Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32342d3234203d3e20323634383939.roa
File:                     3136382e3232382e362e302f32342d3234203d3e20323634383939.roa (raw, json)
Hash identifier:          wuR+CKLAwPVVHDu4AaSk1cplZ0lHm1kvC12V9U0mfqo=
Subject key identifier:   A0:42:D5:0E:CA:72:E6:9E:B2:61:9B:93:4F:31:79:74:74:EE:FA:CF
Certificate issuer:       /CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
Certificate serial:       6309CFE598B852A1A555568B42AA101D3ACF683A
Authority key identifier: 14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32342d3234203d3e20323634383939.roa
Signing time:             Thu 17 Sep 2026 19:00:19 +0000
ROA not before:           Thu 17 Sep 2026 18:55:19 +0000
ROA not after:            Thu 16 Sep 2027 19:00:19 +0000
asID:                     264899
IP address blocks:        168.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl
                          rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 18 Oct 2026 17:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:09:cf:e5:98:b8:52:a1:a5:55:56:8b:42:aa:10:1d:3a:cf:68:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14192F81BFB80609F9E95DD8D288AEECE7B52938
        Validity
            Not Before: Sep 17 18:55:19 2026 GMT
            Not After : Sep 16 19:00:19 2027 GMT
        Subject: CN=A042D50ECA72E69EB2619B934F31797474EEFACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:ab:1b:04:58:43:1b:a2:04:40:be:d6:60:
                    e4:a1:89:ba:1d:c3:a9:ee:8d:9a:ed:03:96:b3:d8:
                    86:ff:97:88:f1:51:25:f8:a3:8c:e1:a6:72:9b:b0:
                    bf:43:28:48:b5:7b:ef:1d:a2:e9:48:e3:c3:89:27:
                    c9:d6:52:cd:b0:a2:1e:e4:ec:a4:e1:c2:b4:17:c5:
                    36:b5:d5:77:a0:54:e3:4d:dc:4d:9f:5e:20:17:c0:
                    bc:e2:8b:fb:a9:9b:ac:27:d5:0e:7e:f7:0a:85:14:
                    fa:e0:86:5b:f6:ca:30:a4:f5:58:c5:85:f9:34:01:
                    99:d7:92:21:39:56:25:2c:6f:a8:25:14:8e:a2:10:
                    83:8e:54:66:af:b4:09:26:0e:c3:de:fa:20:fb:f4:
                    76:2a:2d:58:61:96:fc:41:db:18:58:8c:ab:69:01:
                    45:75:3e:a0:a5:57:52:17:9d:fd:8c:56:a9:08:41:
                    07:c3:6a:6d:64:65:49:ba:f6:7d:9a:0b:58:5a:c9:
                    88:0c:cb:1c:70:0c:b0:bf:ab:22:81:38:35:17:d6:
                    c8:29:50:8f:77:21:85:6c:25:0a:c6:2d:14:91:79:
                    ba:b9:66:77:9e:5e:e8:52:3b:79:67:ff:91:13:6e:
                    e1:00:f0:26:fa:06:17:d8:40:c8:d0:7f:60:fd:1a:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:42:D5:0E:CA:72:E6:9E:B2:61:9B:93:4F:31:79:74:74:EE:FA:CF
            X509v3 Authority Key Identifier:
                keyid:14:19:2F:81:BF:B8:06:09:F9:E9:5D:D8:D2:88:AE:EC:E7:B5:29:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/14192F81BFB80609F9E95DD8D288AEECE7B52938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14192F81BFB80609F9E95DD8D288AEECE7B52938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EvaqaZfU3G1NXgmzBXB1TQdKX8jmo7QMiePrBBUickim/0/3136382e3232382e362e302f32342d3234203d3e20323634383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:81:f6:14:29:a7:30:4e:f9:8e:91:8c:8e:e5:42:48:53:71:
         6c:0f:4c:b0:fc:55:bc:14:78:76:c1:2b:8d:96:0e:b2:f4:52:
         66:78:6e:49:ba:1b:5b:73:c5:cf:fa:67:b1:59:18:e5:0a:f0:
         77:3a:47:f8:a5:21:bd:e2:75:6b:7d:a7:41:39:96:5a:51:d4:
         06:e1:13:9d:7e:3a:34:04:dd:d3:4d:4c:d6:ed:bc:de:91:a0:
         5d:4a:b8:90:ca:5d:e2:14:ec:6b:12:b8:b9:23:e8:bb:3b:5a:
         0a:32:73:25:b6:b1:09:0a:87:c1:ae:5a:76:1b:22:03:ba:18:
         fe:ac:ce:65:d2:de:f1:cc:32:9a:13:de:d3:b8:ed:e3:e1:db:
         b5:ef:0a:07:33:8e:ca:f7:3e:ff:46:d8:39:ae:5b:ba:d3:73:
         13:b9:37:bc:0c:23:39:85:31:e7:c7:80:a5:a6:54:2d:c0:56:
         f2:63:73:69:07:d8:27:10:3b:2e:fa:06:98:b5:6c:43:67:b3:
         ee:c8:cf:17:ed:36:99:28:0e:ce:3e:3c:ca:27:e2:d5:1c:a4:
         ac:8c:24:f6:56:3b:82:60:31:4f:fb:6b:73:b4:ce:88:6f:8c:
         ca:f6:8a:dd:a4:6e:85:fc:00:96:f4:85:88:70:e2:df:10:c0:
         11:02:c1:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYwnP5Zi4UqGlVVaLQqoQHTrPaDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxOTJGODFCRkI4MDYwOUY5RTk1REQ4RDI4OEFFRUNF
N0I1MjkzODAeFw0yNjA5MTcxODU1MTlaFw0yNzA5MTYxOTAwMTlaMDMxMTAvBgNV
BAMTKEEwNDJENTBFQ0E3MkU2OUVCMjYxOUI5MzRGMzE3OTc0NzRFRUZBQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc76sbBFhDG6IEQL7WYOShibod
w6nujZrtA5az2Ib/l4jxUSX4o4zhpnKbsL9DKEi1e+8doulI48OJJ8nWUs2woh7k
7KThwrQXxTa11XegVONN3E2fXiAXwLzii/upm6wn1Q5+9wqFFPrghlv2yjCk9VjF
hfk0AZnXkiE5ViUsb6glFI6iEIOOVGavtAkmDsPe+iD79HYqLVhhlvxB2xhYjKtp
AUV1PqClV1IXnf2MVqkIQQfDam1kZUm69n2aC1hayYgMyxxwDLC/qyKBODUX1sgp
UI93IYVsJQrGLRSRebq5ZneeXuhSO3ln/5ETbuEA8Cb6BhfYQMjQf2D9Gl0/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoELVDspy5p6yYZuTTzF5dHTu+s8wHwYDVR0j
BBgwFoAUFBkvgb+4Bgn56V3Y0oiu7Oe1KTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXZhcWFaZlUzRzFOWGdtekJYQjFUUWRLWDhqbW83UU1pZVByQkJVaWNr
aW0vMC8xNDE5MkY4MUJGQjgwNjA5RjlFOTVERDhEMjg4QUVFQ0U3QjUyOTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTkyRjgxQkZCODA2MDlG
OUU5NUREOEQyODhBRUVDRTdCNTI5MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V2YXFhWmZVM0cxTlhnbXpCWEIxVFFkS1g4am1vN1FNaWVQckJCVWlja2ltLzAv
MzEzNjM4MmUzMjMyMzgyZTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzgzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAqOQGMA0GCSqGSIb3DQEBCwUAA4IBAQA4gfYUKacw
TvmOkYyO5UJIU3FsD0yw/FW8FHh2wSuNlg6y9FJmeG5Juhtbc8XP+mexWRjlCvB3
Okf4pSG94nVrfadBOZZaUdQG4ROdfjo0BN3TTUzW7bzekaBdSriQyl3iFOxrEri5
I+i7O1oKMnMltrEJCofBrlp2GyIDuhj+rM5l0t7xzDKaE97TuO3j4du17woHM47K
9z7/Rtg5rlu603MTuTe8DCM5hTHnx4ClplQtwFbyY3NpB9gnEDsu+gaYtWxDZ7Pu
yM8X7TaZKA7OPjzKJ+LVHKSsjCT2VjuCYDFP+2tztM6Ib4zK9ordpG6F/ACW9IWI
cOLfEMARAsGS
-----END CERTIFICATE-----