Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/3138372e302e33322e302f32322d3234203d3e20323730363034.roa
File:                     3138372e302e33322e302f32322d3234203d3e20323730363034.roa (raw, json)
Hash identifier:          NrUdX5oefPkIfeVu43Wpi9J7WVVO5jj5Zm2S81Sa7/c=
Subject key identifier:   FA:37:47:0A:21:C6:C0:5D:AD:74:53:F3:01:C4:7F:D5:F1:ED:FB:34
Certificate issuer:       /CN=275FC0A044B8CD48293C24A67DA64C8E18845376
Certificate serial:       38BE36826AD4B11BA10FFF8A6D5A66EA29BD284D
Authority key identifier: 27:5F:C0:A0:44:B8:CD:48:29:3C:24:A6:7D:A6:4C:8E:18:84:53:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/3138372e302e33322e302f32322d3234203d3e20323730363034.roa
Signing time:             Tue 05 May 2026 19:04:32 +0000
ROA not before:           Tue 05 May 2026 18:59:32 +0000
ROA not after:            Tue 04 May 2027 19:04:32 +0000
asID:                     270604
IP address blocks:        187.0.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.crl
                          rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:36:82:6a:d4:b1:1b:a1:0f:ff:8a:6d:5a:66:ea:29:bd:28:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275FC0A044B8CD48293C24A67DA64C8E18845376
        Validity
            Not Before: May  5 18:59:32 2026 GMT
            Not After : May  4 19:04:32 2027 GMT
        Subject: CN=FA37470A21C6C05DAD7453F301C47FD5F1EDFB34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:b3:d5:2e:a4:8f:27:ac:fa:5b:99:03:b2:
                    30:28:bc:a7:ff:bb:d4:da:b7:fb:58:5b:56:21:4b:
                    45:23:a7:7a:85:82:05:c2:20:6e:2b:f2:4a:53:31:
                    ab:7d:88:25:f6:2c:27:c0:7f:9c:06:c1:13:e2:f8:
                    60:7d:e3:14:f2:8a:4e:03:0e:64:7e:19:96:38:cd:
                    10:ca:56:a1:5d:aa:e1:58:19:ae:d2:bc:8b:48:78:
                    5e:3c:5a:c1:3c:9c:17:36:c7:e4:7d:7b:ae:e3:02:
                    40:5f:1e:2a:4e:39:3f:8d:4d:3c:ed:5a:f1:d7:50:
                    ea:50:22:56:29:e7:54:48:48:f3:e5:f4:eb:2b:59:
                    d7:13:93:45:94:ca:3a:40:d4:97:0b:49:dc:50:4f:
                    df:0a:b7:72:3c:1f:52:82:35:6a:9e:e5:02:cf:4f:
                    88:25:1c:61:99:00:0f:08:ff:77:7c:4b:f5:eb:d5:
                    d7:e3:e4:6c:97:f2:a0:67:90:66:c9:ce:76:7c:58:
                    cb:f6:45:ae:b7:be:c1:10:bd:dc:db:cc:d8:2e:ec:
                    08:6a:40:96:09:da:ad:61:fd:5c:29:74:d9:2a:9e:
                    01:e0:4e:e5:88:3c:dc:f8:f2:a9:25:69:b8:a1:80:
                    73:08:c4:63:39:6d:2e:94:43:dd:c1:ee:fd:e8:15:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:47:0A:21:C6:C0:5D:AD:74:53:F3:01:C4:7F:D5:F1:ED:FB:34
            X509v3 Authority Key Identifier:
                keyid:27:5F:C0:A0:44:B8:CD:48:29:3C:24:A6:7D:A6:4C:8E:18:84:53:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/275FC0A044B8CD48293C24A67DA64C8E18845376.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/275FC0A044B8CD48293C24A67DA64C8E18845376.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EdoMueaEPvDvCkQHLXPjev7PT8Pix3i3E5LtMuSXHDS/0/3138372e302e33322e302f32322d3234203d3e20323730363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:88:3d:b8:6f:01:f1:ae:09:b6:3e:4e:be:18:43:74:d2:55:
         0a:e8:3e:b7:69:44:5d:f0:b6:49:09:cb:62:e8:30:0f:9c:99:
         37:23:57:a7:47:c6:ad:f1:2b:13:4a:d5:33:63:27:fb:7c:c1:
         58:6e:97:08:9e:05:0a:b0:e8:d9:66:4b:90:45:24:55:c1:80:
         68:e6:08:a1:91:3c:11:53:17:1b:64:83:5f:07:d2:e5:66:70:
         0d:d7:59:a4:2c:dd:9e:4b:45:4d:45:7c:d8:a1:5d:c3:9f:b2:
         bd:db:f1:36:08:37:a6:65:76:84:b1:1c:98:34:e3:30:19:ca:
         cc:fb:17:c8:84:25:e2:36:6f:76:fa:ac:9f:df:ed:b4:47:99:
         8b:b3:01:cb:19:cd:81:2b:52:10:a6:79:45:48:91:b0:7f:37:
         3e:b7:6c:48:c1:a0:34:43:36:c2:7b:3f:7a:0c:17:2f:0a:77:
         cb:c2:31:be:a5:06:b7:09:b4:17:ca:ec:94:ba:b7:7c:82:1c:
         83:2b:b9:e9:a6:39:f7:81:12:65:73:51:d8:1c:83:0f:63:0a:
         94:8d:35:62:95:54:24:d9:18:10:91:05:1c:76:ce:52:2f:72:
         4c:ea:34:0f:77:70:38:1c:a1:27:ce:85:8a:52:7e:4c:c0:5b:
         4c:f7:da:dd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOL42gmrUsRuhD/+KbVpm6im9KE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc1RkMwQTA0NEI4Q0Q0ODI5M0MyNEE2N0RBNjRDOEUx
ODg0NTM3NjAeFw0yNjA1MDUxODU5MzJaFw0yNzA1MDQxOTA0MzJaMDMxMTAvBgNV
BAMTKEZBMzc0NzBBMjFDNkMwNURBRDc0NTNGMzAxQzQ3RkQ1RjFFREZCMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenLPVLqSPJ6z6W5kDsjAovKf/
u9Tat/tYW1YhS0Ujp3qFggXCIG4r8kpTMat9iCX2LCfAf5wGwRPi+GB94xTyik4D
DmR+GZY4zRDKVqFdquFYGa7SvItIeF48WsE8nBc2x+R9e67jAkBfHipOOT+NTTzt
WvHXUOpQIlYp51RISPPl9OsrWdcTk0WUyjpA1JcLSdxQT98Kt3I8H1KCNWqe5QLP
T4glHGGZAA8I/3d8S/Xr1dfj5GyX8qBnkGbJznZ8WMv2Ra63vsEQvdzbzNgu7Ahq
QJYJ2q1h/VwpdNkqngHgTuWIPNz48qklabihgHMIxGM5bS6UQ93B7v3oFfZDAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+jdHCiHGwF2tdFPzAcR/1fHt+zQwHwYDVR0j
BBgwFoAUJ1/AoES4zUgpPCSmfaZMjhiEU3YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEVkb011ZWFFUHZEdkNrUUhMWFBqZXY3UFQ4UGl4M2kzRTVMdE11U1hI
RFMvMC8yNzVGQzBBMDQ0QjhDRDQ4MjkzQzI0QTY3REE2NEM4RTE4ODQ1Mzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI3NUZDMEEwNDRCOENENDgy
OTNDMjRBNjdEQTY0QzhFMTg4NDUzNzYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRFZG9NdWVhRVB2RHZDa1FITFhQamV2N1BUOFBpeDNpM0U1THRNdVNYSERTLzAv
MzEzODM3MmUzMDJlMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDM2
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArsAIDANBgkqhkiG9w0BAQsFAAOCAQEAmYg9uG8B8a4J
tj5OvhhDdNJVCug+t2lEXfC2SQnLYugwD5yZNyNXp0fGrfErE0rVM2Mn+3zBWG6X
CJ4FCrDo2WZLkEUkVcGAaOYIoZE8EVMXG2SDXwfS5WZwDddZpCzdnktFTUV82KFd
w5+yvdvxNgg3pmV2hLEcmDTjMBnKzPsXyIQl4jZvdvqsn9/ttEeZi7MByxnNgStS
EKZ5RUiRsH83PrdsSMGgNEM2wns/egwXLwp3y8IxvqUGtwm0F8rslLq3fIIcgyu5
6aY594ESZXNR2ByDD2MKlI01YpVUJNkYEJEFHHbOUi9yTOo0D3dwOByhJ86FilJ+
TMBbTPfa3Q==
-----END CERTIFICATE-----
Generated at Wed May 13 18:11:42 2026 by rpki-client