Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3133322e302f32322d3234203d3e20323730363331.roa
File:                     3138392e3132362e3133322e302f32322d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          F25w1wHE6OOfdxrc7JFQvL7kzCq9eZa4GLoV1M7RPsQ=
Subject key identifier:   BE:EA:08:03:15:6C:C7:83:94:85:13:1C:5F:D1:46:CA:10:44:FA:65
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       2234FD517FF04203DCD96F29114D38ADC3913E90
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3133322e302f32322d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:43 +0000
ROA not before:           Thu 27 Aug 2026 02:16:43 +0000
ROA not after:            Thu 26 Aug 2027 02:21:43 +0000
asID:                     270631
IP address blocks:        189.126.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:34:fd:51:7f:f0:42:03:dc:d9:6f:29:11:4d:38:ad:c3:91:3e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:43 2026 GMT
            Not After : Aug 26 02:21:43 2027 GMT
        Subject: CN=BEEA0803156CC7839485131C5FD146CA1044FA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b2:63:03:2e:ef:2c:bd:36:f6:ab:9a:a5:ee:
                    17:ee:ab:c9:9a:7a:0b:c8:ea:1b:c7:5f:0e:b3:04:
                    b7:6b:af:3f:f5:22:69:cc:06:6f:3b:b9:a4:8d:06:
                    b2:7d:8b:bf:71:b2:12:25:7d:71:64:00:34:9b:b9:
                    6c:a7:f9:e1:99:c0:5b:28:70:1c:8c:fa:73:ff:fc:
                    4d:97:b2:45:5b:48:9b:cc:2c:ea:6c:81:77:04:13:
                    d1:1f:51:c3:db:e0:61:2c:aa:d3:9d:af:1d:60:8b:
                    30:81:f0:9a:95:5e:f7:8e:83:ad:f4:1f:05:5a:98:
                    b3:f2:10:51:65:87:ad:f9:f9:70:88:e9:29:fd:28:
                    97:18:8b:dc:04:65:be:8e:38:e3:56:33:d6:23:97:
                    8e:bb:a7:c0:bc:da:4f:6d:26:86:ac:cb:d3:76:60:
                    0c:1d:99:18:b3:46:e3:b3:13:54:28:53:b1:a5:54:
                    43:0e:77:7d:fe:6b:91:da:0f:03:0a:30:17:d4:af:
                    04:2c:8d:0c:c3:ad:e8:cd:01:4d:36:80:b4:9a:74:
                    71:ad:c4:1e:da:9a:0a:08:72:18:f6:a0:78:ea:09:
                    48:a6:2e:b4:cb:e8:53:8a:98:4c:bb:52:d6:24:6c:
                    73:a9:2d:80:96:2a:45:5d:85:b9:bd:e0:5a:eb:7e:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EA:08:03:15:6C:C7:83:94:85:13:1C:5F:D1:46:CA:10:44:FA:65
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3133322e302f32322d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:de:d1:a5:14:58:79:65:29:c2:0c:fc:3b:b3:e8:2b:03:80:
         0d:99:c4:55:f8:b9:42:d3:2a:05:c7:5e:54:06:1a:13:d0:7b:
         71:0a:fc:a8:8e:fb:14:19:01:19:a7:a0:29:86:a3:a1:70:88:
         35:94:50:d5:66:7a:83:77:39:79:ec:d1:d2:bc:cd:9e:b4:bb:
         ed:ba:8e:34:15:1c:09:54:d6:99:ae:ee:f3:6d:0f:96:53:41:
         34:ba:e9:b6:48:98:27:36:3a:97:00:28:bc:f4:32:d5:88:ee:
         bf:38:63:44:1e:13:ee:5c:bb:f4:37:45:00:af:26:20:46:01:
         8e:81:c7:f3:3a:74:3c:8e:39:ea:6b:ec:14:bd:be:97:6f:70:
         f1:00:af:8c:12:a7:3b:0f:5c:85:9d:49:cf:b0:8e:54:54:61:
         ec:bd:e3:ba:e4:8a:24:96:b4:bf:f8:57:3c:09:78:16:09:6d:
         c4:ad:06:67:26:e3:45:09:48:a2:3e:f2:c5:07:b3:5e:47:fd:
         a2:bd:ee:4d:4f:93:bc:e5:8b:6b:46:3b:4a:6b:22:26:ec:e8:
         48:c0:65:3c:33:1f:a3:67:8c:35:df:42:fe:5d:9c:a6:1e:a5:
         6e:45:51:d1:b0:d7:66:12:b9:0e:2c:79:18:59:07:e5:93:d2:
         cf:15:ca:9b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIjT9UX/wQgPc2W8pEU04rcORPpAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGOTBCMDhBM0U5RjAyRUFDOUUxNjVDMUIwRDNEQ0VC
MzhDQzU2MjAeFw0yNjA4MjcwMjE2NDNaFw0yNzA4MjYwMjIxNDNaMDMxMTAvBgNV
BAMTKEJFRUEwODAzMTU2Q0M3ODM5NDg1MTMxQzVGRDE0NkNBMTA0NEZBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQsmMDLu8svTb2q5ql7hfuq8ma
egvI6hvHXw6zBLdrrz/1ImnMBm87uaSNBrJ9i79xshIlfXFkADSbuWyn+eGZwFso
cByM+nP//E2XskVbSJvMLOpsgXcEE9EfUcPb4GEsqtOdrx1gizCB8JqVXveOg630
HwVamLPyEFFlh635+XCI6Sn9KJcYi9wEZb6OOONWM9Yjl467p8C82k9tJoasy9N2
YAwdmRizRuOzE1QoU7GlVEMOd33+a5HaDwMKMBfUrwQsjQzDrejNAU02gLSadHGt
xB7amgoIchj2oHjqCUimLrTL6FOKmEy7UtYkbHOpLYCWKkVdhbm94FrrfkJ1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvuoIAxVsx4OUhRMcX9FGyhBE+mUwHwYDVR0j
BBgwFoAU8PkLCKPp8C6snhZcGw09zrOMxWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1rVUtzTjc5QWJwb1VhV0x1Q2Q3ZTJEWTlyc2hOTjY5TGtIb1h6cFU4
ejEvMC9GMEY5MEIwOEEzRTlGMDJFQUM5RTE2NUMxQjBEM0RDRUIzOENDNTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRjkwQjA4QTNFOUYwMkVB
QzlFMTY1QzFCMEQzRENFQjM4Q0M1NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNa1VLc043OUFicG9VYVdMdUNkN2UyRFk5cnNoTk42OUxrSG9YenBVOHoxLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr1+hDANBgkqhkiG9w0BAQsFAAOCAQEAV97R
pRRYeWUpwgz8O7PoKwOADZnEVfi5QtMqBcdeVAYaE9B7cQr8qI77FBkBGaegKYaj
oXCINZRQ1WZ6g3c5eezR0rzNnrS77bqONBUcCVTWma7u820PllNBNLrptkiYJzY6
lwAovPQy1YjuvzhjRB4T7ly79DdFAK8mIEYBjoHH8zp0PI456mvsFL2+l29w8QCv
jBKnOw9chZ1Jz7COVFRh7L3juuSKJJa0v/hXPAl4FgltxK0GZybjRQlIoj7yxQez
Xkf9or3uTU+TvOWLa0Y7SmsiJuzoSMBlPDMfo2eMNd9C/l2cph6lbkVR0bDXZhK5
Dix5GFkH5ZPSzxXKmw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:42 2026 by rpki-client