Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa
File:                     3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          jTwM6/HLFN/1IwFRoEJ0MOHe3Q4SUTqKL/voQ/XQB6w=
Subject key identifier:   9B:C9:12:49:B9:D7:7B:25:5E:60:4F:E7:AC:B8:20:0E:53:46:6C:6E
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       5E585227E7B2319A52BDAAFE141640CB3368880D
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        186.251.224.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:58:52:27:e7:b2:31:9a:52:bd:aa:fe:14:16:40:cb:33:68:88:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=9BC91249B9D77B255E604FE7ACB8200E53466C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c1:9b:80:e4:bd:00:27:12:02:70:98:bb:87:
                    47:ba:c9:36:75:91:d4:86:0e:0e:0f:60:df:6e:5b:
                    de:b1:6b:4c:97:45:de:d5:f1:f5:78:f7:ba:ed:e6:
                    6a:00:27:9d:4e:c4:82:4a:1e:14:19:ef:0c:d0:41:
                    bf:c9:0a:7e:ba:0a:3b:a9:5a:4f:ab:6e:4a:ae:80:
                    c1:d2:86:57:07:6e:59:58:d5:cb:f1:8f:e4:e3:35:
                    30:7d:49:ab:2e:03:ca:90:d9:fc:b5:64:b7:94:36:
                    bc:d5:44:c7:3f:ab:3a:3a:64:e2:2c:7c:13:11:38:
                    bf:50:9c:61:8a:8d:65:36:5e:e6:16:a1:64:f7:24:
                    a1:21:4d:cb:21:d9:a1:57:6a:fb:63:e2:4b:d3:cf:
                    13:c1:14:77:01:79:e1:1e:bd:87:1c:fd:b6:5e:b6:
                    a5:70:21:2a:33:88:94:ed:06:ac:33:97:67:e3:c3:
                    34:a4:12:32:81:92:e3:6b:ee:f3:b0:0a:90:db:7a:
                    3d:55:b9:d0:ba:4d:a9:92:1f:e2:7b:b6:d5:23:03:
                    68:e0:05:cf:91:42:d9:1c:c8:b0:d9:e1:f6:c8:25:
                    1c:c1:3a:d1:00:ab:4a:09:91:51:29:63:af:86:ad:
                    1e:94:3c:5a:c2:c0:b8:b7:3d:10:9a:61:0e:3e:0d:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C9:12:49:B9:D7:7B:25:5E:60:4F:E7:AC:B8:20:0E:53:46:6C:6E
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138362e3235312e3232342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:a9:32:29:ff:5c:b0:10:c4:55:ff:f9:7f:58:69:92:db:
         2f:23:af:e9:a2:48:4d:92:88:9c:3d:34:4a:c5:6e:44:a0:90:
         0c:e5:6c:af:d8:5a:b0:8a:17:d4:26:e9:1f:9e:1a:f6:27:cd:
         35:75:da:f1:9c:8d:ee:e1:f7:7d:b0:5d:02:a6:00:05:7e:23:
         e8:76:34:fd:26:3d:d4:38:66:a2:d9:43:d0:f9:93:60:bd:93:
         e9:8f:f4:fc:d2:04:72:f9:c0:e8:8f:0b:24:b1:28:a0:4c:7f:
         ab:76:12:f9:dd:ed:cf:1d:dd:c9:d5:75:7f:0f:eb:9a:5a:0f:
         72:69:03:71:e9:68:fb:0b:1c:f4:7e:49:ff:65:7f:45:8b:b5:
         cc:58:7a:a6:3a:3f:99:38:b2:39:27:eb:fd:9b:df:82:a3:ca:
         cd:3a:40:f2:ae:56:c2:ba:55:8d:0a:79:00:a3:44:d7:ee:c7:
         34:ac:bd:e9:38:a2:65:6e:7c:f6:99:07:23:1c:88:36:8d:55:
         3d:12:9f:00:61:bf:ae:48:bb:b4:e4:b2:58:73:60:c2:e1:23:
         f2:68:52:5c:4e:71:ca:2f:6f:2d:8b:f8:81:da:c5:01:1a:d2:
         8c:f4:aa:3f:6b:a2:95:3d:af:c4:2c:51:13:12:6f:10:d8:0a:
         94:ab:1c:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXlhSJ+eyMZpSvar+FBZAyzNoiA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTFaFw0yNzA3MTYyMTAxMTFaMDMxMTAvBgNV
BAMTKDlCQzkxMjQ5QjlENzdCMjU1RTYwNEZFN0FDQjgyMDBFNTM0NjZDNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwZuA5L0AJxICcJi7h0e6yTZ1
kdSGDg4PYN9uW96xa0yXRd7V8fV497rt5moAJ51OxIJKHhQZ7wzQQb/JCn66Cjup
Wk+rbkqugMHShlcHbllY1cvxj+TjNTB9SasuA8qQ2fy1ZLeUNrzVRMc/qzo6ZOIs
fBMROL9QnGGKjWU2XuYWoWT3JKEhTcsh2aFXavtj4kvTzxPBFHcBeeEevYcc/bZe
tqVwISoziJTtBqwzl2fjwzSkEjKBkuNr7vOwCpDbej1VudC6TamSH+J7ttUjA2jg
Bc+RQtkcyLDZ4fbIJRzBOtEAq0oJkVEpY6+GrR6UPFrCwLi3PRCaYQ4+DUfnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm8kSSbnXeyVeYE/nrLggDlNGbG4wHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzgzNjM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6++AwDQYJKoZIhvcNAQELBQADggEBABo4qTIp
/1ywEMRV//l/WGmS2y8jr+miSE2SiJw9NErFbkSgkAzlbK/YWrCKF9Qm6R+eGvYn
zTV12vGcje7h932wXQKmAAV+I+h2NP0mPdQ4ZqLZQ9D5k2C9k+mP9PzSBHL5wOiP
CySxKKBMf6t2Evnd7c8d3cnVdX8P65paD3JpA3HpaPsLHPR+Sf9lf0WLtcxYeqY6
P5k4sjkn6/2b34Kjys06QPKuVsK6VY0KeQCjRNfuxzSsvek4omVufPaZByMciDaN
VT0SnwBhv65Iu7TkslhzYMLhI/JoUlxOccovby2L+IHaxQEa0oz0qj9ropU9r8Qs
URMSbxDYCpSrHJ4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:33 2026 by rpki-client