Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
File:                     3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa (raw, json)
Hash identifier:          4M2MUvOm72fmFPBpqHZF/k1iQ1NMpSWKzIelsg3T6IQ=
Subject key identifier:   C8:B3:1F:24:39:18:89:01:7B:A1:F4:DC:89:B4:98:1B:00:FA:7E:81
Certificate issuer:       /CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
Certificate serial:       23BE6532C31601172831D1009B141B1377CA77ED
Authority key identifier: 6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa
Signing time:             Wed 18 Mar 2026 11:04:37 +0000
ROA not before:           Wed 18 Mar 2026 10:59:37 +0000
ROA not after:            Wed 17 Mar 2027 11:04:37 +0000
asID:                     266156
IP address blocks:        192.144.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl
                          rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:be:65:32:c3:16:01:17:28:31:d1:00:9b:14:1b:13:77:ca:77:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B4CC171DFBE7D197B119332192B5E7E9C131C42
        Validity
            Not Before: Mar 18 10:59:37 2026 GMT
            Not After : Mar 17 11:04:37 2027 GMT
        Subject: CN=C8B31F24391889017BA1F4DC89B4981B00FA7E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:8c:23:52:36:aa:03:a2:74:59:c3:43:30:
                    06:72:5f:ce:9b:38:95:25:b3:4d:93:c0:fd:22:a2:
                    f5:c2:0b:2f:93:e7:ef:75:34:36:69:a5:ad:de:dc:
                    a5:c7:fc:55:95:1b:b0:e5:7c:d5:cb:d7:e3:af:d6:
                    17:06:af:9e:08:6a:4f:53:9f:99:3f:9e:0d:9e:b6:
                    12:13:63:07:97:ac:de:be:61:4b:e1:4e:df:f9:55:
                    e6:91:1d:65:b5:30:1a:7b:90:6f:0e:de:9a:69:3f:
                    ba:fa:90:f1:37:75:79:77:97:8b:d5:c1:d3:f5:63:
                    c0:41:01:05:d9:d5:45:c4:6d:1d:ab:39:54:c5:9b:
                    d8:ad:2e:40:17:a3:e2:e9:10:e4:8b:e1:90:13:8a:
                    b9:fa:87:fd:3c:a6:03:74:00:b3:f7:19:80:62:b1:
                    e1:d8:da:b3:34:e4:35:e1:06:24:3c:5e:78:2f:94:
                    3a:75:c7:79:94:f5:79:89:52:45:bb:68:7d:08:4f:
                    ae:7b:8a:3c:bd:83:0c:c0:26:97:50:51:ca:c5:00:
                    84:15:71:80:42:6d:4d:1c:1c:5b:2e:d3:16:bb:21:
                    46:5d:de:76:8e:da:77:4d:7c:7c:08:53:4f:68:e6:
                    d8:98:f1:60:e8:d6:ba:23:90:50:d0:cf:e8:5d:5c:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B3:1F:24:39:18:89:01:7B:A1:F4:DC:89:B4:98:1B:00:FA:7E:81
            X509v3 Authority Key Identifier:
                keyid:6B:4C:C1:71:DF:BE:7D:19:7B:11:93:32:19:2B:5E:7E:9C:13:1C:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/6B4CC171DFBE7D197B119332192B5E7E9C131C42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B4CC171DFBE7D197B119332192B5E7E9C131C42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/3139322e3134342e36382e302f32322d3332203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:6b:ad:3d:16:e0:f5:d3:a4:52:2d:ed:51:5e:dc:cb:72:7c:
