Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa
File:                     3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa (raw, json)
Hash identifier:          lEzhYmGH8yOwioCKV5KzaeC4g2n8iX6sbBcT+/QnhuE=
Subject key identifier:   50:DD:7A:FC:25:68:66:9A:13:FF:F4:F8:76:0E:79:6A:17:BF:61:B3
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       75092F49A8428638B4FD22691D9CC497F4539368
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:34 +0000
ROA not before:           Mon 15 Jun 2026 11:17:34 +0000
ROA not after:            Mon 14 Jun 2027 11:22:34 +0000
asID:                     28191
IP address blocks:        186.193.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:09:2f:49:a8:42:86:38:b4:fd:22:69:1d:9c:c4:97:f4:53:93:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:34 2026 GMT
            Not After : Jun 14 11:22:34 2027 GMT
        Subject: CN=50DD7AFC2568669A13FFF4F8760E796A17BF61B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:c5:1d:e4:00:d8:1f:bb:b0:a6:55:46:1e:
                    c6:05:16:a7:f5:6b:7b:b0:96:b0:47:0f:36:ca:35:
                    24:53:b0:db:da:80:95:91:b5:eb:f7:f6:65:12:6a:
                    a1:ee:61:dc:35:8b:e2:66:ed:7a:8a:68:4c:9d:98:
                    37:5a:46:67:97:b7:c9:76:ac:2d:8b:2b:12:45:52:
                    46:eb:a6:64:56:99:4c:8b:a9:fc:65:21:54:d7:31:
                    0a:fe:97:fb:20:34:78:9d:e6:6b:b7:08:61:30:ea:
                    d5:d8:04:c5:aa:f7:8f:b7:3c:9b:cc:b7:c8:9e:cd:
                    4c:ea:58:6c:e1:0c:5f:bc:c6:04:5b:7d:88:68:6b:
                    6b:a6:e9:7e:23:90:b3:1e:28:e0:18:60:37:94:3a:
                    ce:be:f0:c3:59:83:bd:65:fd:18:d0:11:1b:d0:7f:
                    bb:54:dc:67:68:fc:30:5d:60:a3:b4:99:44:37:fb:
                    0e:e3:98:22:3f:9b:00:4e:f6:bc:56:66:a2:bd:c3:
                    5b:f7:e3:91:ad:63:a6:ee:6f:17:0d:d5:49:7a:03:
                    92:da:f5:65:91:42:a0:3a:56:dd:e5:43:60:3d:45:
                    74:ad:87:67:a4:69:9b:aa:77:38:5c:ce:bf:e8:0a:
                    ce:83:b1:11:87:3c:31:c4:8c:13:50:e7:24:43:20:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DD:7A:FC:25:68:66:9A:13:FF:F4:F8:76:0E:79:6A:17:BF:61:B3
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138362e3139332e3138342e302f32332d3233203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:df:f9:22:19:75:d2:63:ee:29:a1:54:7d:30:af:be:d3:
         2b:d3:82:56:18:f2:23:81:59:b3:05:33:d8:7f:9e:2e:de:ea:
         78:ab:0c:58:9b:9c:65:94:dc:85:2f:4e:a1:50:81:4d:f5:3d:
         91:29:28:7e:a2:c6:8d:63:15:56:45:e9:c9:e0:13:b8:70:3c:
         72:40:72:66:1c:82:16:ac:1e:57:e1:b0:e6:b4:b7:5f:09:f0:
         ee:3c:90:51:3c:80:b1:d9:20:f5:04:9b:03:c4:d7:71:24:37:
         5e:59:08:bb:3b:5f:e3:f2:6f:12:48:ae:9e:72:4c:a3:89:af:
         ad:d0:40:15:2e:19:92:19:36:a2:3d:75:87:db:fc:7b:af:29:
         08:47:6a:e4:97:1e:10:5a:80:36:72:cc:47:96:09:c3:53:23:
         49:a6:09:48:5a:a2:63:03:03:3b:45:a3:b5:6e:8b:f6:c3:c6:
         7a:38:a6:09:07:93:99:0b:f3:e0:da:d1:1e:ea:71:9c:b5:1c:
         65:73:93:e8:d1:d3:27:f3:86:12:1c:1f:1c:73:e7:e9:20:a5:
         5c:eb:0c:88:c9:87:2c:48:6a:f7:99:cd:81:f4:25:8a:af:5a:
         d6:09:b4:6d:db:dc:fd:e9:a5:6d:f1:6b:64:ef:b9:e0:02:c6:
         39:5b:0d:87
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdQkvSahChji0/SJpHZzEl/RTk2gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MkIzNjMzREMyMjE5MkVFMUI4QUQzRDJFNkNDOUMx
MjE4RkE1RjAeFw0yNjA2MTUxMTE3MzRaFw0yNzA2MTQxMTIyMzRaMDMxMTAvBgNV
BAMTKDUwREQ3QUZDMjU2ODY2OUExM0ZGRjRGODc2MEU3OTZBMTdCRjYxQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC07cUd5ADYH7uwplVGHsYFFqf1
a3uwlrBHDzbKNSRTsNvagJWRtev39mUSaqHuYdw1i+Jm7XqKaEydmDdaRmeXt8l2
rC2LKxJFUkbrpmRWmUyLqfxlIVTXMQr+l/sgNHid5mu3CGEw6tXYBMWq94+3PJvM
t8iezUzqWGzhDF+8xgRbfYhoa2um6X4jkLMeKOAYYDeUOs6+8MNZg71l/RjQERvQ
f7tU3Gdo/DBdYKO0mUQ3+w7jmCI/mwBO9rxWZqK9w1v345GtY6bubxcN1Ul6A5La
9WWRQqA6Vt3lQ2A9RXSth2ekaZuqdzhczr/oCs6DsRGHPDHEjBNQ5yRDIIghAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUN16/CVoZpoT//T4dg55ahe/YbMwHwYDVR0j
BBgwFoAUz2KzYz3CIZLuG4rT0ubMnBIY+l8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC9DRjYyQjM2MzNEQzIyMTkyRUUxQjhBRDNEMkU2Q0M5QzEyMThGQTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNjJCMzYzM0RDMjIxOTJF
RTFCOEFEM0QyRTZDQzlDMTIxOEZBNUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzgzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzgzMTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6wbgwDQYJKoZIhvcNAQELBQADggEBAKYl3/ki
GXXSY+4poVR9MK++0yvTglYY8iOBWbMFM9h/ni7e6nirDFibnGWU3IUvTqFQgU31
PZEpKH6ixo1jFVZF6cngE7hwPHJAcmYcghasHlfhsOa0t18J8O48kFE8gLHZIPUE
mwPE13EkN15ZCLs7X+PybxJIrp5yTKOJr63QQBUuGZIZNqI9dYfb/HuvKQhHauSX
HhBagDZyzEeWCcNTI0mmCUhaomMDAztFo7Vui/bDxno4pgkHk5kL8+Da0R7qcZy1
HGVzk+jR0yfzhhIcHxxz5+kgpVzrDIjJhyxIaveZzYH0JYqvWtYJtG3b3P3ppW3x
a2TvueACxjlbDYc=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:38 2026 by rpki-client