Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
File:                     3137372e3132342e32332e302f32342d3234203d3e203532363132.roa (raw, json)
Hash identifier:          DnV9ktyi+mMh6Qkdm2wHNfeAbuHm03E1AsiML22DIsU=
Subject key identifier:   D2:EF:6E:F1:8F:9A:F5:2E:2B:E3:4A:CC:A1:E6:45:C3:84:BD:D5:5B
Certificate issuer:       /CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
Certificate serial:       048A5DE20094536EB170554B81CE905CE90A4564
Authority key identifier: D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa
Signing time:             Tue 08 Sep 2026 16:39:26 +0000
ROA not before:           Tue 08 Sep 2026 16:34:26 +0000
ROA not after:            Tue 07 Sep 2027 16:39:26 +0000
asID:                     52612
IP address blocks:        177.124.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl
                          rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 11:10:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8a:5d:e2:00:94:53:6e:b1:70:55:4b:81:ce:90:5c:e9:0a:45:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6339C86DE0C65F4299E0B925EDD88EAB886F72D
        Validity
            Not Before: Sep  8 16:34:26 2026 GMT
            Not After : Sep  7 16:39:26 2027 GMT
        Subject: CN=D2EF6EF18F9AF52E2BE34ACCA1E645C384BDD55B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:53:c3:60:20:f5:34:44:e9:db:b9:d6:93:
                    10:1f:ed:63:93:5a:25:44:b7:1d:3a:c1:b5:ee:2f:
                    e7:19:6b:08:33:d7:c2:91:28:5e:f6:e0:9a:90:52:
                    f0:9f:31:e5:4a:38:80:9a:5f:49:1a:6f:89:b4:c9:
                    db:38:f6:2a:ae:9b:3c:1e:93:38:5a:61:90:18:bb:
                    aa:d7:8c:b0:ee:54:38:c6:24:8f:c3:ee:0d:10:e5:
                    a1:28:a5:cb:a6:fd:47:49:98:89:9b:f0:16:db:1e:
                    ca:ea:cd:87:49:fe:ad:4f:f3:a8:41:92:20:22:25:
                    c5:40:f9:b8:bf:55:fd:b5:1c:93:a5:1e:8c:54:e7:
                    b8:62:fd:3f:57:64:2f:53:bb:c1:64:1d:a4:bf:db:
                    63:7d:e1:98:ed:ad:23:30:fd:f5:96:73:8c:d9:f0:
                    bb:f6:a5:2c:8a:93:b3:c5:97:b9:94:85:81:14:95:
                    29:7e:00:72:ec:ba:d2:29:3f:d3:41:0d:ed:a4:d4:
                    cb:de:dc:ae:59:29:5c:80:ae:89:88:8c:c6:0b:43:
                    aa:58:1e:c8:42:55:93:3c:4c:ec:fe:58:95:2a:e2:
                    98:42:9d:ff:50:38:9c:48:ec:1e:4e:79:2d:26:8c:
                    f8:41:60:c8:a6:b3:67:c6:46:66:ba:ca:69:f0:bf:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:6E:F1:8F:9A:F5:2E:2B:E3:4A:CC:A1:E6:45:C3:84:BD:D5:5B
            X509v3 Authority Key Identifier:
