Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32322d3232203d3e20323637353133.roa
File:                     3138362e3235312e3234382e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          GesrxLXTSOD47nLTEMjAbKJdti5fr0CFI8gDypBhMDk=
Subject key identifier:   42:CD:80:B7:AB:0F:CB:2F:5F:A7:A3:CC:7B:E5:5D:1D:D5:E8:3A:C9
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       058FD1ED5A37131D2E1E19D1DFBF563F73D090DA
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32322d3232203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:32 +0000
ROA not before:           Tue 27 Oct 2026 15:41:32 +0000
ROA not after:            Tue 26 Oct 2027 15:46:32 +0000
asID:                     267513
IP address blocks:        186.251.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8f:d1:ed:5a:37:13:1d:2e:1e:19:d1:df:bf:56:3f:73:d0:90:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:32 2026 GMT
            Not After : Oct 26 15:46:32 2027 GMT
        Subject: CN=42CD80B7AB0FCB2F5FA7A3CC7BE55D1DD5E83AC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:d0:98:fd:87:27:61:e0:82:bb:e9:69:52:
                    8c:c2:db:e5:69:57:f4:9f:dc:53:90:c0:8d:83:06:
                    37:d1:f5:d5:14:09:1f:54:a9:7d:11:c7:68:4d:ff:
                    44:2d:f5:1b:c4:b3:12:fc:76:ff:7a:1b:25:f6:49:
                    a5:71:57:37:13:15:dd:e4:9b:c6:f1:2c:fe:98:90:
                    a5:1d:32:e0:2e:96:c0:46:e6:ae:94:69:47:29:3b:
                    33:0c:cc:30:db:bf:3b:15:d4:0f:a3:8c:65:6e:a7:
                    0d:85:da:f8:6a:1d:6f:68:36:4c:be:25:2b:c7:8f:
                    ac:6b:5b:60:18:73:e4:f8:8b:cd:9d:e6:95:da:02:
                    01:b0:9b:8b:fe:f6:07:01:8e:f3:7d:b4:ba:4e:eb:
                    1e:92:ca:4a:ed:a8:22:5d:a1:b8:23:64:98:f7:e9:
                    8b:4c:14:73:0e:65:d9:91:d4:16:82:18:94:af:6e:
                    96:18:96:20:50:39:96:9e:4c:93:d1:84:d0:9f:3f:
                    67:14:14:63:87:4d:28:ca:5d:b3:db:12:3b:6d:02:
                    d0:c8:2d:1c:9e:61:bd:77:85:be:26:9a:e7:03:e0:
                    61:98:70:81:56:5a:0a:b5:66:0a:89:a8:40:f0:9a:
                    d7:8f:b0:38:53:5b:d4:40:40:d1:22:68:12:9f:2e:
                    fd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CD:80:B7:AB:0F:CB:2F:5F:A7:A3:CC:7B:E5:5D:1D:D5:E8:3A:C9
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3234382e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:15:90:79:ad:0a:f2:ab:92:75:eb:b0:f9:67:13:00:cb:b3:
         7c:fa:22:3c:e6:16:be:7f:71:dc:cc:3b:5d:6a:18:e6:7c:a4:
         b3:52:f6:5e:7d:79:de:cb:6b:d3:91:c1:65:f1:c2:ea:b5:e2:
         5c:ae:27:a0:66:aa:10:ec:1b:cb:9a:23:4f:59:9b:b9:87:3d:
         19:b4:d6:77:a5:e2:f0:c4:3c:8c:b8:29:b5:82:a2:20:59:15:
         50:03:96:73:aa:22:83:0b:c7:68:ed:74:7b:f8:fe:bf:71:4d:
         c2:85:37:d6:d8:96:26:bf:52:56:8b:10:5e:9e:9b:b2:af:6a:
         cb:d4:57:a8:bc:9c:b2:83:7c:87:4b:0d:d7:39:ab:f2:df:85:
         d4:96:05:ee:91:54:34:a0:31:3c:e4:1b:10:ae:d8:82:b7:4e:
         fb:ee:9a:65:60:d4:88:c9:ef:73:5e:6b:d8:67:d6:dc:47:59:
         30:43:ae:01:1b:80:e8:35:4b:84:bc:82:4e:60:36:27:69:73:
         65:d4:78:8d:f7:8d:93:86:e6:19:29:8d:ef:21:57:5b:04:bb:
         24:76:57:26:1a:36:e0:b3:2c:69:63:2d:d8:44:4e:d0:77:52:
         3f:ac:34:ca:b8:e3:6f:c6:ab:8e:8b:91:e7:d9:24:83:24:ec:
         f1:f2:61:ab
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBY/R7Vo3Ex0uHhnR379WP3PQkNowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNjEwMjcxNTQxMzJaFw0yNzEwMjYxNTQ2MzJaMDMxMTAvBgNV
BAMTKDQyQ0Q4MEI3QUIwRkNCMkY1RkE3QTNDQzdCRTU1RDFERDVFODNBQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01dCY/YcnYeCCu+lpUozC2+Vp
V/Sf3FOQwI2DBjfR9dUUCR9UqX0Rx2hN/0Qt9RvEsxL8dv96GyX2SaVxVzcTFd3k
m8bxLP6YkKUdMuAulsBG5q6UaUcpOzMMzDDbvzsV1A+jjGVupw2F2vhqHW9oNky+
JSvHj6xrW2AYc+T4i82d5pXaAgGwm4v+9gcBjvN9tLpO6x6SykrtqCJdobgjZJj3
6YtMFHMOZdmR1BaCGJSvbpYYliBQOZaeTJPRhNCfP2cUFGOHTSjKXbPbEjttAtDI
LRyeYb13hb4mmucD4GGYcIFWWgq1ZgqJqEDwmtePsDhTW9RAQNEiaBKfLv0/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQs2At6sPyy9fp6PMe+VdHdXoOskwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr7+DANBgkqhkiG9w0BAQsFAAOCAQEAqBWQ
ea0K8quSdeuw+WcTAMuzfPoiPOYWvn9x3Mw7XWoY5nyks1L2Xn153str05HBZfHC
6rXiXK4noGaqEOwby5ojT1mbuYc9GbTWd6Xi8MQ8jLgptYKiIFkVUAOWc6oigwvH
aO10e/j+v3FNwoU31tiWJr9SVosQXp6bsq9qy9RXqLycsoN8h0sN1zmr8t+F1JYF
7pFUNKAxPOQbEK7YgrdO++6aZWDUiMnvc15r2GfW3EdZMEOuARuA6DVLhLyCTmA2
J2lzZdR4jfeNk4bmGSmN7yFXWwS7JHZXJho24LMsaWMt2ERO0HdSP6w0yrjjb8ar
jouR59kkgyTs8fJhqw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:39:12 2026 by rpki-client