Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/3138392e38392e38302e302f32302d3234203d3e20323632373439.roa
File:                     3138392e38392e38302e302f32302d3234203d3e20323632373439.roa (raw, json)
Hash identifier:          6jmvOcD9EaVBIlqVGdmJBGztNIF39JGGfS3Z9l2wM9A=
Subject key identifier:   D7:98:D8:8A:2B:5C:B4:B8:6B:BB:1D:EB:28:EB:39:21:EF:D3:93:BE
Certificate issuer:       /CN=F0B2609400EA5B880A40FE27F44C98975B8C0235
Certificate serial:       3E30230CD4186D039A3D814568203651C4CC86D4
Authority key identifier: F0:B2:60:94:00:EA:5B:88:0A:40:FE:27:F4:4C:98:97:5B:8C:02:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B2609400EA5B880A40FE27F44C98975B8C0235.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/3138392e38392e38302e302f32302d3234203d3e20323632373439.roa
Signing time:             Sat 11 Jul 2026 01:21:41 +0000
ROA not before:           Sat 11 Jul 2026 01:16:41 +0000
ROA not after:            Sat 10 Jul 2027 01:21:41 +0000
asID:                     262749
IP address blocks:        189.89.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/F0B2609400EA5B880A40FE27F44C98975B8C0235.crl
                          rsync://rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/F0B2609400EA5B880A40FE27F44C98975B8C0235.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B2609400EA5B880A40FE27F44C98975B8C0235.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:30:23:0c:d4:18:6d:03:9a:3d:81:45:68:20:36:51:c4:cc:86:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0B2609400EA5B880A40FE27F44C98975B8C0235
        Validity
            Not Before: Jul 11 01:16:41 2026 GMT
            Not After : Jul 10 01:21:41 2027 GMT
        Subject: CN=D798D88A2B5CB4B86BBB1DEB28EB3921EFD393BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9e:8a:a7:8d:3a:5f:11:32:b2:c8:64:e4:01:
                    d9:cc:c3:6b:4e:ca:52:0e:27:9e:e8:c7:73:c9:13:
                    a3:b3:b6:80:53:88:ba:5e:ac:cd:56:15:67:6e:7b:
                    60:b5:d5:3e:d5:d3:78:47:16:b3:3f:18:9c:83:1b:
                    6f:0c:5b:ca:20:90:2c:78:27:d4:7b:07:83:1f:31:
                    68:09:8f:ab:d8:ec:24:c5:49:f0:b0:43:f7:b2:5e:
                    79:3d:fc:68:1d:c5:53:9d:46:0d:db:0f:3f:e5:12:
                    4f:fc:31:a8:03:80:0a:4e:a8:eb:cf:0d:ea:fa:a6:
                    67:1e:e4:49:b1:be:18:06:37:d1:7c:ac:26:e7:49:
                    b1:46:96:06:28:72:f5:84:24:e4:65:8f:65:df:dd:
                    0c:ca:93:64:e8:9e:dc:10:40:43:eb:db:71:f8:50:
                    c5:77:16:50:1c:63:af:c1:e4:cd:d9:93:09:42:53:
                    ad:2c:49:68:fc:f2:07:08:0a:89:04:aa:61:b1:08:
                    b6:7a:96:d5:52:1a:2a:f8:ed:e3:c7:dc:46:3e:2f:
                    cf:18:71:b4:57:8b:cd:6b:c2:a3:64:f7:3c:4f:03:
                    ff:11:43:23:71:19:d0:86:0b:09:07:8b:83:5a:a2:
                    72:24:55:3c:4d:26:ea:7b:bc:79:68:40:9b:ca:d9:
                    a1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:D8:8A:2B:5C:B4:B8:6B:BB:1D:EB:28:EB:39:21:EF:D3:93:BE
            X509v3 Authority Key Identifier:
                keyid:F0:B2:60:94:00:EA:5B:88:0A:40:FE:27:F4:4C:98:97:5B:8C:02:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/F0B2609400EA5B880A40FE27F44C98975B8C0235.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0B2609400EA5B880A40FE27F44C98975B8C0235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADUpMC91GstWAYR5AXuAAferWa22nUWr7cwBRbXXVs1L/0/3138392e38392e38302e302f32302d3234203d3e20323632373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:cf:a3:e8:cb:c0:38:52:19:2b:95:c8:83:3c:ca:c6:02:
         89:f8:ad:90:8f:cc:bf:2e:e7:82:5c:14:7b:24:70:89:f8:db:
         bb:25:f3:46:06:6f:5a:5b:7c:b5:ce:28:59:06:79:6f:bd:67:
         05:12:e2:2f:ff:ba:8e:28:34:51:aa:99:75:db:33:58:f7:d7:
         da:e7:7c:f0:ad:5e:a3:42:2a:f5:ed:b3:71:70:84:fa:3f:02:
         60:6f:67:4b:4e:47:54:be:14:71:b2:e7:0b:67:0c:74:66:20:
         1a:5a:7b:c1:07:a4:7e:9b:27:cd:5e:a9:64:38:49:88:e4:ee:
         80:cc:ef:cb:f5:7a:c4:07:a9:84:cf:56:2c:ec:22:20:a9:0f:
         73:75:a9:01:08:d1:8c:f8:a8:32:ea:5f:29:c0:49:e6:f9:9a:
         56:f1:79:41:33:07:e4:71:53:71:ac:a6:22:d0:17:87:60:cf:
         9d:a2:89:70:f0:f6:e7:d8:89:b0:7d:5e:5d:b5:8b:46:53:af:
         43:9d:62:e6:3e:da:50:6d:f9:77:3c:09:56:d3:bd:e8:9e:79:
         82:60:7c:6a:6d:c8:0b:e7:5d:35:97:c0:71:ae:b9:51:08:a7:
         93:96:de:5e:dc:3b:d3:2d:fe:e2:93:8c:32:e8:26:d4:c8:6c:
         e0:25:8d:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPjAjDNQYbQOaPYFFaCA2UcTMhtQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBCMjYwOTQwMEVBNUI4ODBBNDBGRTI3RjQ0Qzk4OTc1
QjhDMDIzNTAeFw0yNjA3MTEwMTE2NDFaFw0yNzA3MTAwMTIxNDFaMDMxMTAvBgNV
BAMTKEQ3OThEODhBMkI1Q0I0Qjg2QkJCMURFQjI4RUIzOTIxRUZEMzkzQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDnoqnjTpfETKyyGTkAdnMw2tO
ylIOJ57ox3PJE6OztoBTiLperM1WFWdue2C11T7V03hHFrM/GJyDG28MW8ogkCx4
J9R7B4MfMWgJj6vY7CTFSfCwQ/eyXnk9/GgdxVOdRg3bDz/lEk/8MagDgApOqOvP
Der6pmce5EmxvhgGN9F8rCbnSbFGlgYocvWEJORlj2Xf3QzKk2TontwQQEPr23H4
UMV3FlAcY6/B5M3ZkwlCU60sSWj88gcICokEqmGxCLZ6ltVSGir47ePH3EY+L88Y
cbRXi81rwqNk9zxPA/8RQyNxGdCGCwkHi4NaonIkVTxNJup7vHloQJvK2aGfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU15jYiitctLhrux3rKOs5Ie/Tk74wHwYDVR0j
BBgwFoAU8LJglADqW4gKQP4n9EyYl1uMAjUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQURVcE1DOTFHc3RXQVlSNUFYdUFBZmVyV2EyMm5VV3I3Y3dCUmJYWFZz
MUwvMC9GMEIyNjA5NDAwRUE1Qjg4MEE0MEZFMjdGNDRDOTg5NzVCOEMwMjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwQjI2MDk0MDBFQTVCODgw
QTQwRkUyN0Y0NEM5ODk3NUI4QzAyMzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FEVXBNQzkxR3N0V0FZUjVBWHVBQWZlcldhMjJuVVdyN2N3QlJiWFhWczFMLzAv
MzEzODM5MmUzODM5MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvVlQMA0GCSqGSIb3DQEBCwUAA4IBAQBJbc+j6MvA
OFIZK5XIgzzKxgKJ+K2Qj8y/LueCXBR7JHCJ+Nu7JfNGBm9aW3y1zihZBnlvvWcF
EuIv/7qOKDRRqpl12zNY99fa53zwrV6jQir17bNxcIT6PwJgb2dLTkdUvhRxsucL
Zwx0ZiAaWnvBB6R+myfNXqlkOEmI5O6AzO/L9XrEB6mEz1Ys7CIgqQ9zdakBCNGM
+Kgy6l8pwEnm+ZpW8XlBMwfkcVNxrKYi0BeHYM+doolw8Pbn2ImwfV5dtYtGU69D
nWLmPtpQbfl3PAlW073onnmCYHxqbcgL5101l8BxrrlRCKeTlt5e3DvTLf7ik4wy
6CbUyGzgJY1H
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:52:59 2026 by rpki-client