         db:21:eb:a0:b9:8e:94:9a:4a:ba:67:f9:e5:80:a6:a7:6e:e8:
         9b:02:cb:a6:8e:90:00:7d:36:db:68:08:84:e0:3b:20:36:d1:
         5b:c9:2a:eb:c7:8b:f0:34:66:7d:83:28:90:2a:a2:19:7f:9e:
         e6:6e:20:cf:d1:5d:93:90:d3:11:60:e4:b3:b6:53:67:d0:65:
         20:f8:fe:51:ea:78:fc:df:13:00:42:2e:f4:8c:af:e6:b7:bf:
         ff:6f:fc:d5:e4:a2:cd:f6:5a:dc:5e:ef:b7:e9:90:b0:ac:0f:
         17:43:24:73:fb:4b:f5:bd:12:9a:5b:50:c9:57:62:c0:2f:f8:
         4b:f8:e5:1d:be:1e:39:f9:d0:45:61:d2:73:05:9a:ac:d1:8c:
         9e:ad:db:3c:0c:63:31:70:39:60:7b:cb:e7:56:0f:1f:fd:bd:
         31:ab:1c:2c:bf:72:bb:29:a4:76:2c:e2:da:9b:77:29:06:72:
         3c:54:b1:25:3d:d7:ff:14:c4:22:97:3e:cd:0c:e5:2c:cb:33:
         92:f3:52:54:75:07:c5:bf:2d:21:4e:33:ce:86:0a:03:e1:0a:
         4b:cc:39:57:5d:a2:38:e2:d1:f5:46:71:2e:79:71:1d:c1:4e:
         9c:0c:2a:7f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI75lMsMWARcoMdEAmxQbE3fKd+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI0Q0MxNzFERkJFN0QxOTdCMTE5MzMyMTkyQjVFN0U5
QzEzMUM0MjAeFw0yNjAzMTgxMDU5MzdaFw0yNzAzMTcxMTA0MzdaMDMxMTAvBgNV
BAMTKEM4QjMxRjI0MzkxODg5MDE3QkExRjREQzg5QjQ5ODFCMDBGQTdFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYB4wjUjaqA6J0WcNDMAZyX86b
OJUls02TwP0iovXCCy+T5+91NDZppa3e3KXH/FWVG7DlfNXL1+Ov1hcGr54Iak9T
n5k/ng2ethITYweXrN6+YUvhTt/5VeaRHWW1MBp7kG8O3pppP7r6kPE3dXl3l4vV
wdP1Y8BBAQXZ1UXEbR2rOVTFm9itLkAXo+LpEOSL4ZATirn6h/08pgN0ALP3GYBi
seHY2rM05DXhBiQ8XngvlDp1x3mU9XmJUkW7aH0IT657ijy9gwzAJpdQUcrFAIQV
cYBCbU0cHFsu0xa7IUZd3naO2ndNfHwIU09o5tiY8WDo1rojkFDQz+hdXMbHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyLMfJDkYiQF7ofTcibSYGwD6foEwHwYDVR0j
BBgwFoAUa0zBcd++fRl7EZMyGStefpwTHEIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTRKQ1NzUlF0Vnp4S3RLd0U5emZFRmVnZ2NjVlY4TkRSQ1ZKYWQ4d3dk
dm0vMC82QjRDQzE3MURGQkU3RDE5N0IxMTkzMzIxOTJCNUU3RTlDMTMxQzQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCNENDMTcxREZCRTdEMTk3
QjExOTMzMjE5MkI1RTdFOUMxMzFDNDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E0SkNTc1JRdFZ6eEt0S3dFOXpmRUZlZ2djY1ZWOE5EUkNWSmFkOHd3ZHZtLzAv
MzEzOTMyMmUzMTM0MzQyZTM2MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzMTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALAkEQwDQYJKoZIhvcNAQELBQADggEBALxrrT0W
4PXTpFIt7VFe3MtyfNsh66C5jpSaSrpn+eWApqdu6JsCy6aOkAB9NttoCITgOyA2
0VvJKuvHi/A0Zn2DKJAqohl/nuZuIM/RXZOQ0xFg5LO2U2fQZSD4/lHqePzfEwBC
LvSMr+a3v/9v/NXkos32Wtxe77fpkLCsDxdDJHP7S/W9EppbUMlXYsAv+Ev45R2+
Hjn50EVh0nMFmqzRjJ6t2zwMYzFwOWB7y+dWDx/9vTGrHCy/crsppHYs4tqbdykG
cjxUsSU91/8UxCKXPs0M5SzLM5LzUlR1B8W/LSFOM86GCgPhCkvMOVddojji0fVG
cS55cR3BTpwMKn8=
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:02:15 2026 by rpki-client