Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/3230312e38372e3233362e302f32322d3234203d3e20323734383334.roa
File:                     3230312e38372e3233362e302f32322d3234203d3e20323734383334.roa (raw, json)
Hash identifier:          EXhDdWAzvmcS/fjYbUHrXQ8DEUcBCvQSBEXJjyMyjvY=
Subject key identifier:   83:B7:5E:33:EC:2B:C7:79:A8:42:7A:C8:5A:FE:A7:E8:62:3C:FB:55
Certificate issuer:       /CN=5E145D0D94E884F8DBE03306345F8FD4E0A337B2
Certificate serial:       710E5BB52A6E8467A67D5B8F9BA7C627099986C6
Authority key identifier: 5E:14:5D:0D:94:E8:84:F8:DB:E0:33:06:34:5F:8F:D4:E0:A3:37:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/3230312e38372e3233362e302f32322d3234203d3e20323734383334.roa
Signing time:             Thu 23 Apr 2026 14:40:39 +0000
ROA not before:           Thu 23 Apr 2026 14:35:39 +0000
ROA not after:            Thu 22 Apr 2027 14:40:39 +0000
asID:                     274834
IP address blocks:        201.87.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.crl
                          rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 02:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:5b:b5:2a:6e:84:67:a6:7d:5b:8f:9b:a7:c6:27:09:99:86:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E145D0D94E884F8DBE03306345F8FD4E0A337B2
        Validity
            Not Before: Apr 23 14:35:39 2026 GMT
            Not After : Apr 22 14:40:39 2027 GMT
        Subject: CN=83B75E33EC2BC779A8427AC85AFEA7E8623CFB55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:9a:fd:5c:b4:7f:5d:50:61:35:f6:ee:50:
                    07:6d:53:67:10:21:49:b4:c6:19:76:2d:3e:1d:1d:
                    2f:55:6d:d7:04:21:f6:e9:cb:a6:38:86:cb:1e:be:
                    50:e6:da:0e:f6:b6:b7:db:14:65:d2:41:77:f3:70:
                    38:c8:78:a4:33:33:5c:df:46:ac:c0:13:c7:d0:8f:
                    10:2c:2f:63:00:71:36:75:c7:77:a3:d7:37:61:d0:
                    a7:ce:9d:e1:4a:65:f3:99:e3:af:6c:e5:f5:b9:67:
                    f0:30:66:a5:dc:0e:1b:e3:27:03:d8:4e:7f:4b:a1:
                    a8:3f:eb:c8:a7:b9:a3:d2:5b:a7:db:ad:dc:54:3a:
                    3e:b2:2c:aa:78:b9:ba:11:ab:81:34:52:39:76:4b:
                    94:63:f5:14:05:8c:c8:ea:d8:90:5b:68:43:85:d6:
                    bf:7e:65:9c:13:d3:e2:bc:f5:c1:dd:3f:56:5c:ef:
                    03:52:f4:16:5b:f7:cd:20:4b:08:10:b2:32:34:a7:
                    df:b5:06:a3:7d:18:ee:7f:90:4e:ac:3e:8f:d9:78:
                    81:d0:14:60:a9:5d:f3:9c:62:a0:b4:b0:61:ef:76:
                    f3:1d:64:08:4f:b3:98:1e:f4:5e:c4:3a:ae:f5:3c:
                    7e:b4:1d:94:15:93:e9:ee:70:01:65:61:ca:85:12:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:5E:33:EC:2B:C7:79:A8:42:7A:C8:5A:FE:A7:E8:62:3C:FB:55
            X509v3 Authority Key Identifier:
