Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
File:                     3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa (raw, json)
Hash identifier:          HBHiAD4v2cd/Q3oB67jE8Hsf4WVYF9BhuY+A3AE/+i4=
Subject key identifier:   3B:75:7C:D4:60:04:05:76:DD:1C:92:7F:01:BA:D3:6B:8A:17:03:C0
Certificate issuer:       /CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
Certificate serial:       0A837E95960350C61B9913AFD0DBDCE52FA84D50
Authority key identifier: 05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
Signing time:             Thu 12 Mar 2026 14:47:10 +0000
ROA not before:           Thu 12 Mar 2026 14:42:10 +0000
ROA not after:            Thu 11 Mar 2027 14:47:10 +0000
asID:                     53196
IP address blocks:        186.232.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:83:7e:95:96:03:50:c6:1b:99:13:af:d0:db:dc:e5:2f:a8:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05EEB8D297BD9E3E56ED8D385325BE831CD9123B
        Validity
            Not Before: Mar 12 14:42:10 2026 GMT
            Not After : Mar 11 14:47:10 2027 GMT
        Subject: CN=3B757CD460040576DD1C927F01BAD36B8A1703C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:48:a0:0e:a4:41:82:5c:f4:d5:f3:b0:9c:
                    85:98:09:e3:d7:3a:ec:0a:f0:81:65:fc:f5:13:93:
                    4b:21:4a:9e:7f:c3:af:d2:f6:20:62:fb:34:ec:b5:
                    f9:31:1c:82:61:f6:07:b4:a6:98:74:2c:5a:24:7f:
                    3c:59:1c:e8:f8:ea:b7:d0:84:a9:a9:62:25:ec:5a:
                    38:bf:9b:a2:00:c0:88:91:be:da:60:3b:72:71:54:
                    7a:20:6a:d8:79:c5:43:44:ba:78:2b:af:1a:43:8f:
                    98:e4:60:22:a3:75:72:8f:e4:31:2a:90:ff:cc:7c:
                    74:3e:9d:f3:71:c0:b6:6f:5b:9e:57:0b:f0:1c:16:
                    0c:ba:90:74:a3:d5:28:3c:fd:b6:8e:28:1e:04:ff:
                    59:2e:89:c2:ee:34:3a:4f:4d:58:75:86:b3:52:78:
                    a5:70:28:e5:b4:c1:6f:04:d0:f6:97:bd:c9:d2:dc:
                    ad:ff:42:52:a5:28:0d:76:3f:9c:48:f3:e7:d1:62:
                    6e:bc:c8:f5:93:5c:59:15:21:4a:90:7a:22:78:59:
                    6f:3d:0b:78:51:51:ff:95:d2:d9:08:b4:7b:ab:a1:
                    b2:2f:ea:fa:91:cd:af:dc:e8:13:ce:bd:33:95:41:
                    af:56:36:6c:38:1c:2c:14:de:55:4c:50:dc:b3:a9:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:75:7C:D4:60:04:05:76:DD:1C:92:7F:01:BA:D3:6B:8A:17:03:C0
            X509v3 Authority Key Identifier:
                keyid:05:EE:B8:D2:97:BD:9E:3E:56:ED:8D:38:53:25:BE:83:1C:D9:12:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/05EEB8D297BD9E3E56ED8D385325BE831CD9123B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:40:3d:6e:78:14:33:6c:03:6e:f2:36:71:cd:de:06:6c:
