Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          dbQIOSf9mYNtWgI4lPR+oUN4ymfX9/p7wlmDpsfP45Q=
Subject key identifier:   FF:CF:D8:F4:5B:F4:1D:12:B4:7A:E2:BC:FC:74:4C:DE:56:F2:C5:1B
Certificate issuer:       /CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
Certificate serial:       1AE36859236E292AAFD14AFEAF0F318D21E592B4
Authority key identifier: E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa
Signing time:             Thu 12 Mar 2026 17:19:24 +0000
ROA not before:           Thu 12 Mar 2026 17:14:24 +0000
ROA not after:            Thu 11 Mar 2027 17:19:24 +0000
asID:                     263022
IP address blocks:        186.249.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 18:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e3:68:59:23:6e:29:2a:af:d1:4a:fe:af:0f:31:8d:21:e5:92:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6A54FF71E395BA75DF9DE63D180369AF8715EB1
        Validity
            Not Before: Mar 12 17:14:24 2026 GMT
            Not After : Mar 11 17:19:24 2027 GMT
        Subject: CN=FFCFD8F45BF41D12B47AE2BCFC744CDE56F2C51B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:f9:21:ce:72:c0:ab:9a:5f:aa:50:ff:0e:
                    e8:35:11:83:ac:46:da:95:0d:34:03:a0:b8:3b:ed:
                    83:ca:74:c4:7e:2b:91:00:d4:ae:09:91:25:a7:ae:
                    71:9a:39:5e:9d:a0:ae:c5:5d:45:fb:cf:5c:76:02:
                    05:65:2a:02:d2:d5:e6:b4:1f:b4:60:a6:d1:35:99:
                    81:d1:50:08:08:5b:86:4a:e8:c1:f3:a1:51:10:2b:
                    33:b2:cd:3a:63:72:39:64:25:ff:77:0b:1b:01:49:
                    07:13:de:50:7a:2b:38:1a:d6:ce:15:7e:08:39:c1:
                    78:a4:86:1a:18:7c:df:0d:53:6a:2c:16:88:5a:63:
                    09:9a:68:5d:e0:6d:73:f8:5a:a5:1c:e9:55:5e:37:
                    21:b0:00:8f:a4:bf:f6:49:0f:f1:ec:1c:94:ac:ea:
                    d3:54:49:a1:e0:11:33:ad:aa:2b:f5:31:5e:e5:4c:
                    58:fe:f9:18:50:0a:e0:64:e2:7b:99:64:c1:ea:28:
                    80:4b:4a:5b:0c:d8:41:0c:99:8d:d2:8f:3a:62:d5:
                    98:7f:9e:d5:85:49:3b:38:1c:75:8a:5b:c5:16:d3:
                    77:6e:1a:7b:dc:4d:7b:c5:c1:3b:15:e1:4c:47:b7:
                    8c:5d:31:43:e5:a0:ae:bd:57:3e:64:57:df:cb:0f:
                    35:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:D8:F4:5B:F4:1D:12:B4:7A:E2:BC:FC:74:4C:DE:56:F2:C5:1B
            X509v3 Authority Key Identifier:
                keyid:E6:A5:4F:F7:1E:39:5B:A7:5D:F9:DE:63:D1:80:36:9A:F8:71:5E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6A54FF71E395BA75DF9DE63D180369AF8715EB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:ef:77:ab:2a:c0:bb:d7:97:ab:6c:5b:d6:5e:57:71:84:
