Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3138372e37332e3134342e302f32302d3332203d3e20323638393736.roa
File:                     3138372e37332e3134342e302f32302d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          UBUrCdUj+wz7izV/dO48j6dfPi0QXtR6+2npAfgbBWY=
Subject key identifier:   6E:62:CE:C1:97:6A:47:5A:3F:84:C6:E0:25:2B:00:1C:9D:D3:0F:83
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       4FD23923E3A3C8329CCB7E63AC67E62837A1D521
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3138372e37332e3134342e302f32302d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:48:08 +0000
ROA not before:           Mon 11 May 2026 17:43:08 +0000
ROA not after:            Mon 10 May 2027 17:48:08 +0000
asID:                     268976
IP address blocks:        187.73.144.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d2:39:23:e3:a3:c8:32:9c:cb:7e:63:ac:67:e6:28:37:a1:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:43:08 2026 GMT
            Not After : May 10 17:48:08 2027 GMT
        Subject: CN=6E62CEC1976A475A3F84C6E0252B001C9DD30F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:a2:14:dc:3b:98:37:db:aa:f8:d3:9a:49:
                    e7:3c:61:1e:d6:c0:47:17:8b:4d:2f:0e:57:f0:dd:
                    96:e7:b2:8e:7a:5c:94:df:02:51:c3:69:e5:3f:5d:
                    0c:db:78:6c:04:23:62:57:81:65:49:7b:ba:f4:0b:
                    d9:84:6c:53:61:4d:18:2a:d9:67:a5:08:38:b8:2e:
                    0b:9c:77:33:44:3d:73:4d:de:7d:6e:63:7e:4f:b6:
                    c7:ae:79:15:a9:fd:e6:6f:21:e2:8c:cd:af:13:4b:
                    90:50:55:67:ac:96:9a:89:99:c0:90:83:eb:ae:be:
                    ca:20:13:46:42:19:f7:37:73:bd:29:51:81:43:16:
                    31:95:6a:23:01:57:5c:4a:07:41:c6:79:a8:6f:4e:
                    74:dc:33:39:73:ce:21:3c:10:34:52:6f:ef:97:4c:
                    55:8d:57:5d:fb:11:91:5b:85:0b:76:42:0f:7e:7a:
                    8d:40:23:cb:10:23:2b:97:50:6a:2b:77:3d:a5:52:
                    9d:f9:a8:fc:0a:1e:25:9b:01:d5:55:e8:71:97:70:
                    c2:29:a0:e2:af:f4:5e:0f:9a:d8:71:77:de:fe:10:
                    8e:10:02:11:23:f7:c8:47:b4:26:91:12:e6:8e:05:
                    21:be:df:ef:39:f3:f6:ed:74:bc:b1:c6:0c:8b:29:
                    4c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:CE:C1:97:6A:47:5A:3F:84:C6:E0:25:2B:00:1C:9D:D3:0F:83
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3138372e37332e3134342e302f32302d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:5f:b6:ec:15:f7:ae:67:57:bb:67:ea:38:45:9e:4b:8b:17:
         f7:45:28:e5:ab:dd:0d:01:55:6b:d5:b5:aa:b3:5e:7d:a9:12:
         9d:7f:fe:b4:64:56:12:9e:60:49:2f:ef:ee:77:2f:f8:ff:6e:
         0a:39:52:79:ba:46:9f:80:a8:3a:07:39:8d:ec:7a:75:5a:e4:
         a2:44:8e:02:58:7f:2f:1e:d7:40:5b:c5:4d:0b:eb:e7:a1:26:
         3c:75:0a:0b:7c:e3:2b:4f:2a:f8:6a:b2:c4:af:e2:1e:2d:67:
         01:a7:32:be:9f:f2:0a:bf:41:73:93:3b:9d:ca:70:37:42:a7:
         ac:da:04:0c:ac:53:24:61:ca:cf:ae:31:72:69:98:4b:f0:c5:
         a9:d9:bc:5a:67:70:fb:59:7d:4e:08:39:2f:05:32:fe:56:dd:
         23:02:56:c0:c4:00:74:3f:21:54:d5:fa:3a:36:27:13:28:a9:
         10:df:c2:f3:b0:c9:be:cb:c3:55:97:e4:47:22:ca:2b:b4:1d:
         bf:b9:b1:31:f5:da:86:00:1d:59:ef:f4:d9:98:50:bb:4c:af:
         fe:98:a9:73:12:75:35:63:d6:65:65:6b:6c:60:90:bb:6b:51:
         ff:bd:f1:67:e1:ee:96:d9:f7:21:8d:11:7e:e2:b0:e6:c0:ca:
         5b:36:7b:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUT9I5I+OjyDKcy35jrGfmKDeh1SEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0Njk5REUwNUZBMDExNEQ5RUJEOTY1N0E0QUM2NDZG
MDYwMUJCMTAeFw0yNjA1MTExNzQzMDhaFw0yNzA1MTAxNzQ4MDhaMDMxMTAvBgNV
BAMTKDZFNjJDRUMxOTc2QTQ3NUEzRjg0QzZFMDI1MkIwMDFDOUREMzBGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K6IU3DuYN9uq+NOaSec8YR7W
wEcXi00vDlfw3Zbnso56XJTfAlHDaeU/XQzbeGwEI2JXgWVJe7r0C9mEbFNhTRgq
2WelCDi4LgucdzNEPXNN3n1uY35PtseueRWp/eZvIeKMza8TS5BQVWeslpqJmcCQ
g+uuvsogE0ZCGfc3c70pUYFDFjGVaiMBV1xKB0HGeahvTnTcMzlzziE8EDRSb++X
TFWNV137EZFbhQt2Qg9+eo1AI8sQIyuXUGordz2lUp35qPwKHiWbAdVV6HGXcMIp
oOKv9F4Pmthxd97+EI4QAhEj98hHtCaREuaOBSG+3+858/btdLyxxgyLKUyJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbmLOwZdqR1o/hMbgJSsAHJ3TD4MwHwYDVR0j
BBgwFoAUE0aZ3gX6ARTZ69llekrGRvBgG7EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dFQUZOS1lERkpSdWtuZW1QWTk1clZSYWJSNzZ5V1pxVFhVSjN5NkFk
N1QvMC8xMzQ2OTlERTA1RkEwMTE0RDlFQkQ5NjU3QTRBQzY0NkYwNjAxQkIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEzNDY5OURFMDVGQTAxMTRE
OUVCRDk2NTdBNEFDNjQ2RjA2MDFCQjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXRUFGTktZREZKUnVrbmVtUFk5NXJWUmFiUjc2eVdacVRYVUozeTZBZDdULzAv
MzEzODM3MmUzNzMzMmUzMTM0MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7SZAwDQYJKoZIhvcNAQELBQADggEBAJRftuwV
965nV7tn6jhFnkuLF/dFKOWr3Q0BVWvVtaqzXn2pEp1//rRkVhKeYEkv7+53L/j/
bgo5Unm6Rp+AqDoHOY3senVa5KJEjgJYfy8e10BbxU0L6+ehJjx1Cgt84ytPKvhq
ssSv4h4tZwGnMr6f8gq/QXOTO53KcDdCp6zaBAysUyRhys+uMXJpmEvwxanZvFpn
cPtZfU4IOS8FMv5W3SMCVsDEAHQ/IVTV+jo2JxMoqRDfwvOwyb7Lw1WX5Eciyiu0
Hb+5sTH12oYAHVnv9NmYULtMr/6YqXMSdTVj1mVla2xgkLtrUf+98Wfh7pbZ9yGN
EX7isObAyls2exM=
-----END CERTIFICATE-----
Generated at Wed May 13 17:33:37 2026 by rpki-client