Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e34372e33322e302f32302d3234203d3e203238363532.roa
File:                     3137372e34372e33322e302f32302d3234203d3e203238363532.roa (raw, json)
Hash identifier:          bN0YIEwW+d7JUVK4KcE60p2LbXx7CjeSTIlUWqFuf8A=
Subject key identifier:   EF:EF:C7:7D:21:AF:2E:6A:B7:76:24:49:DE:AE:1F:8A:71:CC:B6:C5
Certificate issuer:       /CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
Certificate serial:       594B188142F0B9EDCB756E9EFC8DA0DFDF8DC34E
Authority key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e34372e33322e302f32302d3234203d3e203238363532.roa
Signing time:             Tue 17 Mar 2026 17:51:20 +0000
ROA not before:           Tue 17 Mar 2026 17:46:20 +0000
ROA not after:            Tue 16 Mar 2027 17:51:20 +0000
asID:                     28652
IP address blocks:        177.47.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl
                          rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4b:18:81:42:f0:b9:ed:cb:75:6e:9e:fc:8d:a0:df:df:8d:c3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
        Validity
            Not Before: Mar 17 17:46:20 2026 GMT
            Not After : Mar 16 17:51:20 2027 GMT
        Subject: CN=EFEFC77D21AF2E6AB7762449DEAE1F8A71CCB6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9a:da:1c:89:a4:21:6a:61:10:b1:e3:14:88:
                    77:17:e0:88:ee:ea:40:a1:ec:d3:ef:16:f0:a9:20:
                    e2:fd:3f:4e:cf:42:77:18:8d:cf:14:08:0b:b8:68:
                    36:2c:f9:e4:3e:04:a4:4f:a3:47:bf:bb:64:08:09:
                    90:4e:f7:95:ab:02:5f:17:92:5b:a0:4a:82:0d:33:
                    09:e4:f8:ce:1a:47:25:c6:71:66:0a:4b:95:eb:3b:
                    cd:7c:e9:94:9d:72:47:ce:9a:50:06:24:98:f3:f9:
                    09:af:8e:69:78:e6:88:49:b3:ef:36:65:3a:96:16:
                    92:78:de:38:2c:b5:b1:1d:c2:32:66:71:dc:e0:45:
                    07:1e:43:20:41:2b:e6:8b:c1:da:06:82:e8:60:3e:
                    20:6f:e7:75:6b:09:9f:f4:bb:28:78:ba:c3:15:7d:
                    9a:ae:5d:c1:eb:8a:2b:47:00:26:36:12:17:86:45:
                    43:62:f6:63:c0:0b:6f:0f:9c:8d:9f:71:1c:78:72:
                    fd:90:64:9f:5c:97:e9:0d:b8:6b:a0:2d:d2:cd:d6:
                    68:b2:0e:b5:26:17:02:d1:e0:23:1d:4c:ca:11:7c:
                    9c:37:54:b9:8b:6f:d7:51:37:47:40:43:29:f2:29:
                    7c:b6:e0:37:5f:4b:d2:9e:2c:ec:4f:e7:23:a9:9c:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:C7:7D:21:AF:2E:6A:B7:76:24:49:DE:AE:1F:8A:71:CC:B6:C5
            X509v3 Authority Key Identifier:
                keyid:5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3137372e34372e33322e302f32302d3234203d3e203238363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:32:19:73:70:82:a9:1c:77:f0:4f:8c:e9:81:52:20:a9:05:
         7a:4b:1c:d9:7d:ba:89:dd:b4:1a:6b:5c:77:dc:be:0f:41:28:
         26:fd:8a:c1:20:8a:5a:a4:9e:18:3a:b7:04:1c:8f:98:c0:51:
         09:29:56:20:96:eb:91:6a:2a:b1:c1:26:b9:1e:55:3f:e1:ac:
         6d:2a:d4:cf:43:5e:4e:47:ab:b9:6f:be:31:62:78:24:43:6b:
         57:72:c1:f3:0e:08:13:d9:30:d4:b3:49:15:a7:18:93:d1:e5:
         ed:f9:6e:a7:80:59:ec:bc:f7:59:06:f9:f8:35:36:bf:6a:e0:
         96:c6:55:3d:ae:df:e0:c7:49:68:ea:cb:10:ac:af:49:98:05:
         40:c7:ad:03:76:76:59:fa:5e:31:6c:97:c0:34:bc:6c:31:5c:
         7d:53:70:53:da:c2:84:8b:8b:7e:3e:c7:d1:00:df:13:01:8c:
         29:79:b3:ab:19:b2:bb:8e:25:b8:fa:02:b6:eb:09:ce:62:80:
         08:8e:35:2e:2d:c3:09:95:62:f7:05:e8:50:47:86:e6:d4:63:
         e8:99:79:97:5c:c1:e0:96:68:eb:9f:dd:54:10:a4:e0:2c:e3:
         f2:99:d6:f2:55:a6:1c:6f:9a:a3:f8:3b:eb:24:f7:e8:f9:17:
         bf:1c:ac:09
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUWUsYgULwue3LdW6e/I2g39+Nw04wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBRTVERUNDNEU5RkZDNDM1N0E5MDdFNDQ2NDBFRDQw
NEMyQ0ZFODAeFw0yNjAzMTcxNzQ2MjBaFw0yNzAzMTYxNzUxMjBaMDMxMTAvBgNV
BAMTKEVGRUZDNzdEMjFBRjJFNkFCNzc2MjQ0OURFQUUxRjhBNzFDQ0I2QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmtociaQhamEQseMUiHcX4Iju
6kCh7NPvFvCpIOL9P07PQncYjc8UCAu4aDYs+eQ+BKRPo0e/u2QICZBO95WrAl8X
klugSoINMwnk+M4aRyXGcWYKS5XrO8186ZSdckfOmlAGJJjz+Qmvjml45ohJs+82
ZTqWFpJ43jgstbEdwjJmcdzgRQceQyBBK+aLwdoGguhgPiBv53VrCZ/0uyh4usMV
fZquXcHriitHACY2EheGRUNi9mPAC28PnI2fcRx4cv2QZJ9cl+kNuGugLdLN1miy
DrUmFwLR4CMdTMoRfJw3VLmLb9dRN0dAQynyKXy24DdfS9KeLOxP5yOpnPXrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU7+/HfSGvLmq3diRJ3q4finHMtsUwHwYDVR0j
BBgwFoAUXq5d7MTp/8Q1epB+RGQO1ATCz+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDkxZXBxWVhlaGN6dHpBc0dvQ3B3WGZQcm1yQlBlbVQ0QXZQemhIRktG
UngvMC81RUFFNURFQ0M0RTlGRkM0MzU3QTkwN0U0NDY0MEVENDA0QzJDRkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFQUU1REVDQzRFOUZGQzQz
NTdBOTA3RTQ0NjQwRUQ0MDRDMkNGRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5MWVwcVlYZWhjenR6QXNHb0Nwd1hmUHJtckJQZW1UNEF2UHpoSEZLRlJ4LzAv
MzEzNzM3MmUzNDM3MmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLEvIDANBgkqhkiG9w0BAQsFAAOCAQEAATIZc3CCqRx3
8E+M6YFSIKkFeksc2X26id20Gmtcd9y+D0EoJv2KwSCKWqSeGDq3BByPmMBRCSlW
IJbrkWoqscEmuR5VP+GsbSrUz0NeTkeruW++MWJ4JENrV3LB8w4IE9kw1LNJFacY
k9Hl7flup4BZ7Lz3WQb5+DU2v2rglsZVPa7f4MdJaOrLEKyvSZgFQMetA3Z2Wfpe
MWyXwDS8bDFcfVNwU9rChIuLfj7H0QDfEwGMKXmzqxmyu44luPoCtusJzmKACI41
Li3DCZVi9wXoUEeG5tRj6Jl5l1zB4JZo65/dVBCk4Czj8pnW8lWmHG+ao/g76yT3
6PkXvxysCQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:17:45 2026 by rpki-client