Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/3137372e35332e38302e302f32312d3332203d3e20323632343633.roa
File:                     3137372e35332e38302e302f32312d3332203d3e20323632343633.roa (raw, json)
Hash identifier:          gAw5TwmB7l6gxb+IFg1MgZD0Ws9j0prRRRSdi0QTgbE=
Subject key identifier:   60:FD:1D:7F:6F:9D:79:57:C3:78:5F:B3:00:D0:2A:78:26:42:77:86
Certificate issuer:       /CN=5259EBF7121D2082AF3146252CEDBEC0A195A8F7
Certificate serial:       174B45E1E0AD1EDE45FB0A7EEC832AB52CCB4F9B
Authority key identifier: 52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/3137372e35332e38302e302f32312d3332203d3e20323632343633.roa
Signing time:             Fri 20 Mar 2026 15:46:11 +0000
ROA not before:           Fri 20 Mar 2026 15:41:11 +0000
ROA not after:            Fri 19 Mar 2027 15:46:11 +0000
asID:                     262463
IP address blocks:        177.53.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.crl
                          rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 08:44:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4b:45:e1:e0:ad:1e:de:45:fb:0a:7e:ec:83:2a:b5:2c:cb:4f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5259EBF7121D2082AF3146252CEDBEC0A195A8F7
        Validity
            Not Before: Mar 20 15:41:11 2026 GMT
            Not After : Mar 19 15:46:11 2027 GMT
        Subject: CN=60FD1D7F6F9D7957C3785FB300D02A7826427786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:47:62:0c:4b:9c:1c:d3:1d:95:3c:78:89:00:
                    18:3c:21:58:ad:08:ad:27:c2:18:31:60:87:e5:b8:
                    30:88:8e:a7:80:7c:25:a9:2d:81:ec:cc:81:94:bf:
                    91:64:e3:2e:55:17:da:d6:f4:89:18:dd:a9:c6:8e:
                    04:06:69:eb:f8:c9:b9:11:4c:68:c2:32:03:77:24:
                    9f:9e:cd:e8:96:ca:8b:67:bd:1b:80:d4:98:48:59:
                    b4:7f:1e:3e:5f:59:87:6e:01:32:59:bf:03:98:4b:
                    e1:9d:7a:5c:22:bf:de:1d:35:91:40:c8:f5:fd:7e:
                    6e:2c:8a:8b:a8:cd:78:5f:60:63:25:86:2d:ac:68:
                    8a:ab:f9:c8:03:4b:2e:18:71:72:39:a4:4e:4b:b9:
                    0b:a1:c2:97:50:86:fb:3f:e5:6d:6a:87:41:d8:b2:
                    ea:25:a1:d1:60:6d:ee:ff:06:85:26:d4:e7:ba:4b:
                    c5:64:64:6a:68:ad:bd:41:04:fa:8b:37:d3:81:83:
                    13:9c:d5:f6:70:31:eb:cc:68:c7:c2:37:1c:aa:e5:
                    f6:61:ee:d9:0e:45:a1:c5:b3:d6:11:64:bf:4f:38:
                    96:1a:0d:a1:79:84:17:9c:da:38:8b:2a:ce:6d:f5:
                    31:b9:8b:f7:7c:ee:8d:49:0f:34:27:bd:4f:6f:5a:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FD:1D:7F:6F:9D:79:57:C3:78:5F:B3:00:D0:2A:78:26:42:77:86
            X509v3 Authority Key Identifier:
                keyid:52:59:EB:F7:12:1D:20:82:AF:31:46:25:2C:ED:BE:C0:A1:95:A8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5259EBF7121D2082AF3146252CEDBEC0A195A8F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNMvoa3uRJ4xSP1f1RLMfwaDDRXU9g6xmvj2VqNjHzcW/0/3137372e35332e38302e302f32312d3332203d3e20323632343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:36:cf:76:9f:fd:f6:62:d3:91:8a:8d:82:a7:a1:62:cb:10:
         54:2e:9a:10:98:a7:90:69:19:b5:3e:f9:f7:6a:29:ce:5c:bc:
         53:1c:dd:10:12:b5:4b:06:da:ea:34:50:b6:89:55:ea:c6:94:
         83:7f:b5:34:a2:26:87:8e:c6:5d:7e:e2:57:34:f9:11:1d:4b:
         40:4e:32:f6:da:85:42:85:ad:61:c6:3f:93:57:1c:f2:ed:ed:
         d4:9d:7c:fa:25:71:4d:30:03:f2:6b:9e:5a:61:cd:dc:91:49:
         3e:ee:8d:d7:d4:59:d3:ac:c0:2c:f3:25:5c:27:60:17:f8:25:
         1b:01:33:cb:00:75:5e:9a:2b:2a:40:bd:90:0b:cd:54:fb:61:
         53:27:55:3e:3c:e3:10:08:ab:a6:47:95:1f:f9:a6:26:5d:dc:
         22:07:df:eb:cd:97:8a:89:31:96:fe:ab:34:fe:c3:1d:9d:12:
         09:67:69:50:c9:b0:24:ca:0d:48:01:77:7e:8b:9a:81:a0:22:
         8d:65:61:61:ca:0f:d4:ba:89:4e:52:82:6b:f1:b3:c1:63:a6:
         17:5f:66:93:94:11:54:24:f6:c0:7f:52:35:2c:e3:93:bd:96:
         43:db:c7:0d:8f:48:8e:25:1b:d5:02:f2:bd:bb:3a:19:60:2d:
         d0:aa:9a:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF0tF4eCtHt5F+wp+7IMqtSzLT5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI1OUVCRjcxMjFEMjA4MkFGMzE0NjI1MkNFREJFQzBB
MTk1QThGNzAeFw0yNjAzMjAxNTQxMTFaFw0yNzAzMTkxNTQ2MTFaMDMxMTAvBgNV
BAMTKDYwRkQxRDdGNkY5RDc5NTdDMzc4NUZCMzAwRDAyQTc4MjY0Mjc3ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLR2IMS5wc0x2VPHiJABg8IVit
CK0nwhgxYIfluDCIjqeAfCWpLYHszIGUv5Fk4y5VF9rW9IkY3anGjgQGaev4ybkR
TGjCMgN3JJ+ezeiWyotnvRuA1JhIWbR/Hj5fWYduATJZvwOYS+Gdelwiv94dNZFA
yPX9fm4siouozXhfYGMlhi2saIqr+cgDSy4YcXI5pE5LuQuhwpdQhvs/5W1qh0HY
suolodFgbe7/BoUm1Oe6S8VkZGporb1BBPqLN9OBgxOc1fZwMevMaMfCNxyq5fZh
7tkORaHFs9YRZL9POJYaDaF5hBec2jiLKs5t9TG5i/d87o1JDzQnvU9vWnYnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYP0df2+deVfDeF+zANAqeCZCd4YwHwYDVR0j
BBgwFoAUUlnr9xIdIIKvMUYlLO2+wKGVqPcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE5Ndm9hM3VSSjR4U1AxZjFSTE1md2FERFJYVTlnNnhtdmoyVnFOakh6
Y1cvMC81MjU5RUJGNzEyMUQyMDgyQUYzMTQ2MjUyQ0VEQkVDMEExOTVBOEY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNTlFQkY3MTIxRDIwODJB
RjMxNDYyNTJDRURCRUMwQTE5NUE4RjcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROTXZvYTN1Uko0eFNQMWYxUkxNZndhRERSWFU5ZzZ4bXZqMlZxTmpIemNXLzAv
MzEzNzM3MmUzNTMzMmUzODMwMmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzIzNjMy
MzQzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsTVQMA0GCSqGSIb3DQEBCwUAA4IBAQB2Ns92n/32
YtORio2Cp6FiyxBULpoQmKeQaRm1Pvn3ainOXLxTHN0QErVLBtrqNFC2iVXqxpSD
f7U0oiaHjsZdfuJXNPkRHUtATjL22oVCha1hxj+TVxzy7e3UnXz6JXFNMAPya55a
Yc3ckUk+7o3X1FnTrMAs8yVcJ2AX+CUbATPLAHVemisqQL2QC81U+2FTJ1U+POMQ
CKumR5Uf+aYmXdwiB9/rzZeKiTGW/qs0/sMdnRIJZ2lQybAkyg1IAXd+i5qBoCKN
ZWFhyg/UuolOUoJr8bPBY6YXX2aTlBFUJPbAf1I1LOOTvZZD28cNj0iOJRvVAvK9
uzoZYC3Qqppl
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:39:29 2026 by rpki-client