Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
File:                     3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa (raw, json)
Hash identifier:          yleCQ4zI1mGb6YUUyUkP2MAIh78ww95RvP+vdUDUdpk=
Subject key identifier:   F7:76:FB:F3:77:BB:DC:BF:56:6D:88:C6:1B:62:B9:71:33:8B:E9:26
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       198EA7B8B910E70CFD0ED761BFCA1521A937C0BB
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:33 +0000
ROA not before:           Tue 27 Oct 2026 15:41:33 +0000
ROA not after:            Tue 26 Oct 2027 15:46:33 +0000
asID:                     267513
IP address blocks:        186.251.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 10:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8e:a7:b8:b9:10:e7:0c:fd:0e:d7:61:bf:ca:15:21:a9:37:c0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:33 2026 GMT
            Not After : Oct 26 15:46:33 2027 GMT
        Subject: CN=F776FBF377BBDCBF566D88C61B62B971338BE926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:39:60:3f:db:ae:63:f9:a5:df:14:32:34:
                    4d:05:f5:95:f9:7c:7e:65:59:be:60:86:d4:2e:d6:
                    54:a0:5d:a3:f9:f2:02:fb:b0:c8:37:1d:1d:18:d2:
                    d4:fc:bf:31:3e:e2:0d:d4:39:62:cb:44:3d:0f:25:
                    4b:92:85:69:e8:df:7a:42:bf:35:2a:a5:a3:b4:a7:
                    ad:23:8d:c9:8f:c1:c0:d5:31:03:98:cd:0f:f9:df:
                    f6:e5:8c:5f:a5:d5:ce:76:35:8e:a9:8e:f5:92:b9:
                    b6:f2:63:ef:90:37:17:3d:31:f1:2d:a9:f3:4a:17:
                    b7:73:f7:1d:84:22:2a:36:f4:6d:cd:78:94:66:d2:
                    21:4d:3a:09:49:e5:35:07:aa:55:88:ac:a3:ac:7b:
                    03:51:a3:7d:8b:4f:b1:6d:35:06:b4:1d:79:e3:eb:
                    03:3d:50:43:f2:65:35:26:af:ae:8a:de:c3:53:a4:
                    2c:59:f4:75:11:b7:6a:67:08:b0:16:80:b6:ed:9f:
                    23:93:3d:a1:62:f5:b0:6e:52:62:d8:3a:c4:ef:c1:
                    ab:18:0a:7a:0a:5d:bd:1b:55:ca:a2:1a:99:31:6a:
                    c2:d4:08:8b:ad:11:30:4d:7f:ce:db:5c:52:05:c3:
                    c7:2a:3d:35:50:7e:bc:10:08:94:37:94:cb:62:97:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:FB:F3:77:BB:DC:BF:56:6D:88:C6:1B:62:B9:71:33:8B:E9:26
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3235312e3235302e302f32332d3233203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:91:19:4b:53:4b:2f:c1:40:cb:6a:34:97:60:80:99:d5:8c:
         8a:0c:7f:b9:86:a0:89:19:cb:cc:7e:fc:cd:5b:f6:88:94:b1:
         1a:21:6b:5a:5b:33:a9:b7:46:45:79:a8:7f:91:dc:43:a3:56:
         97:6d:75:d2:97:94:45:c2:d4:0a:3d:0a:a3:66:0a:3c:44:c6:
         90:b1:9a:6c:9c:6e:0e:a8:e8:db:ab:ad:d8:d5:8d:59:af:61:
         33:26:42:14:04:76:dc:7b:d7:8b:44:56:b9:6e:6b:3a:2a:ab:
         7d:c1:5c:8e:ba:5c:db:92:06:d9:9e:ad:c3:cc:21:fc:3a:43:
         fe:38:b2:95:86:1b:08:43:69:25:5f:d4:21:4f:ec:c4:c3:15:
         0b:04:b3:c1:a0:b1:4d:b3:92:a0:e6:a2:b5:65:3c:0f:ac:bf:
         d7:ae:a0:ed:b4:74:ac:94:88:ec:9c:23:5f:11:20:a8:fc:6d:
         d3:56:7a:08:12:08:68:9c:7b:ec:4a:f3:e4:1d:08:19:5a:3d:
         f6:06:c2:97:4e:27:fe:82:33:40:d5:34:21:d3:99:56:35:5d:
         d1:a5:b0:7d:5b:99:6b:3c:ad:c0:12:d5:44:fb:3b:22:47:26:
         31:c2:93:dd:60:de:f1:07:0f:2a:56:2f:f8:e2:e7:98:73:7f:
         ea:e0:20:12
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGY6nuLkQ5wz9Dtdhv8oVIak3wLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5REFGNkQ5MTdBNkJDNzZEN0FDQ0ZFNDlFMjhBRUQ4
RjYzQUIxQzAeFw0yNjEwMjcxNTQxMzNaFw0yNzEwMjYxNTQ2MzNaMDMxMTAvBgNV
BAMTKEY3NzZGQkYzNzdCQkRDQkY1NjZEODhDNjFCNjJCOTcxMzM4QkU5MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmmTlgP9uuY/ml3xQyNE0F9ZX5
fH5lWb5ghtQu1lSgXaP58gL7sMg3HR0Y0tT8vzE+4g3UOWLLRD0PJUuShWno33pC
vzUqpaO0p60jjcmPwcDVMQOYzQ/53/bljF+l1c52NY6pjvWSubbyY++QNxc9MfEt
qfNKF7dz9x2EIio29G3NeJRm0iFNOglJ5TUHqlWIrKOsewNRo32LT7FtNQa0HXnj
6wM9UEPyZTUmr66K3sNTpCxZ9HURt2pnCLAWgLbtnyOTPaFi9bBuUmLYOsTvwasY
CnoKXb0bVcqiGpkxasLUCIutETBNf87bXFIFw8cqPTVQfrwQCJQ3lMtil3u9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU93b783e73L9WbYjGG2K5cTOL6SYwHwYDVR0j
BBgwFoAUMZ2vbZF6a8dtesz+SeKK7Y9jqxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVvYzFvckdrQzZTdkF1dnhIMUpLandpM0tQd0hSS1JhTHM4c2ZCTlh6
SkcvMC8zMTlEQUY2RDkxN0E2QkM3NkQ3QUNDRkU0OUUyOEFFRDhGNjNBQjFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMxOURBRjZEOTE3QTZCQzc2
RDdBQ0NGRTQ5RTI4QUVEOEY2M0FCMUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1b2Mxb3JHa0M2U3ZBdXZ4SDFKS2p3aTNLUHdIUktSYUxzOHNmQk5YekpHLzAv
MzEzODM2MmUzMjM1MzEyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNzM1MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbr7+jANBgkqhkiG9w0BAQsFAAOCAQEAc5EZ
S1NLL8FAy2o0l2CAmdWMigx/uYagiRnLzH78zVv2iJSxGiFrWlszqbdGRXmof5Hc
Q6NWl2110peURcLUCj0Ko2YKPETGkLGabJxuDqjo26ut2NWNWa9hMyZCFAR23HvX
i0RWuW5rOiqrfcFcjrpc25IG2Z6tw8wh/DpD/jiylYYbCENpJV/UIU/sxMMVCwSz
waCxTbOSoOaitWU8D6y/166g7bR0rJSI7JwjXxEgqPxt01Z6CBIIaJx77Erz5B0I
GVo99gbCl04n/oIzQNU0IdOZVjVd0aWwfVuZazytwBLVRPs7IkcmMcKT3WDe8QcP
KlYv+OLnmHN/6uAgEg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 02:03:34 2026 by rpki-client