Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3332203d3e20323633343731.roa
File:                     3137372e37332e3130382e302f32322d3332203d3e20323633343731.roa (raw, json)
Hash identifier:          5WlEF16z5NtHF2vkDJ+4DneIqwqq48tBBkltAih9fds=
Subject key identifier:   07:1B:4F:48:83:A0:E9:DA:0A:50:B2:17:43:DF:9C:C8:5F:EF:B2:F7
Certificate issuer:       /CN=B7D284FB35C66D128B6148023F9DB09D4AC47348
Certificate serial:       1C8CB294E5CE7217F57CE0F88604831085C3F1F7
Authority key identifier: B7:D2:84:FB:35:C6:6D:12:8B:61:48:02:3F:9D:B0:9D:4A:C4:73:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D284FB35C66D128B6148023F9DB09D4AC47348.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3332203d3e20323633343731.roa
Signing time:             Mon 23 Mar 2026 18:34:21 +0000
ROA not before:           Mon 23 Mar 2026 18:29:21 +0000
ROA not after:            Mon 22 Mar 2027 18:34:21 +0000
asID:                     263471
IP address blocks:        177.73.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/B7D284FB35C66D128B6148023F9DB09D4AC47348.crl
                          rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/B7D284FB35C66D128B6148023F9DB09D4AC47348.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D284FB35C66D128B6148023F9DB09D4AC47348.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 03:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8c:b2:94:e5:ce:72:17:f5:7c:e0:f8:86:04:83:10:85:c3:f1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7D284FB35C66D128B6148023F9DB09D4AC47348
        Validity
            Not Before: Mar 23 18:29:21 2026 GMT
            Not After : Mar 22 18:34:21 2027 GMT
        Subject: CN=071B4F4883A0E9DA0A50B21743DF9CC85FEFB2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:86:d4:65:b4:b4:d5:ac:67:14:2d:79:f9:d2:
                    ca:b1:2a:7e:27:a7:59:30:7f:33:d9:d5:2f:3f:7e:
                    94:69:7f:07:6e:a7:9e:76:04:ac:39:52:77:cf:91:
                    ca:35:0c:48:c2:3e:98:bd:66:ae:48:53:3b:52:cb:
                    c4:e3:5e:a2:31:a3:26:68:88:ad:b7:fe:32:79:33:
                    d1:93:94:28:dc:4f:bc:3e:99:ed:ab:58:64:86:8c:
                    04:69:83:b3:86:1c:fd:c9:e7:d8:1c:7d:c7:f8:ae:
                    2e:b9:26:42:7c:25:f8:9b:9c:fd:5b:a6:36:c6:39:
                    cb:07:8f:fa:98:d2:67:47:4b:bc:5a:3a:78:3c:b7:
                    11:bf:13:8f:36:99:41:f3:bb:6b:c8:40:bb:a0:fc:
                    e1:39:98:ad:79:cc:27:20:ae:f0:0b:b3:a4:b1:65:
                    71:54:93:99:ff:49:58:95:d3:70:f4:c0:24:3e:5d:
                    82:9e:35:ce:5a:c1:bd:5c:25:b2:a1:28:a0:af:92:
                    2b:65:3d:ec:de:3f:6f:8f:8c:92:85:4f:3d:17:dd:
                    4e:87:88:5c:4c:73:27:b1:f7:9b:70:e5:9c:56:1c:
                    9e:e2:af:57:93:35:1c:60:a4:2d:8a:3a:56:b5:b5:
                    6b:0a:6f:f7:09:9e:84:d5:3b:77:f9:1b:d0:12:6c:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1B:4F:48:83:A0:E9:DA:0A:50:B2:17:43:DF:9C:C8:5F:EF:B2:F7
            X509v3 Authority Key Identifier:
                keyid:B7:D2:84:FB:35:C6:6D:12:8B:61:48:02:3F:9D:B0:9D:4A:C4:73:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/B7D284FB35C66D128B6148023F9DB09D4AC47348.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7D284FB35C66D128B6148023F9DB09D4AC47348.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3137372e37332e3130382e302f32322d3332203d3e20323633343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:45:1d:b4:65:8e:93:04:d2:92:98:81:77:a8:b6:24:10:6f:
         c2:06:57:f7:17:61:43:4a:2e:07:4c:bc:fb:46:72:b9:db:f1:
         a7:65:2b:48:b9:a0:9d:ed:9a:fb:29:0f:57:41:a7:c7:25:6d:
         de:92:7e:32:1e:cc:a4:fe:04:f1:f9:92:c2:c8:c9:bf:06:ae:
         38:4a:ab:55:dd:3c:6a:bc:5a:ef:2e:01:50:c6:a9:f8:42:f0:
         f4:4f:86:ee:56:45:5f:82:82:1b:c0:71:bb:3a:61:39:7f:0d:
         7a:27:06:20:9b:6e:f9:b1:ff:73:00:7e:09:15:d7:36:58:70:
         24:9e:a8:88:dd:41:25:2c:d8:7c:a2:f5:65:64:b2:16:16:21:
         7b:d4:bc:ca:f0:79:dc:ec:1e:01:42:cd:9e:6d:50:02:bc:bd:
         9b:1a:45:5c:b2:03:c3:ca:a6:ba:d9:70:cd:09:03:32:f6:3f:
         32:25:38:cb:97:e4:46:91:4f:c4:f7:eb:37:b1:3d:d1:5f:8d:
         e4:fa:92:56:50:b5:ce:3e:bb:d4:2c:e4:ae:70:b5:3b:20:a6:
         e7:a1:44:15:88:42:b0:8f:26:2e:1a:db:01:97:eb:36:db:45:
         b8:62:74:a0:c9:17:3f:fc:d2:5d:83:3d:ad:68:f7:1e:a3:ee:
         61:16:ae:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHIyylOXOchf1fOD4hgSDEIXD8fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdEMjg0RkIzNUM2NkQxMjhCNjE0ODAyM0Y5REIwOUQ0
QUM0NzM0ODAeFw0yNjAzMjMxODI5MjFaFw0yNzAzMjIxODM0MjFaMDMxMTAvBgNV
BAMTKDA3MUI0RjQ4ODNBMEU5REEwQTUwQjIxNzQzREY5Q0M4NUZFRkIyRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShtRltLTVrGcULXn50sqxKn4n
p1kwfzPZ1S8/fpRpfwdup552BKw5UnfPkco1DEjCPpi9Zq5IUztSy8TjXqIxoyZo
iK23/jJ5M9GTlCjcT7w+me2rWGSGjARpg7OGHP3J59gcfcf4ri65JkJ8JfibnP1b
pjbGOcsHj/qY0mdHS7xaOng8txG/E482mUHzu2vIQLug/OE5mK15zCcgrvALs6Sx
ZXFUk5n/SViV03D0wCQ+XYKeNc5awb1cJbKhKKCvkitlPezeP2+PjJKFTz0X3U6H
iFxMcyex95tw5ZxWHJ7ir1eTNRxgpC2KOla1tWsKb/cJnoTVO3f5G9ASbBNtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBxtPSIOg6doKULIXQ9+cyF/vsvcwHwYDVR0j
BBgwFoAUt9KE+zXGbRKLYUgCP52wnUrEc0gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjRuVERTR0paaHhmajJWWGY5dkF3ckEyR2RXVFlZOTRwYWdmUDR1WVR1
MWMvMC9CN0QyODRGQjM1QzY2RDEyOEI2MTQ4MDIzRjlEQjA5RDRBQzQ3MzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I3RDI4NEZCMzVDNjZEMTI4
QjYxNDgwMjNGOURCMDlENEFDNDczNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o0blREU0dKWmh4ZmoyVlhmOXZBd3JBMkdkV1RZWTk0cGFnZlA0dVlUdTFjLzAv
MzEzNzM3MmUzNzMzMmUzMTMwMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNDM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxSWwwDQYJKoZIhvcNAQELBQADggEBADVFHbRl
jpME0pKYgXeotiQQb8IGV/cXYUNKLgdMvPtGcrnb8adlK0i5oJ3tmvspD1dBp8cl
bd6SfjIezKT+BPH5ksLIyb8GrjhKq1XdPGq8Wu8uAVDGqfhC8PRPhu5WRV+CghvA
cbs6YTl/DXonBiCbbvmx/3MAfgkV1zZYcCSeqIjdQSUs2Hyi9WVkshYWIXvUvMrw
edzsHgFCzZ5tUAK8vZsaRVyyA8PKprrZcM0JAzL2PzIlOMuX5EaRT8T36zexPdFf
jeT6klZQtc4+u9Qs5K5wtTsgpuehRBWIQrCPJi4a2wGX6zbbRbhidKDJFz/80l2D
Pa1o9x6j7mEWrpI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:51:56 2026 by rpki-client