Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/3139302e38392e39322e302f32322d3332203d3e20323730333634.roa
File:                     3139302e38392e39322e302f32322d3332203d3e20323730333634.roa (raw, json)
Hash identifier:          eTiaMS/IJooXRg8QzLTd0dxENCHjyZQbZhYHDc+tj2c=
Subject key identifier:   E2:0E:13:D0:18:51:DD:F7:B5:74:D7:56:A2:C8:52:51:9A:61:A1:82
Certificate issuer:       /CN=6D2D6DB3FE25E31221267BBCA8DE121F01F221AF
Certificate serial:       010D6BD375D62F6D7922AD5700F83336A744E822
Authority key identifier: 6D:2D:6D:B3:FE:25:E3:12:21:26:7B:BC:A8:DE:12:1F:01:F2:21:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/3139302e38392e39322e302f32322d3332203d3e20323730333634.roa
Signing time:             Thu 23 Apr 2026 17:23:19 +0000
ROA not before:           Thu 23 Apr 2026 17:18:19 +0000
ROA not after:            Thu 22 Apr 2027 17:23:19 +0000
asID:                     270364
IP address blocks:        190.89.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.crl
                          rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:6b:d3:75:d6:2f:6d:79:22:ad:57:00:f8:33:36:a7:44:e8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2D6DB3FE25E31221267BBCA8DE121F01F221AF
        Validity
            Not Before: Apr 23 17:18:19 2026 GMT
            Not After : Apr 22 17:23:19 2027 GMT
        Subject: CN=E20E13D01851DDF7B574D756A2C852519A61A182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e0:a2:9c:26:68:79:7a:7f:db:ba:96:97:8f:
                    9d:68:2f:54:fa:79:fd:e7:03:57:65:87:fe:ed:b0:
                    1a:45:46:b7:10:24:2f:1e:fc:b8:4d:71:0c:13:5a:
                    a2:3a:27:17:b1:b6:4f:f1:70:d2:a9:12:63:78:55:
                    66:23:a8:07:76:3f:8d:80:f8:94:01:7b:70:10:9a:
                    f2:f1:8b:6e:27:19:39:c8:82:45:1a:5e:6f:70:46:
                    83:38:86:d0:d5:20:ae:0c:92:e5:fa:30:81:b8:a3:
                    4c:e8:ed:10:67:40:b3:d8:35:97:88:52:11:d0:45:
                    cc:da:25:0b:20:9e:63:fb:d1:8d:ac:0d:fa:5e:49:
                    c2:bc:a3:fe:c7:8b:67:9e:b3:9a:65:6d:af:d4:4e:
                    02:f9:44:b0:3f:74:dc:f0:1d:71:1c:e7:1b:c4:a6:
                    85:58:49:7a:0f:03:5c:3c:25:f6:43:6c:d5:ef:36:
                    df:34:d8:92:b2:b2:b0:89:61:ca:12:9c:9b:00:55:
                    db:d5:84:ad:c9:41:4d:28:91:05:a2:98:d5:ef:bb:
                    57:17:e3:c9:70:11:82:6b:02:66:af:dc:03:f3:1a:
                    93:77:c2:85:1c:cf:e6:62:2c:df:f6:03:9d:75:cb:
                    e3:10:40:5a:d1:40:05:03:23:d2:0e:86:64:25:91:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0E:13:D0:18:51:DD:F7:B5:74:D7:56:A2:C8:52:51:9A:61:A1:82
            X509v3 Authority Key Identifier:
                keyid:6D:2D:6D:B3:FE:25:E3:12:21:26:7B:BC:A8:DE:12:1F:01:F2:21:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D2D6DB3FE25E31221267BBCA8DE121F01F221AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5huD5JRtggg4v1YZnZsskaZuJ3JBBRn9Euf9ZN85T17w/0/3139302e38392e39322e302f32322d3332203d3e20323730333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:eb:0a:e5:96:ec:6c:ee:00:54:3d:07:56:76:93:7b:a7:c4:
         53:b2:67:a8:72:4d:2a:b8:76:78:f3:6a:40:b7:bb:f4:cb:36:
         c3:8d:0e:27:5f:42:0a:5f:0b:53:a8:6d:6c:78:c7:d3:43:69:
         da:01:6f:83:61:62:8d:c4:2b:48:86:72:3b:ae:2a:d2:81:18:
         68:96:35:9c:2f:e3:d4:88:cc:43:ff:3c:15:f9:f4:b4:e1:0b:
         5c:41:78:1d:ab:64:c9:a5:00:aa:4e:a7:3f:d6:4a:7d:9e:77:
         73:39:b0:4b:20:95:ec:72:5c:dc:77:34:ad:81:47:9c:21:cf:
         9c:c9:8b:b5:ea:a6:2e:cf:6d:86:3f:f9:d8:6b:ee:5f:ad:69:
         d7:8d:f7:ba:f5:03:ea:c2:53:b6:12:b7:0f:9e:64:28:d7:79:
         36:e4:41:8a:39:f5:16:5b:6f:6c:ea:b2:77:01:24:a5:1d:8e:
         ef:66:95:af:fb:4e:c4:14:d7:c2:89:27:55:9a:32:53:d0:90:
         54:4c:11:21:3e:2a:86:1f:56:a1:20:cb:6f:6f:dd:2e:0a:30:
         cc:02:da:1f:67:26:ba:40:b7:08:d5:8a:2a:40:82:7d:a6:6d:
         c5:f7:91:a1:32:65:5b:6c:31:3a:7f:cd:06:21:ed:b5:57:86:
         ee:e9:db:95
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAQ1r03XWL215Iq1XAPgzNqdE6CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyRDZEQjNGRTI1RTMxMjIxMjY3QkJDQThERTEyMUYw
MUYyMjFBRjAeFw0yNjA0MjMxNzE4MTlaFw0yNzA0MjIxNzIzMTlaMDMxMTAvBgNV
BAMTKEUyMEUxM0QwMTg1MURERjdCNTc0RDc1NkEyQzg1MjUxOUE2MUExODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4KKcJmh5en/bupaXj51oL1T6
ef3nA1dlh/7tsBpFRrcQJC8e/LhNcQwTWqI6Jxextk/xcNKpEmN4VWYjqAd2P42A
+JQBe3AQmvLxi24nGTnIgkUaXm9wRoM4htDVIK4MkuX6MIG4o0zo7RBnQLPYNZeI
UhHQRczaJQsgnmP70Y2sDfpeScK8o/7Hi2ees5plba/UTgL5RLA/dNzwHXEc5xvE
poVYSXoPA1w8JfZDbNXvNt802JKysrCJYcoSnJsAVdvVhK3JQU0okQWimNXvu1cX
48lwEYJrAmav3APzGpN3woUcz+ZiLN/2A511y+MQQFrRQAUDI9IOhmQlkb2nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4g4T0BhR3fe1dNdWoshSUZphoYIwHwYDVR0j
BBgwFoAUbS1ts/4l4xIhJnu8qN4SHwHyIa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWh1RDVKUnRnZ2c0djFZWm5ac3NrYVp1SjNKQkJSbjlFdWY5Wk44NVQx
N3cvMC82RDJENkRCM0ZFMjVFMzEyMjEyNjdCQkNBOERFMTIxRjAxRjIyMUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZEMkQ2REIzRkUyNUUzMTIy
MTI2N0JCQ0E4REUxMjFGMDFGMjIxQUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVodUQ1SlJ0Z2dnNHYxWVpuWnNza2FadUozSkJCUm45RXVmOVpOODVUMTd3LzAv
MzEzOTMwMmUzODM5MmUzOTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMw
MzMzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCvllcMA0GCSqGSIb3DQEBCwUAA4IBAQAC6wrlluxs
7gBUPQdWdpN7p8RTsmeock0quHZ482pAt7v0yzbDjQ4nX0IKXwtTqG1seMfTQ2na
AW+DYWKNxCtIhnI7rirSgRholjWcL+PUiMxD/zwV+fS04QtcQXgdq2TJpQCqTqc/
1kp9nndzObBLIJXsclzcdzStgUecIc+cyYu16qYuz22GP/nYa+5frWnXjfe69QPq
wlO2ErcPnmQo13k25EGKOfUWW29s6rJ3ASSlHY7vZpWv+07EFNfCiSdVmjJT0JBU
TBEhPiqGH1ahIMtvb90uCjDMAtofZya6QLcI1YoqQIJ9pm3F95GhMmVbbDE6f80G
Ie21V4bu6duV
-----END CERTIFICATE-----
Generated at Wed May 13 18:22:17 2026 by rpki-client