Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234302e302f32312d3231203d3e20323639303631.roa
File:                     3138372e33312e3234302e302f32312d3231203d3e20323639303631.roa (raw, json)
Hash identifier:          nWDhD2LoewSEgA9E4z6x3p24xTauPQz6VapY/U52s+s=
Subject key identifier:   42:3E:54:10:8D:85:EB:6B:DC:1E:8B:D1:2F:85:CA:E9:36:7D:58:B8
Certificate issuer:       /CN=568D52BF567597DA0E7683B85754EDCC4419B51A
Certificate serial:       2B29991C8E25C05C38D954B0B8BBE19ABFA06E7E
Authority key identifier: 56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234302e302f32312d3231203d3e20323639303631.roa
Signing time:             Mon 05 Oct 2026 02:19:10 +0000
ROA not before:           Mon 05 Oct 2026 02:14:10 +0000
ROA not after:            Mon 04 Oct 2027 02:19:10 +0000
asID:                     269061
IP address blocks:        187.31.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl
                          rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 14:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:29:99:1c:8e:25:c0:5c:38:d9:54:b0:b8:bb:e1:9a:bf:a0:6e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568D52BF567597DA0E7683B85754EDCC4419B51A
        Validity
            Not Before: Oct  5 02:14:10 2026 GMT
            Not After : Oct  4 02:19:10 2027 GMT
        Subject: CN=423E54108D85EB6BDC1E8BD12F85CAE9367D58B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:95:20:b8:e9:7f:1c:f7:09:88:59:e0:fc:
                    d0:15:65:cd:fd:00:ac:d3:ab:23:99:ba:8c:41:1e:
                    c9:60:1b:8e:9e:0b:c7:fa:3c:b7:1a:1c:19:02:36:
                    a5:00:5b:a2:d2:65:72:62:91:dd:19:bc:1b:e8:5f:
                    cf:02:d8:c5:b3:5e:c2:bd:8b:5b:a8:60:3e:5d:8b:
                    12:7b:99:b8:c3:83:b0:6c:9a:a4:0c:54:34:09:cc:
                    c6:7f:bc:01:3e:f4:c7:76:c4:10:12:9e:03:6f:8c:
                    67:d4:8d:c1:a9:23:cd:5d:a7:e6:c2:d4:5c:f4:68:
                    59:28:13:7c:55:17:69:7e:de:4e:44:10:52:97:72:
                    fb:08:3d:30:19:c0:45:ea:a9:ef:6e:ad:98:e0:20:
                    29:c8:5a:54:28:e4:74:49:b3:92:1a:e9:2d:2e:d3:
                    f1:15:4f:21:59:97:1e:0c:62:35:6e:2a:ac:e2:b7:
                    d1:e8:1b:3c:15:eb:4f:37:d7:41:73:44:df:85:74:
                    05:68:86:4f:7b:2f:16:f2:b3:8a:7c:c1:51:d7:e3:
                    c6:d6:2d:f0:13:80:b8:d8:44:a7:53:31:12:4d:82:
                    85:4a:18:24:ae:45:70:a7:7f:83:4f:8d:73:3a:a6:
                    b4:64:ce:55:1b:aa:be:3c:26:b3:5b:b3:58:f3:55:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3E:54:10:8D:85:EB:6B:DC:1E:8B:D1:2F:85:CA:E9:36:7D:58:B8
            X509v3 Authority Key Identifier:
