Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
File:                     3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa (raw, json)
Hash identifier:          /cH2qBt4TTZgNwAbCJXb6Raw4qz+XC/069q2ApMDQeQ=
Subject key identifier:   A9:21:F0:31:63:CE:73:99:92:C3:3A:39:B9:F9:E7:B0:FF:76:F2:46
Certificate issuer:       /CN=7BDBC337C92FD00887738D70F5C844F569B22491
Certificate serial:       43BAFAF6D074799003D277EC887A32610D22BF04
Authority key identifier: 7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa
Signing time:             Fri 23 Oct 2026 18:05:17 +0000
ROA not before:           Fri 23 Oct 2026 18:00:17 +0000
ROA not after:            Fri 22 Oct 2027 18:05:17 +0000
asID:                     262690
IP address blocks:        187.87.240.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl
                          rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 23:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ba:fa:f6:d0:74:79:90:03:d2:77:ec:88:7a:32:61:0d:22:bf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7BDBC337C92FD00887738D70F5C844F569B22491
        Validity
            Not Before: Oct 23 18:00:17 2026 GMT
            Not After : Oct 22 18:05:17 2027 GMT
        Subject: CN=A921F03163CE739992C33A39B9F9E7B0FF76F246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:29:31:b2:4b:e5:ff:b8:6d:49:07:fe:80:
                    3a:1e:2b:bd:87:6c:1a:99:f9:6f:6a:d4:33:d8:9b:
                    ea:66:20:27:1d:35:1c:e1:86:b7:f8:08:d7:0f:0c:
                    f9:5c:1f:af:76:c4:a1:30:b1:4d:c8:31:07:66:e1:
                    a4:86:37:3c:99:a6:67:48:56:06:40:88:1c:56:6c:
                    98:72:38:d9:95:ad:fd:20:12:69:83:c2:44:71:23:
                    6b:34:fd:a8:30:04:ba:3b:cf:03:40:ec:8c:2d:21:
                    a0:43:ad:af:5a:14:93:9d:01:03:18:56:2b:43:ff:
                    72:f4:3b:4a:0a:df:f3:fc:37:fe:fc:ca:d3:7c:26:
                    32:43:ee:06:e9:13:94:a6:b4:21:ea:47:39:60:1b:
                    2d:1f:34:dd:7c:00:de:8e:eb:60:2a:52:d6:26:74:
                    1a:f5:3c:71:dd:b3:4f:86:8c:ed:bc:c1:e6:88:cc:
                    8d:87:b3:29:62:4c:35:36:43:35:2c:11:0a:29:c7:
                    6c:52:7f:2a:fd:49:1c:9b:fc:bc:65:86:f8:3d:b0:
                    a9:93:79:18:ac:8e:65:cd:57:82:dc:d6:b3:8b:2c:
                    2a:90:61:3f:b2:56:ed:fc:95:0f:b1:fe:f2:f5:56:
                    bd:ca:f3:ff:ae:70:b3:c9:7d:2f:0a:f9:32:15:bb:
                    ef:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:21:F0:31:63:CE:73:99:92:C3:3A:39:B9:F9:E7:B0:FF:76:F2:46
            X509v3 Authority Key Identifier:
                keyid:7B:DB:C3:37:C9:2F:D0:08:87:73:8D:70:F5:C8:44:F5:69:B2:24:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/7BDBC337C92FD00887738D70F5C844F569B22491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7BDBC337C92FD00887738D70F5C844F569B22491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/82zruaSTdacU1aPsACJG8mqWcP7kW6JQxfFyXmyrpNmZ/0/3138372e38372e3234302e302f32302d3232203d3e20323632363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:6f:8b:c7:a8:e9:37:62:7f:9a:e7:07:6c:3c:c5:81:a3:
         b5:ba:27:4a:81:51:05:5f:34:97:44:b9:fd:b3:57:99:1f:62:
         6a:b0:d2:55:1f:d6:80:4b:8b:40:20:0f:f2:6f:76:75:45:40:
         01:63:07:68:c8:07:f9:f5:e4:3e:6a:ef:a0:6c:4c:59:3a:7d:
         3e:9c:e5:1b:d0:27:33:be:f8:2a:b3:7f:74:75:5b:51:c6:a8:
         e9:9a:b1:bd:3d:d4:04:ec:46:8f:4c:50:f4:40:ab:5e:dd:ba:
         ed:2c:ea:4d:ba:85:b5:c6:af:67:6c:c1:b6:58:60:45:5e:e1:
         9c:96:91:37:90:8c:8b:2f:4a:e8:27:fd:d4:c3:a7:f3:da:6e:
         18:a3:2f:4a:e1:8e:b8:07:4e:2c:0b:13:a0:6c:c6:4a:81:d3:
         27:7f:0f:96:95:90:b7:6e:33:a4:2d:b9:86:6b:5c:d2:86:27:
         4a:16:a0:fb:08:12:73:f6:e4:52:7c:94:cb:e0:5d:91:7b:93:
         51:c3:1d:2c:7b:ee:87:02:2b:34:18:0f:23:d1:10:75:bb:d0:
         b8:c5:51:b8:0a:7d:5d:63:19:78:db:16:42:a2:51:8c:bb:e7:
         a7:15:48:e2:13:dc:1e:d1:cb:89:10:c4:13:7e:4a:45:c6:e1:
         c7:6f:02:d7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ7r69tB0eZAD0nfsiHoyYQ0ivwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0JEQkMzMzdDOTJGRDAwODg3NzM4RDcwRjVDODQ0RjU2
OUIyMjQ5MTAeFw0yNjEwMjMxODAwMTdaFw0yNzEwMjIxODA1MTdaMDMxMTAvBgNV
BAMTKEE5MjFGMDMxNjNDRTczOTk5MkMzM0EzOUI5RjlFN0IwRkY3NkYyNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbCkxskvl/7htSQf+gDoeK72H
bBqZ+W9q1DPYm+pmICcdNRzhhrf4CNcPDPlcH692xKEwsU3IMQdm4aSGNzyZpmdI
VgZAiBxWbJhyONmVrf0gEmmDwkRxI2s0/agwBLo7zwNA7IwtIaBDra9aFJOdAQMY
VitD/3L0O0oK3/P8N/78ytN8JjJD7gbpE5SmtCHqRzlgGy0fNN18AN6O62AqUtYm
dBr1PHHds0+GjO28weaIzI2HsyliTDU2QzUsEQopx2xSfyr9SRyb/Lxlhvg9sKmT
eRisjmXNV4Lc1rOLLCqQYT+yVu38lQ+x/vL1Vr3K8/+ucLPJfS8K+TIVu+8DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqSHwMWPOc5mSwzo5ufnnsP928kYwHwYDVR0j
BBgwFoAUe9vDN8kv0AiHc41w9chE9WmyJJEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODJ6cnVhU1RkYWNVMWFQc0FDSkc4bXFXY1A3a1c2SlF4ZkZ5WG15cnBO
bVovMC83QkRCQzMzN0M5MkZEMDA4ODc3MzhENzBGNUM4NDRGNTY5QjIyNDkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdCREJDMzM3QzkyRkQwMDg4
NzczOEQ3MEY1Qzg0NEY1NjlCMjI0OTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzgyenJ1YVNUZGFjVTFhUHNBQ0pHOG1xV2NQN2tXNkpReGZGeVhteXJwTm1aLzAv
MzEzODM3MmUzODM3MmUzMjM0MzAyZTMwMmYzMjMwMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7V/AwDQYJKoZIhvcNAQELBQADggEBADe0b4vH
qOk3Yn+a5wdsPMWBo7W6J0qBUQVfNJdEuf2zV5kfYmqw0lUf1oBLi0AgD/JvdnVF
QAFjB2jIB/n15D5q76BsTFk6fT6c5RvQJzO++Cqzf3R1W1HGqOmasb091ATsRo9M
UPRAq17duu0s6k26hbXGr2dswbZYYEVe4ZyWkTeQjIsvSugn/dTDp/PabhijL0rh
jrgHTiwLE6BsxkqB0yd/D5aVkLduM6QtuYZrXNKGJ0oWoPsIEnP25FJ8lMvgXZF7
k1HDHSx77ocCKzQYDyPREHW70LjFUbgKfV1jGXjbFkKiUYy756cVSOIT3B7Ry4kQ
xBN+SkXG4cdvAtc=
-----END CERTIFICATE-----
Generated at Sun Nov 1 06:03:12 2026 by rpki-client