                keyid:D6:33:9C:86:DE:0C:65:F4:29:9E:0B:92:5E:DD:88:EA:B8:86:F7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6339C86DE0C65F4299E0B925EDD88EAB886F72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQyraJnPEEQWmjFLa4dBpQ9Q582Lt7Jkz2L73a3jvoEe/0/3137372e3132342e32332e302f32342d3234203d3e203532363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:11:31:d1:58:f5:59:57:37:42:5e:55:62:ac:69:59:b6:
         93:03:76:75:41:0b:0d:2f:1d:55:8e:fa:5f:15:77:d2:a2:30:
         bf:c1:59:a1:30:05:2f:c3:a3:2c:b4:cb:7d:52:01:b9:0e:4e:
         86:36:3d:1f:05:5f:b8:11:56:36:cb:36:dc:5e:59:86:51:84:
         42:f2:9d:fa:3c:d6:fb:56:ff:71:fa:ae:3f:28:de:b8:1c:48:
         14:44:72:a6:80:9a:f8:1b:d6:6b:e8:5a:10:de:66:91:04:37:
         fb:88:14:b1:17:38:93:75:27:2b:8c:de:a2:bc:55:e8:6f:89:
         02:df:71:1d:cf:b6:a6:61:0f:f3:e1:b9:7e:a9:81:f7:f8:7b:
         fc:6a:72:50:92:e2:50:c2:10:e5:16:31:25:46:35:06:d0:bc:
         b2:93:99:56:6d:b1:b4:d0:f2:24:52:c8:77:e0:95:91:0d:37:
         c7:cb:11:29:44:8a:88:86:a4:3b:54:6a:a4:24:3d:b4:22:0a:
         ba:00:35:e9:d3:de:9e:05:3a:3c:c0:80:9e:d2:f0:26:0b:0e:
         ce:b5:0e:95:35:98:58:d4:68:83:63:5b:b3:a8:fe:27:c2:29:
         a3:d9:e1:13:13:44:9b:4d:2c:ff:8c:56:de:0a:5c:3f:80:a9:
         96:30:41:c2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBIpd4gCUU26xcFVLgc6QXOkKRWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzMzlDODZERTBDNjVGNDI5OUUwQjkyNUVERDg4RUFC
ODg2RjcyRDAeFw0yNjA5MDgxNjM0MjZaFw0yNzA5MDcxNjM5MjZaMDMxMTAvBgNV
BAMTKEQyRUY2RUYxOEY5QUY1MkUyQkUzNEFDQ0ExRTY0NUMzODRCREQ1NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3elPDYCD1NETp27nWkxAf7WOT
WiVEtx06wbXuL+cZawgz18KRKF724JqQUvCfMeVKOICaX0kab4m0yds49iqumzwe
kzhaYZAYu6rXjLDuVDjGJI/D7g0Q5aEopcum/UdJmImb8BbbHsrqzYdJ/q1P86hB
kiAiJcVA+bi/Vf21HJOlHoxU57hi/T9XZC9Tu8FkHaS/22N94ZjtrSMw/fWWc4zZ
8Lv2pSyKk7PFl7mUhYEUlSl+AHLsutIpP9NBDe2k1Mve3K5ZKVyAromIjMYLQ6pY
HshCVZM8TOz+WJUq4phCnf9QOJxI7B5OeS0mjPhBYMims2fGRma6ymnwv5f5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0u9u8Y+a9S4r40rMoeZFw4S91VswHwYDVR0j
BBgwFoAU1jOcht4MZfQpnguSXt2I6riG9y0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFF5cmFKblBFRVFXbWpGTGE0ZEJwUTlRNTgyTHQ3Smt6Mkw3M2EzanZv
RWUvMC9ENjMzOUM4NkRFMEM2NUY0Mjk5RTBCOTI1RUREODhFQUI4ODZGNzJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2MzM5Qzg2REUwQzY1RjQy
OTlFMEI5MjVFREQ4OEVBQjg4NkY3MkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hReXJhSm5QRUVRV21qRkxhNGRCcFE5UTU4Mkx0N0prejJMNzNhM2p2b0VlLzAv
MzEzNzM3MmUzMTMyMzQyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsXwXMA0GCSqGSIb3DQEBCwUAA4IBAQCKuREx0Vj1
WVc3Ql5VYqxpWbaTA3Z1QQsNLx1VjvpfFXfSojC/wVmhMAUvw6MstMt9UgG5Dk6G
Nj0fBV+4EVY2yzbcXlmGUYRC8p36PNb7Vv9x+q4/KN64HEgURHKmgJr4G9Zr6FoQ
3maRBDf7iBSxFziTdScrjN6ivFXob4kC33Edz7amYQ/z4bl+qYH3+Hv8anJQkuJQ
whDlFjElRjUG0Lyyk5lWbbG00PIkUsh34JWRDTfHyxEpRIqIhqQ7VGqkJD20Igq6
ADXp096eBTo8wICe0vAmCw7OtQ6VNZhY1GiDY1uzqP4nwimj2eETE0SbTSz/jFbe
Clw/gKmWMEHC
-----END CERTIFICATE-----