Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa
File:                     3134332e302e382e302f32322d3234203d3e20323634353136.roa (raw, json)
Hash identifier:          5W/Yafiv5SDOY/K/ePXMgcrNhyqcFp+2+HjFfyGXKVM=
Subject key identifier:   1C:A5:85:98:ED:3D:A9:BA:13:F6:37:F9:7C:27:F4:87:18:FE:61:85
Certificate issuer:       /CN=0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9
Certificate serial:       13AA3FB3091A5EA1E749945D05816CCA86A60DBA
Authority key identifier: 0E:C1:AC:B8:75:CD:C5:57:6D:02:88:DA:BB:2D:2C:EB:88:E6:2B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa
Signing time:             Wed 13 May 2026 19:38:45 +0000
ROA not before:           Wed 13 May 2026 19:33:45 +0000
ROA not after:            Wed 12 May 2027 19:38:45 +0000
asID:                     264516
IP address blocks:        143.0.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.crl
                          rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 21:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:aa:3f:b3:09:1a:5e:a1:e7:49:94:5d:05:81:6c:ca:86:a6:0d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9
        Validity
            Not Before: May 13 19:33:45 2026 GMT
            Not After : May 12 19:38:45 2027 GMT
        Subject: CN=1CA58598ED3DA9BA13F637F97C27F48718FE6185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:44:a7:d0:ab:df:60:ee:c3:2a:ec:d3:21:
                    61:fd:d4:ff:5f:42:99:4d:6f:f1:0d:f3:10:64:74:
                    ad:b3:e1:0c:db:1f:cb:d6:9b:44:70:16:8f:c9:4b:
                    b4:45:7e:2f:55:2a:6e:cf:53:6a:82:f3:3f:e8:e3:
                    97:a5:90:c1:27:fa:f2:9d:1c:ce:d1:2f:88:92:77:
                    31:cd:81:0a:16:28:f1:d3:be:9d:f7:35:cc:3c:83:
                    27:bc:db:f0:83:e4:83:18:74:cf:2b:b6:9c:8f:ac:
                    f1:29:c7:f3:13:e6:5c:44:2b:b9:5f:57:11:3d:05:
                    4b:0b:64:3c:29:c3:b9:54:58:84:68:2d:dd:61:e9:
                    e4:a4:75:97:bd:6d:93:32:d0:89:f1:94:76:ec:d2:
                    f3:10:be:ee:28:ff:9d:d7:d2:1a:7e:51:36:10:7d:
                    6c:b9:5f:9f:23:64:9f:f5:e6:f0:ef:cd:d9:a3:6b:
                    6b:1c:95:14:b3:44:08:e5:5b:2f:7a:72:83:02:98:
                    c1:bd:08:08:a1:bd:1b:05:81:9d:27:47:67:bc:d7:
                    78:68:e8:6d:6d:57:7b:f7:2e:68:42:72:d7:35:4c:
                    68:1b:b1:76:2b:1f:8b:ad:7d:e1:56:fa:c2:cc:61:
                    35:c4:c8:c6:b0:fb:b3:69:67:3a:29:a3:17:4a:69:
                    53:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:85:98:ED:3D:A9:BA:13:F6:37:F9:7C:27:F4:87:18:FE:61:85
            X509v3 Authority Key Identifier:
