Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
File:                     3138392e39302e34302e302f32312d3231203d3e203238313931.roa (raw, json)
Hash identifier:          NsXEsWnyz4iuOh4P+VBKqueVhvScAeLVLligWpLgz/U=
Subject key identifier:   5C:D7:44:1B:F2:E6:B4:E8:F6:3C:D7:12:03:71:7A:A5:04:58:B1:DF
Certificate issuer:       /CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
Certificate serial:       2A7308762B9B27F17866908037C6EDFF995B3799
Authority key identifier: CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa
Signing time:             Mon 15 Jun 2026 11:22:49 +0000
ROA not before:           Mon 15 Jun 2026 11:17:49 +0000
ROA not after:            Mon 14 Jun 2027 11:22:49 +0000
asID:                     28191
IP address blocks:        189.90.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl
                          rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:73:08:76:2b:9b:27:f1:78:66:90:80:37:c6:ed:ff:99:5b:37:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F
        Validity
            Not Before: Jun 15 11:17:49 2026 GMT
            Not After : Jun 14 11:22:49 2027 GMT
        Subject: CN=5CD7441BF2E6B4E8F63CD71203717AA50458B1DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:72:a1:96:52:28:85:c3:24:b9:ab:dc:90:
                    cb:d3:77:f1:b5:81:16:dc:9a:63:8b:28:dd:5e:9d:
                    7e:2c:d8:a6:df:87:a2:36:4f:18:00:b6:a2:34:26:
                    68:0e:25:3a:9b:5f:6d:85:cc:a1:ee:e1:b8:0c:74:
                    ac:a2:45:87:a3:75:b3:9c:4e:89:7f:86:d9:ae:e3:
                    67:79:72:d5:4d:b7:d9:b6:85:2d:3c:4f:a7:52:69:
                    e9:3d:ef:f0:1f:87:a9:04:a7:c0:a1:4f:b3:8a:6b:
                    16:50:76:62:45:e4:ca:92:f7:ca:b5:3b:7b:84:6c:
                    36:c3:a1:49:72:71:f4:49:46:40:db:51:e2:99:66:
                    a3:86:33:02:fc:7e:5c:2b:72:76:a1:d5:11:84:26:
                    d2:46:43:2e:d5:a3:d2:1e:99:e3:ec:10:ea:55:19:
                    71:4e:cf:65:d2:08:1c:f6:cd:62:35:7a:83:1e:29:
                    a0:02:ba:41:e3:dd:c6:cf:a0:84:c8:af:ec:ff:3d:
                    81:a1:f3:ca:19:ef:ba:a1:25:fb:fb:d4:fd:ba:45:
                    ea:de:6d:98:7b:e3:28:59:46:44:6a:18:fc:45:cd:
                    3e:39:d5:31:51:bb:3c:d1:aa:8f:d1:07:52:d6:22:
                    bd:0c:ce:b1:78:c3:ff:da:17:96:88:20:75:f9:2e:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:44:1B:F2:E6:B4:E8:F6:3C:D7:12:03:71:7A:A5:04:58:B1:DF
            X509v3 Authority Key Identifier:
                keyid:CF:62:B3:63:3D:C2:21:92:EE:1B:8A:D3:D2:E6:CC:9C:12:18:FA:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF62B3633DC22192EE1B8AD3D2E6CC9C1218FA5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/681Sn9wiCnn8ANQrJM6gRLGiMQoRQdk5kUbodfdYqyGS/0/3138392e39302e34302e302f32312d3231203d3e203238313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:d3:2f:c1:81:bb:38:82:d1:59:bc:98:b4:f1:0b:a3:84:40:
         34:a8:d6:22:d6:c2:9e:e6:20:b3:0c:fc:9e:9f:d8:ba:ac:d8:
         3a:54:47:0f:4b:5c:03:f9:ef:7e:31:bf:5a:4c:d5:4a:19:bc:
         9e:ab:2d:c7:8f:5c:98:2a:3c:3b:da:ac:a3:0e:4a:33:5c:2d:
         0f:3c:9b:1a:42:e2:1b:44:89:03:14:46:cb:ad:00:e3:1c:48:
         6b:2e:43:16:d1:8d:32:d4:ba:42:5c:d9:d5:26:94:5d:24:3d:
         76:9d:e8:18:35:9e:e9:f1:63:bf:3c:77:a3:19:7e:be:d8:ae:
         ba:a0:6d:8a:b3:cf:9c:eb:b7:d9:6b:3c:ee:18:5f:69:1a:04:
         03:ff:e4:32:e8:72:0e:b5:71:2a:87:a3:74:e8:98:a8:7c:d8:
         b1:66:10:98:1e:ef:0e:94:a5:6d:07:2a:4a:90:48:b2:ce:0c:
         c5:15:e0:da:36:9f:b5:9b:25:cf:91:11:14:70:ad:ed:80:76:
         d8:74:5a:a2:8a:02:ed:de:c5:60:59:ca:a2:d7:79:80:5b:d6:
         44:36:7a:97:98:7a:b3:20:90:a2:0e:8e:55:2f:01:02:c7:5c:
         b0:60:bc:b1:07:fc:b7:81:e0:a0:9e:98:75:f8:92:36:84:79:
         ed:0e:93:d1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKnMIdiubJ/F4ZpCAN8bt/5lbN5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y2MkIzNjMzREMyMjE5MkVFMUI4QUQzRDJFNkNDOUMx
MjE4RkE1RjAeFw0yNjA2MTUxMTE3NDlaFw0yNzA2MTQxMTIyNDlaMDMxMTAvBgNV
BAMTKDVDRDc0NDFCRjJFNkI0RThGNjNDRDcxMjAzNzE3QUE1MDQ1OEIxREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cnKhllIohcMkuavckMvTd/G1
gRbcmmOLKN1enX4s2Kbfh6I2TxgAtqI0JmgOJTqbX22FzKHu4bgMdKyiRYejdbOc
Tol/htmu42d5ctVNt9m2hS08T6dSaek97/Afh6kEp8ChT7OKaxZQdmJF5MqS98q1
O3uEbDbDoUlycfRJRkDbUeKZZqOGMwL8flwrcnah1RGEJtJGQy7Vo9IemePsEOpV
GXFOz2XSCBz2zWI1eoMeKaACukHj3cbPoITIr+z/PYGh88oZ77qhJfv71P26Rere
bZh74yhZRkRqGPxFzT451TFRuzzRqo/RB1LWIr0MzrF4w//aF5aIIHX5Lu5PAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUXNdEG/LmtOj2PNcSA3F6pQRYsd8wHwYDVR0j
BBgwFoAUz2KzYz3CIZLuG4rT0ubMnBIY+l8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjgxU245d2lDbm44QU5RckpNNmdSTEdpTVFvUlFkazVrVWJvZGZkWXF5
R1MvMC9DRjYyQjM2MzNEQzIyMTkyRUUxQjhBRDNEMkU2Q0M5QzEyMThGQTVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGNjJCMzYzM0RDMjIxOTJF
RTFCOEFEM0QyRTZDQzlDMTIxOEZBNUYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4MVNuOXdpQ25uOEFOUXJKTTZnUkxHaU1Rb1JRZGs1a1Vib2RmZFlxeUdTLzAv
MzEzODM5MmUzOTMwMmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzODMx
MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEA71aKDANBgkqhkiG9w0BAQsFAAOCAQEAmdMvwYG7OILR
WbyYtPELo4RANKjWItbCnuYgswz8np/YuqzYOlRHD0tcA/nvfjG/WkzVShm8nqst
x49cmCo8O9qsow5KM1wtDzybGkLiG0SJAxRGy60A4xxIay5DFtGNMtS6QlzZ1SaU
XSQ9dp3oGDWe6fFjvzx3oxl+vtiuuqBtirPPnOu32Ws87hhfaRoEA//kMuhyDrVx
KoejdOiYqHzYsWYQmB7vDpSlbQcqSpBIss4MxRXg2jaftZslz5ERFHCt7YB22HRa
oooC7d7FYFnKotd5gFvWRDZ6l5h6syCQog6OVS8BAsdcsGC8sQf8t4HgoJ6YdfiS
NoR57Q6T0Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:37:05 2026 by rpki-client