Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa
File:                     3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa (raw, json)
Hash identifier:          lFyNX9i4o6cUFiZXfKkhMaQU4iUptbA7CO4/SbZfTlk=
Subject key identifier:   B1:16:70:54:89:B9:DF:AA:4B:40:70:1B:C1:BD:B9:A0:97:2F:2E:D7
Certificate issuer:       /CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
Certificate serial:       5353067A0A5B5600B22C5BF79D59AE0BD519CE2A
Authority key identifier: 2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa
Signing time:             Wed 14 Oct 2026 18:19:39 +0000
ROA not before:           Wed 14 Oct 2026 18:14:39 +0000
ROA not after:            Wed 13 Oct 2027 18:19:39 +0000
asID:                     263481
IP address blocks:        191.242.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl
                          rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 08:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:53:06:7a:0a:5b:56:00:b2:2c:5b:f7:9d:59:ae:0b:d5:19:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D78BBFF742117E04F48BDE939DC77C5E62F81A5
        Validity
            Not Before: Oct 14 18:14:39 2026 GMT
            Not After : Oct 13 18:19:39 2027 GMT
        Subject: CN=B116705489B9DFAA4B40701BC1BDB9A0972F2ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:29:4e:51:f7:02:86:44:6c:82:5d:83:02:
                    6d:6c:76:d5:32:e3:f7:b6:94:a7:3e:fd:a5:62:e0:
                    44:fc:0d:db:e0:9f:fe:c5:a9:00:5d:e9:87:c1:46:
                    22:a9:45:b1:ca:a1:f0:30:20:87:d2:dd:99:c0:21:
                    89:8a:7c:94:02:45:f1:e2:1b:d7:c0:fc:64:4f:7e:
                    17:d2:48:bd:e5:a4:60:d7:80:9b:e2:df:75:fb:c3:
                    c8:fe:ae:a9:15:b9:bf:9b:c1:84:72:89:27:e3:6c:
                    88:84:68:bb:26:c1:d4:20:48:67:ea:24:d9:45:70:
                    9a:cf:2e:b3:8a:d7:24:37:e1:dc:c2:dc:3f:8b:95:
                    5b:9b:5a:e8:54:43:b3:53:75:54:8f:85:3f:ac:45:
                    4f:a1:32:1c:cc:5f:37:a4:a7:1b:f5:12:ab:e5:05:
                    c1:cf:e7:be:ec:32:fe:90:8f:32:cc:a7:99:88:2a:
                    a4:c8:af:fd:c7:ad:f5:03:c7:9c:ce:0b:83:16:aa:
                    85:5f:3c:1a:1c:5d:a7:9e:6c:9a:72:b8:53:93:1f:
                    26:f0:8c:53:fc:4a:5d:a6:7e:b0:f8:26:91:f6:09:
                    d3:d9:f4:28:b3:f2:62:54:d9:60:e2:52:70:bd:d5:
                    b2:67:d8:50:d6:9f:29:b6:72:49:1f:e9:d5:a5:5f:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:70:54:89:B9:DF:AA:4B:40:70:1B:C1:BD:B9:A0:97:2F:2E:D7
            X509v3 Authority Key Identifier:
                keyid:2D:78:BB:FF:74:21:17:E0:4F:48:BD:E9:39:DC:77:C5:E6:2F:81:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D78BBFF742117E04F48BDE939DC77C5E62F81A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KTA547LKuaskGYs8zhnixSg8UT2oUy5RzdLFbchDMSz/0/3139312e3234322e3230382e302f32332d3234203d3e20323633343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:01:dd:30:b9:2f:f5:d3:92:a6:92:33:03:35:f2:d6:46:2b:
