Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
File:                     3138372e302e3133302e302f32342d3234203d3e203238323338.roa (raw, json)
Hash identifier:          lLom8rqRTqyiB4S5oHq9EH/1+YFhsljPa14wR/P3aUE=
Subject key identifier:   A2:49:4B:FE:0D:C5:4E:4B:5D:F5:9E:D9:FB:C6:8E:A2:D2:30:0A:08
Certificate issuer:       /CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
Certificate serial:       69887C4DDF57F73A05F7FA53397FA724B6EEA44F
Authority key identifier: A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3133302e302f32342d3234203d3e203238323338.roa
Signing time:             Mon 23 Mar 2026 18:58:33 +0000
ROA not before:           Mon 23 Mar 2026 18:53:33 +0000
ROA not after:            Mon 22 Mar 2027 18:58:33 +0000
asID:                     28238
IP address blocks:        187.0.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl
                          rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:88:7c:4d:df:57:f7:3a:05:f7:fa:53:39:7f:a7:24:b6:ee:a4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1059BEEA2C570CB29BBD2246F48FD323FA2D26F
        Validity
            Not Before: Mar 23 18:53:33 2026 GMT
            Not After : Mar 22 18:58:33 2027 GMT
        Subject: CN=A2494BFE0DC54E4B5DF59ED9FBC68EA2D2300A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:a7:a7:b0:39:c2:f2:4d:2e:81:4c:4f:5c:
                    1d:03:8f:7d:6c:15:1d:69:60:82:7e:d9:35:bb:06:
                    46:50:55:0b:71:44:2e:18:14:83:16:50:bd:ba:14:
                    be:e5:61:fd:72:4c:ee:0d:e7:6e:4d:32:6d:35:95:
                    f5:be:ee:f1:e1:1c:41:1c:29:69:b0:f8:cb:31:04:
                    db:fe:58:36:e9:c0:0b:e1:48:de:6d:fd:18:c8:05:
                    a1:25:67:26:f1:26:b3:ec:b4:b5:75:b4:c2:9d:ae:
                    a5:09:9a:75:16:c3:3d:62:d0:d2:f5:eb:9d:47:f5:
                    67:24:56:91:00:48:82:be:b2:65:88:fd:de:73:51:
                    f5:72:b1:c9:5b:d7:17:2b:73:eb:35:ad:ab:07:88:
                    78:3f:cc:1c:6f:b8:ef:ec:91:63:e9:f6:4c:ef:8e:
                    c7:a5:32:6c:64:d7:95:8f:c1:7a:53:69:86:70:af:
                    ea:1c:44:65:1e:a8:50:72:22:a2:b7:d1:4f:0f:21:
                    4a:ae:43:cd:09:41:3d:1f:d0:7b:6a:fa:d0:74:16:
                    da:5c:ba:ee:c3:b1:c7:53:76:e2:05:b9:6f:05:7e:
                    d7:5c:94:12:26:f8:5c:f2:25:33:b3:13:cb:26:e4:
                    00:8a:6a:f3:5e:e2:98:34:f6:2b:eb:f7:30:f0:a7:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:49:4B:FE:0D:C5:4E:4B:5D:F5:9E:D9:FB:C6:8E:A2:D2:30:0A:08
            X509v3 Authority Key Identifier:
                keyid:A1:05:9B:EE:A2:C5:70:CB:29:BB:D2:24:6F:48:FD:32:3F:A2:D2:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1059BEEA2C570CB29BBD2246F48FD323FA2D26F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9VLetgpnRJaTw7ibQ3yZfmEU6xss93RN9DLBReE4oN5Y/2/3138372e302e3133302e302f32342d3234203d3e203238323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d5:78:f3:3e:32:9e:10:b2:71:49:58:cd:6a:28:93:69:5a:
         b0:d0:c6:12:05:27:f4:76:37:83:b5:b7:9e:b5:9b:34:25:8b:
         4e:46:96:ba:bb:80:a8:ba:13:82:7b:b4:d0:a1:ef:f5:8b:28:
         f7:31:38:ac:7a:0e:a5:e1:84:c7:2a:3e:37:09:b7:9c:d2:1b:
         d7:c3:f0:e9:5a:30:cd:64:e6:bf:e7:71:e2:f4:c5:ff:97:c7:
         ea:44:04:d6:c8:9b:ff:79:78:c5:ee:39:32:d6:eb:a9:24:7f:
         19:57:e1:19:84:40:2a:2c:c3:ff:a7:c8:ee:fe:68:e1:64:9c:
         72:a9:c3:4e:cf:d9:3f:bc:28:ba:36:97:10:33:89:ab:6c:ac:
         b9:41:b5:3d:05:25:91:5f:b1:37:f9:32:de:5c:80:9d:ae:0e:
         ff:25:2f:e6:e5:fb:5f:7d:fd:84:cc:7e:a0:3a:9c:5b:57:89:
         03:9d:7f:ee:2f:79:1b:47:36:af:0c:3a:97:55:92:98:55:02:
         cc:3d:38:f1:75:f9:bb:c2:0c:dd:d0:97:e1:eb:01:d6:50:a4:
         c5:8a:66:23:e4:02:cc:f5:45:b1:73:9b:6e:b3:ad:d6:e5:5a:
         19:d8:b0:46:8f:6c:49:2e:10:2f:a3:ad:67:52:47:6d:a0:cb:
         b6:a6:df:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaYh8Td9X9zoF9/pTOX+nJLbupE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTEwNTlCRUVBMkM1NzBDQjI5QkJEMjI0NkY0OEZEMzIz
RkEyRDI2RjAeFw0yNjAzMjMxODUzMzNaFw0yNzAzMjIxODU4MzNaMDMxMTAvBgNV
BAMTKEEyNDk0QkZFMERDNTRFNEI1REY1OUVEOUZCQzY4RUEyRDIzMDBBMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKoaensDnC8k0ugUxPXB0Dj31s
FR1pYIJ+2TW7BkZQVQtxRC4YFIMWUL26FL7lYf1yTO4N525NMm01lfW+7vHhHEEc
KWmw+MsxBNv+WDbpwAvhSN5t/RjIBaElZybxJrPstLV1tMKdrqUJmnUWwz1i0NL1
651H9WckVpEASIK+smWI/d5zUfVysclb1xcrc+s1rasHiHg/zBxvuO/skWPp9kzv
jselMmxk15WPwXpTaYZwr+ocRGUeqFByIqK30U8PIUquQ80JQT0f0Htq+tB0Ftpc
uu7DscdTduIFuW8FftdclBIm+FzyJTOzE8sm5ACKavNe4pg09ivr9zDwp67xAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoklL/g3FTktd9Z7Z+8aOotIwCggwHwYDVR0j
BBgwFoAUoQWb7qLFcMspu9Ikb0j9Mj+i0m8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVZMZXRncG5SSmFUdzdpYlEzeVpmbUVVNnhzczkzUk45RExCUmVFNG9O
NVkvMi9BMTA1OUJFRUEyQzU3MENCMjlCQkQyMjQ2RjQ4RkQzMjNGQTJEMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExMDU5QkVFQTJDNTcwQ0Iy
OUJCRDIyNDZGNDhGRDMyM0ZBMkQyNkYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlWTGV0Z3BuUkphVHc3aWJRM3laZm1FVTZ4c3M5M1JOOURMQlJlRTRvTjVZLzIv
MzEzODM3MmUzMDJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMy
MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALsAgjANBgkqhkiG9w0BAQsFAAOCAQEAGNV48z4ynhCy
cUlYzWook2lasNDGEgUn9HY3g7W3nrWbNCWLTkaWuruAqLoTgnu00KHv9Yso9zE4
rHoOpeGExyo+Nwm3nNIb18Pw6VowzWTmv+dx4vTF/5fH6kQE1sib/3l4xe45Mtbr
qSR/GVfhGYRAKizD/6fI7v5o4WSccqnDTs/ZP7woujaXEDOJq2ysuUG1PQUlkV+x
N/ky3lyAna4O/yUv5uX7X339hMx+oDqcW1eJA51/7i95G0c2rww6l1WSmFUCzD04
8XX5u8IM3dCX4esB1lCkxYpmI+QCzPVFsXObbrOt1uVaGdiwRo9sSS4QL6OtZ1JH
baDLtqbfXA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:52:10 2026 by rpki-client