Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
File:                     3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          EYZQDEzPTN2Ba1JIsTSbn7IH7WZG4X5MOSSPSFKw/C8=
Subject key identifier:   64:A4:BD:51:6F:FB:77:28:1D:57:6C:35:BB:78:15:C8:87:D6:11:C1
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       57BE5A27EEBE0099DADFB0FE7E453122FCC8C41D
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa
Signing time:             Wed 11 Mar 2026 13:26:12 +0000
ROA not before:           Wed 11 Mar 2026 13:21:12 +0000
ROA not after:            Wed 10 Mar 2027 13:26:12 +0000
asID:                     262535
IP address blocks:        177.67.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:be:5a:27:ee:be:00:99:da:df:b0:fe:7e:45:31:22:fc:c8:c4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Mar 11 13:21:12 2026 GMT
            Not After : Mar 10 13:26:12 2027 GMT
        Subject: CN=64A4BD516FFB77281D576C35BB7815C887D611C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:4d:df:7f:67:8c:84:7e:00:94:d1:a2:ae:
                    71:c1:ba:36:da:7b:b7:de:02:9e:a1:86:73:9b:d9:
                    40:91:f2:c8:37:70:5d:42:9e:cb:95:d7:f2:88:0f:
                    6e:e7:13:1d:40:c2:0a:d8:cf:6a:d3:78:f1:7f:59:
                    57:bd:2e:df:4b:ea:ce:4f:d9:d9:58:fd:ee:68:db:
                    2b:3b:a8:65:58:b3:71:28:8e:0e:0d:4c:e3:94:77:
                    e9:8a:28:4c:b9:db:c6:e9:e8:c3:75:ce:95:7c:c6:
                    31:ce:b0:f5:bc:8e:f4:14:89:64:e8:94:9a:72:65:
                    07:2a:1b:de:b3:2c:f2:31:f4:54:02:64:3a:3b:84:
                    03:80:53:22:35:eb:a7:82:82:4b:6c:0f:dd:15:02:
                    f8:da:34:74:ee:4f:63:fb:7d:a4:84:ad:a0:8c:23:
                    c0:7d:a0:56:18:47:48:7f:49:2f:f9:35:4c:e8:4d:
                    7c:e5:7c:a1:dc:2c:48:60:05:e4:e0:07:7a:e4:e1:
                    93:82:aa:70:f4:dc:1b:16:5a:29:5d:14:17:4f:6a:
                    aa:93:ac:7c:4c:35:2e:39:ab:d6:3b:54:5a:39:7b:
                    a5:89:42:df:6c:b0:1a:bd:82:ab:c7:dd:bc:19:8a:
                    e9:0c:7c:f0:a0:60:4b:1a:1d:1f:49:f5:0f:3c:8c:
                    88:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:BD:51:6F:FB:77:28:1D:57:6C:35:BB:78:15:C8:87:D6:11:C1
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3137372e36372e3234342e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:60:39:f2:dc:ff:65:77:67:c0:55:27:34:ed:39:75:e3:8b:
         2b:d1:0c:bb:16:1d:6a:42:5f:06:41:b2:f1:27:15:95:ab:39:
         5a:d3:03:18:a3:ff:f7:ba:5c:9d:96:bc:e0:0c:91:be:b3:52:
         e7:da:21:df:e7:24:41:2a:29:ea:f1:cc:c2:e9:9d:24:b2:36:
         47:74:45:59:af:11:2f:8b:a7:6c:b6:1f:f7:c2:45:de:8b:17:
         3e:e1:02:8f:e0:45:2c:89:82:18:f8:30:45:45:30:d3:ea:a8:
         cb:dd:68:8c:d0:36:f6:64:da:f0:d4:0f:c4:bf:b3:0b:cb:35:
         3f:7a:f4:96:85:6e:58:c0:e7:9c:41:22:6b:20:0d:7c:c1:7c:
         ff:f9:74:84:50:a9:fe:1c:05:a7:4b:b7:25:e8:b2:cc:9e:d6:
         8f:98:ff:f0:a1:8b:4b:fa:a0:19:ab:20:13:15:63:b0:b6:ad:
         df:21:9c:79:67:be:5c:6a:04:35:1f:16:76:64:5b:24:53:7a:
         99:4d:42:9d:f0:c7:4c:c6:b2:59:bd:0d:bd:ab:a3:9c:15:77:
         cb:b9:ce:96:09:3e:2d:5c:f7:46:30:29:31:82:4c:97:65:7a:
         76:a1:40:99:f4:62:39:b5:9f:a1:6a:62:31:01:fc:cf:58:ea:
         ea:bd:7f:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV75aJ+6+AJna37D+fkUxIvzIxB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNjAzMTExMzIxMTJaFw0yNzAzMTAxMzI2MTJaMDMxMTAvBgNV
BAMTKDY0QTRCRDUxNkZGQjc3MjgxRDU3NkMzNUJCNzgxNUM4ODdENjExQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvZ03ff2eMhH4AlNGirnHBujba
e7feAp6hhnOb2UCR8sg3cF1CnsuV1/KID27nEx1AwgrYz2rTePF/WVe9Lt9L6s5P
2dlY/e5o2ys7qGVYs3Eojg4NTOOUd+mKKEy528bp6MN1zpV8xjHOsPW8jvQUiWTo
lJpyZQcqG96zLPIx9FQCZDo7hAOAUyI166eCgktsD90VAvjaNHTuT2P7faSEraCM
I8B9oFYYR0h/SS/5NUzoTXzlfKHcLEhgBeTgB3rk4ZOCqnD03BsWWildFBdPaqqT
rHxMNS45q9Y7VFo5e6WJQt9ssBq9gqvH3bwZiukMfPCgYEsaHR9J9Q88jIj9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZKS9UW/7dygdV2w1u3gVyIfWEcEwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzEzNzM3MmUzNjM3MmUzMjM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxQ/QwDQYJKoZIhvcNAQELBQADggEBAH1gOfLc
/2V3Z8BVJzTtOXXjiyvRDLsWHWpCXwZBsvEnFZWrOVrTAxij//e6XJ2WvOAMkb6z
UufaId/nJEEqKerxzMLpnSSyNkd0RVmvES+Lp2y2H/fCRd6LFz7hAo/gRSyJghj4
MEVFMNPqqMvdaIzQNvZk2vDUD8S/swvLNT969JaFbljA55xBImsgDXzBfP/5dIRQ
qf4cBadLtyXossye1o+Y//Chi0v6oBmrIBMVY7C2rd8hnHlnvlxqBDUfFnZkWyRT
eplNQp3wx0zGslm9Db2ro5wVd8u5zpYJPi1c90YwKTGCTJdlenahQJn0Yjm1n6Fq
YjEB/M9Y6uq9f/4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:46 2026 by rpki-client