Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136382e302f32342d3234203d3e20323734343631.roa
File:                     3138362e3139352e3136382e302f32342d3234203d3e20323734343631.roa (raw, json)
Hash identifier:          SdKlz71qzpilBMJIaDLd5njnId4GFJ08myark8Vtet8=
Subject key identifier:   4C:E6:03:C9:2D:44:21:58:03:AB:A1:76:AB:B0:C8:5D:9E:C0:E2:69
Certificate issuer:       /CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
Certificate serial:       4C89DFCFD29B15F087A298DC169B5BE58166D7E6
Authority key identifier: 67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136382e302f32342d3234203d3e20323734343631.roa
Signing time:             Tue 07 Jul 2026 14:14:11 +0000
ROA not before:           Tue 07 Jul 2026 14:09:11 +0000
ROA not after:            Tue 06 Jul 2027 14:14:11 +0000
asID:                     274461
IP address blocks:        186.195.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl
                          rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:89:df:cf:d2:9b:15:f0:87:a2:98:dc:16:9b:5b:e5:81:66:d7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53
        Validity
            Not Before: Jul  7 14:09:11 2026 GMT
            Not After : Jul  6 14:14:11 2027 GMT
        Subject: CN=4CE603C92D44215803ABA176ABB0C85D9EC0E269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:fa:c5:06:39:df:d3:17:07:c5:17:6e:25:
                    ca:5a:7a:26:56:fa:3d:66:e9:a2:ea:08:41:56:6e:
                    d6:a2:5d:d5:00:95:80:69:34:98:f3:fa:da:53:f6:
                    d5:87:36:62:ee:b0:9a:97:a2:bf:92:5e:ca:33:e9:
                    c1:7a:18:f4:99:83:44:96:ca:f2:ff:50:6e:27:17:
                    2e:6c:7d:5e:dc:e9:98:43:54:23:42:bc:c8:ab:e8:
                    fd:89:d7:fd:ee:bc:59:a2:66:58:4c:5c:45:d8:e1:
                    05:a7:f5:0a:6b:d2:b2:10:c1:52:b6:a2:93:e2:2d:
                    8a:37:41:4e:d4:e1:13:57:4d:d9:89:69:7f:8e:00:
                    ae:0b:13:36:4b:f8:bb:76:b9:a5:65:8c:34:c5:87:
                    d1:d4:a7:2e:92:95:16:29:f3:9c:43:b3:70:f6:3a:
                    3d:19:6d:89:d1:24:e6:b7:7d:4f:3a:fe:6b:fb:3a:
                    a8:42:06:8c:7f:62:f4:80:9a:e8:ef:28:85:f3:da:
                    fa:aa:ae:c8:c6:5f:aa:00:0c:e9:aa:03:87:b7:4d:
                    97:7b:c8:1c:89:a1:11:a1:76:74:b1:78:3d:ea:1c:
                    ca:9b:b0:7e:79:ff:cc:88:e1:af:b3:db:71:31:3b:
                    7f:32:e1:e8:f1:72:5f:77:22:61:88:7e:55:db:7d:
                    46:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E6:03:C9:2D:44:21:58:03:AB:A1:76:AB:B0:C8:5D:9E:C0:E2:69
            X509v3 Authority Key Identifier:
                keyid:67:B2:A3:33:36:25:25:C9:EC:D5:AE:47:B1:BD:12:E1:E2:FC:BC:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B2A333362525C9ECD5AE47B1BD12E1E2FCBC53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CdNyVQQ6YVbknmENwsDusXZPQcRApdnYKiRh3uCnGCy/0/3138362e3139352e3136382e302f32342d3234203d3e20323734343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:6c:be:00:7a:ae:6b:01:57:1e:b5:27:8c:83:9e:d1:32:cd:
