Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/3137372e31312e38372e302f32342d3234203d3e203532393339.roa
File:                     3137372e31312e38372e302f32342d3234203d3e203532393339.roa (raw, json)
Hash identifier:          +ZJVIG4aNMVnejbGSWszMk1vjuEYElL2BKChumv6SPY=
Subject key identifier:   5E:D6:D0:4F:BA:A6:F9:E2:63:D6:CE:8A:9F:EC:3C:EE:23:05:81:F5
Certificate issuer:       /CN=D14002DC49BC5684C329D87B69F890F5BAAE71FF
Certificate serial:       34D2B7B5A5F7CCDB10B96AA33ADAE5A37F373BBE
Authority key identifier: D1:40:02:DC:49:BC:56:84:C3:29:D8:7B:69:F8:90:F5:BA:AE:71:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/3137372e31312e38372e302f32342d3234203d3e203532393339.roa
Signing time:             Thu 10 Sep 2026 12:36:02 +0000
ROA not before:           Thu 10 Sep 2026 12:31:02 +0000
ROA not after:            Thu 09 Sep 2027 12:36:02 +0000
asID:                     52939
IP address blocks:        177.11.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.crl
                          rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 08:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d2:b7:b5:a5:f7:cc:db:10:b9:6a:a3:3a:da:e5:a3:7f:37:3b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D14002DC49BC5684C329D87B69F890F5BAAE71FF
        Validity
            Not Before: Sep 10 12:31:02 2026 GMT
            Not After : Sep  9 12:36:02 2027 GMT
        Subject: CN=5ED6D04FBAA6F9E263D6CE8A9FEC3CEE230581F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:05:d1:5a:b8:1a:42:0b:18:49:3a:02:e5:96:
                    b9:bb:fb:76:7d:65:e4:ef:65:b1:2b:4a:be:d3:db:
                    7a:e4:cf:53:58:77:2b:c6:cd:4b:fb:25:a8:3b:e2:
                    e6:3d:90:16:a1:11:64:06:b9:0b:76:19:51:7e:ea:
                    2e:d0:66:be:ef:88:3e:51:36:79:05:7e:9f:bd:8e:
                    7a:5d:75:d7:ce:3a:85:fa:d9:a2:d4:6c:49:d5:a8:
                    8c:ac:b9:95:4f:9b:49:08:ee:a9:8b:ce:47:1b:9d:
                    1c:30:e9:2c:73:dd:ec:1a:01:d3:14:49:bf:3b:4a:
                    3a:f9:f3:27:2a:0a:65:76:2c:3a:81:40:16:94:b1:
                    b5:b3:6f:77:fb:84:7c:88:e2:15:ff:f4:ad:f1:dc:
                    e4:40:2f:ac:cd:3a:05:ac:27:fe:4b:9b:c9:05:5f:
                    41:0a:43:ab:a0:db:ec:2f:ca:dd:08:b5:19:3b:fa:
                    a4:f8:4a:d3:02:21:ad:01:80:20:7c:1e:10:ae:84:
                    38:bb:da:a6:e7:ff:14:d2:cf:5b:92:fc:be:88:ef:
                    bd:07:8e:ed:63:f6:44:d0:50:0b:e6:1d:6a:33:99:
                    8f:76:be:56:2c:1e:73:23:8f:72:8e:26:44:95:0f:
                    ea:78:8d:fd:6a:78:d1:a9:61:68:a5:c3:39:bc:97:
                    ba:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D6:D0:4F:BA:A6:F9:E2:63:D6:CE:8A:9F:EC:3C:EE:23:05:81:F5
            X509v3 Authority Key Identifier:
