Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa
File:                     3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          UAFAwG0hGkP1SBdxAkjQd4ojfnY8SzZy73NlOzMeo7k=
Subject key identifier:   84:D4:5A:62:BF:3F:0E:E9:BE:41:89:99:0C:E5:6F:4B:98:AF:03:5F
Certificate issuer:       /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial:       11A177256FFA331252C8D4C991AABD6384F46FFE
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa
Signing time:             Wed 18 Mar 2026 01:16:45 +0000
ROA not before:           Wed 18 Mar 2026 01:11:45 +0000
ROA not after:            Wed 17 Mar 2027 01:16:45 +0000
asID:                     198949
IP address blocks:        170.150.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
                          rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a1:77:25:6f:fa:33:12:52:c8:d4:c9:91:aa:bd:63:84:f4:6f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
        Validity
            Not Before: Mar 18 01:11:45 2026 GMT
            Not After : Mar 17 01:16:45 2027 GMT
        Subject: CN=84D45A62BF3F0EE9BE4189990CE56F4B98AF035F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:ca:38:bd:51:45:b3:0e:cf:0f:74:08:9b:
                    00:dc:3a:47:ab:38:23:09:c3:95:17:dc:00:ff:ce:
                    77:72:a6:71:43:23:2b:d9:62:98:73:0b:d0:bf:c9:
                    fc:79:c3:6c:14:84:70:95:08:c5:2d:4a:12:8d:16:
                    f9:95:a3:4d:1a:47:d2:ad:3f:0e:b9:d0:eb:ef:3f:
                    78:41:08:76:63:ff:ed:81:5a:bd:50:b3:74:35:91:
                    7c:5b:e0:75:83:1c:7e:8f:b1:3b:e8:2b:0b:06:dc:
                    61:a3:ec:1c:14:05:fe:0b:91:e0:cd:96:9f:97:72:
                    fb:5e:db:30:0a:34:10:c2:89:fb:68:b9:13:8b:df:
                    a9:cb:8e:9f:5f:17:24:7e:ad:5c:49:9c:83:1b:24:
                    86:da:eb:33:08:12:7e:b5:65:09:39:18:6c:c7:97:
                    6e:de:87:89:c9:dc:55:13:c6:67:e4:fd:74:a9:83:
                    1a:9a:47:f8:77:2e:62:32:ef:b7:bf:d4:c6:55:45:
                    c2:a1:81:f7:52:cc:1d:4b:38:34:da:9a:1d:1f:2c:
                    d4:7b:55:41:9b:2e:81:4a:fe:5c:be:57:dd:91:4d:
                    9c:1e:1e:df:5f:36:e0:f1:21:7f:69:0a:43:94:ed:
                    f8:94:56:86:69:10:21:0c:22:f5:89:92:ab:24:ca:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D4:5A:62:BF:3F:0E:E9:BE:41:89:99:0C:E5:6F:4B:98:AF:03:5F
            X509v3 Authority Key Identifier:
                keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/3137302e3135302e3136342e302f32322d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:06:09:f8:f2:20:78:1d:f1:8d:b8:b6:20:1d:b4:32:8c:15:
         bb:db:f8:52:7b:53:f3:ee:2b:79:2b:68:a6:66:31:7f:03:3a:
         98:25:79:8d:51:6f:06:01:d4:86:04:fe:71:47:ae:77:46:bc:
         36:74:98:57:4b:df:3d:c7:2d:a5:25:1c:bb:2d:a8:19:03:b0:
         c2:07:03:3b:2b:c2:4c:99:56:de:71:6a:3f:c7:ab:da:d8:82:
         31:18:9f:59:ba:bc:a1:35:bd:fb:9c:66:68:e4:9f:66:9a:e2:
         8d:5b:1b:70:e2:71:50:33:52:1f:59:75:ba:7f:70:f2:1b:5c:
         71:6c:55:53:e3:db:f0:ad:1b:9c:40:a2:63:81:91:27:81:05:
         ad:b6:8b:ea:d1:26:07:27:aa:c0:47:24:42:e5:93:9e:4f:db:
         b5:cd:28:35:89:85:0d:c9:32:c9:a5:1c:ec:98:49:87:8a:d1:
         ed:41:53:51:5d:5b:d8:79:aa:57:60:62:3d:47:79:88:da:4a:
         64:b8:6f:72:4f:50:8d:dc:e8:3f:e3:7c:32:fb:f2:89:8f:a7:
         3f:e4:0a:cb:36:b4:28:95:d8:e3:ae:36:9b:76:b4:0e:3b:5b:
         9d:aa:b8:61:7b:3d:af:8d:e1:a4:2d:5a:f2:40:43:f8:a7:63:
         ed:4e:d0:18
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUEaF3JW/6MxJSyNTJkaq9Y4T0b/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFE
M0RDMDlFMDAeFw0yNjAzMTgwMTExNDVaFw0yNzAzMTcwMTE2NDVaMDMxMTAvBgNV
BAMTKDg0RDQ1QTYyQkYzRjBFRTlCRTQxODk5OTBDRTU2RjRCOThBRjAzNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzY8o4vVFFsw7PD3QImwDcOker
OCMJw5UX3AD/zndypnFDIyvZYphzC9C/yfx5w2wUhHCVCMUtShKNFvmVo00aR9Kt
Pw650OvvP3hBCHZj/+2BWr1Qs3Q1kXxb4HWDHH6PsTvoKwsG3GGj7BwUBf4LkeDN
lp+Xcvte2zAKNBDCiftouROL36nLjp9fFyR+rVxJnIMbJIba6zMIEn61ZQk5GGzH
l27eh4nJ3FUTxmfk/XSpgxqaR/h3LmIy77e/1MZVRcKhgfdSzB1LODTamh0fLNR7
VUGbLoFK/ly+V92RTZweHt9fNuDxIX9pCkOU7fiUVoZpECEMIvWJkqskyurpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUhNRaYr8/Dum+QYmZDOVvS5ivA18wHwYDVR0j
BBgwFoAUSxPbZLzCXJ+pn6K536xJYdPcCeAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9oWHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMy
LzEvNEIxM0RCNjRCQ0MyNUM5RkE5OUZBMkI5REZBQzQ5NjFEM0RDMDlFMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS80QjEzREI2NEJDQzI1QzlGQTk5
RkEyQjlERkFDNDk2MUQzREMwOUUwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9o
WHAzMTRBVm9uNVZVQjg1M29NVkQ2OWFaa3JLc3VHZkpEem95R3hnQXMyLzEvMzEz
NzMwMmUzMTM1MzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzkz
ODM5MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqqWpDANBgkqhkiG9w0BAQsFAAOCAQEAdQYJ+PIg
eB3xjbi2IB20MowVu9v4UntT8+4reStopmYxfwM6mCV5jVFvBgHUhgT+cUeud0a8
NnSYV0vfPcctpSUcuy2oGQOwwgcDOyvCTJlW3nFqP8er2tiCMRifWbq8oTW9+5xm
aOSfZprijVsbcOJxUDNSH1l1un9w8htccWxVU+Pb8K0bnECiY4GRJ4EFrbaL6tEm
ByeqwEckQuWTnk/btc0oNYmFDckyyaUc7JhJh4rR7UFTUV1b2HmqV2BiPUd5iNpK
ZLhvck9QjdzoP+N8MvvyiY+nP+QKyza0KJXY4642m3a0Djtbnaq4YXs9r43hpC1a
8kBD+Kdj7U7QGA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 05:09:58 2026 by rpki-client