Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa
File:                     3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa (raw, json)
Hash identifier:          86t37SjNu1L+3hh7f08hGqnC9qDvOYWsasd8uVgA14Y=
Subject key identifier:   14:52:36:C3:9B:0E:87:61:5A:11:90:5D:16:F7:C4:28:FE:73:9E:56
Certificate issuer:       /CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
Certificate serial:       47E6879933B8A1156A0712F2D348202573A20E92
Authority key identifier: A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa
Signing time:             Tue 05 May 2026 21:27:06 +0000
ROA not before:           Tue 05 May 2026 21:22:06 +0000
ROA not after:            Tue 04 May 2027 21:27:06 +0000
asID:                     262434
IP address blocks:        186.235.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl
                          rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:53:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e6:87:99:33:b8:a1:15:6a:07:12:f2:d3:48:20:25:73:a2:0e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15
        Validity
            Not Before: May  5 21:22:06 2026 GMT
            Not After : May  4 21:27:06 2027 GMT
        Subject: CN=145236C39B0E87615A11905D16F7C428FE739E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:10:03:0d:09:a6:f8:67:47:50:92:ac:a2:
                    7f:5a:e4:13:ca:40:f7:da:22:bd:af:b0:ff:98:35:
                    71:d2:bb:e6:e0:ab:61:a5:8b:f7:b9:ec:75:ae:40:
                    b6:95:6d:a0:83:80:ae:f7:c1:dc:31:4e:c7:cd:0f:
                    ff:eb:55:0f:95:9a:73:7b:97:6f:a2:a9:f8:9f:db:
                    89:36:35:ad:a5:76:80:f6:50:31:97:ec:32:30:95:
                    c4:34:96:5a:6f:59:7d:1d:17:58:f3:7c:0f:57:7a:
                    71:1e:d5:18:48:64:73:5d:6d:5f:cd:12:6a:b4:16:
                    cc:bb:da:31:29:22:e9:f2:57:7d:05:75:3f:53:4e:
                    e4:9c:2f:c5:a4:9f:a6:12:ff:75:9d:90:87:41:ed:
                    b3:e9:a5:75:1f:9d:83:04:60:c7:37:c9:8c:5e:ca:
                    07:2d:bd:de:0e:c0:6c:17:53:04:6b:d1:08:27:6a:
                    69:e2:32:14:d1:75:06:bd:c7:ee:6f:05:0a:f2:33:
                    a7:31:25:cf:a4:16:ee:eb:c9:11:16:20:88:08:8e:
                    d1:0c:51:35:38:e5:22:38:ae:63:25:fa:12:a3:2b:
                    f8:b9:ba:db:44:4f:9f:f8:92:53:42:fe:55:db:2a:
                    85:fc:7b:9d:d6:b6:bb:f1:bf:18:27:e0:e5:88:77:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:52:36:C3:9B:0E:87:61:5A:11:90:5D:16:F7:C4:28:FE:73:9E:56
            X509v3 Authority Key Identifier:
                keyid:A4:C0:BA:3A:9F:F0:5A:01:E2:EA:16:AB:06:1A:D9:9A:D6:AA:0D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C0BA3A9FF05A01E2EA16AB061AD99AD6AA0D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AegpkUdHVMg4mmdfRgS3QzPRFee9WpUhFS1hL1su3TqW/0/3138362e3233352e33312e302f32342d3234203d3e20323632343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:37:dd:d8:04:3b:c2:66:ae:9b:86:7d:cd:12:1a:85:cd:
         bb:63:5f:a2:2e:9a:aa:29:cd:7d:19:df:97:5f:80:e9:bc:1a:
         40:04:38:a3:16:f9:08:6c:cf:0f:e9:3b:e3:b8:c2:7f:bb:69:
         ab:2d:a2:7a:d9:a2:cc:67:7f:5b:2b:c1:02:27:99:bf:6d:43:
         19:34:9c:86:e2:b3:15:fb:08:e3:44:db:3f:67:1c:e9:70:c4:
         b6:70:3d:5e:6e:2e:b8:34:6e:00:90:ea:9f:ba:a8:93:6f:f4:
         1f:cb:95:7b:48:8d:59:e8:d7:73:e2:8e:2d:73:17:30:ea:21:
         3e:7f:07:d4:69:20:8f:52:02:72:e0:7a:c9:b9:3a:b9:91:69:
         a8:bd:4a:9f:22:a2:70:5c:0a:76:b3:28:b7:e0:02:0d:56:4a:
         d8:e4:20:aa:39:b7:bf:c9:51:e6:ae:eb:ac:81:f1:8a:2f:73:
         bd:a6:4d:b9:e8:7a:45:2a:61:5e:26:ed:7e:fa:d1:e5:88:cf:
         13:43:88:fd:d8:7a:0a:03:a0:c0:24:41:1b:37:95:0b:1d:ba:
         46:fd:9a:5a:32:8b:20:7b:ac:08:03:1d:4a:3f:5a:b2:36:a4:
         3d:fd:fe:43:5d:80:d5:12:a8:af:96:24:c7:9a:f7:13:48:b3:
         23:c9:98:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUR+aHmTO4oRVqBxLy00ggJXOiDpIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRDMEJBM0E5RkYwNUEwMUUyRUExNkFCMDYxQUQ5OUFE
NkFBMEQxNTAeFw0yNjA1MDUyMTIyMDZaFw0yNzA1MDQyMTI3MDZaMDMxMTAvBgNV
BAMTKDE0NTIzNkMzOUIwRTg3NjE1QTExOTA1RDE2RjdDNDI4RkU3MzlFNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qxADDQmm+GdHUJKson9a5BPK
QPfaIr2vsP+YNXHSu+bgq2Gli/e57HWuQLaVbaCDgK73wdwxTsfND//rVQ+VmnN7
l2+iqfif24k2Na2ldoD2UDGX7DIwlcQ0llpvWX0dF1jzfA9XenEe1RhIZHNdbV/N
Emq0Fsy72jEpIunyV30FdT9TTuScL8Wkn6YS/3WdkIdB7bPppXUfnYMEYMc3yYxe
ygctvd4OwGwXUwRr0QgnamniMhTRdQa9x+5vBQryM6cxJc+kFu7ryREWIIgIjtEM
UTU45SI4rmMl+hKjK/i5uttET5/4klNC/lXbKoX8e53Wtrvxvxgn4OWId6HRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFFI2w5sOh2FaEZBdFvfEKP5znlYwHwYDVR0j
BBgwFoAUpMC6Op/wWgHi6harBhrZmtaqDRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWVncGtVZEhWTWc0bW1kZlJnUzNRelBSRmVlOVdwVWhGUzFoTDFzdTNU
cVcvMC9BNEMwQkEzQTlGRjA1QTAxRTJFQTE2QUIwNjFBRDk5QUQ2QUEwRDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0QzBCQTNBOUZGMDVBMDFF
MkVBMTZBQjA2MUFEOTlBRDZBQTBEMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FlZ3BrVWRIVk1nNG1tZGZSZ1MzUXpQUkZlZTlXcFVoRlMxaEwxc3UzVHFXLzAv
MzEzODM2MmUzMjMzMzUyZTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC66x8wDQYJKoZIhvcNAQELBQADggEBAJvGN93Y
BDvCZq6bhn3NEhqFzbtjX6IumqopzX0Z35dfgOm8GkAEOKMW+Qhszw/pO+O4wn+7
aastonrZosxnf1srwQInmb9tQxk0nIbisxX7CONE2z9nHOlwxLZwPV5uLrg0bgCQ
6p+6qJNv9B/LlXtIjVno13Piji1zFzDqIT5/B9RpII9SAnLgesm5OrmRaai9Sp8i
onBcCnazKLfgAg1WStjkIKo5t7/JUeau66yB8Yovc72mTbnoekUqYV4m7X760eWI
zxNDiP3YegoDoMAkQRs3lQsdukb9mloyiyB7rAgDHUo/WrI2pD39/kNdgNUSqK+W
JMea9xNIsyPJmKI=
-----END CERTIFICATE-----
Generated at Wed May 13 20:53:30 2026 by rpki-client