Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3134392e302f32342d3234203d3e203533313031.roa
File:                     3138372e3130332e3134392e302f32342d3234203d3e203533313031.roa (raw, json)
Hash identifier:          Wanu1aUQEj/v5wzhUoHChmxcyC8vQE8rWj9KiSEo4iQ=
Subject key identifier:   74:93:5E:16:19:42:4B:70:95:95:EA:E5:B6:0A:F3:3D:C3:CD:5E:9F
Certificate issuer:       /CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
Certificate serial:       5D16F9AD9821FB968386AD81D8D9E8B4B4C95DEF
Authority key identifier: C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3134392e302f32342d3234203d3e203533313031.roa
Signing time:             Fri 18 Sep 2026 11:53:40 +0000
ROA not before:           Fri 18 Sep 2026 11:48:40 +0000
ROA not after:            Fri 17 Sep 2027 11:53:40 +0000
asID:                     53101
IP address blocks:        187.103.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl
                          rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:57:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:16:f9:ad:98:21:fb:96:83:86:ad:81:d8:d9:e8:b4:b4:c9:5d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE
        Validity
            Not Before: Sep 18 11:48:40 2026 GMT
            Not After : Sep 17 11:53:40 2027 GMT
        Subject: CN=74935E1619424B709595EAE5B60AF33DC3CD5E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:67:35:2b:b3:f2:4b:71:b3:51:33:92:6f:
                    96:56:85:11:6c:a9:8d:b1:c6:bc:52:41:b4:03:c9:
                    a1:35:c6:5b:0a:83:18:77:a0:d7:11:44:c6:ee:1b:
                    6d:3e:1e:d5:0d:c0:fb:ba:30:c5:53:9f:eb:9a:9a:
                    a9:08:68:68:89:d1:14:24:6e:23:fd:5f:d1:81:67:
                    54:d3:24:47:b4:b7:ef:2d:44:c1:5f:bc:f9:61:b4:
                    4e:3f:27:71:bc:18:0a:1f:d2:eb:fc:dc:9e:ab:e7:
                    de:c5:82:8a:55:15:f4:6f:ca:5f:34:c4:a5:65:7a:
                    f2:4b:b3:52:d3:12:b6:8a:17:67:4d:bb:60:ae:53:
                    e4:3c:8d:13:a6:c9:71:ca:66:78:d4:cd:23:6a:1d:
                    2a:03:bd:d5:8f:7b:45:50:8e:9a:ce:9e:75:f5:9e:
                    ef:9b:fa:2c:58:d7:1a:cb:9c:70:d8:5e:e9:df:33:
                    3d:f3:70:82:91:c7:07:a0:63:65:bf:79:d6:5a:73:
                    4a:45:58:53:10:b6:60:ef:4b:42:ff:4f:14:f5:90:
                    04:d6:ae:23:6c:51:3d:62:50:87:c8:73:d4:4b:ea:
                    cb:da:01:44:fb:bd:60:3f:fa:3c:50:f3:21:16:ea:
                    8e:91:42:ca:eb:4b:77:23:97:35:0d:f7:00:33:34:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:93:5E:16:19:42:4B:70:95:95:EA:E5:B6:0A:F3:3D:C3:CD:5E:9F
            X509v3 Authority Key Identifier:
                keyid:C5:3D:9E:6D:AA:8E:F4:A0:CD:81:4E:2F:7A:8E:FA:82:FD:65:63:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C53D9E6DAA8EF4A0CD814E2F7A8EFA82FD6563EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7HaEUMvvXQmKsLwvgujMn5HYzBkRVRaLPosukoGvi2Z1/0/3138372e3130332e3134392e302f32342d3234203d3e203533313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:7c:89:ad:72:c6:c2:8d:2a:5b:a4:6d:c8:0d:45:95:93:3d:
         0c:3a:3a:fe:94:4c:0c:fe:aa:fd:7e:f6:c8:55:43:f9:d8:17:
         21:b0:d4:30:d1:7d:93:05:74:75:05:17:a3:7a:86:37:fe:d2:
         98:39:e1:96:24:f1:19:b4:e2:99:fe:90:6c:ab:71:d3:73:11:
         86:fa:9f:7c:67:2d:26:94:61:b7:3b:74:30:68:ef:bd:7a:29:
         c0:50:06:44:69:d3:9e:13:2d:06:13:78:15:05:93:74:87:b5:
         22:9f:60:88:a1:93:7c:6b:5b:da:98:c0:a3:bc:63:28:e5:50:
         75:f0:26:8b:13:c3:cb:ed:86:39:4b:3a:b4:e8:13:d0:00:b9:
         2e:5d:00:1c:b2:92:a6:45:73:76:04:f5:27:5d:d5:1f:4f:1f:
         62:03:48:73:a4:5b:0b:98:47:66:32:95:09:7e:7b:be:8a:ed:
         95:d7:ce:91:42:d0:91:3e:9e:06:aa:f4:38:2d:7d:82:ca:af:
         c7:b8:ba:a1:46:0f:c0:fa:96:33:42:1c:f6:ca:db:c6:e7:8d:
         5c:0a:74:99:65:c4:a4:ee:85:c9:2c:36:a0:72:31:cd:a2:9b:
         4d:43:b8:81:48:81:70:3f:51:5a:c6:af:54:7b:71:b8:b2:70:
         c8:29:29:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXRb5rZgh+5aDhq2B2NnotLTJXe8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUzRDlFNkRBQThFRjRBMENEODE0RTJGN0E4RUZBODJG
RDY1NjNFRTAeFw0yNjA5MTgxMTQ4NDBaFw0yNzA5MTcxMTUzNDBaMDMxMTAvBgNV
BAMTKDc0OTM1RTE2MTk0MjRCNzA5NTk1RUFFNUI2MEFGMzNEQzNDRDVFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptWc1K7PyS3GzUTOSb5ZWhRFs
qY2xxrxSQbQDyaE1xlsKgxh3oNcRRMbuG20+HtUNwPu6MMVTn+uamqkIaGiJ0RQk
biP9X9GBZ1TTJEe0t+8tRMFfvPlhtE4/J3G8GAof0uv83J6r597FgopVFfRvyl80
xKVlevJLs1LTEraKF2dNu2CuU+Q8jROmyXHKZnjUzSNqHSoDvdWPe0VQjprOnnX1
nu+b+ixY1xrLnHDYXunfMz3zcIKRxwegY2W/edZac0pFWFMQtmDvS0L/TxT1kATW
riNsUT1iUIfIc9RL6svaAUT7vWA/+jxQ8yEW6o6RQsrrS3cjlzUN9wAzNIrfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdJNeFhlCS3CVlerltgrzPcPNXp8wHwYDVR0j
BBgwFoAUxT2ebaqO9KDNgU4veo76gv1lY+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0hhRVVNdnZYUW1Lc0x3dmd1ak1uNUhZekJrUlZSYUxQb3N1a29Hdmky
WjEvMC9DNTNEOUU2REFBOEVGNEEwQ0Q4MTRFMkY3QThFRkE4MkZENjU2M0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M1M0Q5RTZEQUE4RUY0QTBD
RDgxNEUyRjdBOEVGQTgyRkQ2NTYzRUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdIYUVVTXZ2WFFtS3NMd3ZndWpNbjVIWXpCa1JWUmFMUG9zdWtvR3ZpMloxLzAv
MzEzODM3MmUzMTMwMzMyZTMxMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Z5UwDQYJKoZIhvcNAQELBQADggEBAKt8ia1y
xsKNKlukbcgNRZWTPQw6Ov6UTAz+qv1+9shVQ/nYFyGw1DDRfZMFdHUFF6N6hjf+
0pg54ZYk8Rm04pn+kGyrcdNzEYb6n3xnLSaUYbc7dDBo7716KcBQBkRp054TLQYT
eBUFk3SHtSKfYIihk3xrW9qYwKO8YyjlUHXwJosTw8vthjlLOrToE9AAuS5dAByy
kqZFc3YE9Sdd1R9PH2IDSHOkWwuYR2YylQl+e76K7ZXXzpFC0JE+ngaq9DgtfYLK
r8e4uqFGD8D6ljNCHPbK28bnjVwKdJllxKTuhcksNqByMc2im01DuIFIgXA/UVrG
r1R7cbiycMgpKXI=
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:49:56 2026 by rpki-client