Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32332d3233203d3e20323635393037.roa
File:                     3133312e3139362e38342e302f32332d3233203d3e20323635393037.roa (raw, json)
Hash identifier:          h8pyY0hThZUme5QIcSZQHT8vVMJER2HiLjfs3IQVk1Q=
Subject key identifier:   90:E0:48:98:6B:18:98:D4:7D:4C:01:0E:BF:1D:E2:15:EF:27:C9:EB
Certificate issuer:       /CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
Certificate serial:       0BA714A80040CA1E35D90FE33A2D1021F35D0636
Authority key identifier: EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32332d3233203d3e20323635393037.roa
Signing time:             Tue 15 Sep 2026 16:06:19 +0000
ROA not before:           Tue 15 Sep 2026 16:01:19 +0000
ROA not after:            Tue 14 Sep 2027 16:06:19 +0000
asID:                     265907
IP address blocks:        131.196.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl
                          rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 20:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a7:14:a8:00:40:ca:1e:35:d9:0f:e3:3a:2d:10:21:f3:5d:06:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5BF2EC074D0E63B322D0CF324BA363B0D56A63
        Validity
            Not Before: Sep 15 16:01:19 2026 GMT
            Not After : Sep 14 16:06:19 2027 GMT
        Subject: CN=90E048986B1898D47D4C010EBF1DE215EF27C9EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:dc:f4:24:c6:20:7d:a8:c6:3e:f0:e5:e6:
                    58:d0:23:ee:75:94:9d:f0:38:9b:57:1d:83:ea:43:
                    57:6b:b5:d4:ec:a2:bb:03:b1:fe:a4:97:05:99:4c:
                    aa:fb:b5:f4:be:c9:7e:ff:df:99:62:09:14:5e:c5:
                    9e:8f:d7:c2:9c:e0:3e:dc:9c:13:1c:7d:36:8c:b2:
                    21:b9:a5:2b:05:1e:88:13:35:ee:9d:50:8a:18:b2:
                    57:54:a6:90:03:f9:57:6b:12:2f:63:af:e2:a0:62:
                    df:bc:39:55:10:b1:fc:77:0a:49:e6:7c:2d:ad:4b:
                    ef:a1:a5:3e:52:12:1e:c2:17:42:8c:41:7b:e9:b8:
                    c1:b9:1a:aa:38:02:41:1c:39:8c:e8:38:64:9d:1e:
                    56:f7:38:a0:78:d4:3e:82:65:87:5f:b7:36:c1:56:
                    49:0f:0f:50:b2:bb:5f:5e:dc:b4:ea:b3:ad:a7:0e:
                    04:e7:1e:6b:3e:1b:b3:98:a6:9c:e2:d4:6d:89:2d:
                    53:37:7a:c7:cd:fd:bf:17:06:3d:a5:c4:a1:39:03:
                    c0:31:1d:1c:f6:38:c0:4c:67:fc:56:45:d1:e8:6d:
                    3e:76:d4:ea:36:b6:fd:a4:42:7b:ae:55:45:be:fc:
                    c3:8a:14:f6:18:2a:a7:4f:18:48:fe:0c:14:1b:b5:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E0:48:98:6B:18:98:D4:7D:4C:01:0E:BF:1D:E2:15:EF:27:C9:EB
            X509v3 Authority Key Identifier:
