Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa
File:                     3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa (raw, json)
Hash identifier:          kOF461z6pBhY4iaBiVYKzbstXs1b8gruj1GF3l5aH5g=
Subject key identifier:   0A:BD:1E:5B:44:39:6D:CA:60:0F:C6:91:88:CF:D7:16:C0:00:EA:83
Certificate issuer:       /CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
Certificate serial:       60FD55B3261B4C6B9B772B7279290DC2B61C9AD3
Authority key identifier: F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa
Signing time:             Mon 02 Nov 2026 14:56:52 +0000
ROA not before:           Mon 02 Nov 2026 14:51:52 +0000
ROA not after:            Mon 01 Nov 2027 14:56:52 +0000
asID:                     266385
IP address blocks:        170.80.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl
                          rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 06:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:55:b3:26:1b:4c:6b:9b:77:2b:72:79:29:0d:c2:b6:1c:9a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F312DD28F74F7F28D25A7DC41721E8A859A96817
        Validity
            Not Before: Nov  2 14:51:52 2026 GMT
            Not After : Nov  1 14:56:52 2027 GMT
        Subject: CN=0ABD1E5B44396DCA600FC69188CFD716C000EA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:19:57:4a:de:33:fd:9b:99:6c:2c:01:0e:5e:
                    6f:9c:0a:26:06:50:96:8e:8d:7b:34:e5:ff:3d:63:
                    da:64:ec:21:81:26:62:ed:7e:fe:ce:77:02:95:3f:
                    bd:ea:1e:d3:e1:ec:2b:4c:59:48:57:78:9d:65:64:
                    a4:4e:ab:8d:7a:fb:c1:20:3e:1a:ff:8d:48:fb:16:
                    7e:e0:dc:3c:2d:82:7f:7e:27:d4:4c:dd:ef:c4:b0:
                    c1:96:74:cd:d5:44:4b:bf:ce:df:8d:94:45:2f:fb:
                    39:c8:11:50:d8:0c:4f:b6:f6:8e:05:88:c3:d4:b5:
                    34:b9:c9:f3:0e:2c:d7:29:ff:53:3b:c0:14:69:1c:
                    7a:9f:91:cd:8f:82:27:5a:d5:cb:be:d5:14:6f:a3:
                    e2:64:f6:d8:b9:11:c2:6e:1c:8f:03:cc:8b:a2:64:
                    70:40:b7:98:3d:c9:d7:2d:de:bb:72:89:c2:76:3c:
                    6f:92:0d:3b:f0:21:67:df:44:d8:77:1b:d3:f1:74:
                    0a:3e:35:64:c6:5e:94:d7:6f:de:9d:b9:60:4e:c5:
                    35:ce:a2:c1:a6:e6:a5:07:9d:96:e6:b4:19:14:79:
                    b8:04:ed:32:7f:7c:f3:2c:17:39:fb:73:fb:27:39:
                    58:1a:b5:a0:e9:bc:a8:53:2b:13:d5:dd:62:de:a5:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BD:1E:5B:44:39:6D:CA:60:0F:C6:91:88:CF:D7:16:C0:00:EA:83
            X509v3 Authority Key Identifier:
                keyid:F3:12:DD:28:F7:4F:7F:28:D2:5A:7D:C4:17:21:E8:A8:59:A9:68:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/F312DD28F74F7F28D25A7DC41721E8A859A96817.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F312DD28F74F7F28D25A7DC41721E8A859A96817.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/3137302e38302e3232362e302f32342d3234203d3e20323636333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:f2:df:51:32:c9:d8:6b:37:9d:b5:b0:30:a5:03:20:42:16:
         66:f7:dd:0a:41:91:15:04:1d:94:b4:06:1e:44:33:d6:48:ed:
         11:00:8d:79:9c:2d:80:43:2c:dc:7e:5e:11:5c:99:b8:b3:8a:
         01:56:23:cb:5a:82:91:f8:cc:8e:0c:91:e6:6e:21:10:68:e0:
         70:d7:ab:a1:db:7a:c3:35:99:8f:5a:82:14:d3:52:11:1a:c7:
         16:03:16:8a:f1:13:23:fd:00:aa:76:c6:21:11:58:69:2c:12:
         c8:64:6a:e4:e0:cd:df:78:df:9a:28:42:d1:6b:1b:c4:02:0a:
         62:dc:bc:1c:64:c3:b1:f7:37:e8:ab:ca:a8:c8:b0:94:9e:6e:
         b8:fd:2f:48:58:0a:55:b2:33:13:36:3a:3e:88:87:18:ef:0e:
         45:b5:c5:f0:f5:2a:fd:f9:f4:b3:2e:99:f6:76:e7:4e:71:dd:
         c9:48:50:80:0a:26:24:fb:98:9b:cf:91:05:7c:b5:1d:92:ce:
         97:4f:72:3b:97:09:68:42:3e:99:73:3d:51:4c:d7:94:df:13:
         44:6f:24:2b:ab:92:46:73:09:9e:24:33:7f:37:6d:d1:2b:8d:
         e3:d3:ed:ee:04:28:39:c1:e4:df:ff:da:47:78:4b:3e:d8:a8:
         ba:1a:57:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYP1VsyYbTGubdytyeSkNwrYcmtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMxMkREMjhGNzRGN0YyOEQyNUE3REM0MTcyMUU4QTg1
OUE5NjgxNzAeFw0yNjExMDIxNDUxNTJaFw0yNzExMDExNDU2NTJaMDMxMTAvBgNV
BAMTKDBBQkQxRTVCNDQzOTZEQ0E2MDBGQzY5MTg4Q0ZENzE2QzAwMEVBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTGVdK3jP9m5lsLAEOXm+cCiYG
UJaOjXs05f89Y9pk7CGBJmLtfv7OdwKVP73qHtPh7CtMWUhXeJ1lZKROq416+8Eg
Phr/jUj7Fn7g3Dwtgn9+J9RM3e/EsMGWdM3VREu/zt+NlEUv+znIEVDYDE+29o4F
iMPUtTS5yfMOLNcp/1M7wBRpHHqfkc2Pgida1cu+1RRvo+Jk9ti5EcJuHI8DzIui
ZHBAt5g9ydct3rtyicJ2PG+SDTvwIWffRNh3G9PxdAo+NWTGXpTXb96duWBOxTXO
osGm5qUHnZbmtBkUebgE7TJ/fPMsFzn7c/snOVgataDpvKhTKxPV3WLepQp3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCr0eW0Q5bcpgD8aRiM/XFsAA6oMwHwYDVR0j
BBgwFoAU8xLdKPdPfyjSWn3EFyHoqFmpaBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXdGUkc0ODZVTlFwOE14dE5SWWhvTW1nZFh2dUN5WWs5MXhxSHpROGRM
elAvMC9GMzEyREQyOEY3NEY3RjI4RDI1QTdEQzQxNzIxRThBODU5QTk2ODE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzMTJERDI4Rjc0RjdGMjhE
MjVBN0RDNDE3MjFFOEE4NTlBOTY4MTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV3RlJHNDg2VU5RcDhNeHROUllob01tZ2RYdnVDeVlrOTF4cUh6UThkTHpQLzAv
MzEzNzMwMmUzODMwMmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMzM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACqUOIwDQYJKoZIhvcNAQELBQADggEBAE7y31Ey
ydhrN521sDClAyBCFmb33QpBkRUEHZS0Bh5EM9ZI7REAjXmcLYBDLNx+XhFcmbiz
igFWI8tagpH4zI4MkeZuIRBo4HDXq6HbesM1mY9aghTTUhEaxxYDForxEyP9AKp2
xiERWGksEshkauTgzd9435ooQtFrG8QCCmLcvBxkw7H3N+iryqjIsJSebrj9L0hY
ClWyMxM2Oj6IhxjvDkW1xfD1Kv359LMumfZ2505x3clIUIAKJiT7mJvPkQV8tR2S
zpdPcjuXCWhCPplzPVFM15TfE0RvJCurkkZzCZ4kM383bdErjePT7e4EKDnB5N//
2kd4Sz7YqLoaVw0=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:04:02 2026 by rpki-client