                keyid:0E:C1:AC:B8:75:CD:C5:57:6D:02:88:DA:BB:2D:2C:EB:88:E6:2B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC1ACB875CDC5576D0288DABB2D2CEB88E62BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13u2dWsG36Qbx3u8tYMaD2k7HpL7CvExbMyLg6FXm3Hw/1/3134332e302e382e302f32322d3234203d3e20323634353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:65:08:dc:20:04:56:3e:4e:3c:7e:2a:85:12:a9:90:7d:d6:
         7b:8d:85:b4:53:dd:3e:5d:29:09:c9:95:50:4b:4c:36:d7:a4:
         97:3c:37:67:61:7b:ab:e8:6f:17:5a:48:f1:a9:8e:f9:42:67:
         58:29:f5:36:5e:13:f4:94:80:5c:c6:ec:28:71:96:28:f1:28:
         6f:0f:fa:f0:5a:69:1f:cd:1a:a9:07:13:c1:fe:3b:ea:e9:5e:
         63:3f:04:d2:03:22:f5:51:74:33:73:bc:cf:c4:8b:b5:be:57:
         77:7c:c5:19:97:31:d5:f6:36:c5:ed:d5:a3:05:eb:4a:46:57:
         2c:07:cb:54:40:ff:77:c6:26:08:76:e4:69:fb:49:fa:8f:5f:
         d6:05:59:7f:f1:f5:a6:5c:a1:9a:60:7c:1d:bb:f1:00:cc:71:
         29:ab:d2:13:34:1e:93:f6:4a:ac:b3:a4:4e:ff:73:f3:ed:65:
         fd:a5:fb:26:93:ca:e2:9e:43:73:2d:2c:d6:fe:f6:26:2c:1e:
         ca:2f:39:74:eb:94:52:4d:01:f9:35:22:f9:89:02:d6:ed:ca:
         21:a3:b4:67:b6:04:35:ec:b6:a6:e1:37:0f:d7:16:2d:4a:63:
         c7:b7:39:6a:96:15:46:a9:f1:0f:e9:b0:82:ce:a5:98:87:dd:
         db:10:fd:41
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUE6o/swkaXqHnSZRdBYFsyoamDbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDMUFDQjg3NUNEQzU1NzZEMDI4OERBQkIyRDJDRUI4
OEU2MkJDOTAeFw0yNjA1MTMxOTMzNDVaFw0yNzA1MTIxOTM4NDVaMDMxMTAvBgNV
BAMTKDFDQTU4NTk4RUQzREE5QkExM0Y2MzdGOTdDMjdGNDg3MThGRTYxODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFLUSn0KvfYO7DKuzTIWH91P9f
QplNb/EN8xBkdK2z4QzbH8vWm0RwFo/JS7RFfi9VKm7PU2qC8z/o45elkMEn+vKd
HM7RL4iSdzHNgQoWKPHTvp33Ncw8gye82/CD5IMYdM8rtpyPrPEpx/MT5lxEK7lf
VxE9BUsLZDwpw7lUWIRoLd1h6eSkdZe9bZMy0InxlHbs0vMQvu4o/53X0hp+UTYQ
fWy5X58jZJ/15vDvzdmja2sclRSzRAjlWy96coMCmMG9CAihvRsFgZ0nR2e813ho
6G1tV3v3LmhCctc1TGgbsXYrH4utfeFW+sLMYTXEyMaw+7NpZzopoxdKaVMDAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUHKWFmO09qboT9jf5fCf0hxj+YYUwHwYDVR0j
BBgwFoAUDsGsuHXNxVdtAojauy0s64jmK8kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMTN1MmRXc0czNlFieDN1OHRZTWFEMms3SHBMN0N2RXhiTXlMZzZGWG0z
SHcvMS8wRUMxQUNCODc1Q0RDNTU3NkQwMjg4REFCQjJEMkNFQjg4RTYyQkM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzFBQ0I4NzVDREM1NTc2
RDAyODhEQUJCMkQyQ0VCODhFNjJCQzkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzEzdTJkV3NHMzZRYngzdTh0WU1hRDJrN0hwTDdDdkV4Yk15TGc2RlhtM0h3LzEv
MzEzNDMzMmUzMDJlMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKPAAgwDQYJKoZIhvcNAQELBQADggEBAAdlCNwgBFY+Tjx+
KoUSqZB91nuNhbRT3T5dKQnJlVBLTDbXpJc8N2dhe6vobxdaSPGpjvlCZ1gp9TZe
E/SUgFzG7ChxlijxKG8P+vBaaR/NGqkHE8H+O+rpXmM/BNIDIvVRdDNzvM/Ei7W+
V3d8xRmXMdX2NsXt1aMF60pGVywHy1RA/3fGJgh25Gn7SfqPX9YFWX/x9aZcoZpg
fB278QDMcSmr0hM0HpP2SqyzpE7/c/PtZf2l+yaTyuKeQ3MtLNb+9iYsHsovOXTr
lFJNAfk1IvmJAtbtyiGjtGe2BDXstqbhNw/XFi1KY8e3OWqWFUap8Q/psILOpZiH
3dsQ/UE=
-----END CERTIFICATE-----
Generated at Wed May 13 23:02:46 2026 by rpki-client