Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa
File:                     3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa (raw, json)
Hash identifier:          6wiGxMTXjvsQvktiiiy72uUWPbGAqhkXSYPa4QnhVPY=
Subject key identifier:   B3:55:CB:75:EB:87:66:88:3C:32:90:E2:22:14:48:D9:87:A6:76:47
Certificate issuer:       /CN=982DA19AC0848799D2A301B47824DBA97B1A2364
Certificate serial:       54BAF5F8AF0DFF651454A317250271276C33C100
Authority key identifier: 98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa
Signing time:             Mon 13 Jul 2026 14:42:50 +0000
ROA not before:           Mon 13 Jul 2026 14:37:50 +0000
ROA not after:            Mon 12 Jul 2027 14:42:50 +0000
asID:                     267424
IP address blocks:        181.191.132.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl
                          rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ba:f5:f8:af:0d:ff:65:14:54:a3:17:25:02:71:27:6c:33:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982DA19AC0848799D2A301B47824DBA97B1A2364
        Validity
            Not Before: Jul 13 14:37:50 2026 GMT
            Not After : Jul 12 14:42:50 2027 GMT
        Subject: CN=B355CB75EB8766883C3290E2221448D987A67647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:b4:2e:36:14:df:c7:0b:9d:a0:cc:e4:83:
                    e2:92:2b:1f:f8:ff:65:18:7f:8d:08:26:d9:22:53:
                    5a:50:13:71:70:76:04:5f:5d:d6:d2:35:16:bf:b7:
                    5c:14:f3:65:90:a0:fc:11:b8:f5:9d:90:89:22:f8:
                    5f:65:68:fe:d2:f3:b2:68:8c:04:a0:6f:d1:92:a1:
                    a8:54:1c:1e:06:44:64:a7:68:56:1a:f6:3f:73:3b:
                    d5:ba:07:67:e5:da:f5:14:de:16:74:8f:f8:d1:81:
                    43:cc:97:5a:f2:28:78:36:f3:1e:e8:80:ef:45:ed:
                    07:d5:f2:a7:0f:59:77:6d:33:8d:f8:f6:22:66:95:
                    ad:21:23:64:99:32:3a:11:c4:11:60:23:16:ca:51:
                    3c:10:88:81:60:2f:7a:a9:33:e0:0b:92:c2:52:66:
                    8f:35:cd:bc:7f:ce:3e:e7:4a:63:11:7c:1e:00:78:
                    b8:81:96:e6:6d:32:b3:6e:2f:91:bd:55:f8:02:d6:
                    af:b4:30:b2:6d:60:f4:bb:70:6c:1a:f7:25:50:c7:
                    3c:e9:8c:3f:29:af:01:a0:a1:80:c1:86:c0:08:e0:
                    72:ff:17:57:32:a5:e9:32:f4:ac:76:06:05:21:6c:
                    60:94:10:3b:4a:be:e8:25:6c:37:0d:ac:0e:fe:f7:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:55:CB:75:EB:87:66:88:3C:32:90:E2:22:14:48:D9:87:A6:76:47
            X509v3 Authority Key Identifier:
                keyid:98:2D:A1:9A:C0:84:87:99:D2:A3:01:B4:78:24:DB:A9:7B:1A:23:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/982DA19AC0848799D2A301B47824DBA97B1A2364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/982DA19AC0848799D2A301B47824DBA97B1A2364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6zwou2pBNSuBJXMvVbp3BUt8JbAzFewaKwmC9NWkkw3E/0/3138312e3139312e3133322e302f32322d3332203d3e20323637343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:06:7f:51:4e:8c:bb:3c:9c:f6:ba:30:c9:db:7a:ef:98:
         c6:e4:dd:b8:08:21:02:15:49:5d:7f:1c:50:06:54:d9:14:35:
         10:79:55:1d:2a:48:d4:2f:36:06:8d:a2:d3:c6:33:db:2f:a0:
         6f:9c:71:85:14:81:8e:94:e8:5a:9b:bd:89:1e:c9:53:c3:6c:
         ad:28:da:65:ac:19:3b:45:91:03:f5:fe:b4:f2:07:ad:c2:d8:
         96:98:ed:3f:27:c5:d9:2f:25:d1:24:32:e2:a2:9c:2b:d1:e6:
         da:c1:78:ae:0e:18:7f:99:87:d4:f4:3d:0d:24:72:05:72:88:
         f4:93:90:1c:97:69:9f:a9:95:8d:e3:bb:39:b4:36:65:99:9a:
         d8:1c:2a:8c:3d:5c:6c:1a:ed:46:57:84:db:3a:cc:3c:ab:33:
         96:57:25:4e:36:79:04:3a:72:15:e9:eb:bc:b0:a7:66:0d:74:
         bb:6c:de:ed:bb:a8:27:47:f0:e4:c9:9f:42:d1:7b:9d:d4:a1:
         63:aa:b8:6e:4a:b1:75:7b:39:ad:30:70:07:5a:bf:b5:83:94:
         97:37:76:bf:c6:19:e6:a1:31:00:fe:b4:10:a6:e9:22:12:34:
         18:02:78:92:19:7b:38:b1:21:e2:42:41:df:95:f0:b8:5d:b4:
         7a:15:2e:cd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVLr1+K8N/2UUVKMXJQJxJ2wzwQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgyREExOUFDMDg0ODc5OUQyQTMwMUI0NzgyNERCQTk3
QjFBMjM2NDAeFw0yNjA3MTMxNDM3NTBaFw0yNzA3MTIxNDQyNTBaMDMxMTAvBgNV
BAMTKEIzNTVDQjc1RUI4NzY2ODgzQzMyOTBFMjIyMTQ0OEQ5ODdBNjc2NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7rQuNhTfxwudoMzkg+KSKx/4
/2UYf40IJtkiU1pQE3FwdgRfXdbSNRa/t1wU82WQoPwRuPWdkIki+F9laP7S87Jo
jASgb9GSoahUHB4GRGSnaFYa9j9zO9W6B2fl2vUU3hZ0j/jRgUPMl1ryKHg28x7o
gO9F7QfV8qcPWXdtM4349iJmla0hI2SZMjoRxBFgIxbKUTwQiIFgL3qpM+ALksJS
Zo81zbx/zj7nSmMRfB4AeLiBluZtMrNuL5G9VfgC1q+0MLJtYPS7cGwa9yVQxzzp
jD8prwGgoYDBhsAI4HL/F1cypeky9Kx2BgUhbGCUEDtKvuglbDcNrA7+94TNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUs1XLdeuHZog8MpDiIhRI2YemdkcwHwYDVR0j
BBgwFoAUmC2hmsCEh5nSowG0eCTbqXsaI2QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnp3b3UycEJOU3VCSlhNdlZicDNCVXQ4SmJBekZld2FLd21DOU5Xa2t3
M0UvMC85ODJEQTE5QUMwODQ4Nzk5RDJBMzAxQjQ3ODI0REJBOTdCMUEyMzY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MkRBMTlBQzA4NDg3OTlE
MkEzMDFCNDc4MjREQkE5N0IxQTIzNjQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ6d291MnBCTlN1QkpYTXZWYnAzQlV0OEpiQXpGZXdhS3dtQzlOV2trdzNFLzAv
MzEzODMxMmUzMTM5MzEyZTMxMzMzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNzM0MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/hDANBgkqhkiG9w0BAQsFAAOCAQEAe/oG
f1FOjLs8nPa6MMnbeu+YxuTduAghAhVJXX8cUAZU2RQ1EHlVHSpI1C82Bo2i08Yz
2y+gb5xxhRSBjpToWpu9iR7JU8NsrSjaZawZO0WRA/X+tPIHrcLYlpjtPyfF2S8l
0SQy4qKcK9Hm2sF4rg4Yf5mH1PQ9DSRyBXKI9JOQHJdpn6mVjeO7ObQ2ZZma2Bwq
jD1cbBrtRleE2zrMPKszllclTjZ5BDpyFenrvLCnZg10u2ze7buoJ0fw5MmfQtF7
ndShY6q4bkqxdXs5rTBwB1q/tYOUlzd2v8YZ5qExAP60EKbpIhI0GAJ4khl7OLEh
4kJB35XwuF20ehUuzQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:44:26 2026 by rpki-client