         0d:b5:20:38:5d:fd:37:6d:7e:f3:07:c4:9b:34:8f:eb:a7:0c:
         67:bd:a8:56:d1:4a:71:48:ab:48:c8:bd:ee:08:39:16:2d:56:
         64:d1:53:9d:2d:2f:76:b7:c1:75:79:61:23:27:e6:04:08:10:
         43:5a:18:97:f4:78:6b:98:09:3e:15:b3:5f:30:a1:98:19:b3:
         24:00:66:67:26:ff:3c:71:a8:11:d8:01:70:e0:5b:20:89:5b:
         a7:b2:ad:ca:f1:79:cd:25:b8:d4:71:33:c1:5a:36:5d:c0:0f:
         c8:ac:0b:82:26:c6:9e:b5:d5:63:3b:36:49:bc:8e:ea:ee:29:
         09:82:6a:38:e9:fc:90:65:29:24:37:e4:4b:50:77:69:63:ad:
         a9:23:56:38:e6:3c:e2:fb:b8:de:b0:9b:3f:39:4a:23:8a:bb:
         b3:84:52:47:c0:e7:76:c9:77:f3:bd:19:84:fa:3f:a7:79:bd:
         cf:23:72:91:30:4c:50:e6:04:53:72:b4:00:67:5f:91:46:f5:
         5b:3a:09:07:dc:86:ae:dd:b7:03:9c:10:5d:d6:4a:59:f9:23:
         63:40:2a:86:6a:e4:6f:bf:64:3e:3d:ac:14:b3:9b:31:b9:e4:
         ba:48:7f:a6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU1MGegpbVgCyLFv3nVmuC9UZziowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ3OEJCRkY3NDIxMTdFMDRGNDhCREU5MzlEQzc3QzVF
NjJGODFBNTAeFw0yNjEwMTQxODE0MzlaFw0yNzEwMTMxODE5MzlaMDMxMTAvBgNV
BAMTKEIxMTY3MDU0ODlCOURGQUE0QjQwNzAxQkMxQkRCOUEwOTcyRjJFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMClOUfcChkRsgl2DAm1sdtUy
4/e2lKc+/aVi4ET8Ddvgn/7FqQBd6YfBRiKpRbHKofAwIIfS3ZnAIYmKfJQCRfHi
G9fA/GRPfhfSSL3lpGDXgJvi33X7w8j+rqkVub+bwYRyiSfjbIiEaLsmwdQgSGfq
JNlFcJrPLrOK1yQ34dzC3D+LlVubWuhUQ7NTdVSPhT+sRU+hMhzMXzekpxv1Eqvl
BcHP577sMv6QjzLMp5mIKqTIr/3HrfUDx5zOC4MWqoVfPBocXaeebJpyuFOTHybw
jFP8Sl2mfrD4JpH2CdPZ9Ciz8mJU2WDiUnC91bJn2FDWnym2ckkf6dWlX4tRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsRZwVIm536pLQHAbwb25oJcvLtcwHwYDVR0j
BBgwFoAULXi7/3QhF+BPSL3pOdx3xeYvgaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEtUQTU0N0xLdWFza0dZczh6aG5peFNnOFVUMm9VeTVSemRMRmJjaERN
U3ovMC8yRDc4QkJGRjc0MjExN0UwNEY0OEJERTkzOURDNzdDNUU2MkY4MUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJENzhCQkZGNzQyMTE3RTA0
RjQ4QkRFOTM5REM3N0M1RTYyRjgxQTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhLVEE1NDdMS3Vhc2tHWXM4emhuaXhTZzhVVDJvVXk1UnpkTEZiY2hETVN6LzAv
MzEzOTMxMmUzMjM0MzIyZTMyMzAzODJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzMzM0MzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/y0DANBgkqhkiG9w0BAQsFAAOCAQEAUQHd
MLkv9dOSppIzAzXy1kYrDbUgOF39N21+8wfEmzSP66cMZ72oVtFKcUirSMi97gg5
Fi1WZNFTnS0vdrfBdXlhIyfmBAgQQ1oYl/R4a5gJPhWzXzChmBmzJABmZyb/PHGo
EdgBcOBbIIlbp7KtyvF5zSW41HEzwVo2XcAPyKwLgibGnrXVYzs2SbyO6u4pCYJq
OOn8kGUpJDfkS1B3aWOtqSNWOOY84vu43rCbPzlKI4q7s4RSR8Dndsl3870ZhPo/
p3m9zyNykTBMUOYEU3K0AGdfkUb1WzoJB9yGrt23A5wQXdZKWfkjY0Aqhmrkb79k
Pj2sFLObMbnkukh/pg==
-----END CERTIFICATE-----
Generated at Fri Oct 16 11:05:19 2026 by rpki-client