                keyid:EE:5B:F2:EC:07:4D:0E:63:B3:22:D0:CF:32:4B:A3:63:B0:D5:6A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE5BF2EC074D0E63B322D0CF324BA363B0D56A63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84LyusvGFFJCkLqdwDE46TqQ9MUBa1KHUH7E7XSpPMKZ/0/3133312e3139362e38342e302f32332d3233203d3e20323635393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:89:ee:b7:02:25:d2:13:c8:e1:5f:e2:ba:92:bf:07:ed:4b:
         c1:1b:5a:7b:36:68:b5:ea:33:b4:af:cc:32:31:e6:33:44:39:
         93:49:17:1e:cb:66:59:a9:fe:71:e8:b2:7c:04:4f:70:92:ce:
         1e:c9:e5:59:c4:6a:4a:ff:6d:80:dc:8b:15:e9:26:04:79:96:
         45:eb:37:26:0b:b0:cf:3c:38:65:42:08:8a:c5:24:aa:25:fc:
         44:13:03:8c:e4:7e:45:1f:41:7f:71:2b:fa:1f:8f:b6:73:a4:
         bf:ac:f9:51:e8:d6:03:97:56:44:24:8e:98:97:c8:1b:e9:05:
         f6:a6:85:3b:cf:16:e0:58:2e:43:f1:01:a7:78:2a:17:36:76:
         8e:b8:9a:de:9e:d4:88:15:32:9c:86:44:11:d6:49:39:8b:0c:
         55:a5:d6:02:97:0d:57:24:51:11:97:ae:73:2b:ff:02:76:16:
         e3:ab:93:c9:5b:6d:dc:e0:4a:fc:d6:23:6e:f4:2a:1e:6b:47:
         dc:f6:d1:c4:34:36:48:ed:99:6f:2f:a0:0d:67:62:36:31:74:
         c8:b1:4e:44:39:bc:12:da:45:76:6d:1d:0b:15:b6:33:10:b9:
         bd:dc:2f:a0:5a:38:d9:19:47:15:b0:33:14:94:ee:bb:53:45:
         a6:a5:c6:01
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC6cUqABAyh412Q/jOi0QIfNdBjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU1QkYyRUMwNzREMEU2M0IzMjJEMENGMzI0QkEzNjNC
MEQ1NkE2MzAeFw0yNjA5MTUxNjAxMTlaFw0yNzA5MTQxNjA2MTlaMDMxMTAvBgNV
BAMTKDkwRTA0ODk4NkIxODk4RDQ3RDRDMDEwRUJGMURFMjE1RUYyN0M5RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3dz0JMYgfajGPvDl5ljQI+51
lJ3wOJtXHYPqQ1drtdTsorsDsf6klwWZTKr7tfS+yX7/35liCRRexZ6P18Kc4D7c
nBMcfTaMsiG5pSsFHogTNe6dUIoYsldUppAD+VdrEi9jr+KgYt+8OVUQsfx3Cknm
fC2tS++hpT5SEh7CF0KMQXvpuMG5Gqo4AkEcOYzoOGSdHlb3OKB41D6CZYdftzbB
VkkPD1Cyu19e3LTqs62nDgTnHms+G7OYppzi1G2JLVM3esfN/b8XBj2lxKE5A8Ax
HRz2OMBMZ/xWRdHobT521Oo2tv2kQnuuVUW+/MOKFPYYKqdPGEj+DBQbtbkJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkOBImGsYmNR9TAEOvx3iFe8nyeswHwYDVR0j
BBgwFoAU7lvy7AdNDmOzItDPMkujY7DVamMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRMeXVzdkdGRkpDa0xxZHdERTQ2VHFROU1VQmExS0hVSDdFN1hTcFBN
S1ovMC9FRTVCRjJFQzA3NEQwRTYzQjMyMkQwQ0YzMjRCQTM2M0IwRDU2QTYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VFNUJGMkVDMDc0RDBFNjNC
MzIyRDBDRjMyNEJBMzYzQjBENTZBNjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0THl1c3ZHRkZKQ2tMcWR3REU0NlRxUTlNVUJhMUtIVUg3RTdYU3BQTUtaLzAv
MzEzMzMxMmUzMTM5MzYyZTM4MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzUzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDxFQwDQYJKoZIhvcNAQELBQADggEBAE+J7rcC
JdITyOFf4rqSvwftS8EbWns2aLXqM7SvzDIx5jNEOZNJFx7LZlmp/nHosnwET3CS
zh7J5VnEakr/bYDcixXpJgR5lkXrNyYLsM88OGVCCIrFJKol/EQTA4zkfkUfQX9x
K/ofj7ZzpL+s+VHo1gOXVkQkjpiXyBvpBfamhTvPFuBYLkPxAad4Khc2do64mt6e
1IgVMpyGRBHWSTmLDFWl1gKXDVckURGXrnMr/wJ2FuOrk8lbbdzgSvzWI270Kh5r
R9z20cQ0NkjtmW8voA1nYjYxdMixTkQ5vBLaRXZtHQsVtjMQub3cL6BaONkZRxWw
MxSU7rtTRaalxgE=
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:45:46 2026 by rpki-client