Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa
File:                     3136382e3232382e342e302f32342d3234203d3e20323634383939.roa (raw, json)
Hash identifier:          OmW9/WO0xNNeGOBSX5eyznyOCAVgWxwv0r086BA0aXs=
Subject key identifier:   3F:91:78:C9:D5:AA:21:30:BA:A4:0B:E1:F5:33:E2:22:F7:31:B1:34
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       76B459CE796F6410896D5636017F470E90911A99
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa
Signing time:             Thu 17 Sep 2026 19:00:19 +0000
ROA not before:           Thu 17 Sep 2026 18:55:19 +0000
ROA not after:            Thu 16 Sep 2027 19:00:19 +0000
asID:                     264899
IP address blocks:        168.228.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 07:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:59:ce:79:6f:64:10:89:6d:56:36:01:7f:47:0e:90:91:1a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Sep 17 18:55:19 2026 GMT
            Not After : Sep 16 19:00:19 2027 GMT
        Subject: CN=3F9178C9D5AA2130BAA40BE1F533E222F731B134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:6c:1b:29:96:c1:77:09:fb:92:fd:ca:fe:
                    00:77:68:34:d4:1c:1e:47:c4:66:c8:fa:48:6e:81:
                    28:42:5e:79:78:d4:b0:2f:03:fc:36:f7:68:99:fe:
                    14:ba:02:45:be:eb:25:3a:94:59:ce:32:1f:cf:6f:
                    9e:28:84:a4:09:08:f5:57:f4:a9:51:ff:58:cf:b4:
                    f2:52:45:ef:16:60:9d:07:97:11:03:4e:a7:04:26:
                    a0:fe:26:f2:ae:d7:94:2b:22:88:18:90:89:17:35:
                    43:18:6a:19:a7:e1:18:dd:61:c8:32:23:38:fe:d1:
                    31:b2:de:6a:6a:b6:d9:9e:6d:a9:c7:3a:5d:3a:ff:
                    97:05:56:13:65:ff:60:2a:73:19:a4:57:c2:e0:ef:
                    be:a2:56:12:b8:54:f6:c1:db:5e:83:2c:0c:e6:ac:
                    a7:4b:6e:b7:f7:18:50:6d:50:e7:c5:95:a3:2e:30:
                    3c:d9:36:ff:39:ca:47:fa:f6:aa:9f:b3:0d:dd:3c:
                    af:52:fa:3f:61:6c:e8:cb:38:68:26:fc:62:4a:a6:
                    80:a1:97:11:2f:d7:0e:96:7e:32:19:c8:a1:ba:91:
                    a4:9a:71:84:e6:a7:d8:85:5a:e3:c3:67:3a:ef:fd:
                    d5:98:7e:5d:2f:1d:d0:f9:cb:a2:92:67:65:74:24:
                    ca:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:91:78:C9:D5:AA:21:30:BA:A4:0B:E1:F5:33:E2:22:F7:31:B1:34
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e342e302f32342d3234203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:44:11:00:36:aa:64:c9:89:c4:be:b7:ae:fe:97:d1:18:
         fd:50:b8:48:59:ce:4e:e0:20:a2:2a:1a:95:40:13:b4:32:cd:
         85:61:80:63:80:ee:a0:1f:ca:00:49:6b:b0:3f:0f:c5:99:ec:
         eb:92:29:2b:37:c8:97:23:8c:f2:a3:e1:cd:e8:8b:58:85:8c:
         4b:da:be:48:f8:eb:58:4b:57:97:19:fe:1c:ce:67:ca:56:3d:
         79:b9:48:e3:6c:51:b9:0a:de:34:e0:cb:58:79:a5:4d:af:50:
         df:35:b0:f4:ef:65:f4:a3:27:fb:e9:70:61:90:20:ae:65:9d:
         a7:fa:32:9d:69:6b:c3:c5:37:d2:77:df:fc:fd:30:c8:d0:ab:
         95:85:cd:7c:34:7a:9d:31:24:cb:5a:b1:9b:a2:e9:0b:77:a7:
         8a:a4:e3:36:ec:6d:9f:a2:96:20:e5:8d:48:cf:c1:0a:03:cd:
         e6:72:48:6c:0e:8b:92:ff:33:86:6c:6a:b7:12:37:ef:31:b3:
         97:cf:99:78:c0:b8:df:c9:41:5d:06:0c:6c:93:da:14:c7:f2:
         9f:ed:d4:b6:12:39:fa:ff:0a:62:dd:18:d6:dd:d7:80:c4:41:
         97:49:3c:ba:b0:ee:c9:3e:40:29:fa:dc:d5:8c:a3:b1:a8:b8:
         b2:ab:54:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----