Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa
File:                     3137302e37382e39322e302f32322d3234203d3e20323635353030.roa (raw, json)
Hash identifier:          6yEK+Wn8EHsZTo84dDNBQTi2TcBNY/zwYmMBEScYw00=
Subject key identifier:   40:77:2F:E2:2D:5B:D1:23:6A:88:2D:11:00:CB:90:9A:51:82:09:A0
Certificate issuer:       /CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
Certificate serial:       13B10A74A68FDA8FF001DBFB42B7A2B7D1E30A51
Authority key identifier: DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa
Signing time:             Sat 18 Jul 2026 09:52:50 +0000
ROA not before:           Sat 18 Jul 2026 09:47:50 +0000
ROA not after:            Sat 17 Jul 2027 09:52:50 +0000
asID:                     265500
IP address blocks:        170.78.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl
                          rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:0a:74:a6:8f:da:8f:f0:01:db:fb:42:b7:a2:b7:d1:e3:0a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEAE04835FF41D43734A55EB8CB866989D7A9F55
        Validity
            Not Before: Jul 18 09:47:50 2026 GMT
            Not After : Jul 17 09:52:50 2027 GMT
        Subject: CN=40772FE22D5BD1236A882D1100CB909A518209A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e9:81:c7:2a:04:40:f3:16:7c:d7:dc:85:0d:
                    10:97:85:83:f3:a5:b0:29:2c:62:60:1a:ff:98:d4:
                    18:87:5d:7a:47:02:2e:df:6a:b9:95:1f:e4:50:ff:
                    46:12:e0:fd:53:5b:65:eb:aa:82:10:34:64:db:db:
                    f8:b5:8f:e9:62:e2:de:5c:53:40:81:20:c5:04:5c:
                    ba:a7:3e:37:ab:13:b1:3d:b2:d5:f4:46:90:1f:99:
                    89:45:f4:da:da:d1:8b:dc:7d:7e:ff:e0:79:63:7d:
                    c7:e0:13:91:64:23:3c:e0:51:0b:23:b4:db:13:54:
                    3d:ae:90:ad:2c:21:25:a6:11:8e:36:de:8c:33:64:
                    8c:31:07:4d:2c:0a:72:47:d8:e3:dc:25:18:6d:f0:
                    4b:13:1d:f2:e5:6c:b6:58:54:96:84:ae:52:e2:8b:
                    ed:b9:1e:13:20:98:51:8c:77:f1:54:67:c0:63:78:
                    f4:86:e5:7a:e3:78:0d:6c:6d:5a:47:39:86:ad:93:
                    6f:5b:e6:f9:69:25:d3:45:ed:db:84:39:de:9c:56:
                    98:39:02:8d:56:fd:4c:20:ef:6b:c3:42:bf:6c:6e:
                    58:e3:b0:db:19:f5:9b:d3:7b:f9:8e:e5:96:1f:a1:
                    cf:97:32:e2:d8:31:ac:c3:7f:de:43:f7:0f:ca:da:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:2F:E2:2D:5B:D1:23:6A:88:2D:11:00:CB:90:9A:51:82:09:A0
            X509v3 Authority Key Identifier:
                keyid:DE:AE:04:83:5F:F4:1D:43:73:4A:55:EB:8C:B8:66:98:9D:7A:9F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/DEAE04835FF41D43734A55EB8CB866989D7A9F55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEAE04835FF41D43734A55EB8CB866989D7A9F55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/0/3137302e37382e39322e302f32322d3234203d3e20323635353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:8c:da:b4:e4:83:58:e1:a4:8e:7a:d0:10:f3:ea:17:4b:
