Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
File:                     3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa (raw, json)
Hash identifier:          gkMQE2ODW9M5V0ZV8mkJHyj6j9YxjKFVwyjLGau/7K8=
Subject key identifier:   BD:F4:E3:DE:10:58:39:0E:B6:95:CD:4D:F1:96:2D:9A:F6:26:80:70
Certificate issuer:       /CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
Certificate serial:       34FE32568E2E0234B3C2604F53C5903B29572E3C
Authority key identifier: E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa
Signing time:             Wed 29 Apr 2026 17:35:21 +0000
ROA not before:           Wed 29 Apr 2026 17:30:21 +0000
ROA not after:            Wed 28 Apr 2027 17:35:21 +0000
asID:                     263544
IP address blocks:        168.227.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl
                          rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fe:32:56:8e:2e:02:34:b3:c2:60:4f:53:c5:90:3b:29:57:2e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1EF9203E12432F995B9B24544924C4BA28FEE51
        Validity
            Not Before: Apr 29 17:30:21 2026 GMT
            Not After : Apr 28 17:35:21 2027 GMT
        Subject: CN=BDF4E3DE1058390EB695CD4DF1962D9AF6268070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:55:94:88:4d:a4:08:64:1a:3c:d0:40:06:
                    cd:21:73:ce:43:c8:35:f1:ac:e5:7c:e5:0a:0f:9a:
                    ec:8e:c8:c9:bc:62:cf:bd:3c:1d:6a:c0:82:02:5a:
                    0d:27:5e:8d:1f:80:15:46:42:ae:dc:9d:5d:74:66:
                    76:6c:bf:5e:e2:19:b1:b9:25:ca:6c:15:c3:dd:66:
                    e7:cd:5c:de:b2:c1:55:d2:85:03:3c:54:8b:7d:c8:
                    5f:5e:e2:be:d9:01:7f:d0:6d:47:5a:62:e4:39:7a:
                    54:b3:c9:ef:f5:2c:e1:1c:b3:f2:7a:80:0e:99:63:
                    f5:be:e9:64:ec:b3:7b:53:9f:33:ac:f9:f9:57:9b:
                    c6:9d:88:c3:aa:9c:53:7e:46:85:3a:fd:70:67:1f:
                    6c:2c:1d:ca:72:4a:c1:9a:74:82:32:db:f1:25:ec:
                    2f:40:64:a1:9f:3f:59:87:13:d8:a8:e8:9f:7f:49:
                    4a:a0:be:52:b5:7d:18:b7:7b:81:58:cd:a0:b6:e7:
                    61:73:65:aa:5d:37:75:d2:f8:4e:7a:91:e3:4c:58:
                    49:ca:05:ba:c7:c3:45:80:a1:a9:73:9e:c0:6a:f1:
                    f8:f6:54:5c:94:ae:7f:f9:b2:c6:c5:58:bd:1f:0d:
                    26:3c:24:8d:2d:94:0d:ea:06:88:4c:56:af:7f:a1:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:E3:DE:10:58:39:0E:B6:95:CD:4D:F1:96:2D:9A:F6:26:80:70
            X509v3 Authority Key Identifier:
                keyid:E1:EF:92:03:E1:24:32:F9:95:B9:B2:45:44:92:4C:4B:A2:8F:EE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/E1EF9203E12432F995B9B24544924C4BA28FEE51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1EF9203E12432F995B9B24544924C4BA28FEE51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/3136382e3232372e38342e302f32322d3332203d3e20323633353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:05:f1:d3:fe:ab:61:95:ec:a1:9e:66:41:09:7b:8d:3f:49:
         73:e0:61:75:23:3b:89:6a:00:f7:04:c6:eb:b0:d0:13:70:fc:
         9c:a4:3b:8b:67:fb:fd:be:1e:3e:31:4b:cc:77:fd:86:3a:e6:
         d6:d5:31:7f:7b:24:3a:5a:71:4e:ba:8e:62:d9:82:fa:c9:e2:
         29:59:fd:b1:d5:c0:f8:96:ec:28:69:12:8f:84:4b:e3:2f:44:
         72:b3:a8:5d:ee:3c:cb:f7:99:d0:b3:e5:00:92:07:a9:77:8d:
         22:c2:85:ae:e8:b6:35:d5:ba:cd:17:eb:0b:2a:81:d0:95:65:
         3b:82:58:c7:c4:46:c5:67:40:47:36:4d:9b:e1:fb:21:c0:5a:
         41:06:53:d5:cf:9c:aa:7e:4d:dd:fc:cc:4c:21:9e:63:bc:25:
         35:10:b8:40:63:53:3c:82:b9:a0:b0:4b:76:0d:ed:3d:82:6a:
         7a:34:d1:dd:2a:71:5d:d7:90:ca:3c:2e:98:17:99:bd:4d:6a:
         f9:5a:5c:ed:a8:47:3a:e9:cd:33:fe:c8:4d:a1:77:31:e1:14:
         bf:57:b6:5f:35:c2:69:4b:ab:b0:94:8f:7e:a4:98:32:80:00:
         9a:01:f6:c4:8e:39:10:4f:85:68:47:19:59:b9:0e:03:72:3d:
         6f:d7:05:cf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNP4yVo4uAjSzwmBPU8WQOylXLjwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFFRjkyMDNFMTI0MzJGOTk1QjlCMjQ1NDQ5MjRDNEJB
MjhGRUU1MTAeFw0yNjA0MjkxNzMwMjFaFw0yNzA0MjgxNzM1MjFaMDMxMTAvBgNV
BAMTKEJERjRFM0RFMTA1ODM5MEVCNjk1Q0Q0REYxOTYyRDlBRjYyNjgwNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxJFWUiE2kCGQaPNBABs0hc85D
yDXxrOV85QoPmuyOyMm8Ys+9PB1qwIICWg0nXo0fgBVGQq7cnV10ZnZsv17iGbG5
JcpsFcPdZufNXN6ywVXShQM8VIt9yF9e4r7ZAX/QbUdaYuQ5elSzye/1LOEcs/J6
gA6ZY/W+6WTss3tTnzOs+flXm8adiMOqnFN+RoU6/XBnH2wsHcpySsGadIIy2/El
7C9AZKGfP1mHE9io6J9/SUqgvlK1fRi3e4FYzaC252FzZapdN3XS+E56keNMWEnK
BbrHw0WAoalznsBq8fj2VFyUrn/5ssbFWL0fDSY8JI0tlA3qBohMVq9/oeyJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvfTj3hBYOQ62lc1N8ZYtmvYmgHAwHwYDVR0j
BBgwFoAU4e+SA+EkMvmVubJFRJJMS6KP7lEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEFGcWhQM3pSejJ4UjY5WUhvTXJ0WW5XczE1dnM2ZVgzTEZrRHkyNVJH
V3gvMC9FMUVGOTIwM0UxMjQzMkY5OTVCOUIyNDU0NDkyNEM0QkEyOEZFRTUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UxRUY5MjAzRTEyNDMyRjk5
NUI5QjI0NTQ0OTI0QzRCQTI4RkVFNTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhBRnFoUDN6UnoyeFI2OVlIb01ydFluV3MxNXZzNmVYM0xGa0R5MjVSR1d4LzAv
MzEzNjM4MmUzMjMyMzcyZTM4MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKo41QwDQYJKoZIhvcNAQELBQADggEBAFIF8dP+
q2GV7KGeZkEJe40/SXPgYXUjO4lqAPcExuuw0BNw/JykO4tn+/2+Hj4xS8x3/YY6
5tbVMX97JDpacU66jmLZgvrJ4ilZ/bHVwPiW7ChpEo+ES+MvRHKzqF3uPMv3mdCz
5QCSB6l3jSLCha7otjXVus0X6wsqgdCVZTuCWMfERsVnQEc2TZvh+yHAWkEGU9XP
nKp+Td38zEwhnmO8JTUQuEBjUzyCuaCwS3YN7T2Cano00d0qcV3XkMo8LpgXmb1N
avlaXO2oRzrpzTP+yE2hdzHhFL9Xtl81wmlLq7CUj36kmDKAAJoB9sSOORBPhWhH
GVm5DgNyPW/XBc8=
-----END CERTIFICATE-----
Generated at Wed May 13 19:14:10 2026 by rpki-client