                keyid:5E:14:5D:0D:94:E8:84:F8:DB:E0:33:06:34:5F:8F:D4:E0:A3:37:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E145D0D94E884F8DBE03306345F8FD4E0A337B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/3230312e38372e3233362e302f32322d3234203d3e20323734383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:7e:5f:f0:a1:85:26:2d:dd:ca:3e:93:85:6c:71:37:93:
         39:4c:ad:cc:46:bd:1c:32:d4:fb:7c:9b:e3:a7:ce:88:3e:70:
         13:fa:e4:89:ca:93:f1:0c:0c:cd:99:22:c6:64:3d:14:f0:28:
         81:f6:e9:7c:96:4d:c7:a5:3d:fe:6b:ef:2a:e4:ad:64:af:9b:
         23:29:89:2d:07:5e:f2:2a:88:3c:a8:24:39:db:ad:23:37:62:
         4b:5b:07:2c:00:04:60:35:7c:bc:fc:a9:77:f2:bc:65:a9:5f:
         72:3d:9d:86:15:72:90:f9:2e:aa:9c:d9:87:34:bf:dc:ec:ec:
         89:bf:6c:2b:fc:76:24:8f:1c:1c:8e:61:d9:14:46:7b:fe:33:
         7f:a9:24:98:aa:a2:05:f3:c7:3c:92:25:8e:2e:c4:b1:03:c4:
         4e:d8:ed:25:4e:21:04:06:df:b0:2c:9e:2a:3e:3b:30:05:1a:
         2e:5d:dd:a5:bd:37:30:34:5a:56:54:92:51:14:7c:42:a8:58:
         8b:9e:ee:58:cf:18:e5:c0:d5:3e:b5:b8:9d:fe:2e:34:67:18:
         70:3c:ab:1d:19:5f:98:8a:5d:f0:cf:79:52:7d:85:e1:9c:f8:
         97:4d:64:24:00:26:11:e1:05:bd:d0:1e:3b:45:de:9a:14:52:
         71:e5:19:52
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcQ5btSpuhGemfVuPm6fGJwmZhsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUUxNDVEMEQ5NEU4ODRGOERCRTAzMzA2MzQ1RjhGRDRF
MEEzMzdCMjAeFw0yNjA0MjMxNDM1MzlaFw0yNzA0MjIxNDQwMzlaMDMxMTAvBgNV
BAMTKDgzQjc1RTMzRUMyQkM3NzlBODQyN0FDODVBRkVBN0U4NjIzQ0ZCNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEJr9XLR/XVBhNfbuUAdtU2cQ
IUm0xhl2LT4dHS9VbdcEIfbpy6Y4hssevlDm2g72trfbFGXSQXfzcDjIeKQzM1zf
RqzAE8fQjxAsL2MAcTZ1x3ej1zdh0KfOneFKZfOZ469s5fW5Z/AwZqXcDhvjJwPY
Tn9Loag/68inuaPSW6fbrdxUOj6yLKp4uboRq4E0Ujl2S5Rj9RQFjMjq2JBbaEOF
1r9+ZZwT0+K89cHdP1Zc7wNS9BZb980gSwgQsjI0p9+1BqN9GO5/kE6sPo/ZeIHQ
FGCpXfOcYqC0sGHvdvMdZAhPs5ge9F7EOq71PH60HZQVk+nucAFlYcqFElZRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg7deM+wrx3moQnrIWv6n6GI8+1UwHwYDVR0j
BBgwFoAUXhRdDZTohPjb4DMGNF+P1OCjN7IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlJWYXIzc1VHd3VxUUVBSHZtZVEyckNGdENCYWJYUDN0b1phRENRdHVX
alAvMC81RTE0NUQwRDk0RTg4NEY4REJFMDMzMDYzNDVGOEZENEUwQTMzN0IyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVFMTQ1RDBEOTRFODg0RjhE
QkUwMzMwNjM0NUY4RkQ0RTBBMzM3QjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZSVmFyM3NVR3d1cVFFQUh2bWVRMnJDRnRDQmFiWFAzdG9aYURDUXR1V2pQLzAv
MzIzMDMxMmUzODM3MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzQzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJV+wwDQYJKoZIhvcNAQELBQADggEBAEuvfl/w
oYUmLd3KPpOFbHE3kzlMrcxGvRwy1Pt8m+Onzog+cBP65InKk/EMDM2ZIsZkPRTw
KIH26XyWTcelPf5r7yrkrWSvmyMpiS0HXvIqiDyoJDnbrSM3YktbBywABGA1fLz8
qXfyvGWpX3I9nYYVcpD5Lqqc2Yc0v9zs7Im/bCv8diSPHByOYdkURnv+M3+pJJiq
ogXzxzySJY4uxLEDxE7Y7SVOIQQG37Asnio+OzAFGi5d3aW9NzA0WlZUklEUfEKo
WIue7ljPGOXA1T61uJ3+LjRnGHA8qx0ZX5iKXfDPeVJ9heGc+JdNZCQAJhHhBb3Q
HjtF3poUUnHlGVI=
-----END CERTIFICATE-----
Generated at Wed May 13 17:33:40 2026 by rpki-client