Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa
File:                     3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa (raw, json)
Hash identifier:          EkoAJjDknTtO7NcJDefIoTz33pZtITLv11NXbbP9s4o=
Subject key identifier:   EE:36:B5:83:79:44:6C:89:BF:C2:DE:ED:D2:E8:07:9E:60:22:59:D7
Certificate issuer:       /CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
Certificate serial:       04DA2DD4DC6CE150B6328CF9DD2B0FDAA58B80A3
Authority key identifier: 88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa
Signing time:             Mon 29 Jun 2026 14:43:08 +0000
ROA not before:           Mon 29 Jun 2026 14:38:08 +0000
ROA not after:            Mon 28 Jun 2027 14:43:08 +0000
asID:                     263049
IP address blocks:        177.136.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.crl
                          rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:da:2d:d4:dc:6c:e1:50:b6:32:8c:f9:dd:2b:0f:da:a5:8b:80:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
        Validity
            Not Before: Jun 29 14:38:08 2026 GMT
            Not After : Jun 28 14:43:08 2027 GMT
        Subject: CN=EE36B58379446C89BFC2DEEDD2E8079E602259D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:17:6e:71:07:7c:8d:6a:70:6f:c3:9a:8e:
                    bd:29:7b:2a:6c:f6:d1:87:85:33:09:06:b9:0b:cd:
                    a0:c2:b5:14:22:0b:56:6e:55:34:7f:d0:fa:03:10:
                    95:9e:ac:43:3d:c8:63:76:f9:6f:09:6b:5c:06:36:
                    4d:a2:f5:ed:c2:36:dd:bc:d7:72:24:27:17:a7:75:
                    e3:7d:8f:3d:d4:74:df:44:ea:3a:a9:2b:f4:93:c9:
                    15:6b:8f:d9:7a:ab:e6:78:13:b4:43:11:b2:62:38:
                    3d:bd:9d:27:78:17:06:0b:bc:a4:c1:41:c2:6f:ac:
                    fb:61:ae:df:79:8b:94:16:d6:ff:fc:00:2b:d5:ef:
                    a6:f8:bf:7c:ab:17:a0:93:75:cb:b7:54:23:15:b8:
                    a9:66:b6:3c:38:86:bf:fc:63:25:0f:76:a3:77:d2:
                    17:b4:a3:04:67:65:b3:88:a5:a2:58:5d:6b:98:94:
                    74:40:d3:83:b7:ee:82:37:81:a0:be:15:53:6c:7e:
                    17:fd:8a:cb:19:e7:80:f6:60:0c:10:c6:d2:84:66:
                    31:b7:fe:95:ec:ac:94:45:c1:f9:bd:12:de:19:d0:
                    d5:d8:a1:b9:fe:ab:63:36:30:31:45:fd:02:0a:24:
                    9d:21:89:96:7e:ca:c9:cd:0a:86:f7:be:f6:43:fa:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:36:B5:83:79:44:6C:89:BF:C2:DE:ED:D2:E8:07:9E:60:22:59:D7
            X509v3 Authority Key Identifier:
                keyid:88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/3137372e3133362e3130342e302f32312d3234203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:b0:bf:cb:88:77:47:6e:85:22:70:7e:85:16:9a:0b:43:
         a6:bb:39:99:77:50:4b:bc:5d:d1:62:1d:21:bd:0f:c7:2a:df:
         a7:3f:94:a8:45:65:3b:47:e3:93:e5:9b:cf:8b:c5:0f:c0:22:
         43:ae:2d:26:9b:4e:83:1f:cd:62:18:9d:a1:44:73:bc:cf:a9:
         32:e2:2a:29:65:6a:74:1c:fc:23:6f:0f:89:f2:0d:e1:79:e8:
         0e:e9:d3:bb:27:ff:21:32:43:3a:53:87:b4:a4:d1:33:fa:e8:
         8e:0d:ef:9e:b6:22:c2:65:e7:a5:6a:39:b6:93:d5:53:e2:e7:
         6b:18:20:61:60:41:69:39:35:26:db:2e:01:84:ca:18:16:7f:
         24:8e:70:e2:47:83:f6:c4:76:63:d1:19:0b:a8:ed:48:8f:2f:
         bc:03:e3:aa:b9:b9:91:d8:fd:80:7b:3b:08:51:6b:c4:1e:1e:
         ed:25:b0:51:2a:d9:15:54:ef:12:36:c5:0b:fb:67:8d:6c:71:
         0b:86:a2:72:e9:34:73:67:80:c2:ea:93:4f:64:11:62:49:8a:
         62:75:bd:3a:e1:73:63:f5:83:6a:42:d2:9a:89:dd:9d:1c:69:
         bc:4f:3b:89:27:5a:7f:2a:93:47:ba:12:cf:d1:e8:bf:b6:8b:
         7a:1e:c0:14
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBNot1Nxs4VC2Moz53SsP2qWLgKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg4NDIxNkI0RDE5NTc5QkRDQzQ2RUQzNTRFQTlGRDlG
NDQ4NTlBQTAeFw0yNjA2MjkxNDM4MDhaFw0yNzA2MjgxNDQzMDhaMDMxMTAvBgNV
BAMTKEVFMzZCNTgzNzk0NDZDODlCRkMyREVFREQyRTgwNzlFNjAyMjU5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoRducQd8jWpwb8Oajr0peyps
9tGHhTMJBrkLzaDCtRQiC1ZuVTR/0PoDEJWerEM9yGN2+W8Ja1wGNk2i9e3CNt28
13IkJxendeN9jz3UdN9E6jqpK/STyRVrj9l6q+Z4E7RDEbJiOD29nSd4FwYLvKTB
QcJvrPthrt95i5QW1v/8ACvV76b4v3yrF6CTdcu3VCMVuKlmtjw4hr/8YyUPdqN3
0he0owRnZbOIpaJYXWuYlHRA04O37oI3gaC+FVNsfhf9issZ54D2YAwQxtKEZjG3
/pXsrJRFwfm9Et4Z0NXYobn+q2M2MDFF/QIKJJ0hiZZ+ysnNCob3vvZD+jVlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7ja1g3lEbIm/wt7t0ugHnmAiWdcwHwYDVR0j
BBgwFoAUiIQha00ZV5vcxG7TVOqf2fRIWaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGRGTHBzbnZGTjhuSk0yTjU4TXNTM0g3UWh6V3dKY0c2NEZMS1VoWGp0
dFEvMC84ODg0MjE2QjREMTk1NzlCRENDNDZFRDM1NEVBOUZEOUY0NDg1OUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4ODQyMTZCNEQxOTU3OUJE
Q0M0NkVEMzU0RUE5RkQ5RjQ0ODU5QUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hkRkxwc252Rk44bkpNMk41OE1zUzNIN1Foeld3SmNHNjRGTEtVaFhqdHRRLzAv
MzEzNzM3MmUzMTMzMzYyZTMxMzAzNDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7GIaDANBgkqhkiG9w0BAQsFAAOCAQEAEnuw
v8uId0duhSJwfoUWmgtDprs5mXdQS7xd0WIdIb0Pxyrfpz+UqEVlO0fjk+Wbz4vF
D8AiQ64tJptOgx/NYhidoURzvM+pMuIqKWVqdBz8I28PifIN4XnoDunTuyf/ITJD
OlOHtKTRM/rojg3vnrYiwmXnpWo5tpPVU+LnaxggYWBBaTk1JtsuAYTKGBZ/JI5w
4keD9sR2Y9EZC6jtSI8vvAPjqrm5kdj9gHs7CFFrxB4e7SWwUSrZFVTvEjbFC/tn
jWxxC4aicuk0c2eAwuqTT2QRYkmKYnW9OuFzY/WDakLSmondnRxpvE87iSdafyqT
R7oSz9Hov7aLeh7AFA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:47:42 2026 by rpki-client