Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
File:                     3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa (raw, json)
Hash identifier:          8GP+EpoUsN61DqQrUPgfB/uhs15aD4Ce4O45dBlMVOY=
Subject key identifier:   8D:A1:47:07:2F:05:A6:2B:FA:7E:08:10:7E:1A:0A:11:61:EF:FA:20
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       5978D7BA82ADCA76FD7187BEA3975A31200B3159
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa
Signing time:             Mon 11 May 2026 19:49:44 +0000
ROA not before:           Mon 11 May 2026 19:44:44 +0000
ROA not after:            Mon 10 May 2027 19:49:44 +0000
asID:                     266433
IP address blocks:        168.194.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:78:d7:ba:82:ad:ca:76:fd:71:87:be:a3:97:5a:31:20:0b:31:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: May 11 19:44:44 2026 GMT
            Not After : May 10 19:49:44 2027 GMT
        Subject: CN=8DA147072F05A62BFA7E08107E1A0A1161EFFA20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:6c:45:71:6a:e5:55:bc:94:64:55:87:ce:
                    54:10:68:26:49:2a:44:07:78:e9:34:d8:b1:75:12:
                    1c:0a:71:1f:67:e4:e8:88:9a:d0:61:dc:ce:9d:34:
                    cf:17:f6:44:53:ed:77:1a:09:d8:6a:d5:f4:7b:80:
                    3c:30:0d:f9:d5:ab:55:4f:f0:7c:14:55:97:a5:48:
                    69:02:12:35:69:67:6f:02:15:89:59:df:6a:73:3c:
                    35:16:d7:22:12:fa:a3:4e:8b:0d:c1:1c:6b:b8:92:
                    c0:5a:32:fe:a7:22:c8:dd:ac:31:89:3e:07:1b:56:
                    6d:cd:ec:4c:f1:a6:1b:99:4a:a6:b2:d3:66:8a:e4:
                    1c:78:cf:15:92:35:e7:7c:f6:9f:34:6c:4a:68:a1:
                    79:78:6d:c3:5a:f6:a8:96:0d:5c:6a:32:26:24:48:
                    83:7f:ae:e8:ae:fe:64:27:b7:84:93:ff:2d:ad:a7:
                    48:ca:00:00:58:c1:a4:fa:1d:7a:92:85:9d:eb:ec:
                    1d:36:db:57:73:52:09:3b:16:35:65:19:df:69:19:
                    23:f5:f8:c6:56:6e:5c:34:71:02:4d:f2:b7:f1:a5:
                    7a:46:de:4b:33:60:7c:a5:a5:3d:bf:82:48:19:5a:
                    2c:24:51:ea:20:99:65:8f:44:44:f1:ca:6b:2c:4c:
                    70:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A1:47:07:2F:05:A6:2B:FA:7E:08:10:7E:1A:0A:11:61:EF:FA:20
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/3136382e3139342e34302e302f32322d3234203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:95:e6:04:20:42:ab:0f:3a:88:f3:ed:7b:cd:63:db:d3:0c:
         cb:5e:f2:af:82:e0:a5:d8:de:36:46:2d:e0:5e:5b:1b:5e:af:
         25:58:fb:7a:98:5e:80:e2:d8:35:7a:e5:b1:f0:60:74:a5:93:
         35:bf:1b:a1:9d:4e:0c:6e:d6:9a:15:50:c1:ff:be:e1:3e:97:
         d6:43:7a:69:a3:0a:c9:28:9d:43:f6:0a:21:7a:80:68:89:72:
         74:d5:de:6a:5e:6a:8f:e2:8c:5b:99:fa:50:e1:50:28:6b:fc:
         9a:81:f9:86:13:4a:1f:78:34:0c:01:15:f2:b6:17:57:a9:36:
         95:fb:f0:f8:b7:33:f0:75:24:f8:4f:e5:6c:63:9d:7e:f6:bc:
         ba:c4:2d:be:95:a0:2c:16:c7:2e:ec:67:2c:24:aa:6f:06:f5:
         44:30:7b:91:97:a2:3a:a8:11:b2:3c:ba:51:98:a3:f8:d3:9f:
         21:10:b7:4b:86:71:91:e0:47:55:6d:ab:b0:b8:3c:32:e3:08:
         29:4a:d4:3a:cb:67:fe:29:ad:2c:44:a0:e2:52:b5:0c:aa:c1:
         45:75:2a:e0:49:e8:39:be:f5:7a:04:cd:64:da:48:ac:a0:8b:
         28:87:c2:d6:c0:d4:fc:cd:10:a5:e8:89:b6:5b:40:1e:44:97:
         ec:8b:90:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWXjXuoKtynb9cYe+o5daMSALMVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCMEZBMTI0QjNCN0QxOTlFNkEwOTlGMDU3Nzc2MzFB
OUYyQzEwMjAeFw0yNjA1MTExOTQ0NDRaFw0yNzA1MTAxOTQ5NDRaMDMxMTAvBgNV
BAMTKDhEQTE0NzA3MkYwNUE2MkJGQTdFMDgxMDdFMUEwQTExNjFFRkZBMjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlAmxFcWrlVbyUZFWHzlQQaCZJ
KkQHeOk02LF1EhwKcR9n5OiImtBh3M6dNM8X9kRT7XcaCdhq1fR7gDwwDfnVq1VP
8HwUVZelSGkCEjVpZ28CFYlZ32pzPDUW1yIS+qNOiw3BHGu4ksBaMv6nIsjdrDGJ
PgcbVm3N7EzxphuZSqay02aK5Bx4zxWSNed89p80bEpooXl4bcNa9qiWDVxqMiYk
SIN/ruiu/mQnt4ST/y2tp0jKAABYwaT6HXqShZ3r7B0221dzUgk7FjVlGd9pGSP1
+MZWblw0cQJN8rfxpXpG3kszYHylpT2/gkgZWiwkUeogmWWPRETxymssTHBtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjaFHBy8Fpiv6fggQfhoKEWHv+iAwHwYDVR0j
BBgwFoAU5LD6Eks7fRmeagmfBXd2ManywQIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzhiMXRHTm9yakw0SmRDRzMzZzNHb3FXR1RuQlU3YkE3eVRUQk14ZWg5
VWYvMC9FNEIwRkExMjRCM0I3RDE5OUU2QTA5OUYwNTc3NzYzMUE5RjJDMTAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0QjBGQTEyNEIzQjdEMTk5
RTZBMDk5RjA1Nzc3NjMxQTlGMkMxMDIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M4YjF0R05vcmpMNEpkQ0czM2czR29xV0dUbkJVN2JBN3lUVEJNeGVoOVVmLzAv
MzEzNjM4MmUzMTM5MzQyZTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKowigwDQYJKoZIhvcNAQELBQADggEBADKV5gQg
QqsPOojz7XvNY9vTDMte8q+C4KXY3jZGLeBeWxteryVY+3qYXoDi2DV65bHwYHSl
kzW/G6GdTgxu1poVUMH/vuE+l9ZDemmjCskonUP2CiF6gGiJcnTV3mpeao/ijFuZ
+lDhUChr/JqB+YYTSh94NAwBFfK2F1epNpX78Pi3M/B1JPhP5WxjnX72vLrELb6V
oCwWxy7sZywkqm8G9UQwe5GXojqoEbI8ulGYo/jTnyEQt0uGcZHgR1Vtq7C4PDLj
CClK1DrLZ/4prSxEoOJStQyqwUV1KuBJ6Dm+9XoEzWTaSKygiyiHwtbA1PzNEKXo
ibZbQB5El+yLkOw=
-----END CERTIFICATE-----
Generated at Wed May 13 19:16:50 2026 by rpki-client