Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32332d3233203d3e203533323235.roa
File:                     3137372e3133372e32382e302f32332d3233203d3e203533323235.roa (raw, json)
Hash identifier:          Zclwrs1skY6/7voeyfRMVinsxao9iOVF/aFJp5NztHU=
Subject key identifier:   4B:36:B0:C3:0D:3C:B6:D0:1A:84:A9:FE:9A:B1:80:0D:3A:78:B6:34
Certificate issuer:       /CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
Certificate serial:       4461CB1491432DDE202EAC1C1CB80FAF9ECEA20D
Authority key identifier: 3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32332d3233203d3e203533323235.roa
Signing time:             Wed 13 May 2026 12:39:00 +0000
ROA not before:           Wed 13 May 2026 12:34:00 +0000
ROA not after:            Wed 12 May 2027 12:39:00 +0000
asID:                     53225
IP address blocks:        177.137.28.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl
                          rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 00:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:61:cb:14:91:43:2d:de:20:2e:ac:1c:1c:b8:0f:af:9e:ce:a2:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA849ABB60256D8A6B30F907763AEF9CB3912EF
        Validity
            Not Before: May 13 12:34:00 2026 GMT
            Not After : May 12 12:39:00 2027 GMT
        Subject: CN=4B36B0C30D3CB6D01A84A9FE9AB1800D3A78B634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6e:02:15:ed:4a:d3:30:db:64:44:84:6e:46:
                    a6:33:05:cd:f5:d2:40:bf:6e:65:b1:17:6c:ab:99:
                    56:7a:75:53:3c:f8:57:81:ba:13:81:68:e1:ca:1e:
                    27:1f:97:1f:f2:a3:27:23:ab:19:33:27:67:05:6e:
                    9e:94:80:54:8d:8d:96:7a:be:ed:24:4f:39:30:08:
                    3e:de:64:2e:ab:cd:95:4c:82:7f:30:3b:d3:42:d9:
                    91:eb:13:09:77:ff:e4:10:c0:50:88:12:8e:df:68:
                    e2:fe:04:c4:59:73:60:d5:fa:82:8c:18:1d:eb:3a:
                    a3:53:ba:ad:bb:3f:da:53:1a:6a:86:0c:0d:6e:d8:
                    96:99:73:b0:ff:9b:5d:63:02:e8:16:2e:1b:c0:0c:
                    5f:e6:10:ca:a5:c7:61:e1:19:9f:c7:ec:98:5b:c9:
                    8d:f4:ea:37:14:c3:31:97:f1:e3:3c:10:13:ab:b8:
                    ef:93:83:20:a1:e2:3a:b2:69:c6:fa:62:25:89:32:
                    7a:a7:80:3c:db:a6:69:85:e5:8d:a7:e5:84:35:fe:
                    f7:8f:97:98:c9:ad:7f:c3:0e:c9:3d:1c:ff:83:45:
                    ed:8d:40:d9:e2:76:53:8d:cc:cf:5a:d2:69:9d:d8:
                    e9:17:77:2c:b8:2a:7d:67:ed:c2:91:9c:af:31:79:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:36:B0:C3:0D:3C:B6:D0:1A:84:A9:FE:9A:B1:80:0D:3A:78:B6:34
            X509v3 Authority Key Identifier:
                keyid:3C:A8:49:AB:B6:02:56:D8:A6:B3:0F:90:77:63:AE:F9:CB:39:12:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CA849ABB60256D8A6B30F907763AEF9CB3912EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSfoj4MNKpnaBu855MxMj3MjYhu3ovmS22Xpx4LD6SPQ/0/3137372e3133372e32382e302f32332d3233203d3e203533323235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:f7:ca:06:15:d6:f2:ee:57:2e:2b:e5:d7:4c:8e:40:1c:f1:
         b5:ab:dd:e2:ea:c4:af:5f:e8:3f:0c:3f:ee:31:f3:6e:a5:f5:
         a3:5b:d4:55:cb:60:1d:84:59:98:f9:74:bd:43:04:38:1b:12:
         cb:0b:82:ac:fd:32:cb:88:93:86:35:f4:bf:a1:7e:5f:14:6b:
         56:38:87:60:e2:5c:46:35:dd:30:24:33:f8:f2:37:c6:93:2a:
         05:96:9a:b8:d0:c8:94:8c:c2:ce:20:07:9e:fc:86:65:fe:43:
         ec:61:86:d3:a4:82:8f:14:1c:37:fb:bb:52:1c:c3:22:2c:fe:
         bb:a2:c7:df:97:a4:37:29:fd:e8:c6:0c:b6:b5:f7:79:c3:74:
         81:84:f4:4d:b1:fb:bf:90:31:f8:41:33:ae:15:21:e9:7c:1a:
         67:24:0e:04:27:d6:b9:c7:11:d4:77:a0:85:29:ef:61:4c:98:
         94:99:fc:3f:07:4a:4c:31:fe:7f:ff:b0:0b:99:0c:3f:1f:8c:
         92:f8:46:96:52:ec:6d:82:9a:7f:32:21:c9:90:e7:60:97:58:
         d1:87:a5:5e:84:c4:d9:fd:3b:81:3c:2d:cc:6b:d3:64:c9:90:
         23:2e:5e:eb:40:67:b1:8b:f1:d2:be:db:85:65:36:64:f3:69:
         a4:26:c4:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURGHLFJFDLd4gLqwcHLgPr57Oog0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NBODQ5QUJCNjAyNTZEOEE2QjMwRjkwNzc2M0FFRjlD
QjM5MTJFRjAeFw0yNjA1MTMxMjM0MDBaFw0yNzA1MTIxMjM5MDBaMDMxMTAvBgNV
BAMTKDRCMzZCMEMzMEQzQ0I2RDAxQTg0QTlGRTlBQjE4MDBEM0E3OEI2MzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbgIV7UrTMNtkRIRuRqYzBc31
0kC/bmWxF2yrmVZ6dVM8+FeBuhOBaOHKHicflx/yoycjqxkzJ2cFbp6UgFSNjZZ6
vu0kTzkwCD7eZC6rzZVMgn8wO9NC2ZHrEwl3/+QQwFCIEo7faOL+BMRZc2DV+oKM
GB3rOqNTuq27P9pTGmqGDA1u2JaZc7D/m11jAugWLhvADF/mEMqlx2HhGZ/H7Jhb
yY306jcUwzGX8eM8EBOruO+TgyCh4jqyacb6YiWJMnqngDzbpmmF5Y2n5YQ1/veP
l5jJrX/DDsk9HP+DRe2NQNnidlONzM9a0mmd2OkXdyy4Kn1n7cKRnK8xeZrPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSzawww08ttAahKn+mrGADTp4tjQwHwYDVR0j
BBgwFoAUPKhJq7YCVtimsw+Qd2Ou+cs5Eu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNmb2o0TU5LcG5hQnU4NTVNeE1qM01qWWh1M292bVMyMlhweDRMRDZT
UFEvMC8zQ0E4NDlBQkI2MDI1NkQ4QTZCMzBGOTA3NzYzQUVGOUNCMzkxMkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQTg0OUFCQjYwMjU2RDhB
NkIzMEY5MDc3NjNBRUY5Q0IzOTEyRUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTZm9qNE1OS3BuYUJ1ODU1TXhNajNNallodTNvdm1TMjJYcHg0TEQ2U1BRLzAv
MzEzNzM3MmUzMTMzMzcyZTMyMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMz
MzIzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsYkcMA0GCSqGSIb3DQEBCwUAA4IBAQCQ98oGFdby
7lcuK+XXTI5AHPG1q93i6sSvX+g/DD/uMfNupfWjW9RVy2AdhFmY+XS9QwQ4GxLL
C4Ks/TLLiJOGNfS/oX5fFGtWOIdg4lxGNd0wJDP48jfGkyoFlpq40MiUjMLOIAee
/IZl/kPsYYbTpIKPFBw3+7tSHMMiLP67osffl6Q3Kf3oxgy2tfd5w3SBhPRNsfu/
kDH4QTOuFSHpfBpnJA4EJ9a5xxHUd6CFKe9hTJiUmfw/B0pMMf5//7ALmQw/H4yS
+EaWUuxtgpp/MiHJkOdgl1jRh6VehMTZ/TuBPC3Ma9NkyZAjLl7rQGexi/HSvtuF
ZTZk82mkJsRy
-----END CERTIFICATE-----
Generated at Wed May 13 17:56:48 2026 by rpki-client