Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32332d3233203d3e20323733343336.roa
File:                     3138392e33382e32322e302f32332d3233203d3e20323733343336.roa (raw, json)
Hash identifier:          BKpmV/+r4kL/YMJbnOWcL+j7WX2usO1ABuFmRQRI8T8=
Subject key identifier:   48:75:04:7D:75:1F:0A:AA:4D:82:91:2D:5A:79:4E:48:67:65:E8:FB
Certificate issuer:       /CN=BD1E87C8514998E362292741C70F693178FDD20E
Certificate serial:       4E60809E9A0BB089438CD80A81F21E56563E1459
Authority key identifier: BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32332d3233203d3e20323733343336.roa
Signing time:             Thu 23 Apr 2026 17:07:10 +0000
ROA not before:           Thu 23 Apr 2026 17:02:10 +0000
ROA not after:            Thu 22 Apr 2027 17:07:10 +0000
asID:                     273436
IP address blocks:        189.38.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl
                          rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:60:80:9e:9a:0b:b0:89:43:8c:d8:0a:81:f2:1e:56:56:3e:14:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD1E87C8514998E362292741C70F693178FDD20E
        Validity
            Not Before: Apr 23 17:02:10 2026 GMT
            Not After : Apr 22 17:07:10 2027 GMT
        Subject: CN=4875047D751F0AAA4D82912D5A794E486765E8FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:1c:8b:23:ae:6a:4d:c4:22:d2:4f:2a:a8:
                    54:14:9b:be:b8:d6:ce:18:46:0f:2e:33:d1:93:5e:
                    f8:7d:25:02:7d:8e:08:ea:28:e5:a6:10:e1:d7:e5:
                    36:b7:29:73:08:95:64:76:27:ee:c2:d2:7a:b7:4c:
                    84:10:60:ca:49:18:c3:d5:7c:4d:b5:eb:b5:1a:ab:
                    e3:2a:14:66:5b:94:a8:36:72:24:86:40:84:5b:d5:
                    1a:1b:45:a2:90:65:c6:2f:c4:09:91:18:6a:41:20:
                    0d:20:9d:20:0f:f6:6a:89:46:ce:7e:60:80:44:99:
                    4d:8a:e0:12:a9:aa:a3:bc:3d:73:29:21:e9:95:99:
                    12:33:27:74:2a:f7:7a:5e:b8:57:bd:4a:70:e9:62:
                    9b:96:16:7d:0a:95:ac:1b:b9:da:8e:df:f1:0c:96:
                    25:aa:71:d2:30:3c:84:d7:5f:4f:7a:72:31:42:b1:
                    25:28:7d:5f:f8:e0:fd:80:07:ef:36:01:37:fd:37:
                    2a:70:3e:4f:19:27:2f:04:6d:62:54:df:7a:22:9a:
                    53:df:60:ce:37:6c:8e:aa:81:e5:91:a5:5d:85:a7:
                    fb:c3:8c:a4:f7:aa:d5:cd:35:8f:2d:ee:ad:8d:2c:
                    6e:64:2b:1b:96:3f:0c:88:89:37:b1:1d:33:81:17:
                    26:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:75:04:7D:75:1F:0A:AA:4D:82:91:2D:5A:79:4E:48:67:65:E8:FB
            X509v3 Authority Key Identifier:
                keyid:BD:1E:87:C8:51:49:98:E3:62:29:27:41:C7:0F:69:31:78:FD:D2:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/BD1E87C8514998E362292741C70F693178FDD20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD1E87C8514998E362292741C70F693178FDD20E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/3138392e33382e32322e302f32332d3233203d3e20323733343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:11:2e:e1:a7:fc:58:c9:5c:b1:0c:b2:7f:9e:29:ec:90:72:
         f1:cb:f0:7f:8f:cd:45:b9:f2:3f:2f:a0:aa:81:b5:6a:e6:65:
         b9:e4:a2:84:90:51:87:03:0f:4d:fc:9b:ea:3e:d1:31:18:7f:
         5a:49:bd:7c:85:be:80:86:81:c0:a0:e8:37:47:94:99:25:64:
         9a:d7:a7:b1:24:65:63:10:5f:1e:bc:f2:7e:f0:5d:8a:a3:01:
         6a:a6:49:80:6a:2c:4a:bc:a8:dd:a3:c0:e6:8f:cf:0a:67:7e:
         7f:d9:cd:5d:8c:2a:5a:0b:b8:7c:97:ae:50:9d:b8:02:a9:ab:
         6b:bc:43:b3:51:78:9d:11:a1:9e:ef:3f:c4:d2:3e:b4:8f:55:
         30:fe:63:12:9d:41:6b:f5:f5:e1:a2:11:d1:ae:0e:77:99:58:
         f4:60:1f:84:79:e7:af:1f:04:a8:35:5c:ea:0f:87:c3:2b:cd:
         b7:a6:46:7d:ec:c8:90:02:d2:e1:c8:8d:de:40:9b:fc:73:b3:
         12:70:26:6e:45:ca:01:64:ce:9d:95:64:a1:d6:63:3b:d2:2a:
         4c:fb:e8:96:12:26:62:ef:e6:62:3c:f4:69:fa:e0:d1:94:96:
         50:41:8e:50:c3:a9:97:e2:78:5e:71:8d:40:7a:7d:f2:28:e5:
         04:4e:0c:bb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTmCAnpoLsIlDjNgKgfIeVlY+FFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQxRTg3Qzg1MTQ5OThFMzYyMjkyNzQxQzcwRjY5MzE3
OEZERDIwRTAeFw0yNjA0MjMxNzAyMTBaFw0yNzA0MjIxNzA3MTBaMDMxMTAvBgNV
BAMTKDQ4NzUwNDdENzUxRjBBQUE0RDgyOTEyRDVBNzk0RTQ4Njc2NUU4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yxyLI65qTcQi0k8qqFQUm764
1s4YRg8uM9GTXvh9JQJ9jgjqKOWmEOHX5Ta3KXMIlWR2J+7C0nq3TIQQYMpJGMPV
fE2167Uaq+MqFGZblKg2ciSGQIRb1RobRaKQZcYvxAmRGGpBIA0gnSAP9mqJRs5+
YIBEmU2K4BKpqqO8PXMpIemVmRIzJ3Qq93peuFe9SnDpYpuWFn0KlawbudqO3/EM
liWqcdIwPITXX096cjFCsSUofV/44P2AB+82ATf9NypwPk8ZJy8EbWJU33oimlPf
YM43bI6qgeWRpV2Fp/vDjKT3qtXNNY8t7q2NLG5kKxuWPwyIiTexHTOBFybDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSHUEfXUfCqpNgpEtWnlOSGdl6PswHwYDVR0j
BBgwFoAUvR6HyFFJmONiKSdBxw9pMXj90g4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0NHV0x1YW1XQlJTWnJ6eUFWZzZyd1BhOGQ2NWhvN2FnNEY5Wnl4WkJj
NU4vMC9CRDFFODdDODUxNDk5OEUzNjIyOTI3NDFDNzBGNjkzMTc4RkREMjBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEMUU4N0M4NTE0OTk4RTM2
MjI5Mjc0MUM3MEY2OTMxNzhGREQyMEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdDR1dMdWFtV0JSU1pyenlBVmc2cndQYThkNjVobzdhZzRGOVp5eFpCYzVOLzAv
MzEzODM5MmUzMzM4MmUzMjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMz
MzQzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBvSYWMA0GCSqGSIb3DQEBCwUAA4IBAQBRES7hp/xY
yVyxDLJ/ninskHLxy/B/j81FufI/L6CqgbVq5mW55KKEkFGHAw9N/JvqPtExGH9a
Sb18hb6AhoHAoOg3R5SZJWSa16exJGVjEF8evPJ+8F2KowFqpkmAaixKvKjdo8Dm
j88KZ35/2c1djCpaC7h8l65QnbgCqatrvEOzUXidEaGe7z/E0j60j1Uw/mMSnUFr
9fXhohHRrg53mVj0YB+EeeevHwSoNVzqD4fDK823pkZ97MiQAtLhyI3eQJv8c7MS
cCZuRcoBZM6dlWSh1mM70ipM++iWEiZi7+ZiPPRp+uDRlJZQQY5Qw6mX4nhecY1A
en3yKOUETgy7
-----END CERTIFICATE-----
Generated at Wed May 13 18:39:58 2026 by rpki-client