Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa
File:                     3137372e38362e38382e302f32312d3332203d3e20323632373733.roa (raw, json)
Hash identifier:          3wiDxpaSB7+kfoPo6ByYGD25RaOrmZ54NzN3sVqnjHE=
Subject key identifier:   5D:76:20:2A:21:0A:E6:C0:0D:0D:0A:53:3D:2A:8F:0E:04:34:16:4E
Certificate issuer:       /CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
Certificate serial:       4127B0296B003B956CD654BF1811E256C22DE43F
Authority key identifier: FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa
Signing time:             Mon 11 Aug 2025 15:46:59 +0000
ROA not before:           Mon 11 Aug 2025 15:41:59 +0000
ROA not after:            Mon 10 Aug 2026 15:46:59 +0000
asID:                     262773
IP address blocks:        177.86.88.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:19:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:27:b0:29:6b:00:3b:95:6c:d6:54:bf:18:11:e2:56:c2:2d:e4:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBF9AC500C589970B9E8A6C6E6F882DC6F244885
        Validity
            Not Before: Aug 11 15:41:59 2025 GMT
            Not After : Aug 10 15:46:59 2026 GMT
        Subject: CN=5D76202A210AE6C00D0D0A533D2A8F0E0434164E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:2d:51:90:0b:1d:e5:9c:fe:84:7b:03:9e:
                    a5:5e:92:ee:d0:c9:4a:7b:0e:a6:4b:7d:79:31:b6:
                    5c:b8:d4:50:88:45:39:5f:d0:df:e1:d4:30:28:2e:
                    c8:5f:d9:1d:a2:c9:dd:5d:8f:ca:3c:04:f6:60:d5:
                    d7:4b:d1:44:de:95:ec:27:0f:3f:9a:a7:10:b1:28:
                    48:88:bd:8d:05:c9:89:b7:3f:c8:e0:91:3d:e4:f3:
                    1e:b1:39:3c:36:f7:6c:84:98:be:50:97:37:6d:b8:
                    c5:ff:77:65:fb:05:4e:21:f1:86:c8:97:ab:14:90:
                    8a:20:4a:2f:46:4d:1d:b2:2e:d5:3f:0a:95:2b:7f:
                    83:18:c6:75:b5:29:00:e7:0c:80:8f:51:a6:5b:4a:
                    81:36:c1:08:11:ac:d1:0f:95:76:1e:67:e2:13:23:
                    d8:38:c9:3c:af:fa:1d:b4:f5:96:a7:2d:24:fb:aa:
                    a9:de:e1:2e:7a:bd:9a:0f:d5:fb:97:a8:a1:77:ee:
                    d3:5d:a8:80:dd:48:31:0c:5b:76:bd:9e:17:40:46:
                    09:53:86:b4:f4:77:fe:94:e7:e6:28:00:15:f9:2f:
                    0a:24:d8:4f:ca:ab:cb:74:7d:c4:a4:04:92:d5:da:
                    cc:0a:1d:64:14:c9:1c:3a:96:3d:9f:55:28:10:d1:
                    ab:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:76:20:2A:21:0A:E6:C0:0D:0D:0A:53:3D:2A:8F:0E:04:34:16:4E
            X509v3 Authority Key Identifier:
                keyid:FB:F9:AC:50:0C:58:99:70:B9:E8:A6:C6:E6:F8:82:DC:6F:24:48:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF9AC500C589970B9E8A6C6E6F882DC6F244885.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/1/3137372e38362e38382e302f32312d3332203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:da:b3:c6:1d:42:29:1f:73:66:98:09:19:1e:5c:69:dd:
         90:a3:27:90:ef:d4:08:3f:a0:9e:db:9a:b4:cc:79:c6:29:b1:
         b9:92:cb:99:79:be:f4:f7:aa:b5:25:0c:e6:0e:0e:ba:9e:b6:
         18:3b:02:71:42:9d:7f:c3:2a:a9:c5:3c:21:01:e6:7e:f4:99:
         24:0d:31:b5:e8:0a:1e:47:62:15:ce:df:6c:01:b1:20:e1:c5:
         24:c7:4f:98:9b:47:ca:b8:d2:0c:25:c1:cf:7e:87:bf:5b:f5:
         fa:c9:15:40:51:ab:02:7b:76:b9:5f:92:1f:34:84:1c:f6:05:
         a3:75:ad:c1:a3:19:b3:a6:b5:5b:e5:ed:29:6d:7c:af:a8:0e:
         16:bf:25:31:3e:b9:9b:94:84:36:25:9d:e7:cd:69:68:c3:95:
         97:61:cc:b6:aa:fd:bc:23:55:91:f8:3a:d9:12:4c:88:c1:a3:
         26:73:90:97:b2:44:b9:c4:7a:89:dd:5e:ca:88:fb:fc:5d:24:
         64:62:fd:c4:f6:9b:a5:04:10:57:35:cd:f5:9b:01:33:ac:b8:
         d0:9a:7f:3b:11:8d:cf:4b:25:23:db:ad:d9:b8:c7:f7:a6:a9:
         eb:d1:32:72:b8:ba:49:b3:7c:03:65:33:fa:55:e4:38:62:51:
         86:90:f5:a0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQSewKWsAO5Vs1lS/GBHiVsIt5D8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJGOUFDNTAwQzU4OTk3MEI5RThBNkM2RTZGODgyREM2
RjI0NDg4NTAeFw0yNTA4MTExNTQxNTlaFw0yNjA4MTAxNTQ2NTlaMDMxMTAvBgNV
BAMTKDVENzYyMDJBMjEwQUU2QzAwRDBEMEE1MzNEMkE4RjBFMDQzNDE2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSSy1RkAsd5Zz+hHsDnqVeku7Q
yUp7DqZLfXkxtly41FCIRTlf0N/h1DAoLshf2R2iyd1dj8o8BPZg1ddL0UTelewn
Dz+apxCxKEiIvY0FyYm3P8jgkT3k8x6xOTw292yEmL5QlzdtuMX/d2X7BU4h8YbI
l6sUkIogSi9GTR2yLtU/CpUrf4MYxnW1KQDnDICPUaZbSoE2wQgRrNEPlXYeZ+IT
I9g4yTyv+h209ZanLST7qqne4S56vZoP1fuXqKF37tNdqIDdSDEMW3a9nhdARglT
hrT0d/6U5+YoABX5Lwok2E/Kq8t0fcSkBJLV2swKHWQUyRw6lj2fVSgQ0ashAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUXXYgKiEK5sANDQpTPSqPDgQ0Fk4wHwYDVR0j
BBgwFoAU+/msUAxYmXC56KbG5viC3G8kSIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMS9GQkY5QUM1MDBDNTg5OTcwQjlFOEE2QzZFNkY4ODJEQzZGMjQ0ODg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCRjlBQzUwMEM1ODk5NzBC
OUU4QTZDNkU2Rjg4MkRDNkYyNDQ4ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzEv
MzEzNzM3MmUzODM2MmUzODM4MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzIzNjMy
MzczNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsVZYMA0GCSqGSIb3DQEBCwUAA4IBAQAHPdqzxh1C
KR9zZpgJGR5cad2QoyeQ79QIP6Ce25q0zHnGKbG5ksuZeb7096q1JQzmDg66nrYY
OwJxQp1/wyqpxTwhAeZ+9JkkDTG16AoeR2IVzt9sAbEg4cUkx0+Ym0fKuNIMJcHP
foe/W/X6yRVAUasCe3a5X5IfNIQc9gWjda3BoxmzprVb5e0pbXyvqA4WvyUxPrmb
lIQ2JZ3nzWlow5WXYcy2qv28I1WR+DrZEkyIwaMmc5CXskS5xHqJ3V7KiPv8XSRk
Yv3E9pulBBBXNc31mwEzrLjQmn87EY3PSyUj263ZuMf3pqnr0TJyuLpJs3wDZTP6
VeQ4YlGGkPWg
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:21:16 2025 by rpki-client