Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
File:                     3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa (raw, json)
Hash identifier:          U1z9GBsMLia7AJuRe8psTO9HJQMKrvcbL3bbgj/JuDo=
Subject key identifier:   3D:76:BD:EC:74:63:BF:19:31:B1:A5:81:2B:C5:18:5F:6E:6D:DF:08
Certificate issuer:       /CN=A9126E57F2C13B22CA90CD05B286B7E7D433ADAB
Certificate serial:       41141BAD03D2F079B080B2AFF6156E2DD7AA4B38
Authority key identifier: A9:12:6E:57:F2:C1:3B:22:CA:90:CD:05:B2:86:B7:E7:D4:33:AD:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa
Signing time:             Tue 03 Mar 2026 01:19:49 +0000
ROA not before:           Tue 03 Mar 2026 01:14:49 +0000
ROA not after:            Tue 02 Mar 2027 01:19:49 +0000
asID:                     270962
IP address blocks:        187.84.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.crl
                          rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 10:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:14:1b:ad:03:d2:f0:79:b0:80:b2:af:f6:15:6e:2d:d7:aa:4b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126E57F2C13B22CA90CD05B286B7E7D433ADAB
        Validity
            Not Before: Mar  3 01:14:49 2026 GMT
            Not After : Mar  2 01:19:49 2027 GMT
        Subject: CN=3D76BDEC7463BF1931B1A5812BC5185F6E6DDF08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:98:3c:67:56:44:09:d7:26:b0:e4:30:4a:
                    6f:cb:3b:19:f8:7a:07:82:b0:c2:b5:98:ca:d7:33:
                    87:31:f2:00:aa:b0:67:39:4e:08:e6:b4:a7:65:0f:
                    04:e1:19:64:2e:05:e7:d8:e0:5f:33:0f:5e:90:49:
                    90:92:04:4b:7d:33:d7:80:49:1a:d1:93:81:ff:3d:
                    b5:48:f0:74:ec:18:c5:04:ae:cc:b8:20:9e:77:1e:
                    ea:ad:65:2c:6b:33:6f:30:c7:6d:90:75:92:d8:cd:
                    4a:c5:9c:2f:55:7a:87:1e:e0:05:13:35:0e:3c:71:
                    a4:31:0f:34:c1:4a:f6:b5:e3:3a:6d:d0:8e:7e:eb:
                    78:39:dd:f0:82:2e:c5:45:9d:fd:a9:33:2e:c5:65:
                    bf:a8:77:01:a0:27:69:6d:9f:4e:56:8f:26:27:7a:
                    23:72:b3:3c:2c:fe:b1:4e:0f:b4:0c:fe:1a:54:83:
                    8f:79:30:8c:e8:46:0d:25:1b:c7:4a:6c:8d:bd:17:
                    fc:88:3a:58:72:38:30:c4:89:f7:7a:14:54:87:2f:
                    cb:c2:b3:00:bb:ea:fa:1f:dd:7f:2f:93:72:cc:f0:
                    4d:be:8e:56:36:8d:ae:e3:46:bb:ac:82:f4:54:bb:
                    44:66:86:11:b7:f1:4e:7d:1e:25:ef:10:18:6f:b1:
                    9b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:76:BD:EC:74:63:BF:19:31:B1:A5:81:2B:C5:18:5F:6E:6D:DF:08
            X509v3 Authority Key Identifier:
                keyid:A9:12:6E:57:F2:C1:3B:22:CA:90:CD:05:B2:86:B7:E7:D4:33:AD:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9126E57F2C13B22CA90CD05B286B7E7D433ADAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/3138372e38342e3132302e302f32322d3332203d3e20323730393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:fd:fd:91:d6:e8:02:0c:fd:fb:b4:ca:89:48:be:fe:4e:
         c6:91:10:ca:e0:ff:ec:10:9b:8d:fd:cd:ad:f9:96:07:d1:9c:
         b5:fa:e4:6f:9b:11:5e:cb:ca:00:f8:87:da:9a:2f:f1:63:b9:
         80:07:0d:13:f5:f6:84:bf:27:b1:b0:b0:0a:21:31:57:e1:3d:
         d2:3f:02:1a:01:fb:24:85:8a:a6:c7:fe:e4:d1:7c:dd:19:21:
         74:03:cd:97:8e:65:5c:73:dd:07:38:17:24:43:44:45:4c:dd:
         cb:93:a4:9a:e4:17:be:34:de:ab:d2:d7:d6:12:33:aa:f7:00:
         5f:56:4d:db:a7:33:e1:15:7c:45:87:47:f6:fc:25:7a:b4:af:
         91:2d:34:96:61:88:2b:95:54:85:74:c4:29:50:52:4d:3e:6f:
         f7:0b:4a:4e:3a:f1:5a:7e:41:30:ac:ef:47:77:45:73:85:8d:
         01:59:a9:55:2b:b0:33:19:b7:78:3d:ed:e3:f8:b6:08:24:45:
         6f:c1:63:a2:e1:58:e1:ec:4c:ac:5f:8d:7e:15:52:1b:f5:17:
         7a:ed:73:1c:18:98:ca:0d:44:37:a5:4a:9e:21:a1:db:93:5e:
         70:5c:5b:88:3e:05:51:29:24:11:45:11:40:26:d2:55:a3:a2:
         dc:ae:4b:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQRQbrQPS8HmwgLKv9hVuLdeqSzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTkxMjZFNTdGMkMxM0IyMkNBOTBDRDA1QjI4NkI3RTdE
NDMzQURBQjAeFw0yNjAzMDMwMTE0NDlaFw0yNzAzMDIwMTE5NDlaMDMxMTAvBgNV
BAMTKDNENzZCREVDNzQ2M0JGMTkzMUIxQTU4MTJCQzUxODVGNkU2RERGMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhT5g8Z1ZECdcmsOQwSm/LOxn4
egeCsMK1mMrXM4cx8gCqsGc5TgjmtKdlDwThGWQuBefY4F8zD16QSZCSBEt9M9eA
SRrRk4H/PbVI8HTsGMUErsy4IJ53HuqtZSxrM28wx22QdZLYzUrFnC9Veoce4AUT
NQ48caQxDzTBSva14zpt0I5+63g53fCCLsVFnf2pMy7FZb+odwGgJ2ltn05WjyYn
eiNyszws/rFOD7QM/hpUg495MIzoRg0lG8dKbI29F/yIOlhyODDEifd6FFSHL8vC
swC76vof3X8vk3LM8E2+jlY2ja7jRrusgvRUu0RmhhG38U59HiXvEBhvsZuVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPXa97HRjvxkxsaWBK8UYX25t3wgwHwYDVR0j
BBgwFoAUqRJuV/LBOyLKkM0Fsoa359QzraswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNW5pdDNORFBLSGpINzFxTnlhZ1RWN3htR2M3ZUpXZEZFQ0Q3WTdXTHk3
MTUvMC9BOTEyNkU1N0YyQzEzQjIyQ0E5MENEMDVCMjg2QjdFN0Q0MzNBREFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5MTI2RTU3RjJDMTNCMjJD
QTkwQ0QwNUIyODZCN0U3RDQzM0FEQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVuaXQzTkRQS0hqSDcxcU55YWdUVjd4bUdjN2VKV2RGRUNEN1k3V0x5NzE1LzAv
MzEzODM3MmUzODM0MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7VHgwDQYJKoZIhvcNAQELBQADggEBADHw/f2R
1ugCDP37tMqJSL7+TsaREMrg/+wQm439za35lgfRnLX65G+bEV7LygD4h9qaL/Fj
uYAHDRP19oS/J7GwsAohMVfhPdI/AhoB+ySFiqbH/uTRfN0ZIXQDzZeOZVxz3Qc4
FyRDREVM3cuTpJrkF7403qvS19YSM6r3AF9WTdunM+EVfEWHR/b8JXq0r5EtNJZh
iCuVVIV0xClQUk0+b/cLSk468Vp+QTCs70d3RXOFjQFZqVUrsDMZt3g97eP4tggk
RW/BY6LhWOHsTKxfjX4VUhv1F3rtcxwYmMoNRDelSp4hoduTXnBcW4g+BVEpJBFF
EUAm0lWjotyuSzc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:16:40 2026 by rpki-client