Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32332d3233203d3e20323634383939.roa (raw, json)
Hash identifier:          6/HjVeNfIeGUaivVyXNfmPNoFkMzQAAGbGmn9bToBD4=
Subject key identifier:   DA:75:E7:40:86:BB:0A:28:52:4C:A8:EF:2A:F2:36:5C:0D:AF:5E:7A
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       5144A7948E611A7A822868F64F5EBA1063D18463
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa
Signing time:             Thu 17 Sep 2026 19:00:19 +0000
ROA not before:           Thu 17 Sep 2026 18:55:19 +0000
ROA not after:            Thu 16 Sep 2027 19:00:19 +0000
asID:                     264899
IP address blocks:        168.228.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 19:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:44:a7:94:8e:61:1a:7a:82:28:68:f6:4f:5e:ba:10:63:d1:84:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Sep 17 18:55:19 2026 GMT
            Not After : Sep 16 19:00:19 2027 GMT
        Subject: CN=DA75E74086BB0A28524CA8EF2AF2365C0DAF5E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:64:52:26:18:a2:b7:03:8d:75:3b:85:79:
                    89:6a:1a:42:22:b4:b6:b3:ba:e0:c2:2b:be:31:dc:
                    20:20:e2:ba:4b:ea:72:d0:83:1b:89:9d:a5:55:b3:
                    58:22:18:a1:64:06:af:d0:b2:44:dd:39:e8:55:29:
                    b0:c7:1f:60:bb:fc:d4:05:6c:ba:7f:90:c5:da:29:
                    05:d8:98:a1:33:98:74:c1:ac:20:21:ae:c6:21:a9:
                    ec:19:59:60:4a:32:1e:bf:97:a2:b5:45:dc:7b:28:
                    fd:8b:a9:51:7f:41:5e:03:f2:23:86:2b:b8:a2:f4:
                    9a:6a:bc:58:f9:29:36:42:6e:f5:ed:35:14:7a:51:
                    68:5f:71:7c:80:ea:f5:fc:68:a6:6f:f4:b2:88:e6:
                    ee:97:f2:ec:f9:9e:8d:f7:6d:75:04:e5:c3:3c:e5:
                    01:20:63:7b:d3:7b:92:10:25:f2:01:d5:33:a8:2b:
                    d0:36:64:70:d3:2a:40:c7:cc:a2:52:e0:77:5e:4b:
                    f4:cb:75:3d:a3:a7:63:d3:96:c4:6f:12:5f:48:8c:
                    cd:84:d7:e3:08:1c:77:1e:98:4e:ed:70:2f:1e:9d:
                    b2:35:6c:bf:c8:73:fd:7d:ec:f5:b9:17:af:a6:53:
                    92:7e:70:69:b0:fc:39:7c:1d:19:a8:04:32:06:9a:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:75:E7:40:86:BB:0A:28:52:4C:A8:EF:2A:F2:36:5C:0D:AF:5E:7A
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32332d3233203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:30:f1:7e:43:3b:8b:df:d8:70:7d:87:90:d8:41:9a:73:47:
         2f:1f:fc:48:8b:a2:e3:57:96:e4:d6:60:a8:8d:1b:a2:17:eb:
         ef:c1:ad:4c:2c:ec:a3:75:a9:d2:fd:be:f2:4d:f8:dd:b7:3a:
         5e:56:22:26:2c:09:e0:c7:12:73:39:09:b2:96:04:fe:8c:0d:
         0b:62:02:27:a9:5d:65:00:8e:18:6a:b1:ac:a1:e1:ed:89:6e:
         89:3b:2c:7d:75:42:96:c3:e8:60:7a:36:02:69:cb:5f:89:88:
         b4:31:98:25:c3:64:cc:5e:fa:4e:ce:de:bb:bd:47:e4:8a:55:
         83:87:62:a7:2f:79:a1:f8:7b:49:a2:d5:39:74:80:22:93:c9:
         ee:cc:0f:1c:86:dd:1e:a2:45:0a:cb:f6:d6:54:13:e9:6f:ed:
         78:ea:a9:25:cd:b6:db:89:de:b9:89:8a:85:1e:86:c3:a4:f7:
         51:39:24:c6:1d:fe:ae:8e:0d:7b:8b:69:4e:eb:64:47:f8:0f:
         cf:84:ed:07:47:fd:de:f9:73:a1:9c:07:1f:8f:7b:9d:f1:ee:
         ea:f9:92:23:58:65:b3:85:b0:19:0f:25:8a:6d:a7:96:a1:21:
         a5:44:38:d9:3b:f0:2d:54:32:ad:d5:79:0c:4a:cb:c5:72:cc:
         68:87:52:14
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUUSnlI5hGnqCKGj2T166EGPRhGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxOTJGODFCRkI4MDYwOUY5RTk1REQ4RDI4OEFFRUNF
N0I1MjkzODAeFw0yNjA5MTcxODU1MTlaFw0yNzA5MTYxOTAwMTlaMDMxMTAvBgNV
BAMTKERBNzVFNzQwODZCQjBBMjg1MjRDQThFRjJBRjIzNjVDMERBRjVFN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkr2RSJhiitwONdTuFeYlqGkIi
tLazuuDCK74x3CAg4rpL6nLQgxuJnaVVs1giGKFkBq/QskTdOehVKbDHH2C7/NQF
bLp/kMXaKQXYmKEzmHTBrCAhrsYhqewZWWBKMh6/l6K1Rdx7KP2LqVF/QV4D8iOG
K7ii9JpqvFj5KTZCbvXtNRR6UWhfcXyA6vX8aKZv9LKI5u6X8uz5no33bXUE5cM8
5QEgY3vTe5IQJfIB1TOoK9A2ZHDTKkDHzKJS4HdeS/TLdT2jp2PTlsRvEl9IjM2E
1+MIHHcemE7tcC8enbI1bL/Ic/197PW5F6+mU5J+cGmw/Dl8HRmoBDIGmt0ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2nXnQIa7CihSTKjvKvI2XA2vXnowHwYDVR0j
BBgwFoAUFBkvgb+4Bgn56V3Y0oiu7Oe1KTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC8xNDE5MkY4MUJGQjgwNjA5RjlFOTVERDhEMjg4QUVFQ0U3QjUyOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTkyRjgxQkZCODA2MDlG
OUU5NUREOEQyODhBRUVDRTdCNTI5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzEzNjM4MmUzMjMyMzgyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBqOQEMA0GCSqGSIb3DQEBCwUAA4IBAQCpMPF+QzuL
39hwfYeQ2EGac0cvH/xIi6LjV5bk1mCojRuiF+vvwa1MLOyjdanS/b7yTfjdtzpe
ViImLAngxxJzOQmylgT+jA0LYgInqV1lAI4YarGsoeHtiW6JOyx9dUKWw+hgejYC
actfiYi0MZglw2TMXvpOzt67vUfkilWDh2KnL3mh+HtJotU5dIAik8nuzA8cht0e
okUKy/bWVBPpb+146qklzbbbid65iYqFHobDpPdROSTGHf6ujg17i2lO62RH+A/P
hO0HR/3e+XOhnAcfj3ud8e7q+ZIjWGWzhbAZDyWKbaeWoSGlRDjZO/AtVDKt1XkM
SsvFcsxoh1IU
-----END CERTIFICATE-----