Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa
File:                     3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa (raw, json)
Hash identifier:          Cag2o/dICMEPCQdOd9J71MPUVTzZtEmgN0khOgadYi8=
Subject key identifier:   AF:D0:10:23:D6:DE:36:6E:66:A2:AD:AC:1D:2F:66:B8:89:CB:F8:55
Certificate issuer:       /CN=1B427596807B9C7F33F0033F7B7CC699B7278320
Certificate serial:       548455E1AB5C4DCBB81A26EF623BF248D6748949
Authority key identifier: 1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa
Signing time:             Mon 15 Jun 2026 11:56:21 +0000
ROA not before:           Mon 15 Jun 2026 11:51:21 +0000
ROA not after:            Mon 14 Jun 2027 11:56:21 +0000
asID:                     28182
IP address blocks:        170.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl
                          rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 10:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:84:55:e1:ab:5c:4d:cb:b8:1a:26:ef:62:3b:f2:48:d6:74:89:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B427596807B9C7F33F0033F7B7CC699B7278320
        Validity
            Not Before: Jun 15 11:51:21 2026 GMT
            Not After : Jun 14 11:56:21 2027 GMT
        Subject: CN=AFD01023D6DE366E66A2ADAC1D2F66B889CBF855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b4:4f:98:4e:c7:cb:02:dd:09:4c:c7:34:68:
                    b9:f2:a8:e0:de:70:60:86:b9:e6:f5:3b:c1:72:94:
                    b4:ed:d3:a2:28:e1:3c:b1:62:1f:7d:d5:d4:09:c8:
                    e3:5b:61:e5:f5:bf:f3:c3:b0:51:5e:c1:4c:34:f2:
                    cf:3b:6e:86:99:9a:b4:c4:01:42:1d:be:54:9d:78:
                    c1:b3:1f:be:c3:50:8e:ac:5e:1d:5f:e4:58:ee:db:
                    fd:26:d2:5a:6f:6d:fc:8a:96:ec:73:c3:a1:be:7a:
                    b2:bc:74:96:11:29:a9:3f:0c:ca:49:77:40:98:1c:
                    e9:ae:d2:ff:20:63:2c:ef:a8:79:87:df:00:32:63:
                    b7:b9:e1:cb:4b:b6:da:f7:37:60:5b:70:42:33:34:
                    21:1c:19:be:49:b2:e0:1d:7d:3b:f1:f7:b5:cb:e7:
                    d3:96:55:99:a0:fc:85:88:8c:31:b2:9e:59:cf:45:
                    98:ab:3b:4b:7c:ac:5b:3a:27:77:3c:03:54:ed:1d:
                    5c:43:2c:b9:e0:38:08:51:44:57:f2:c9:f0:0b:0c:
                    22:10:e5:b4:9d:73:11:d2:2e:0c:d1:69:c5:28:c6:
                    19:ba:2e:e6:80:e7:52:03:99:f6:30:79:53:9b:50:
                    be:2d:f0:d0:97:4b:74:df:94:4c:17:81:ac:4c:fb:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D0:10:23:D6:DE:36:6E:66:A2:AD:AC:1D:2F:66:B8:89:CB:F8:55
            X509v3 Authority Key Identifier:
                keyid:1B:42:75:96:80:7B:9C:7F:33:F0:03:3F:7B:7C:C6:99:B7:27:83:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/1B427596807B9C7F33F0033F7B7CC699B7278320.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B427596807B9C7F33F0033F7B7CC699B7278320.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/3137302e3233312e3133342e302f32342d3234203d3e203238313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:47:8d:2f:d0:b1:41:cc:d0:f6:58:0e:c9:7d:55:59:0d:
         5b:e4:0e:ff:ee:bb:f8:f2:24:01:5d:f8:05:5d:dc:62:aa:48:
         8e:57:39:8e:a5:56:21:34:5e:29:84:ff:6c:74:15:4b:d4:04:
         b6:90:87:32:d1:12:84:70:49:ba:53:36:31:2b:e6:d7:56:44:
         62:da:85:e2:34:23:3a:c1:70:99:2d:03:2e:aa:b3:1c:b9:15:
         71:57:3e:cf:88:e0:7e:c2:96:1c:be:99:40:4f:b1:84:48:ea:
         28:76:bc:bb:30:6d:4b:84:6a:a6:7e:81:7d:4c:db:42:f9:25:
         b4:c5:7f:b4:f0:e8:94:43:15:83:8d:d1:af:2d:b5:6d:f5:9e:
         0f:f1:21:7a:1e:0a:17:b2:bf:42:63:f4:3c:ed:c3:c8:7f:f3:
         ed:0f:e6:7f:a0:10:02:15:cb:02:f9:e0:cd:a9:f3:e7:6e:f9:
         8c:63:c2:e5:64:1d:4b:43:ed:9a:e0:ea:0d:f8:76:df:ed:a7:
         63:bd:3b:3d:7e:d5:19:f2:10:ac:42:90:32:cf:b1:79:28:7c:
         86:00:e0:65:27:70:51:fb:4f:ae:a4:eb:ea:4c:c7:4c:0d:d5:
         4d:67:48:6c:11:98:9c:b5:cc:b0:9c:90:0d:d4:bf:f5:ea:96:
         cf:71:54:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVIRV4atcTcu4GibvYjvySNZ0iUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0Mjc1OTY4MDdCOUM3RjMzRjAwMzNGN0I3Q0M2OTlC
NzI3ODMyMDAeFw0yNjA2MTUxMTUxMjFaFw0yNzA2MTQxMTU2MjFaMDMxMTAvBgNV
BAMTKEFGRDAxMDIzRDZERTM2NkU2NkEyQURBQzFEMkY2NkI4ODlDQkY4NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatE+YTsfLAt0JTMc0aLnyqODe
cGCGueb1O8FylLTt06Io4TyxYh991dQJyONbYeX1v/PDsFFewUw08s87boaZmrTE
AUIdvlSdeMGzH77DUI6sXh1f5Fju2/0m0lpvbfyKluxzw6G+erK8dJYRKak/DMpJ
d0CYHOmu0v8gYyzvqHmH3wAyY7e54ctLttr3N2BbcEIzNCEcGb5JsuAdfTvx97XL
59OWVZmg/IWIjDGynlnPRZirO0t8rFs6J3c8A1TtHVxDLLngOAhRRFfyyfALDCIQ
5bSdcxHSLgzRacUoxhm6LuaA51IDmfYweVObUL4t8NCXS3TflEwXgaxM+8K1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUr9AQI9beNm5moq2sHS9muInL+FUwHwYDVR0j
BBgwFoAUG0J1loB7nH8z8AM/e3zGmbcngyAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3Vqejg5dUE1VThIZ3UyNlM3ZEdqYXdhS3dWS2o0V3RFUkY0NlJDbXJw
NnovMC8xQjQyNzU5NjgwN0I5QzdGMzNGMDAzM0Y3QjdDQzY5OUI3Mjc4MzIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNDI3NTk2ODA3QjlDN0Yz
M0YwMDMzRjdCN0NDNjk5QjcyNzgzMjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d1ano4OXVBNVU4SGd1MjZTN2RHamF3YUt3VktqNFd0RVJGNDZSQ21ycDZ6LzAv
MzEzNzMwMmUzMjMzMzEyZTMxMzMzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzMTM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACq54YwDQYJKoZIhvcNAQELBQADggEBAAVLR40v
0LFBzND2WA7JfVVZDVvkDv/uu/jyJAFd+AVd3GKqSI5XOY6lViE0XimE/2x0FUvU
BLaQhzLREoRwSbpTNjEr5tdWRGLaheI0IzrBcJktAy6qsxy5FXFXPs+I4H7Clhy+
mUBPsYRI6ih2vLswbUuEaqZ+gX1M20L5JbTFf7Tw6JRDFYON0a8ttW31ng/xIXoe
Cheyv0Jj9Dztw8h/8+0P5n+gEAIVywL54M2p8+du+YxjwuVkHUtD7Zrg6g34dt/t
p2O9Oz1+1RnyEKxCkDLPsXkofIYA4GUncFH7T66k6+pMx0wN1U1nSGwRmJy1zLCc
kA3Uv/Xqls9xVBU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:58:33 2026 by rpki-client