Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa
File:                     3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa (raw, json)
Hash identifier:          RMrXbyPiVeQp7EwlU/ZMf/+UBrLRwf2a4tmNwVWuz7w=
Subject key identifier:   02:AF:CA:09:A2:6D:A1:72:D1:3D:AA:88:26:28:6E:50:D3:9B:F9:FA
Certificate issuer:       /CN=384D54C7517BDF05BA4AAC096D48C357130887E0
Certificate serial:       7AD1C836CF358F6E3114F09D54089CF9CB5F84E8
Authority key identifier: 38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa
Signing time:             Tue 12 May 2026 14:31:54 +0000
ROA not before:           Tue 12 May 2026 14:26:54 +0000
ROA not after:            Tue 11 May 2027 14:31:54 +0000
asID:                     264863
IP address blocks:        168.205.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl
                          rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d1:c8:36:cf:35:8f:6e:31:14:f0:9d:54:08:9c:f9:cb:5f:84:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=384D54C7517BDF05BA4AAC096D48C357130887E0
        Validity
            Not Before: May 12 14:26:54 2026 GMT
            Not After : May 11 14:31:54 2027 GMT
        Subject: CN=02AFCA09A26DA172D13DAA8826286E50D39BF9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:9a:ea:cb:bd:a4:62:b9:0b:c3:96:ba:82:
                    03:87:2a:9d:17:06:78:5e:5f:c2:e6:61:91:e4:0e:
                    0f:e4:df:43:53:43:c9:1a:9f:88:e6:f1:9b:17:f7:
                    48:81:89:f8:fa:a9:6e:05:8f:5e:42:f5:3d:c2:b1:
                    a1:10:a2:45:9a:5c:49:09:33:e3:59:15:ac:a9:c5:
                    69:dc:56:c8:4c:54:3d:ca:c4:76:24:d6:94:58:9e:
                    f9:45:20:4d:6a:97:51:5b:35:da:e1:07:e4:22:c8:
                    a9:2d:4d:02:be:db:86:52:d6:10:05:be:81:7e:ae:
                    d8:ee:21:78:e6:6c:da:ae:a6:5f:ba:ae:88:bf:e3:
                    81:af:bb:7f:1c:bb:6a:a4:7a:e6:7d:57:e1:cd:74:
                    98:3e:4a:1b:94:7d:45:35:d6:11:07:d9:b9:90:91:
                    84:fd:ab:16:0e:11:2f:89:9d:df:81:1b:3a:76:23:
                    9f:50:de:eb:71:5e:d0:75:e5:82:de:92:3c:41:38:
                    49:6e:d9:e3:0e:a7:4a:81:37:6d:7b:c6:7e:7d:60:
                    86:10:ae:2d:83:b2:98:25:9e:b6:0c:fc:65:0b:d0:
                    5c:9c:2a:00:df:79:12:c1:04:7c:04:ca:2a:2c:09:
                    c8:db:db:0e:b9:c1:16:76:31:9a:c8:5c:7e:49:65:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AF:CA:09:A2:6D:A1:72:D1:3D:AA:88:26:28:6E:50:D3:9B:F9:FA
            X509v3 Authority Key Identifier:
                keyid:38:4D:54:C7:51:7B:DF:05:BA:4A:AC:09:6D:48:C3:57:13:08:87:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/384D54C7517BDF05BA4AAC096D48C357130887E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/384D54C7517BDF05BA4AAC096D48C357130887E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93UtTpjzKcuoVnAQqEgewRLY34UB5dw93rfjpBVGhiug/0/3136382e3230352e3234392e302f32342d3234203d3e20323634383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b7:a8:8e:57:7f:ad:04:ed:c7:c9:95:1d:07:4a:f6:ba:53:
         e7:c6:a6:b1:28:06:af:ba:4d:f3:72:b8:f7:16:d1:83:bb:03:
         31:f1:f6:4e:cb:3f:d0:fd:91:15:2c:7a:f3:19:76:93:68:0e:
         a1:e1:af:05:86:60:25:6c:87:45:70:47:d0:fc:f6:e2:ab:02:
         4f:64:7f:10:0d:a6:e5:3d:a9:2f:1e:b9:3b:22:2f:27:8c:3b:
         ad:55:5c:e4:ec:dd:b0:8f:d7:34:a5:f0:19:be:66:5a:37:db:
         51:db:af:6d:09:1e:47:fb:b2:11:51:3d:b6:3a:53:ce:06:43:
         2c:fe:66:17:d0:82:a3:cb:6f:95:07:29:4f:fc:3f:67:dd:51:
         a9:84:f5:3a:44:fa:89:5b:e3:b4:49:57:d8:b3:b2:b8:6a:66:
         57:97:50:b1:88:34:6f:41:e9:f2:0b:0b:9c:ed:7c:d4:d6:0b:
         82:20:c8:f6:68:9c:43:32:a3:3f:d3:64:88:68:c8:9c:b3:ab:
         ef:80:e8:43:7e:6c:cd:39:b6:68:01:b1:52:f9:25:2c:da:48:
         20:26:19:c7:c6:b2:6f:be:3c:1a:c8:a8:b7:17:8b:f5:6c:54:
         69:d7:08:0f:ee:c7:48:34:cc:77:90:77:50:1f:d9:0a:ca:b8:
         69:38:cf:33
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUetHINs81j24xFPCdVAic+ctfhOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg0RDU0Qzc1MTdCREYwNUJBNEFBQzA5NkQ0OEMzNTcx
MzA4ODdFMDAeFw0yNjA1MTIxNDI2NTRaFw0yNzA1MTExNDMxNTRaMDMxMTAvBgNV
BAMTKDAyQUZDQTA5QTI2REExNzJEMTNEQUE4ODI2Mjg2RTUwRDM5QkY5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN/Jrqy72kYrkLw5a6ggOHKp0X
BnheX8LmYZHkDg/k30NTQ8kan4jm8ZsX90iBifj6qW4Fj15C9T3CsaEQokWaXEkJ
M+NZFaypxWncVshMVD3KxHYk1pRYnvlFIE1ql1FbNdrhB+QiyKktTQK+24ZS1hAF
voF+rtjuIXjmbNqupl+6roi/44Gvu38cu2qkeuZ9V+HNdJg+ShuUfUU11hEH2bmQ
kYT9qxYOES+Jnd+BGzp2I59Q3utxXtB15YLekjxBOElu2eMOp0qBN217xn59YIYQ
ri2DspglnrYM/GUL0FycKgDfeRLBBHwEyiosCcjb2w65wRZ2MZrIXH5JZYYPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAq/KCaJtoXLRPaqIJihuUNOb+fowHwYDVR0j
BBgwFoAUOE1Ux1F73wW6SqwJbUjDVxMIh+AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTNVdFRwanpLY3VvVm5BUXFFZ2V3UkxZMzRVQjVkdzkzcmZqcEJWR2hp
dWcvMC8zODRENTRDNzUxN0JERjA1QkE0QUFDMDk2RDQ4QzM1NzEzMDg4N0UwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM4NEQ1NEM3NTE3QkRGMDVC
QTRBQUMwOTZENDhDMzU3MTMwODg3RTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkzVXRUcGp6S2N1b1ZuQVFxRWdld1JMWTM0VUI1ZHc5M3JmanBCVkdoaXVnLzAv
MzEzNjM4MmUzMjMwMzUyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjN+TANBgkqhkiG9w0BAQsFAAOCAQEASLeo
jld/rQTtx8mVHQdK9rpT58amsSgGr7pN83K49xbRg7sDMfH2Tss/0P2RFSx68xl2
k2gOoeGvBYZgJWyHRXBH0Pz24qsCT2R/EA2m5T2pLx65OyIvJ4w7rVVc5OzdsI/X
NKXwGb5mWjfbUduvbQkeR/uyEVE9tjpTzgZDLP5mF9CCo8tvlQcpT/w/Z91RqYT1
OkT6iVvjtElX2LOyuGpmV5dQsYg0b0Hp8gsLnO181NYLgiDI9micQzKjP9NkiGjI
nLOr74DoQ35szTm2aAGxUvklLNpIICYZx8ayb748GsiotxeL9WxUadcID+7HSDTM
d5B3UB/ZCsq4aTjPMw==
-----END CERTIFICATE-----
Generated at Wed May 13 21:36:16 2026 by rpki-client