Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa
File:                     3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa (raw, json)
Hash identifier:          z/2d/44JH633e7kMHijn8qRbZI1mnl4iDtM6yPX86x4=
Subject key identifier:   6B:A0:1B:5F:B6:C0:D4:73:09:CD:0A:CF:DA:8A:48:70:0B:FB:65:9E
Certificate issuer:       /CN=B9184DBAB131ECA85F8F91549B3B52C12458AF0C
Certificate serial:       6B5E10B1E0CF5FA4E0C64136C6859B16A30B9121
Authority key identifier: B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa
Signing time:             Mon 23 Mar 2026 19:03:25 +0000
ROA not before:           Mon 23 Mar 2026 18:58:25 +0000
ROA not after:            Mon 22 Mar 2027 19:03:25 +0000
asID:                     264900
IP address blocks:        170.80.236.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.crl
                          rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 05:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5e:10:b1:e0:cf:5f:a4:e0:c6:41:36:c6:85:9b:16:a3:0b:91:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9184DBAB131ECA85F8F91549B3B52C12458AF0C
        Validity
            Not Before: Mar 23 18:58:25 2026 GMT
            Not After : Mar 22 19:03:25 2027 GMT
        Subject: CN=6BA01B5FB6C0D47309CD0ACFDA8A48700BFB659E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2f:f1:6f:d3:70:0f:83:6b:cb:8d:1b:56:86:
                    0b:6d:7d:92:26:27:6f:39:81:02:af:6b:85:42:c1:
                    2c:83:70:25:28:1f:b7:ef:cb:62:74:bd:c6:48:23:
                    79:e5:e2:af:54:c3:99:fc:44:b7:5b:24:ad:a4:3a:
                    51:57:73:60:9b:d9:05:39:cb:90:9f:63:cb:42:e2:
                    73:26:90:bc:d9:b2:75:e8:36:e8:11:b9:8e:88:a2:
                    43:ef:9c:08:fa:3c:1d:e1:00:09:b9:27:8c:59:f3:
                    6c:22:40:c2:2d:30:28:88:4f:28:e1:b4:ac:3a:1c:
                    ea:7a:46:83:a6:4e:fd:7a:ee:1e:cc:6b:bc:70:a9:
                    6a:7a:f8:99:b6:5e:75:80:ec:d5:f4:da:b2:80:81:
                    ad:bd:84:d9:b5:69:78:ec:ad:58:6c:e0:4d:42:ef:
                    d7:c7:98:aa:0f:ad:9a:bc:44:17:2d:18:2a:13:b2:
                    78:95:0a:ff:90:91:6d:aa:a8:3f:64:c9:e1:49:91:
                    dc:37:45:11:57:5f:6f:79:69:15:91:82:3f:e3:d8:
                    58:73:8a:06:ec:43:a9:cb:6a:55:e5:26:fd:67:1a:
                    03:89:f1:66:6e:4d:11:20:8f:ef:44:8b:61:e6:78:
                    9c:a6:9b:58:85:3e:dd:27:04:66:8f:a1:09:78:db:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A0:1B:5F:B6:C0:D4:73:09:CD:0A:CF:DA:8A:48:70:0B:FB:65:9E
            X509v3 Authority Key Identifier:
                keyid:B9:18:4D:BA:B1:31:EC:A8:5F:8F:91:54:9B:3B:52:C1:24:58:AF:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9184DBAB131ECA85F8F91549B3B52C12458AF0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2sR4uaUmeqSNb2bu4Q1MyKnpLATELKZiQ5tWtwf8xTFq/0/3137302e38302e3233362e302f32322d3332203d3e20323634393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:ad:2f:4c:90:e4:8a:8d:b9:2a:04:99:c3:07:89:90:2f:
         e9:2a:f0:12:97:d4:8a:08:7f:03:19:a6:13:43:f4:a8:cb:67:
         0b:bc:52:f6:c1:86:dc:8d:6e:ef:a0:43:a1:25:d3:78:02:9f:
         16:d2:f9:50:da:48:45:d5:20:32:81:6b:d8:bd:50:d2:3b:47:
         d0:64:a9:51:f2:ee:48:31:f5:91:51:6f:b5:b3:d9:1a:ef:7b:
         5a:5e:7b:83:66:7b:68:6d:99:a0:a3:64:46:27:37:20:37:5d:
         d3:95:4b:e2:79:da:48:ad:60:16:a5:1f:db:b0:53:1b:46:d4:
         05:64:e9:9e:08:ce:2f:10:56:98:88:23:5f:03:4a:aa:73:47:
         0d:9f:59:7e:c6:e2:e5:d9:3a:a6:5b:db:34:92:46:ee:e9:80:
         59:ee:75:33:6e:b3:81:58:8d:a4:17:fe:c3:d4:fe:aa:34:ec:
         e9:c0:98:89:e3:40:8c:07:c7:ce:63:1e:ad:31:02:8b:90:12:
         50:f7:3c:52:ba:22:3b:fb:9a:47:3d:b0:4c:fa:6c:2f:d0:92:
         3b:fd:a5:91:dc:0e:3f:fe:bb:8e:54:16:ef:51:76:2f:a8:93:
         5e:be:7b:8a:be:90:f6:55:5b:70:a7:25:df:df:39:08:ad:aa:
         d9:3d:02:30
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUa14QseDPX6TgxkE2xoWbFqMLkSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkxODREQkFCMTMxRUNBODVGOEY5MTU0OUIzQjUyQzEy
NDU4QUYwQzAeFw0yNjAzMjMxODU4MjVaFw0yNzAzMjIxOTAzMjVaMDMxMTAvBgNV
BAMTKDZCQTAxQjVGQjZDMEQ0NzMwOUNEMEFDRkRBOEE0ODcwMEJGQjY1OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaL/Fv03APg2vLjRtWhgttfZIm
J285gQKva4VCwSyDcCUoH7fvy2J0vcZII3nl4q9Uw5n8RLdbJK2kOlFXc2Cb2QU5
y5CfY8tC4nMmkLzZsnXoNugRuY6IokPvnAj6PB3hAAm5J4xZ82wiQMItMCiITyjh
tKw6HOp6RoOmTv167h7Ma7xwqWp6+Jm2XnWA7NX02rKAga29hNm1aXjsrVhs4E1C
79fHmKoPrZq8RBctGCoTsniVCv+QkW2qqD9kyeFJkdw3RRFXX295aRWRgj/j2Fhz
igbsQ6nLalXlJv1nGgOJ8WZuTREgj+9Ei2HmeJymm1iFPt0nBGaPoQl425B3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUa6AbX7bA1HMJzQrP2opIcAv7ZZ4wHwYDVR0j
BBgwFoAUuRhNurEx7Khfj5FUmztSwSRYrwwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnNSNHVhVW1lcVNOYjJidTRRMU15S25wTEFURUxLWmlRNXRXdHdmOHhU
RnEvMC9COTE4NERCQUIxMzFFQ0E4NUY4RjkxNTQ5QjNCNTJDMTI0NThBRjBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5MTg0REJBQjEzMUVDQTg1
RjhGOTE1NDlCM0I1MkMxMjQ1OEFGMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJzUjR1YVVtZXFTTmIyYnU0UTFNeUtucExBVEVMS1ppUTV0V3R3Zjh4VEZxLzAv
MzEzNzMwMmUzODMwMmUzMjMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzOTMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKqUOwwDQYJKoZIhvcNAQELBQADggEBAJ1YrS9M
kOSKjbkqBJnDB4mQL+kq8BKX1IoIfwMZphND9KjLZwu8UvbBhtyNbu+gQ6El03gC
nxbS+VDaSEXVIDKBa9i9UNI7R9BkqVHy7kgx9ZFRb7Wz2Rrve1pee4Nme2htmaCj
ZEYnNyA3XdOVS+J52kitYBalH9uwUxtG1AVk6Z4Izi8QVpiII18DSqpzRw2fWX7G
4uXZOqZb2zSSRu7pgFnudTNus4FYjaQX/sPU/qo07OnAmInjQIwHx85jHq0xAouQ
ElD3PFK6Ijv7mkc9sEz6bC/Qkjv9pZHcDj/+u45UFu9Rdi+ok16+e4q+kPZVW3Cn
Jd/fOQitqtk9AjA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:33:08 2026 by rpki-client