Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
File:                     3138392e33362e3232342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          VfnpY5DFAgaIpdCFZ3V+HcnNtZPQ/drtAR8ZqkSobSY=
Subject key identifier:   E4:7D:A6:85:0D:77:C8:5D:DB:9C:AC:BF:8B:AE:44:A0:5A:A0:26:F1
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       36A9E574795D84C3CBD648128036DA3C9DC7BFFD
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        189.36.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 22:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a9:e5:74:79:5d:84:c3:cb:d6:48:12:80:36:da:3c:9d:c7:bf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=E47DA6850D77C85DDB9CACBF8BAE44A05AA026F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:49:f9:e3:e7:3f:3f:e0:dd:a9:ea:1f:c0:
                    1f:17:1f:55:c5:48:cd:57:ff:77:6b:de:a9:93:42:
                    d6:44:2f:dd:d9:e9:ac:2c:27:33:4a:1e:d2:81:0e:
                    68:1f:23:3c:99:d8:e6:5f:02:07:a9:2b:b0:1c:31:
                    e7:ea:32:d7:83:56:c8:ad:37:77:d9:19:6b:78:8f:
                    d4:3f:c6:9a:53:e9:74:29:27:0e:25:c5:d0:d5:da:
                    47:02:ae:86:ba:82:bd:78:2d:d1:6f:8b:05:bb:c3:
                    da:88:05:54:ab:64:ff:eb:b6:20:d4:9b:e2:f4:eb:
                    d0:69:a1:08:93:d1:75:26:72:fd:43:61:cd:fe:d1:
                    1b:52:e7:17:5e:07:bc:bc:8b:3a:31:4e:e8:2e:63:
                    33:7c:39:d9:56:90:eb:08:20:58:3d:94:01:ff:21:
                    45:6a:e6:24:fa:6f:24:38:11:93:81:ff:80:e1:4f:
                    a6:3c:4b:d8:dc:24:b7:a3:d4:f3:05:42:99:5a:6a:
                    d0:a3:f5:e0:9e:7d:07:a5:25:98:ab:f0:68:39:2b:
                    1a:26:e1:81:b1:91:10:44:97:e6:31:3d:a3:0f:58:
                    a7:71:f6:2c:af:19:10:58:fe:3f:b2:47:9b:9a:89:
                    fc:29:6d:b9:69:c0:30:1b:66:47:c6:5e:16:f3:22:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7D:A6:85:0D:77:C8:5D:DB:9C:AC:BF:8B:AE:44:A0:5A:A0:26:F1
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3138392e33362e3232342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:8b:17:6d:8a:38:47:71:6e:c3:ad:39:d9:67:c1:98:2e:
         2e:0f:3f:dc:42:b3:0e:42:0f:f5:39:88:74:ea:ad:1e:b8:47:
         92:f7:98:8b:c9:46:d5:f7:52:35:ef:83:f2:ea:16:7e:d9:20:
         ae:21:f3:73:7a:39:46:d0:c9:8e:9d:ac:e4:3d:15:51:6b:ff:
         f8:6c:54:0b:03:74:94:93:3a:8c:d6:e6:f0:3f:f3:0e:99:d9:
         f7:b7:68:aa:6e:31:a6:fd:54:5c:cb:9c:03:72:89:13:c7:3d:
         ab:78:3d:e9:e2:2d:54:8f:ec:8c:9a:db:8c:d9:a9:d6:b5:e7:
         3f:e3:2b:45:c1:3c:ee:ca:e5:64:56:36:6c:e0:dc:97:18:8b:
         9c:bf:7f:68:f5:d9:1d:d4:c2:3b:46:b7:9f:54:83:f6:22:4d:
         37:3f:54:5e:ac:14:9b:ca:55:e2:bc:cc:6d:d8:c7:ff:38:d7:
         68:17:d2:53:d8:7c:40:f0:c2:59:d5:12:a8:cf:95:ac:b0:b6:
         76:eb:d4:c5:da:2b:ec:7c:6a:18:44:1b:e5:c1:c7:ab:1b:5f:
         20:28:1c:56:bd:a4:e7:4c:5e:2f:4a:ae:c9:5b:2a:09:60:ea:
         7d:c8:dd:e8:21:e4:84:4e:fa:8e:e7:b0:60:98:7c:eb:7a:3a:
         06:ac:7f:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNqnldHldhMPL1kgSgDbaPJ3Hv/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTFaFw0yNzA3MTYyMTAxMTFaMDMxMTAvBgNV
BAMTKEU0N0RBNjg1MEQ3N0M4NUREQjlDQUNCRjhCQUU0NEEwNUFBMDI2RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnUn54+c/P+DdqeofwB8XH1XF
SM1X/3dr3qmTQtZEL93Z6awsJzNKHtKBDmgfIzyZ2OZfAgepK7AcMefqMteDVsit
N3fZGWt4j9Q/xppT6XQpJw4lxdDV2kcCroa6gr14LdFviwW7w9qIBVSrZP/rtiDU
m+L069BpoQiT0XUmcv1DYc3+0RtS5xdeB7y8izoxTuguYzN8OdlWkOsIIFg9lAH/
IUVq5iT6byQ4EZOB/4DhT6Y8S9jcJLej1PMFQplaatCj9eCefQelJZir8Gg5Kxom
4YGxkRBEl+YxPaMPWKdx9iyvGRBY/j+yR5uaifwpbblpwDAbZkfGXhbzIt0PAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5H2mhQ13yF3bnKy/i65EoFqgJvEwHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzODM5MmUzMzM2MmUzMjMyMzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEvSTgMA0GCSqGSIb3DQEBCwUAA4IBAQA+B4sXbYo4
R3Fuw6052WfBmC4uDz/cQrMOQg/1OYh06q0euEeS95iLyUbV91I174Py6hZ+2SCu
IfNzejlG0MmOnazkPRVRa//4bFQLA3SUkzqM1ubwP/MOmdn3t2iqbjGm/VRcy5wD
cokTxz2reD3p4i1Uj+yMmtuM2anWtec/4ytFwTzuyuVkVjZs4NyXGIucv39o9dkd
1MI7RrefVIP2Ik03P1RerBSbylXivMxt2Mf/ONdoF9JT2HxA8MJZ1RKoz5WssLZ2
69TF2ivsfGoYRBvlwcerG18gKBxWvaTnTF4vSq7JWyoJYOp9yN3oIeSETvqO57Bg
mHzrejoGrH/5
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:23 2026 by rpki-client