         d3:9d:48:3d:16:c3:08:52:3f:9c:2a:7a:20:9e:72:c2:f5:92:
         b3:67:1d:a2:31:b4:8a:81:09:b1:e1:59:db:42:07:53:56:1d:
         54:b8:d4:d1:49:84:c3:d8:cf:20:ee:eb:f8:f5:bd:5b:82:a7:
         b2:73:cc:40:e8:3f:54:d1:7f:07:30:53:ae:b4:09:40:cc:ab:
         e5:b8:29:7d:6b:57:41:eb:9b:3b:f6:79:4f:98:51:61:a0:4c:
         ca:b9:62:00:1a:82:19:6e:ed:6c:89:35:29:ef:89:bc:97:21:
         a9:42:e9:8e:62:69:cd:08:e0:23:33:0c:7d:e1:44:e5:47:86:
         36:40:76:a2:55:a0:d7:58:81:0d:4a:76:e2:92:53:6d:65:09:
         4f:ae:57:06:0f:bd:65:8b:e3:2d:c8:df:11:bf:90:3a:d0:ad:
         0b:64:01:8f:3b:df:00:63:f7:3b:8d:5e:d9:a8:8b:98:12:7f:
         5e:78:c5:55:f1:39:83:9e:bf:f5:9f:e0:bc:d7:32:79:c5:3e:
         48:b6:cd:44:5c:42:7a:26:2f:f7:fb:ff:61:28:15:9c:cc:99:
         db:58:7b:1d:a8:ec:c8:64:7b:a9:3a:3f:bc:15:21:1d:20:65:
         53:22:7e:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUE7EKdKaP2o/wAdv7Qreit9HjClEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVBRTA0ODM1RkY0MUQ0MzczNEE1NUVCOENCODY2OTg5
RDdBOUY1NTAeFw0yNjA3MTgwOTQ3NTBaFw0yNzA3MTcwOTUyNTBaMDMxMTAvBgNV
BAMTKDQwNzcyRkUyMkQ1QkQxMjM2QTg4MkQxMTAwQ0I5MDlBNTE4MjA5QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6YHHKgRA8xZ819yFDRCXhYPz
pbApLGJgGv+Y1BiHXXpHAi7farmVH+RQ/0YS4P1TW2XrqoIQNGTb2/i1j+li4t5c
U0CBIMUEXLqnPjerE7E9stX0RpAfmYlF9Nra0YvcfX7/4HljfcfgE5FkIzzgUQsj
tNsTVD2ukK0sISWmEY423owzZIwxB00sCnJH2OPcJRht8EsTHfLlbLZYVJaErlLi
i+25HhMgmFGMd/FUZ8BjePSG5XrjeA1sbVpHOYatk29b5vlpJdNF7duEOd6cVpg5
Ao1W/Uwg72vDQr9sbljjsNsZ9ZvTe/mO5ZYfoc+XMuLYMazDf95D9w/K2rKZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQHcv4i1b0SNqiC0RAMuQmlGCCaAwHwYDVR0j
BBgwFoAU3q4Eg1/0HUNzSlXrjLhmmJ16n1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FBZGs3ZnplMWM3amgzZ29CNlZvcENTOHRqUVZOMUpmTlhCWmFoWFZj
eGovMC9ERUFFMDQ4MzVGRjQxRDQzNzM0QTU1RUI4Q0I4NjY5ODlEN0E5RjU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFQUUwNDgzNUZGNDFENDM3
MzRBNTVFQjhDQjg2Njk4OUQ3QTlGNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRQWRrN2Z6ZTFjN2poM2dvQjZWb3BDUzh0alFWTjFKZk5YQlphaFhWY3hqLzAv
MzEzNzMwMmUzNzM4MmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzUzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqk5cMA0GCSqGSIb3DQEBCwUAA4IBAQA03IzatOSD
WOGkjnrQEPPqF0vTnUg9FsMIUj+cKnognnLC9ZKzZx2iMbSKgQmx4VnbQgdTVh1U
uNTRSYTD2M8g7uv49b1bgqeyc8xA6D9U0X8HMFOutAlAzKvluCl9a1dB65s79nlP
mFFhoEzKuWIAGoIZbu1siTUp74m8lyGpQumOYmnNCOAjMwx94UTlR4Y2QHaiVaDX
WIENSnbiklNtZQlPrlcGD71li+MtyN8Rv5A60K0LZAGPO98AY/c7jV7ZqIuYEn9e
eMVV8TmDnr/1n+C81zJ5xT5Its1EXEJ6Ji/3+/9hKBWczJnbWHsdqOzIZHupOj+8
FSEdIGVTIn4t
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:52 2026 by rpki-client