         06:d8:96:4c:7d:92:b9:d6:de:65:e4:db:fd:62:26:8e:2e:da:
         fe:a9:1c:b4:02:4b:d6:bd:f8:bf:b8:01:bd:cd:9f:00:b7:0c:
         72:74:5c:dd:77:e6:42:cb:79:08:68:b7:4c:5d:fb:cf:91:eb:
         d3:bb:27:d1:31:c5:5e:85:0e:c3:fc:a2:01:22:b7:66:fd:13:
         ec:2d:32:75:30:12:2b:e8:83:ae:28:80:ff:12:bf:02:27:45:
         e3:f2:3f:f9:ab:82:49:5a:9b:eb:00:f8:b1:27:c3:f0:b6:c3:
         99:09:ce:3d:2d:a3:26:12:a2:f2:07:5c:75:6a:0d:1b:7d:ec:
         6b:4e:23:c3:6c:af:bb:44:cb:8a:6e:e6:a3:db:ed:3a:3d:40:
         8f:54:b1:6b:4b:d9:3c:27:16:93:9d:dc:f8:a5:eb:a9:b4:3b:
         17:9d:b6:a3:35:06:8c:b5:be:86:94:5d:94:bc:90:c0:73:dc:
         9d:5d:43:c1:b9:f4:2b:16:31:10:03:d9:12:cd:84:ac:be:9e:
         57:0d:41:ff:67:3f:a4:09:21:7b:09:5e:4b:f5:07:02:b3:ee:
         83:53:14:79:bf:72:b9:08:bd:ea:24:9d:45:4d:1d:15:b7:b0:
         2a:ab:be:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGuNoWSNuKSqv0Ur+rw8xjSHlkrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTZBNTRGRjcxRTM5NUJBNzVERjlERTYzRDE4MDM2OUFG
ODcxNUVCMTAeFw0yNjAzMTIxNzE0MjRaFw0yNzAzMTExNzE5MjRaMDMxMTAvBgNV
BAMTKEZGQ0ZEOEY0NUJGNDFEMTJCNDdBRTJCQ0ZDNzQ0Q0RFNTZGMkM1MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDREvkhznLAq5pfqlD/Dug1EYOs
RtqVDTQDoLg77YPKdMR+K5EA1K4JkSWnrnGaOV6doK7FXUX7z1x2AgVlKgLS1ea0
H7RgptE1mYHRUAgIW4ZK6MHzoVEQKzOyzTpjcjlkJf93CxsBSQcT3lB6Kzga1s4V
fgg5wXikhhoYfN8NU2osFohaYwmaaF3gbXP4WqUc6VVeNyGwAI+kv/ZJD/HsHJSs
6tNUSaHgETOtqiv1MV7lTFj++RhQCuBk4nuZZMHqKIBLSlsM2EEMmY3Sjzpi1Zh/
ntWFSTs4HHWKW8UW03duGnvcTXvFwTsV4UxHt4xdMUPloK69Vz5kV9/LDzVHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/8/Y9Fv0HRK0euK8/HRM3lbyxRswHwYDVR0j
BBgwFoAU5qVP9x45W6dd+d5j0YA2mvhxXrEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXB0M3JLeWVqTWVkNXhoOFA4dXhVQ29zeTVpaVFyY1ZGelpGeFhUNUJx
QkMvMC9FNkE1NEZGNzFFMzk1QkE3NURGOURFNjNEMTgwMzY5QUY4NzE1RUIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U2QTU0RkY3MUUzOTVCQTc1
REY5REU2M0QxODAzNjlBRjg3MTVFQjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlwdDNyS3llak1lZDV4aDhQOHV4VUNvc3k1aWlRcmNWRnpaRnhYVDVCcUJDLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6+RQwDQYJKoZIhvcNAQELBQADggEBAC/h73er
KsC715erbFvWXldxhAbYlkx9krnW3mXk2/1iJo4u2v6pHLQCS9a9+L+4Ab3NnwC3
DHJ0XN135kLLeQhot0xd+8+R69O7J9ExxV6FDsP8ogEit2b9E+wtMnUwEivog64o
gP8SvwInRePyP/mrgklam+sA+LEnw/C2w5kJzj0toyYSovIHXHVqDRt97GtOI8Ns
r7tEy4pu5qPb7To9QI9UsWtL2TwnFpOd3Pil66m0OxedtqM1Boy1voaUXZS8kMBz
3J1dQ8G59CsWMRAD2RLNhKy+nlcNQf9nP6QJIXsJXkv1BwKz7oNTFHm/crkIveok
nUVNHRW3sCqrvrM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:56:14 2026 by rpki-client