Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/3137392e34392e38382e302f32322d3332203d3e20323731343437.roa
File:                     3137392e34392e38382e302f32322d3332203d3e20323731343437.roa (raw, json)
Hash identifier:          OlZv5m4oTsuDWynrmAptNNdUNfXUC5wHus1mSIJvunc=
Subject key identifier:   46:20:B9:22:6A:35:05:49:27:CC:A3:5A:26:35:3E:B9:23:87:E0:5D
Certificate issuer:       /CN=5E0A349D1C242BAEC99E6BDB7172A06C52869884
Certificate serial:       4BDDF06307ACF4B8BFA85A0D32F815A807EB643D
Authority key identifier: 5E:0A:34:9D:1C:24:2B:AE:C9:9E:6B:DB:71:72:A0:6C:52:86:98:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0A349D1C242BAEC99E6BDB7172A06C52869884.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/3137392e34392e38382e302f32322d3332203d3e20323731343437.roa
Signing time:             Tue 21 Jul 2026 11:00:41 +0000
ROA not before:           Tue 21 Jul 2026 10:55:41 +0000
ROA not after:            Tue 20 Jul 2027 11:00:41 +0000
asID:                     271447
IP address blocks:        179.49.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/5E0A349D1C242BAEC99E6BDB7172A06C52869884.crl
                          rsync://rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/5E0A349D1C242BAEC99E6BDB7172A06C52869884.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0A349D1C242BAEC99E6BDB7172A06C52869884.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 13:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:dd:f0:63:07:ac:f4:b8:bf:a8:5a:0d:32:f8:15:a8:07:eb:64:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E0A349D1C242BAEC99E6BDB7172A06C52869884
        Validity
            Not Before: Jul 21 10:55:41 2026 GMT
            Not After : Jul 20 11:00:41 2027 GMT
        Subject: CN=4620B9226A35054927CCA35A26353EB92387E05D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:22:55:83:87:12:b5:1f:1b:70:9e:37:64:
                    20:f4:9f:61:f9:85:0f:00:d8:53:f1:6a:f2:e3:73:
                    ce:61:79:32:5f:0a:17:0a:c6:98:c6:c9:5e:78:82:
                    0b:1c:da:f0:a2:ec:5d:62:37:de:bc:7e:50:19:0f:
                    48:46:cf:df:5b:90:87:36:d3:88:0a:ea:cd:61:f4:
                    48:ab:00:58:73:c0:ce:15:41:df:c6:f0:fa:89:e3:
                    9b:1e:9f:96:c7:81:3e:b8:92:7a:13:0d:50:48:19:
                    ae:7d:4f:9b:9b:6d:a3:65:ea:38:ba:f3:6e:b6:ea:
                    13:b8:e7:43:40:8d:30:f2:fd:ef:61:b9:dd:ef:74:
                    eb:09:e1:9b:5d:58:7f:60:1e:96:48:4d:58:38:0c:
                    14:3f:3e:0d:f3:f4:4d:88:42:78:d5:aa:28:95:5e:
                    f4:e6:9c:7f:37:e5:ff:1b:62:67:74:8c:cf:e2:7c:
                    86:ea:81:58:f0:d9:f3:50:82:da:48:a0:e4:7f:40:
                    c8:e1:9b:48:ab:86:6f:42:17:e2:a0:40:de:11:7d:
                    51:9a:84:b3:ac:c3:09:49:96:7e:a7:9f:41:3e:c3:
                    c6:34:2d:1f:bc:5e:d4:a9:21:09:9a:f4:3f:a1:50:
                    8c:b1:7b:91:40:26:c4:cf:02:27:f4:f3:47:b0:d0:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:20:B9:22:6A:35:05:49:27:CC:A3:5A:26:35:3E:B9:23:87:E0:5D
            X509v3 Authority Key Identifier:
                keyid:5E:0A:34:9D:1C:24:2B:AE:C9:9E:6B:DB:71:72:A0:6C:52:86:98:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/5E0A349D1C242BAEC99E6BDB7172A06C52869884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E0A349D1C242BAEC99E6BDB7172A06C52869884.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DDosvNvggo4bhLhgruUbHhj2trzFUfcpBVNGSHCoKmWT/0/3137392e34392e38382e302f32322d3332203d3e20323731343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:91:88:99:24:21:97:1a:7d:42:0d:86:b6:bc:63:3a:21:1e:
         a0:61:56:e5:b1:10:5e:4d:ed:12:e4:fe:d9:db:38:4c:c1:e0:
         a9:e4:fe:cb:c4:6d:24:c6:c4:3e:34:8d:4e:f7:49:e9:5b:62:
         e9:81:8a:c9:35:21:14:46:11:18:47:8e:30:ff:15:bf:af:52:
         82:a7:56:c3:18:40:94:06:b5:40:0c:b3:be:b1:69:99:2a:05:
         8f:48:4c:44:b2:a8:c8:9e:00:66:46:e2:28:85:6f:e7:87:71:
         c6:d2:13:05:9b:dd:19:bd:a9:4d:c5:f5:b3:c6:3b:46:81:ed:
         6a:0c:69:7a:f6:c9:ba:a3:12:34:81:c0:99:dd:53:59:02:50:
         85:7b:93:37:ef:b7:3d:94:d1:1b:83:df:32:9e:84:8e:83:33:
         d1:fd:2d:ab:c0:f5:ea:fc:ed:c7:8e:5e:28:15:a1:1e:2d:0e:
         f4:0c:c8:d8:10:1a:4c:0a:d5:29:ae:52:2c:40:15:49:d5:be:
         8b:db:c4:93:75:38:eb:0e:c6:c3:2b:35:4e:1a:3f:d3:c5:40:
         19:ff:74:3a:79:bf:bc:50:14:b6:00:b2:76:dc:7d:0d:7f:aa:
         4e:dc:43:3a:74:a8:0f:74:5a:d4:60:e9:75:b7:a7:3e:f0:ef:
         3b:10:2c:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUS93wYwes9Li/qFoNMvgVqAfrZD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUwQTM0OUQxQzI0MkJBRUM5OUU2QkRCNzE3MkEwNkM1
Mjg2OTg4NDAeFw0yNjA3MjExMDU1NDFaFw0yNzA3MjAxMTAwNDFaMDMxMTAvBgNV
BAMTKDQ2MjBCOTIyNkEzNTA1NDkyN0NDQTM1QTI2MzUzRUI5MjM4N0UwNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kCJVg4cStR8bcJ43ZCD0n2H5
hQ8A2FPxavLjc85heTJfChcKxpjGyV54ggsc2vCi7F1iN968flAZD0hGz99bkIc2
04gK6s1h9EirAFhzwM4VQd/G8PqJ45sen5bHgT64knoTDVBIGa59T5ubbaNl6ji6
82626hO450NAjTDy/e9hud3vdOsJ4ZtdWH9gHpZITVg4DBQ/Pg3z9E2IQnjVqiiV
XvTmnH835f8bYmd0jM/ifIbqgVjw2fNQgtpIoOR/QMjhm0irhm9CF+KgQN4RfVGa
hLOswwlJln6nn0E+w8Y0LR+8XtSpIQma9D+hUIyxe5FAJsTPAif080ew0H5JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURiC5Imo1BUknzKNaJjU+uSOH4F0wHwYDVR0j
BBgwFoAUXgo0nRwkK67JnmvbcXKgbFKGmIQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRERvc3ZOdmdnbzRiaExoZ3J1VWJIaGoydHJ6RlVmY3BCVk5HU0hDb0tt
V1QvMC81RTBBMzQ5RDFDMjQyQkFFQzk5RTZCREI3MTcyQTA2QzUyODY5ODg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFMEEzNDlEMUMyNDJCQUVD
OTlFNkJEQjcxNzJBMDZDNTI4Njk4ODQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0REb3N2TnZnZ280YmhMaGdydVViSGhqMnRyekZVZmNwQlZOR1NIQ29LbVdULzAv
MzEzNzM5MmUzNDM5MmUzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzQzNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCszFYMA0GCSqGSIb3DQEBCwUAA4IBAQBLkYiZJCGX
Gn1CDYa2vGM6IR6gYVblsRBeTe0S5P7Z2zhMweCp5P7LxG0kxsQ+NI1O90npW2Lp
gYrJNSEURhEYR44w/xW/r1KCp1bDGECUBrVADLO+sWmZKgWPSExEsqjIngBmRuIo
hW/nh3HG0hMFm90ZvalNxfWzxjtGge1qDGl69sm6oxI0gcCZ3VNZAlCFe5M377c9
lNEbg98ynoSOgzPR/S2rwPXq/O3Hjl4oFaEeLQ70DMjYEBpMCtUprlIsQBVJ1b6L
28STdTjrDsbDKzVOGj/TxUAZ/3Q6eb+8UBS2ALJ23H0Nf6pO3EM6dKgPdFrUYOl1
t6c+8O87ECxg
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:36:45 2026 by rpki-client