Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138362e3233362e34382e302f32302d3234203d3e20323638323138.roa
File:                     3138362e3233362e34382e302f32302d3234203d3e20323638323138.roa (raw, json)
Hash identifier:          +3IHmAa94WI04JjUqLslHaoOSG12xPuK8npHJg0PT74=
Subject key identifier:   97:3C:BB:9E:61:A4:45:FC:FF:F4:07:81:BE:14:19:46:3D:3A:C4:10
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       0BA089C8DB2210FCD15AA3FB0007C447EB2512B3
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138362e3233362e34382e302f32302d3234203d3e20323638323138.roa
Signing time:             Fri 27 Mar 2026 00:52:28 +0000
ROA not before:           Fri 27 Mar 2026 00:47:28 +0000
ROA not after:            Fri 26 Mar 2027 00:52:28 +0000
asID:                     268218
IP address blocks:        186.236.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 04:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a0:89:c8:db:22:10:fc:d1:5a:a3:fb:00:07:c4:47:eb:25:12:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: Mar 27 00:47:28 2026 GMT
            Not After : Mar 26 00:52:28 2027 GMT
        Subject: CN=973CBB9E61A445FCFFF40781BE1419463D3AC410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:65:d8:dc:6d:f8:3d:23:b4:2f:42:02:c9:
                    3f:6a:e8:2f:f3:f6:48:25:24:dc:b2:16:f9:30:2f:
                    c9:1c:94:50:e2:3c:6a:e2:17:98:bd:e6:11:ba:5d:
                    bf:62:80:28:0a:e6:77:66:95:50:49:ca:1b:d1:9b:
                    ef:f0:99:30:31:10:60:83:9e:ed:99:4f:d0:53:fd:
                    db:22:42:18:11:73:64:d4:4f:00:09:80:10:db:46:
                    d5:83:ef:f0:79:84:36:b6:c1:35:d2:25:82:6f:b6:
                    b4:02:46:8e:90:0b:49:51:8d:57:16:07:40:56:3b:
                    bd:ca:2a:89:84:10:dc:56:92:cd:85:53:aa:78:60:
                    80:3e:70:26:fd:07:63:1c:76:d3:e6:62:10:49:d8:
                    b3:87:3c:88:cf:66:40:79:28:26:e1:b0:48:99:82:
                    35:22:8f:e4:2c:af:75:d5:fc:13:e5:eb:43:4a:1f:
                    de:da:16:ef:db:00:60:52:d6:f3:c4:76:6c:3d:af:
                    fd:04:7a:b2:b5:54:53:6a:d5:f9:02:83:ce:59:93:
                    2d:1e:df:21:f4:05:d1:d7:05:c2:66:7a:27:17:35:
                    da:2e:5e:0e:ad:a2:d8:64:66:30:2c:cb:5d:ad:3f:
                    49:4d:b4:90:b8:de:80:19:1e:2c:bc:3e:b4:20:e0:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3C:BB:9E:61:A4:45:FC:FF:F4:07:81:BE:14:19:46:3D:3A:C4:10
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/3138362e3233362e34382e302f32302d3234203d3e20323638323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:bc:f2:c7:10:91:94:95:b4:b9:f9:7c:ce:59:ca:ca:3c:
         59:30:5f:4e:fd:8d:b2:a4:62:83:6f:cb:91:5b:da:30:39:83:
         45:83:08:59:7e:44:0a:e7:46:fb:33:3f:89:33:cc:fa:9c:4b:
         12:d0:3b:eb:f9:6d:bb:98:0b:cf:2e:06:aa:ab:0c:c2:31:f1:
         e4:da:6a:1d:b8:82:2e:97:7a:f9:35:eb:cd:9a:cb:3d:20:24:
         9d:0a:fd:83:fc:b8:1c:f4:32:26:9e:31:24:ba:95:cd:8a:d0:
         69:62:41:50:dc:44:a4:df:8a:02:6b:08:db:6a:bf:81:05:10:
         7e:61:f9:7a:6d:4a:99:8f:ca:62:e5:b0:ec:d1:0a:e0:bb:fb:
         cd:9a:ad:44:cb:c4:2e:b0:fa:60:1f:7a:25:52:79:cb:ac:2f:
         c4:29:a3:0c:03:5b:04:8c:0d:ba:3c:72:cf:b9:aa:d0:63:3c:
         4d:82:c7:81:10:c1:a1:9a:e9:3e:a1:cd:29:9b:06:2c:fe:be:
         5f:51:c6:56:38:5b:10:3d:6f:f6:9d:6a:3d:22:99:5e:51:cf:
         88:f2:37:d9:1b:f8:d3:33:54:cd:a9:be:31:f6:0e:2b:33:7c:
         a0:95:bc:40:01:83:5a:c4:f7:5a:5f:a2:a6:61:7c:1d:9b:59:
         c7:6e:9b:0f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC6CJyNsiEPzRWqP7AAfER+slErMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJEOEEyQUQ1MzFGMTI5RTIxRDkyRDI3NUUwRUZEMzgw
QzkzRkMzQzAeFw0yNjAzMjcwMDQ3MjhaFw0yNzAzMjYwMDUyMjhaMDMxMTAvBgNV
BAMTKDk3M0NCQjlFNjFBNDQ1RkNGRkY0MDc4MUJFMTQxOTQ2M0QzQUM0MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MWXY3G34PSO0L0ICyT9q6C/z
9kglJNyyFvkwL8kclFDiPGriF5i95hG6Xb9igCgK5ndmlVBJyhvRm+/wmTAxEGCD
nu2ZT9BT/dsiQhgRc2TUTwAJgBDbRtWD7/B5hDa2wTXSJYJvtrQCRo6QC0lRjVcW
B0BWO73KKomEENxWks2FU6p4YIA+cCb9B2McdtPmYhBJ2LOHPIjPZkB5KCbhsEiZ
gjUij+Qsr3XV/BPl60NKH97aFu/bAGBS1vPEdmw9r/0EerK1VFNq1fkCg85Zky0e
3yH0BdHXBcJmeicXNdouXg6tothkZjAsy12tP0lNtJC43oAZHiy8PrQg4NgLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlzy7nmGkRfz/9AeBvhQZRj06xBAwHwYDVR0j
BBgwFoAUAtiirVMfEp4h2S0nXg79OAyT/DwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0JwV2pFWGlQRFNMTXhYZUVLdEIyM01UdGVpcXNOdUFMUFlKdzV6V1lW
a1gvMS8wMkQ4QTJBRDUzMUYxMjlFMjFEOTJEMjc1RTBFRkQzODBDOTNGQzNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAyRDhBMkFENTMxRjEyOUUy
MUQ5MkQyNzVFMEVGRDM4MEM5M0ZDM0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NCcFdqRVhpUERTTE14WGVFS3RCMjNNVHRlaXFzTnVBTFBZSnc1eldZVmtYLzEv
MzEzODM2MmUzMjMzMzYyZTM0MzgyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS67DAwDQYJKoZIhvcNAQELBQADggEBAByuvPLH
EJGUlbS5+XzOWcrKPFkwX079jbKkYoNvy5Fb2jA5g0WDCFl+RArnRvszP4kzzPqc
SxLQO+v5bbuYC88uBqqrDMIx8eTaah24gi6Xevk1682ayz0gJJ0K/YP8uBz0Miae
MSS6lc2K0GliQVDcRKTfigJrCNtqv4EFEH5h+XptSpmPymLlsOzRCuC7+82arUTL
xC6w+mAfeiVSecusL8QpowwDWwSMDbo8cs+5qtBjPE2Cx4EQwaGa6T6hzSmbBiz+
vl9RxlY4WxA9b/adaj0imV5Rz4jyN9kb+NMzVM2pvjH2DiszfKCVvEABg1rE91pf
oqZhfB2bWcdumw8=
-----END CERTIFICATE-----
Generated at Fri Mar 27 09:57:23 2026 by rpki-client