Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          yw5M+GPb/Ds6HbNiyc44Fza+/uaPG3RKgGI/nwIbDU8=
Subject key identifier:   C2:65:E7:8A:E1:07:35:69:E2:5F:4A:9E:BE:4F:C2:4D:EF:A7:77:09
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       7A32FCF58E26D6D0DB91E9CF53216FB03870932E
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:32 +0000
ROA not before:           Mon 15 Jun 2026 11:17:32 +0000
ROA not after:            Mon 14 Jun 2027 11:22:32 +0000
asID:                     28191
IP address blocks:        186.193.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:32:fc:f5:8e:26:d6:d0:db:91:e9:cf:53:21:6f:b0:38:70:93:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:32 2026 GMT
            Not After : Jun 14 11:22:32 2027 GMT
        Subject: CN=C265E78AE1073569E25F4A9EBE4FC24DEFA77709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:bd:be:d9:f9:85:1f:14:ca:60:d6:b6:07:
                    74:e7:7a:60:be:5c:29:10:b3:b7:2c:be:84:55:24:
                    62:b6:38:9b:6d:8b:54:cf:bc:f9:7f:b8:3e:7d:ed:
                    f1:4b:70:45:de:55:c9:79:ee:56:38:a6:9f:cd:0c:
                    df:43:38:1f:b1:7e:1b:7d:77:bf:ac:b2:65:40:19:
                    32:6b:6f:0e:81:81:e2:5b:b3:a7:ab:1e:c7:dc:4e:
                    10:4d:ac:4b:ca:16:81:1d:15:7a:24:8a:64:1f:82:
                    44:f3:ae:52:51:4b:60:05:e2:21:02:f2:1e:66:fa:
                    99:9d:5f:72:1c:f0:68:60:f8:f5:8f:f1:2f:4f:77:
                    58:34:3a:be:1f:a1:14:0a:40:c4:27:22:f3:6c:f6:
                    80:d7:86:30:16:b0:db:b4:e5:19:c9:40:70:7b:3b:
                    43:82:8e:47:b2:cd:ba:bf:c3:8e:90:a5:6b:c0:38:
                    e4:5a:81:32:61:42:bf:76:50:3e:a7:7a:b2:4b:92:
                    e6:76:37:45:24:fe:6d:c0:ab:69:de:30:2d:13:72:
                    c0:86:a4:36:df:0c:bd:13:b3:cf:e1:81:e7:7c:77:
                    8d:23:37:97:ae:0d:08:f0:1b:0d:f6:37:74:02:f3:
                    3d:c8:f4:aa:8d:d4:66:08:e9:76:57:40:b9:50:06:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:65:E7:8A:E1:07:35:69:E2:5F:4A:9E:BE:4F:C2:4D:EF:A7:77:09
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138322e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:05:e9:a6:30:91:fb:88:f0:70:8e:e7:0a:a3:81:86:6f:f9:
         12:d6:1b:f7:b3:1e:f9:1a:38:96:0e:7a:e4:4f:71:8e:e7:21:
         7f:21:08:7b:3b:7d:52:4c:79:fe:ef:31:11:05:8f:c2:d9:50:
         1d:fe:e3:b3:4a:e9:11:2b:98:16:94:9c:8e:ca:69:80:a8:b9:
         d1:db:13:6e:b4:1b:7b:e6:1b:03:e7:57:58:d6:66:e9:0d:df:
         6b:ca:d5:5c:0a:0c:a1:c2:53:9f:de:b9:dc:55:87:72:c8:4c:
         7c:82:8d:cd:5b:b3:15:3c:41:fa:4d:ab:41:7d:9e:a0:a0:19:
         fa:c7:4c:30:f5:3d:8e:9b:74:b0:c7:05:cd:04:e5:c8:71:b0:
         fb:42:03:dd:ef:c8:6b:74:c4:9f:9e:f0:8d:ca:eb:5c:8a:81:
         b4:b8:6f:cd:78:4d:77:a3:cb:ba:a1:23:f1:89:9c:59:02:5e:
         1c:6f:fd:ea:ff:0a:e3:41:27:37:d9:8a:3b:1f:04:21:5c:a1:
         77:ba:6d:11:84:01:29:6a:ca:30:89:bf:f1:7c:86:50:d5:22:
         99:a1:c1:1c:a0:28:de:11:21:02:2d:8a:5c:be:95:3e:de:ae:
         03:75:62:90:a6:82:9e:ae:1b:6a:4a:32:ef:83:7b:17:4a:8a:
         4e:b2:95:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUejL89Y4m1tDbkenPUyFvsDhwky4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MkIzNjMzREMyMjE5MkVFMUI4QUQzRDJFNkNDOUMx
MjE4RkE1RjAeFw0yNjA2MTUxMTE3MzJaFw0yNzA2MTQxMTIyMzJaMDMxMTAvBgNV
BAMTKEMyNjVFNzhBRTEwNzM1NjlFMjVGNEE5RUJFNEZDMjRERUZBNzc3MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Er2+2fmFHxTKYNa2B3TnemC+
XCkQs7csvoRVJGK2OJtti1TPvPl/uD597fFLcEXeVcl57lY4pp/NDN9DOB+xfht9
d7+ssmVAGTJrbw6BgeJbs6erHsfcThBNrEvKFoEdFXokimQfgkTzrlJRS2AF4iEC
8h5m+pmdX3Ic8Ghg+PWP8S9Pd1g0Or4foRQKQMQnIvNs9oDXhjAWsNu05RnJQHB7
O0OCjkeyzbq/w46QpWvAOORagTJhQr92UD6nerJLkuZ2N0Uk/m3Aq2neMC0TcsCG
pDbfDL0Ts8/hged8d40jN5euDQjwGw32N3QC8z3I9KqN1GYI6XZXQLlQBtXvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwmXniuEHNWniX0qevk/CTe+ndwkwHwYDVR0j
BBgwFoAUz2KzYz3CIZLuG4rT0ubMnBIY+l8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC9DRjYyQjM2MzNEQzIyMTkyRUUxQjhBRDNEMkU2Q0M5QzEyMThGQTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNjJCMzYzM0RDMjIxOTJF
RTFCOEFEM0QyRTZDQzlDMTIxOEZBNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzgzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wbYwDQYJKoZIhvcNAQELBQADggEBAEIF6aYw
kfuI8HCO5wqjgYZv+RLWG/ezHvkaOJYOeuRPcY7nIX8hCHs7fVJMef7vMREFj8LZ
UB3+47NK6RErmBaUnI7KaYCoudHbE260G3vmGwPnV1jWZukN32vK1VwKDKHCU5/e
udxVh3LITHyCjc1bsxU8QfpNq0F9nqCgGfrHTDD1PY6bdLDHBc0E5chxsPtCA93v
yGt0xJ+e8I3K61yKgbS4b814TXejy7qhI/GJnFkCXhxv/er/CuNBJzfZijsfBCFc
oXe6bRGEASlqyjCJv/F8hlDVIpmhwRygKN4RIQItily+lT7ergN1YpCmgp6uG2pK
Mu+DexdKik6yldk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:43 2026 by rpki-client