Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa (raw, json)
Hash identifier:          4ZlPNxelWiFFTA0KwGp3vzYll948VHNG7kjorTioRNk=
Subject key identifier:   84:FB:B9:DF:D7:5E:DD:A5:C8:FD:9E:EB:AA:51:CB:74:F0:13:47:A6
Certificate issuer:       /CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Certificate serial:       6D0F7B5F34B774C0E70B2183F0C2D0A544B52884
Authority key identifier: CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa
Signing time:             Thu 19 Mar 2026 19:44:34 +0000
ROA not before:           Thu 19 Mar 2026 19:39:34 +0000
ROA not after:            Thu 18 Mar 2027 19:44:34 +0000
asID:                     267530
IP address blocks:        201.182.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0f:7b:5f:34:b7:74:c0:e7:0b:21:83:f0:c2:d0:a5:44:b5:28:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
        Validity
            Not Before: Mar 19 19:39:34 2026 GMT
            Not After : Mar 18 19:44:34 2027 GMT
        Subject: CN=84FBB9DFD75EDDA5C8FD9EEBAA51CB74F01347A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:23:8e:a2:1f:9b:4f:2e:0a:80:75:92:d4:40:
                    82:0b:b4:8e:66:ed:ce:a5:dc:9d:3d:c7:bf:aa:86:
                    17:0c:10:6a:95:54:e0:86:b0:2e:91:bf:10:57:df:
                    18:0c:51:78:74:4a:29:65:e0:14:bc:5c:68:61:32:
                    f5:80:dc:38:fa:f5:86:cb:aa:c1:08:5a:e7:33:75:
                    9a:3a:17:ca:16:6a:79:3b:dd:5b:ee:bf:91:56:46:
                    7b:6f:28:61:3f:d8:17:44:3a:67:11:d2:6e:1d:78:
                    8d:d5:a9:d1:0f:55:c8:5a:c1:dd:87:44:15:ca:b1:
                    7b:ec:8c:bc:5a:82:23:84:97:8d:d7:09:8a:7e:f1:
                    d4:b9:c7:cc:01:63:e1:07:4d:d8:7a:7d:41:ec:c3:
                    c5:70:f9:d3:7a:31:2c:b3:83:4c:af:6b:07:9d:af:
                    0f:69:82:b6:4b:5c:1f:81:05:a1:4a:f7:29:ed:02:
                    3c:9f:01:2f:cd:1c:13:05:e2:ac:ea:93:9f:3d:7a:
                    75:c4:ed:3a:ba:46:00:7d:6a:e5:9f:b2:bd:ab:4a:
                    6c:d8:3d:d4:80:9f:30:29:1b:db:81:73:bc:b8:f3:
                    30:54:88:2d:d5:0e:6b:df:af:d7:e4:83:05:5e:57:
                    52:38:a9:a5:0c:f6:37:12:d3:fc:99:d8:ac:60:38:
                    d0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FB:B9:DF:D7:5E:DD:A5:C8:FD:9E:EB:AA:51:CB:74:F0:13:47:A6
            X509v3 Authority Key Identifier:
                keyid:CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32342d3234203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:9a:69:cb:94:e2:be:e6:e0:8e:e2:35:97:98:34:e9:4f:
         69:bb:a1:3c:99:34:f9:a2:71:fa:2a:55:ec:3e:29:40:22:c4:
         72:2f:86:32:fc:5c:be:12:50:19:bb:e9:cf:f9:e2:12:ca:f3:
         19:b0:52:65:f4:45:02:9f:ef:e0:67:67:73:b0:85:ff:03:0c:
         9b:3a:03:89:19:bd:5f:37:de:71:3b:74:69:c7:49:96:81:e2:
         87:d0:17:45:4f:8f:98:7b:8c:db:5d:2d:a5:f3:16:af:90:ea:
         ff:91:02:22:f0:77:77:65:9e:8c:9a:ea:bf:e5:d5:b5:ed:b2:
         62:78:8c:53:90:05:96:4d:7e:40:6f:f2:26:2d:33:f3:6c:d3:
         ba:c1:de:42:ac:2b:f6:04:03:e2:81:ae:6e:e9:4b:45:49:5b:
         51:ad:b2:d4:d0:c2:d9:2c:26:bd:6a:98:79:1a:91:ac:5d:87:
         ec:f2:44:41:65:58:b9:c7:ac:97:9c:15:25:f8:95:c9:4f:01:
         ba:c0:b0:0f:32:29:b6:40:87:f6:0b:a5:19:03:1a:0b:94:75:
         db:1c:15:1e:c3:d2:42:bb:36:b2:65:f4:ab:32:ec:fe:c5:5a:
         8c:5e:9e:3b:99:59:5a:10:d6:d1:5c:fc:43:35:6c:7b:3b:c2:
         ce:92:2e:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbQ97XzS3dMDnCyGD8MLQpUS1KIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ZBNEE3RjU5MEE5QTBFMjgxOUYxN0NGNEU3M0YzREM3
MDdGMjVBQTAeFw0yNjAzMTkxOTM5MzRaFw0yNzAzMTgxOTQ0MzRaMDMxMTAvBgNV
BAMTKDg0RkJCOURGRDc1RUREQTVDOEZEOUVFQkFBNTFDQjc0RjAxMzQ3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoI46iH5tPLgqAdZLUQIILtI5m
7c6l3J09x7+qhhcMEGqVVOCGsC6RvxBX3xgMUXh0Sill4BS8XGhhMvWA3Dj69YbL
qsEIWuczdZo6F8oWank73Vvuv5FWRntvKGE/2BdEOmcR0m4deI3VqdEPVchawd2H
RBXKsXvsjLxagiOEl43XCYp+8dS5x8wBY+EHTdh6fUHsw8Vw+dN6MSyzg0yvawed
rw9pgrZLXB+BBaFK9yntAjyfAS/NHBMF4qzqk589enXE7Tq6RgB9auWfsr2rSmzY
PdSAnzApG9uBc7y48zBUiC3VDmvfr9fkgwVeV1I4qaUM9jcS0/yZ2KxgONC3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhPu539de3aXI/Z7rqlHLdPATR6YwHwYDVR0j
BBgwFoAUz6Sn9ZCpoOKBnxfPTnPz3HB/JaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNThCQ0d2czZVQjZvNWoyaTE3MTJQNzhtVDIyWUxFUFZnakVuNUU0Mndr
ZFAvMC9DRkE0QTdGNTkwQTlBMEUyODE5RjE3Q0Y0RTczRjNEQzcwN0YyNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGQTRBN0Y1OTBBOUEwRTI4
MTlGMTdDRjRFNzNGM0RDNzA3RjI1QUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4QkNHdnM2VUI2bzVqMmkxNzEyUDc4bVQyMllMRVBWZ2pFbjVFNDJ3a2RQLzAv
MzIzMDMxMmUzMTM4MzIyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM1MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMm2wDANBgkqhkiG9w0BAQsFAAOCAQEAFq6a
acuU4r7m4I7iNZeYNOlPabuhPJk0+aJx+ipV7D4pQCLEci+GMvxcvhJQGbvpz/ni
EsrzGbBSZfRFAp/v4Gdnc7CF/wMMmzoDiRm9XzfecTt0acdJloHih9AXRU+PmHuM
210tpfMWr5Dq/5ECIvB3d2WejJrqv+XVte2yYniMU5AFlk1+QG/yJi0z82zTusHe
Qqwr9gQD4oGubulLRUlbUa2y1NDC2SwmvWqYeRqRrF2H7PJEQWVYucesl5wVJfiV
yU8BusCwDzIptkCH9gulGQMaC5R12xwVHsPSQrs2smX0qzLs/sVajF6eO5lZWhDW
0Vz8QzVsezvCzpIu+w==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:19:32 2026 by rpki-client