                keyid:D1:40:02:DC:49:BC:56:84:C3:29:D8:7B:69:F8:90:F5:BA:AE:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/D14002DC49BC5684C329D87B69F890F5BAAE71FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D14002DC49BC5684C329D87B69F890F5BAAE71FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotTTN6JsQeJ9aiZ8ux8tYTLXWx47Hx2YmTFaMdct7Fk/0/3137372e31312e38372e302f32342d3234203d3e203532393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b0:84:0a:36:f2:04:c1:8d:da:f5:18:c6:d2:e6:99:d0:be:
         37:a9:15:54:f2:4d:47:0f:14:62:fb:e2:3a:27:81:19:f1:b3:
         bd:e9:66:68:12:97:26:96:95:ff:c1:73:2c:d4:75:17:34:cf:
         8d:3d:69:08:86:3b:76:c9:2b:5b:fd:a1:b8:ae:5b:b1:cd:2b:
         cf:7f:e4:c0:bc:71:b5:e3:a4:15:31:4f:74:bb:33:58:44:09:
         01:a9:d4:22:07:34:33:a4:0c:39:b5:14:d6:0d:b5:a6:24:e2:
         f1:bc:68:a8:1f:14:ec:47:0b:a7:04:b6:68:04:ac:e6:c1:bb:
         2c:69:81:5a:80:0e:18:ce:ae:50:0d:6e:f8:fb:76:ba:8f:e8:
         e9:c8:c7:fe:75:89:1e:db:8d:fb:08:9e:a7:66:53:ad:8e:86:
         7f:1b:c0:33:93:11:f8:6e:b5:25:64:d4:85:e1:aa:37:20:ca:
         e3:ba:3e:e0:25:4f:85:51:b6:6d:4b:f4:ac:51:c6:19:71:a7:
         29:53:dd:f5:08:d6:d4:10:2e:ef:48:45:21:b4:2b:e4:0e:37:
         5b:5b:e4:e3:84:8f:e8:3c:ea:5e:fd:41:b7:0e:ec:ba:8a:cb:
         ae:7d:40:e4:26:c7:25:ad:09:d2:da:ad:98:2b:4c:af:f3:70:
         d2:79:77:a8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNNK3taX3zNsQuWqjOtrlo383O74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDE0MDAyREM0OUJDNTY4NEMzMjlEODdCNjlGODkwRjVC
QUFFNzFGRjAeFw0yNjA5MTAxMjMxMDJaFw0yNzA5MDkxMjM2MDJaMDMxMTAvBgNV
BAMTKDVFRDZEMDRGQkFBNkY5RTI2M0Q2Q0U4QTlGRUMzQ0VFMjMwNTgxRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnBdFauBpCCxhJOgLllrm7+3Z9
ZeTvZbErSr7T23rkz1NYdyvGzUv7Jag74uY9kBahEWQGuQt2GVF+6i7QZr7viD5R
NnkFfp+9jnpdddfOOoX62aLUbEnVqIysuZVPm0kI7qmLzkcbnRww6Sxz3ewaAdMU
Sb87Sjr58ycqCmV2LDqBQBaUsbWzb3f7hHyI4hX/9K3x3ORAL6zNOgWsJ/5Lm8kF
X0EKQ6ug2+wvyt0ItRk7+qT4StMCIa0BgCB8HhCuhDi72qbn/xTSz1uS/L6I770H
ju1j9kTQUAvmHWozmY92vlYsHnMjj3KOJkSVD+p4jf1qeNGpYWilwzm8l7pxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXtbQT7qm+eJj1s6Kn+w87iMFgfUwHwYDVR0j
BBgwFoAU0UAC3Em8VoTDKdh7afiQ9bqucf8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ290VFRONkpzUWVKOWFpWjh1eDh0WVRMWFd4NDdIeDJZbVRGYU1kY3Q3
RmsvMC9EMTQwMDJEQzQ5QkM1Njg0QzMyOUQ4N0I2OUY4OTBGNUJBQUU3MUZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxNDAwMkRDNDlCQzU2ODRD
MzI5RDg3QjY5Rjg5MEY1QkFBRTcxRkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NvdFRUTjZKc1FlSjlhaVo4dXg4dFlUTFhXeDQ3SHgyWW1URmFNZGN0N0ZrLzAv
MzEzNzM3MmUzMTMxMmUzODM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM5
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALELVzANBgkqhkiG9w0BAQsFAAOCAQEATrCECjbyBMGN
2vUYxtLmmdC+N6kVVPJNRw8UYvviOieBGfGzvelmaBKXJpaV/8FzLNR1FzTPjT1p
CIY7dskrW/2huK5bsc0rz3/kwLxxteOkFTFPdLszWEQJAanUIgc0M6QMObUU1g21
piTi8bxoqB8U7EcLpwS2aASs5sG7LGmBWoAOGM6uUA1u+Pt2uo/o6cjH/nWJHtuN
+wiep2ZTrY6GfxvAM5MR+G61JWTUheGqNyDK47o+4CVPhVG2bUv0rFHGGXGnKVPd
9QjW1BAu70hFIbQr5A43W1vk44SP6DzqXv1Btw7suorLrn1A5CbHJa0J0tqtmCtM
r/Nw0nl3qA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:06:56 2026 by rpki-client