7Exdns7KgNT6C8YYmuRmFln
qP9rVzdIO08r4E5+dpS9MPgzfaADs3y9qXtjmutme3K7rm4BXFICRd1GahsKfubj
KrUcr+x7ZLRuhBWRcQDEbJUjYFQlp6BPHQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGUb89ZL/Jo2DNGRPSjyEwWzOLGPMB8GA1UdIwQYMBaAFE7gqjnlZzIFthWxM3wk
6G+808Y1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NNNjFZWDQ4Rnh2cTlV
VEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVFMEFBMzlFNTY3MzIw
NUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RUUwQUEzOUU1NjczMjA1QjYxNUIxMzM3QzI0RTg2RkJDRDND
NjM1LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTTYxWVg0OEZ4dnE5VVRLNTdh
R1E1WmZoSzFqOHBqaW9ocFVLTnBla0g1NS8xLzMxMzczMDJlMzIzMzM4MmUzMTM4
MzcyZTMwMmYzMjM0MjAzZDNlMjAzMjM2MzYzMzMzMzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq7rsw
DQYJKoZIhvcNAQELBQADggEBAFBuvLaz4W9uX6BUKYYjpPzoejQbymwz3Bcr1HAz
XFoJC/qQK/xtpDxsKuqCRhq9bT31c+J7GkmyYFSyPv9cuHn0G3nW1S59GFtJgknk
pnYs4QoFSsvJv4ki67gBptkTRTq4PHEd6mRE4wkNP5vpJp/S0UbWETaev2J6nuDJ
FjEWngkjHvOou4AKdy0qhXZ+667lmn+UgZy1mpo6qWhj5cKF59eXDanpTejc7LBN
+Qthnn7SvuzEQsIqc0M0GgRDCQvuAxLqDwWa0kdVEat9dRJNsilSbAnOqc/fTFbk
rHX26GwxaV1zcfA7iHlVwMWrhsgdMrMgpki2kak+AdCTW4U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:56 2026 by rpki-client