                keyid:56:8D:52:BF:56:75:97:DA:0E:76:83:B8:57:54:ED:CC:44:19:B5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/568D52BF567597DA0E7683B85754EDCC4419B51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568D52BF567597DA0E7683B85754EDCC4419B51A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FW3E7bmqL9tnMuzoo2aAfvR9rFHXXLwpW3iqckhW3aZ/0/3138372e33312e3234302e302f32312d3231203d3e20323639303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.31.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:37:7d:53:6a:04:6d:e1:d9:ad:62:66:4d:db:6f:6f:10:
         6f:02:07:3d:4c:c0:87:25:0c:95:40:b5:9c:49:29:b8:7b:79:
         aa:5a:44:74:fe:2d:5e:36:fa:b4:17:65:41:76:cd:06:95:d1:
         1a:33:7a:72:d0:26:ad:79:19:18:7c:46:32:18:2c:7f:1d:51:
         f7:16:4e:9a:83:70:5b:9b:60:a6:df:2e:b7:57:5e:27:f2:d4:
         5c:c9:4d:d1:f3:7b:2f:4f:ba:f7:66:76:ea:98:b8:f5:94:52:
         5a:ac:84:a7:36:dd:4e:fb:ca:cf:76:f2:9d:5d:9e:61:86:08:
         a3:38:74:c6:d9:f5:25:38:37:95:91:8a:b1:94:ec:a0:03:25:
         d2:84:f5:98:cd:c1:f0:ab:2e:7e:d3:c9:15:1d:25:41:a4:e0:
         33:a2:b9:20:cf:6f:3e:48:5d:6e:85:66:cb:30:af:7b:d4:ed:
         e6:8a:b8:a8:4d:7e:5d:db:f4:f7:87:bc:2f:45:e2:09:84:1e:
         ad:76:17:f1:3e:95:c2:a6:a1:b9:95:d8:da:36:d5:e4:74:dc:
         23:d5:f4:a7:a9:bc:5d:64:d7:4c:12:ac:d1:45:b0:b0:f2:d5:
         09:6e:0f:9a:9e:58:c4:46:83:c7:1d:8b:db:6e:17:37:9a:9c:
         9b:49:b7:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKymZHI4lwFw42VSwuLvhmr+gbn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY4RDUyQkY1Njc1OTdEQTBFNzY4M0I4NTc1NEVEQ0M0
NDE5QjUxQTAeFw0yNjEwMDUwMjE0MTBaFw0yNzEwMDQwMjE5MTBaMDMxMTAvBgNV
BAMTKDQyM0U1NDEwOEQ4NUVCNkJEQzFFOEJEMTJGODVDQUU5MzY3RDU4QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bpUguOl/HPcJiFng/NAVZc39
AKzTqyOZuoxBHslgG46eC8f6PLcaHBkCNqUAW6LSZXJikd0ZvBvoX88C2MWzXsK9
i1uoYD5dixJ7mbjDg7BsmqQMVDQJzMZ/vAE+9Md2xBASngNvjGfUjcGpI81dp+bC
1Fz0aFkoE3xVF2l+3k5EEFKXcvsIPTAZwEXqqe9urZjgICnIWlQo5HRJs5Ia6S0u
0/EVTyFZlx4MYjVuKqzit9HoGzwV608310FzRN+FdAVohk97Lxbys4p8wVHX48bW
LfATgLjYRKdTMRJNgoVKGCSuRXCnf4NPjXM6prRkzlUbqr48JrNbs1jzVaPLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQj5UEI2F62vcHovRL4XK6TZ9WLgwHwYDVR0j
BBgwFoAUVo1Sv1Z1l9oOdoO4V1TtzEQZtRowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZXM0U3Ym1xTDl0bk11em9vMmFBZnZSOXJGSFhYTHdwVzNpcWNraFcz
YVovMC81NjhENTJCRjU2NzU5N0RBMEU3NjgzQjg1NzU0RURDQzQ0MTlCNTFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2OEQ1MkJGNTY3NTk3REEw
RTc2ODNCODU3NTRFRENDNDQxOUI1MUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGVzNFN2JtcUw5dG5NdXpvbzJhQWZ2UjlyRkhYWEx3cFczaXFja2hXM2FaLzAv
MzEzODM3MmUzMzMxMmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzkzMDM2MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7H/AwDQYJKoZIhvcNAQELBQADggEBAJDZN31T
agRt4dmtYmZN229vEG8CBz1MwIclDJVAtZxJKbh7eapaRHT+LV42+rQXZUF2zQaV
0RozenLQJq15GRh8RjIYLH8dUfcWTpqDcFubYKbfLrdXXify1FzJTdHzey9Puvdm
duqYuPWUUlqshKc23U77ys928p1dnmGGCKM4dMbZ9SU4N5WRirGU7KADJdKE9ZjN
wfCrLn7TyRUdJUGk4DOiuSDPbz5IXW6FZsswr3vU7eaKuKhNfl3b9PeHvC9F4gmE
Hq12F/E+lcKmobmV2No21eR03CPV9KepvF1k10wSrNFFsLDy1QluD5qeWMRGg8cd
i9tuFzeanJtJt7s=
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:44:14 2026 by rpki-client