         1f:75:1f:a6:70:95:f7:75:ec:ea:38:0c:99:55:1c:8e:b0:ab:
         a8:97:3b:bc:39:56:07:0b:95:d5:d7:82:94:8e:5b:05:a4:d2:
         b6:7b:2f:63:d4:99:90:32:ee:6e:54:7e:0a:11:7b:ab:f4:00:
         da:c8:86:e4:50:8d:00:20:24:27:f9:69:1d:6d:95:11:3b:cf:
         d9:ea:83:1a:5d:4a:f1:99:25:10:d8:38:54:13:73:11:6c:8e:
         df:8b:41:8e:2d:e8:ff:8c:d1:2a:61:a8:e3:b1:61:e5:27:70:
         41:a8:e1:63:53:4a:95:c8:d3:6d:04:d7:a9:d2:b8:7d:37:bb:
         b1:8a:4a:09:5a:52:40:bb:99:83:fc:da:15:eb:09:1a:3b:85:
         f9:64:90:dc:b8:c8:e2:ab:fe:ba:e4:d6:45:fd:26:4e:b2:81:
         94:03:cc:04:be:26:b6:d2:cf:30:45:c1:96:8a:9b:24:78:a4:
         08:60:6e:2e:2d:85:2f:22:e0:ad:3a:69:1c:60:78:83:63:13:
         7f:8f:da:40:eb:03:86:42:56:84:25:19:13:65:31:73:e7:6b:
         d0:97:8b:4c:ce:0b:8c:b1:5d:f0:36:c1:79:a0:f7:d2:f5:24:
         67:fb:e2:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTInfz9KbFfCHopjcFptb5YFm1+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdCMkEzMzMzNjI1MjVDOUVDRDVBRTQ3QjFCRDEyRTFF
MkZDQkM1MzAeFw0yNjA3MDcxNDA5MTFaFw0yNzA3MDYxNDE0MTFaMDMxMTAvBgNV
BAMTKDRDRTYwM0M5MkQ0NDIxNTgwM0FCQTE3NkFCQjBDODVEOUVDMEUyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsvrFBjnf0xcHxRduJcpaeiZW
+j1m6aLqCEFWbtaiXdUAlYBpNJjz+tpT9tWHNmLusJqXor+SXsoz6cF6GPSZg0SW
yvL/UG4nFy5sfV7c6ZhDVCNCvMir6P2J1/3uvFmiZlhMXEXY4QWn9Qpr0rIQwVK2
opPiLYo3QU7U4RNXTdmJaX+OAK4LEzZL+Lt2uaVljDTFh9HUpy6SlRYp85xDs3D2
Oj0ZbYnRJOa3fU86/mv7OqhCBox/YvSAmujvKIXz2vqqrsjGX6oADOmqA4e3TZd7
yByJoRGhdnSxeD3qHMqbsH55/8yI4a+z23ExO38y4ejxcl93ImGIflXbfUb9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTOYDyS1EIVgDq6F2q7DIXZ7A4mkwHwYDVR0j
BBgwFoAUZ7KjMzYlJcns1a5Hsb0S4eL8vFMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOENkTnlWUVE2WVZia25tRU53c0R1c1haUFFjUkFwZG5ZS2lSaDN1Q25H
Q3kvMC82N0IyQTMzMzM2MjUyNUM5RUNENUFFNDdCMUJEMTJFMUUyRkNCQzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3QjJBMzMzMzYyNTI1QzlF
Q0Q1QUU0N0IxQkQxMkUxRTJGQ0JDNTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhDZE55VlFRNllWYmtubUVOd3NEdXNYWlBRY1JBcGRuWUtpUmgzdUNuR0N5LzAv
MzEzODM2MmUzMTM5MzUyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNDM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrDqDANBgkqhkiG9w0BAQsFAAOCAQEAomy+
AHquawFXHrUnjIOe0TLNH3UfpnCV93Xs6jgMmVUcjrCrqJc7vDlWBwuV1deClI5b
BaTStnsvY9SZkDLublR+ChF7q/QA2siG5FCNACAkJ/lpHW2VETvP2eqDGl1K8Zkl
ENg4VBNzEWyO34tBji3o/4zRKmGo47Fh5SdwQajhY1NKlcjTbQTXqdK4fTe7sYpK
CVpSQLuZg/zaFesJGjuF+WSQ3LjI4qv+uuTWRf0mTrKBlAPMBL4mttLPMEXBloqb
JHikCGBuLi2FLyLgrTppHGB4g2MTf4/aQOsDhkJWhCUZE2Uxc+dr0JeLTM4LjLFd
8DbBeaD30vUkZ/vi6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:48:27 2026 by rpki-client