Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
File:                     3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa (raw, json)
Hash identifier:          XtFf25YeLeO4ShyssvYKRdEUx85wDmTr8KoDpeYYLFo=
Subject key identifier:   97:51:EC:17:72:34:C1:48:86:6A:64:53:23:BE:C2:89:B9:F8:0E:82
Certificate issuer:       /CN=C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2
Certificate serial:       60D7464D92D5A895321D50D9156B713D4FFA2618
Authority key identifier: C1:F5:5E:21:C0:56:D8:6C:01:BC:B7:CF:4A:AE:1F:B7:7A:32:58:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa
Signing time:             Fri 28 Aug 2026 22:21:45 +0000
ROA not before:           Fri 28 Aug 2026 22:16:45 +0000
ROA not after:            Fri 27 Aug 2027 22:21:45 +0000
asID:                     270946
IP address blocks:        131.108.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.crl
                          rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 13:15:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d7:46:4d:92:d5:a8:95:32:1d:50:d9:15:6b:71:3d:4f:fa:26:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2
        Validity
            Not Before: Aug 28 22:16:45 2026 GMT
            Not After : Aug 27 22:21:45 2027 GMT
        Subject: CN=9751EC177234C148866A645323BEC289B9F80E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:c3:8a:82:1f:a6:38:06:33:4b:c2:ec:47:
                    03:47:41:bf:f3:6f:27:19:4d:57:2e:1e:07:ff:0d:
                    4a:7f:3f:da:fa:d0:12:4a:e4:c2:02:b3:57:26:9d:
                    9c:a9:ca:0c:5a:26:c6:dc:9c:66:0d:57:70:02:1b:
                    95:c0:71:5b:f4:ab:20:73:2d:6e:0c:46:46:df:bb:
                    36:7e:d4:9b:99:d8:91:94:84:7d:46:ce:81:f2:17:
                    89:34:b7:0b:df:ec:1a:65:e0:87:86:19:b8:40:d9:
                    bc:80:17:65:0b:ce:92:f4:06:65:0a:ed:a4:6a:11:
                    a3:4e:f2:5f:23:a4:cf:91:86:01:18:9f:70:25:18:
                    66:2a:41:a8:94:f6:f1:cb:46:71:1b:79:e9:1f:49:
                    c9:00:16:8d:06:d2:c1:83:cc:61:89:a8:87:98:c5:
                    a4:20:73:a8:db:dd:57:9f:20:58:6d:8f:b0:f0:63:
                    a8:8e:bc:9c:0e:07:1c:40:ff:e4:84:1e:8a:7c:ca:
                    50:dc:bb:22:56:2f:0e:f5:fb:37:10:15:91:9a:2a:
                    d0:8a:dc:17:e4:e5:48:5f:b8:e3:e3:3f:0b:3a:6f:
                    bf:db:7f:1a:df:04:b2:4e:3e:b1:ef:e2:51:a1:c4:
                    ec:da:77:82:03:40:a1:24:fb:2b:ce:de:b1:8d:e9:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:51:EC:17:72:34:C1:48:86:6A:64:53:23:BE:C2:89:B9:F8:0E:82
            X509v3 Authority Key Identifier:
                keyid:C1:F5:5E:21:C0:56:D8:6C:01:BC:B7:CF:4A:AE:1F:B7:7A:32:58:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C1F55E21C056D86C01BCB7CF4AAE1FB77A3258B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/0/3133312e3130382e3135322e302f32322d3332203d3e20323730393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:5c:fe:bd:22:9b:f3:e2:34:97:31:36:91:66:f9:eb:a9:
         62:2f:29:0d:2c:c9:fe:c9:ab:da:31:a4:d3:ec:cd:3d:22:3e:
         86:91:06:7d:e5:b1:b7:fd:44:a3:41:c8:bf:2c:b8:98:0e:0f:
         70:22:82:5b:41:89:6b:5c:e3:07:40:97:ca:5b:d7:97:49:8c:
         3b:b8:83:f0:2e:c9:4c:3b:c5:62:8a:35:35:69:f3:91:ac:f2:
         a9:52:69:76:33:73:ac:d3:3a:13:2e:9b:71:69:80:82:ce:46:
         c8:4a:19:88:3b:14:fd:3c:6a:49:23:ab:d9:c2:d8:d1:2f:ce:
         3b:ca:b2:24:78:76:a9:1b:51:80:da:8d:16:6c:45:23:5f:9c:
         75:83:68:56:1f:75:ea:f6:7b:2d:36:01:05:d2:fb:4e:ed:e3:
         e4:da:a1:d1:76:07:e9:59:4e:f2:85:3d:07:c2:c3:85:c8:92:
         ab:28:8e:b3:ed:f7:db:d4:fd:6f:db:cd:a9:cb:bf:ec:45:12:
         ac:f0:fa:39:60:e8:88:df:3f:f2:7b:bb:45:52:35:69:08:b2:
         73:5e:5a:72:fb:9b:ca:0e:8c:bf:ba:de:c0:81:a5:4e:e5:97:
         68:38:bf:fe:cf:26:b7:e8:db:06:ea:24:b3:c1:3e:eb:0d:06:
         9c:28:ec:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYNdGTZLVqJUyHVDZFWtxPU/6JhgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFGNTVFMjFDMDU2RDg2QzAxQkNCN0NGNEFBRTFGQjc3
QTMyNThCMjAeFw0yNjA4MjgyMjE2NDVaFw0yNzA4MjcyMjIxNDVaMDMxMTAvBgNV
BAMTKDk3NTFFQzE3NzIzNEMxNDg4NjZBNjQ1MzIzQkVDMjg5QjlGODBFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPsOKgh+mOAYzS8LsRwNHQb/z
bycZTVcuHgf/DUp/P9r60BJK5MICs1cmnZypygxaJsbcnGYNV3ACG5XAcVv0qyBz
LW4MRkbfuzZ+1JuZ2JGUhH1GzoHyF4k0twvf7Bpl4IeGGbhA2byAF2ULzpL0BmUK
7aRqEaNO8l8jpM+RhgEYn3AlGGYqQaiU9vHLRnEbeekfSckAFo0G0sGDzGGJqIeY
xaQgc6jb3VefIFhtj7DwY6iOvJwOBxxA/+SEHop8ylDcuyJWLw71+zcQFZGaKtCK
3Bfk5UhfuOPjPws6b7/bfxrfBLJOPrHv4lGhxOzad4IDQKEk+yvO3rGN6VgPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUl1HsF3I0wUiGamRTI77Cibn4DoIwHwYDVR0j
BBgwFoAUwfVeIcBW2GwBvLfPSq4ft3oyWLIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm8zOFYxeHQ2WFlhYXR1SmdTd0pCZkVnZ2ljOGZkdHhIWXBGUDJHVkR6
eHIvMC9DMUY1NUUyMUMwNTZEODZDMDFCQ0I3Q0Y0QUFFMUZCNzdBMzI1OEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxRjU1RTIxQzA1NkQ4NkMw
MUJDQjdDRjRBQUUxRkI3N0EzMjU4QjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvMzhWMXh0NlhZYWF0dUpnU3dKQmZFZ2dpYzhmZHR4SFlwRlAyR1ZEenhyLzAv
MzEzMzMxMmUzMTMwMzgyZTMxMzUzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzczMDM5MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoNsmDANBgkqhkiG9w0BAQsFAAOCAQEAQbtc
/r0im/PiNJcxNpFm+eupYi8pDSzJ/smr2jGk0+zNPSI+hpEGfeWxt/1Eo0HIvyy4
mA4PcCKCW0GJa1zjB0CXylvXl0mMO7iD8C7JTDvFYoo1NWnzkazyqVJpdjNzrNM6
Ey6bcWmAgs5GyEoZiDsU/TxqSSOr2cLY0S/OO8qyJHh2qRtRgNqNFmxFI1+cdYNo
Vh916vZ7LTYBBdL7Tu3j5Nqh0XYH6VlO8oU9B8LDhciSqyiOs+3329T9b9vNqcu/
7EUSrPD6OWDoiN8/8nu7RVI1aQiyc15acvubyg6Mv7rewIGlTuWXaDi//s8mt+jb
Buoks8E+6w0GnCjsCg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 19:43:13 2026 by rpki-client