         48:ea:b5:3a:9d:28:94:e7:e9:44:b9:0c:17:d4:4e:49:97:cc:
         0a:11:44:21:26:66:21:7d:2d:66:f3:d2:10:89:a2:5e:63:aa:
         c9:ca:8c:99:d2:73:4a:d4:b9:fa:72:ff:7b:de:24:a7:1b:e5:
         e3:6e:5e:3a:6a:36:a7:ca:ef:63:d3:94:bb:fd:21:8a:01:3f:
         68:26:ff:63:55:8a:0e:f2:37:b0:a7:c0:57:b1:7f:57:66:27:
         76:7e:5b:20:da:f2:d7:40:05:08:ce:a5:f6:18:96:e9:82:9a:
         bd:6f:97:06:ca:5b:bb:69:81:bf:3d:ba:71:b5:97:e3:dc:90:
         c6:3d:fb:7c:88:48:0b:22:44:8f:9e:4f:70:0e:25:8a:58:71:
         d0:27:e0:09:ba:80:da:5a:7c:1a:60:db:d5:34:73:a1:80:e8:
         da:bf:b6:93:b5:43:21:56:3f:78:98:5b:fb:82:d9:ab:6c:60:
         c2:6d:47:c1:af:52:d4:bb:18:b5:a9:27:cf:b4:6d:ac:33:d7:
         48:bf:08:1c:09:b4:49:04:c7:1c:b5:0f:16:c6:0c:17:8e:f8:
         85:de:2e:1a:64:39:9c:2f:ad:4d:3a:ea:7d:98:d7:3d:ba:1a:
         d0:74:9d:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCoN+lZYDUMYbmROv0Nvc5S+oTVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVFRUI4RDI5N0JEOUUzRTU2RUQ4RDM4NTMyNUJFODMx
Q0Q5MTIzQjAeFw0yNjAzMTIxNDQyMTBaFw0yNzAzMTExNDQ3MTBaMDMxMTAvBgNV
BAMTKDNCNzU3Q0Q0NjAwNDA1NzZERDFDOTI3RjAxQkFEMzZCOEExNzAzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0kigDqRBglz01fOwnIWYCePX
OuwK8IFl/PUTk0shSp5/w6/S9iBi+zTstfkxHIJh9ge0pph0LFokfzxZHOj46rfQ
hKmpYiXsWji/m6IAwIiRvtpgO3JxVHogath5xUNEungrrxpDj5jkYCKjdXKP5DEq
kP/MfHQ+nfNxwLZvW55XC/AcFgy6kHSj1Sg8/baOKB4E/1kuicLuNDpPTVh1hrNS
eKVwKOW0wW8E0PaXvcnS3K3/QlKlKA12P5xI8+fRYm68yPWTXFkVIUqQeiJ4WW89
C3hRUf+V0tkItHurobIv6vqRza/c6BPOvTOVQa9WNmw4HCwU3lVMUNyzqYcbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUO3V81GAEBXbdHJJ/AbrTa4oXA8AwHwYDVR0j
BBgwFoAUBe640pe9nj5W7Y04UyW+gxzZEjswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXczb2ZYQWlQZ29xQnR0WUxidHdtMVVMdlVlbVdSU3VDUmI3cExwenFz
QWQvMC8wNUVFQjhEMjk3QkQ5RTNFNTZFRDhEMzg1MzI1QkU4MzFDRDkxMjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1RUVCOEQyOTdCRDlFM0U1
NkVEOEQzODUzMjVCRTgzMUNEOTEyM0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3M29mWEFpUGdvcUJ0dFlMYnR3bTFVTHZVZW1XUlN1Q1JiN3BMcHpxc0FkLzAv
MzEzODM2MmUzMjMzMzIyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzMzMTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO66NAwDQYJKoZIhvcNAQELBQADggEBACfjQD1u
eBQzbANu8jZxzd4GbEjqtTqdKJTn6US5DBfUTkmXzAoRRCEmZiF9LWbz0hCJol5j
qsnKjJnSc0rUufpy/3veJKcb5eNuXjpqNqfK72PTlLv9IYoBP2gm/2NVig7yN7Cn
wFexf1dmJ3Z+WyDa8tdABQjOpfYYlumCmr1vlwbKW7tpgb89unG1l+PckMY9+3yI
SAsiRI+eT3AOJYpYcdAn4Am6gNpafBpg29U0c6GA6Nq/tpO1QyFWP3iYW/uC2ats
YMJtR8GvUtS7GLWpJ8+0bawz10i/CBwJtEkExxy1DxbGDBeO+IXeLhpkOZwvrU06
6n2Y1z26GtB0nbE=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:34:05 2026 by rpki-client