Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138392e35302e3139322e302f32302d3234203d3e20323638313838.roa
File:                     3138392e35302e3139322e302f32302d3234203d3e20323638313838.roa (raw, json)
Hash identifier:          908gQ9tLNPVqLGVAXxeGoNkO0xEylg5bqxoSYTPbfGY=
Subject key identifier:   93:56:8E:BC:80:6C:25:8B:BF:41:FE:F9:85:38:08:52:80:2C:1A:B0
Certificate issuer:       /CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
Certificate serial:       08C61365C4D6FE07EDEEDF86976443D2088C4742
Authority key identifier: 6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138392e35302e3139322e302f32302d3234203d3e20323638313838.roa
Signing time:             Wed 07 Oct 2026 01:08:40 +0000
ROA not before:           Wed 07 Oct 2026 01:03:40 +0000
ROA not after:            Wed 06 Oct 2027 01:08:40 +0000
asID:                     268188
IP address blocks:        189.50.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl
                          rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 23:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c6:13:65:c4:d6:fe:07:ed:ee:df:86:97:64:43:d2:08:8c:47:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2
        Validity
            Not Before: Oct  7 01:03:40 2026 GMT
            Not After : Oct  6 01:08:40 2027 GMT
        Subject: CN=93568EBC806C258BBF41FEF985380852802C1AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:78:62:a8:4c:1e:4c:17:ca:3a:7f:dc:82:a4:
                    6a:f9:1c:f0:43:63:cb:de:a7:36:f9:31:a0:c9:13:
                    fc:f8:fd:58:65:3a:c5:9b:6b:6e:20:38:f6:91:fb:
                    41:38:48:67:d9:aa:83:e4:2b:0a:2c:26:6b:c2:ff:
                    36:81:53:ca:37:ad:af:ec:14:a8:30:34:12:80:97:
                    82:c4:9a:21:58:f9:41:09:06:5f:1b:40:2c:69:cb:
                    03:28:5d:62:f0:f8:bb:1e:d1:6a:02:6c:8c:d2:3f:
                    4c:0b:7f:d4:cf:25:1e:68:c8:ef:cb:86:fb:5c:2f:
                    3c:ed:d7:1a:6e:f1:27:20:f8:f7:48:4b:3f:0f:f4:
                    e5:92:f8:ea:15:9e:6d:58:02:4c:5a:21:4b:f0:7c:
                    62:53:37:b5:09:ac:41:07:e3:91:a5:a0:a0:d7:b0:
                    d0:f3:1f:a8:5e:c0:b1:75:cb:00:21:5e:12:3f:23:
                    3c:bb:5d:d9:79:e0:6a:01:55:5d:32:fe:bf:e9:76:
                    24:48:0f:67:a4:c7:08:62:0c:91:ff:dd:ee:83:e9:
                    9d:ba:e2:7f:17:1a:87:43:9f:07:93:a3:b3:ee:5c:
                    eb:d0:7a:04:27:14:25:e3:68:c5:54:b9:4c:cb:dc:
                    4a:4f:04:e6:b1:7e:4c:8b:38:e5:2f:94:59:69:d8:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:56:8E:BC:80:6C:25:8B:BF:41:FE:F9:85:38:08:52:80:2C:1A:B0
            X509v3 Authority Key Identifier:
                keyid:6A:D7:3C:62:7C:D5:5D:F9:A3:DA:F8:8D:8A:D2:45:16:9D:BD:F0:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AD73C627CD55DF9A3DAF88D8AD245169DBDF0B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3Er2DJCtiTQJn3J31zgSxqUXEp8VDMqpvnUHGMzidhg/0/3138392e35302e3139322e302f32302d3234203d3e20323638313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:38:81:f3:70:69:2e:df:17:e3:94:8f:6c:47:0d:73:08:
         a8:06:69:cb:6d:ff:83:55:b5:f1:29:78:b5:e9:78:d3:87:50:
         37:22:fe:ec:61:14:e1:af:1f:ac:77:44:ad:aa:de:ad:42:4a:
         57:e5:22:98:27:72:58:27:1c:42:9e:ed:1f:8f:c3:db:b7:77:
         00:0d:02:0c:c8:1a:6f:af:02:2a:84:0f:d3:3e:77:d3:18:98:
         30:23:0c:6f:f0:39:3c:65:76:34:bb:7c:23:2e:20:ec:d6:96:
         41:fe:86:aa:ba:95:07:aa:a7:5b:ea:26:a6:06:97:82:a2:a7:
         fc:52:7a:d9:97:2d:92:97:14:65:26:20:e3:78:66:30:a1:f0:
         81:df:03:48:12:40:5b:53:7e:c6:33:1f:93:9b:31:5b:03:16:
         26:3e:d4:45:29:52:06:24:7a:2a:88:8d:a5:c1:ca:df:37:04:
         07:82:8d:b8:f6:da:ec:fe:ab:46:5e:33:f4:c0:f5:d4:59:f9:
         34:34:8b:53:d5:a6:06:ef:d7:1c:97:4b:3b:c5:40:8a:70:5e:
         7c:51:24:95:3e:e9:7e:0e:97:53:6d:43:77:4a:3f:86:d1:3c:
         f1:a6:a6:45:a4:6b:78:ea:c3:e7:db:4d:bd:3a:aa:18:48:c9:
         f0:7b:3c:02
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCMYTZcTW/gft7t+Gl2RD0giMR0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFENzNDNjI3Q0Q1NURGOUEzREFGODhEOEFEMjQ1MTY5
REJERjBCMjAeFw0yNjEwMDcwMTAzNDBaFw0yNzEwMDYwMTA4NDBaMDMxMTAvBgNV
BAMTKDkzNTY4RUJDODA2QzI1OEJCRjQxRkVGOTg1MzgwODUyODAyQzFBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDreGKoTB5MF8o6f9yCpGr5HPBD
Y8vepzb5MaDJE/z4/VhlOsWba24gOPaR+0E4SGfZqoPkKwosJmvC/zaBU8o3ra/s
FKgwNBKAl4LEmiFY+UEJBl8bQCxpywMoXWLw+Lse0WoCbIzSP0wLf9TPJR5oyO/L
hvtcLzzt1xpu8Scg+PdISz8P9OWS+OoVnm1YAkxaIUvwfGJTN7UJrEEH45GloKDX
sNDzH6hewLF1ywAhXhI/Izy7Xdl54GoBVV0y/r/pdiRID2ekxwhiDJH/3e6D6Z26
4n8XGodDnweTo7PuXOvQegQnFCXjaMVUuUzL3EpPBOaxfkyLOOUvlFlp2DO7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUk1aOvIBsJYu/Qf75hTgIUoAsGrAwHwYDVR0j
BBgwFoAUatc8YnzVXfmj2viNitJFFp298LIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTNFcjJESkN0aVRRSm4zSjMxemdTeHFVWEVwOFZETXFwdm5VSEdNemlk
aGcvMC82QUQ3M0M2MjdDRDU1REY5QTNEQUY4OEQ4QUQyNDUxNjlEQkRGMEIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBRDczQzYyN0NENTVERjlB
M0RBRjg4RDhBRDI0NTE2OURCREYwQjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UzRXIyREpDdGlUUUpuM0ozMXpnU3hxVVhFcDhWRE1xcHZuVUhHTXppZGhnLzAv
MzEzODM5MmUzNTMwMmUzMTM5MzIyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9MsAwDQYJKoZIhvcNAQELBQADggEBAAf5OIHz
cGku3xfjlI9sRw1zCKgGactt/4NVtfEpeLXpeNOHUDci/uxhFOGvH6x3RK2q3q1C
SlflIpgnclgnHEKe7R+Pw9u3dwANAgzIGm+vAiqED9M+d9MYmDAjDG/wOTxldjS7
fCMuIOzWlkH+hqq6lQeqp1vqJqYGl4Kip/xSetmXLZKXFGUmION4ZjCh8IHfA0gS
QFtTfsYzH5ObMVsDFiY+1EUpUgYkeiqIjaXByt83BAeCjbj22uz+q0ZeM/TA9dRZ
+TQ0i1PVpgbv1xyXSzvFQIpwXnxRJJU+6X4Ol1NtQ3dKP4bRPPGmpkWka3jqw+fb
Tb06qhhIyfB7PAI=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:05 2026 by rpki-client