Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3232203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32322d3232203d3e20323634383939.roa (raw, json)
Hash identifier:          5+ZMyEa7vT3Jlmc2wJEzHd5XxmHoYu2y4YfznMOB8II=
Subject key identifier:   A8:EF:E3:3E:ED:76:3B:F1:EF:67:FA:33:65:D2:C8:C5:3D:22:78:F9
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       48CABA82441A8DD3755FAB2779DF143305143A49
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3232203d3e20323634383939.roa
Signing time:             Thu 17 Sep 2026 19:00:19 +0000
ROA not before:           Thu 17 Sep 2026 18:55:19 +0000
ROA not after:            Thu 16 Sep 2027 19:00:19 +0000
asID:                     264899
IP address blocks:        168.228.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ca:ba:82:44:1a:8d:d3:75:5f:ab:27:79:df:14:33:05:14:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Sep 17 18:55:19 2026 GMT
            Not After : Sep 16 19:00:19 2027 GMT
        Subject: CN=A8EFE33EED763BF1EF67FA3365D2C8C53D2278F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:46:c7:ad:02:ab:c2:3b:0c:3e:c8:e2:34:2b:
                    e8:ab:3a:5d:e8:15:e2:fb:3e:5f:17:71:18:20:ab:
                    c4:eb:b9:f3:fb:98:d2:27:37:3f:9e:19:17:42:9e:
                    b8:46:21:ab:45:81:06:9e:46:e5:28:4d:92:b2:02:
                    cb:0e:78:7d:40:91:df:6c:5f:fb:32:f7:8a:71:ba:
                    e5:a1:0a:aa:8a:8c:40:c9:a5:c7:37:01:f5:f5:f7:
                    ae:f2:b5:6b:1b:48:1d:65:f7:a5:0f:5c:66:6d:70:
                    11:1f:72:ff:31:bf:d1:ca:97:14:1d:bf:ec:1a:8b:
                    86:65:99:da:18:ff:bf:e1:5d:c2:a2:a0:dc:a4:09:
                    df:ec:44:e1:6a:2a:25:af:73:84:cb:76:2b:ef:a9:
                    01:9d:18:8d:ca:50:b4:72:8a:5f:23:84:b8:b3:2b:
                    d2:52:10:43:9e:f9:7a:19:4d:74:1c:fc:c2:2a:5f:
                    87:cf:c8:b5:bf:95:08:70:30:08:9a:d0:05:61:95:
                    14:27:07:8b:ad:0f:33:9b:55:67:bf:96:f1:db:7e:
                    22:8b:e9:cf:d7:0d:9c:4a:40:b7:3b:48:e2:0a:b2:
                    1b:66:45:14:e1:e2:50:8e:3c:6a:7a:fd:64:ee:fb:
                    73:5f:1b:e6:5d:b8:61:7d:7f:11:65:e6:00:e0:3e:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EF:E3:3E:ED:76:3B:F1:EF:67:FA:33:65:D2:C8:C5:3D:22:78:F9
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32322d3232203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:60:0f:da:72:82:b9:d7:64:fd:01:65:cd:23:ad:df:c7:
         58:54:bc:23:64:5f:19:b6:5e:49:f6:16:8d:de:b1:37:55:f0:
         33:69:4e:bc:0d:ee:38:a8:3a:ad:d6:a0:6c:27:8b:c0:d0:3e:
         9a:8a:a8:90:24:cf:b5:43:fe:33:46:fc:b1:ac:b3:05:db:76:
         c7:2a:e5:7f:73:90:a0:a6:e4:e5:90:cb:d4:00:05:30:41:9d:
         f3:9f:8c:be:11:eb:cb:6d:b8:76:70:ab:04:40:88:c3:13:fe:
         2d:52:48:c6:35:67:3a:a8:15:07:4b:1c:c9:59:e5:a2:c8:54:
         c3:36:bd:84:d8:58:ec:4e:80:2b:5c:f6:fd:71:42:4c:c4:ae:
         be:ef:2a:ab:74:e3:67:0f:0f:08:2c:76:c6:a3:7b:44:f8:0e:
         ef:1c:94:c4:7f:22:41:2e:2f:14:88:fa:74:ec:0f:76:d3:be:
         9a:9b:89:fb:bd:59:9b:8a:e4:83:95:48:e7:79:e2:59:92:27:
         cf:8c:8e:48:f2:bd:25:dc:c0:57:1d:b8:c2:db:9f:9d:84:bc:
         23:6f:a5:4f:67:f9:de:19:11:b1:6f:07:40:63:18:98:60:af:
         3f:cc:5e:d1:c0:b3:81:63:4a:a9:57:eb:58:dd:da:bb:8e:dc:
         5e:d8:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----