Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa
File:                     3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa (raw, json)
Hash identifier:          Qj/ji+TaqZVk6RUq3Q6/ZFF69BjL0fHhW0739wVW55s=
Subject key identifier:   BE:61:B1:21:D2:28:57:FD:ED:43:23:A7:DE:DB:3F:CE:15:49:40:55
Certificate issuer:       /CN=26482FC136F55A1EC85E625FA1203C2750189C48
Certificate serial:       6A005160144527B1ECC37DFD0736CEAE4EBBB96F
Authority key identifier: 26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa
Signing time:             Thu 05 Mar 2026 15:37:02 +0000
ROA not before:           Thu 05 Mar 2026 15:32:02 +0000
ROA not after:            Thu 04 Mar 2027 15:37:02 +0000
asID:                     267423
IP address blocks:        181.191.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl
                          rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:19:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:00:51:60:14:45:27:b1:ec:c3:7d:fd:07:36:ce:ae:4e:bb:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26482FC136F55A1EC85E625FA1203C2750189C48
        Validity
            Not Before: Mar  5 15:32:02 2026 GMT
            Not After : Mar  4 15:37:02 2027 GMT
        Subject: CN=BE61B121D22857FDED4323A7DEDB3FCE15494055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:2f:f3:d4:e0:3e:7a:41:43:46:95:a1:8b:
                    10:41:10:ae:ab:72:eb:43:57:15:42:3b:19:6a:55:
                    b8:5b:41:43:ed:d1:24:69:33:ae:18:d5:00:eb:7e:
                    ec:33:c0:02:a3:2e:46:0d:fb:54:f1:60:5d:1b:46:
                    39:7d:83:e4:6e:02:02:46:66:64:55:ad:ee:ef:b0:
                    49:75:4b:59:53:a6:b9:5a:02:bc:75:1e:59:49:a7:
                    1d:59:19:fd:1c:85:8b:a8:9f:5d:b6:84:1d:8e:57:
                    2a:06:cb:ca:c8:4d:a8:a1:70:18:c0:7e:72:ce:10:
                    af:70:5d:23:e9:38:b6:5c:3e:0e:c1:c4:32:56:04:
                    f9:bf:4a:61:2d:0f:0f:4c:a5:37:51:32:49:f1:49:
                    2d:50:18:da:54:71:52:d3:27:2a:2b:ff:04:17:ec:
                    9d:b4:97:ef:6e:65:0c:0b:55:58:3e:29:98:30:8c:
                    6f:79:30:04:ea:d6:8c:4f:8f:79:a0:47:59:9f:37:
                    ed:cc:c4:3c:c3:45:c6:84:62:d2:38:35:10:90:dc:
                    14:da:e6:a7:de:2f:7b:4e:55:88:4f:31:72:ba:39:
                    2d:c3:a8:ec:4c:51:7c:63:fa:8b:64:c5:1a:c2:3f:
                    b6:7f:9a:9e:0d:8b:3d:7e:79:08:0b:0c:39:58:da:
                    83:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:61:B1:21:D2:28:57:FD:ED:43:23:A7:DE:DB:3F:CE:15:49:40:55
            X509v3 Authority Key Identifier:
                keyid:26:48:2F:C1:36:F5:5A:1E:C8:5E:62:5F:A1:20:3C:27:50:18:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/26482FC136F55A1EC85E625FA1203C2750189C48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26482FC136F55A1EC85E625FA1203C2750189C48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/3138312e3139312e3131362e302f32322d3332203d3e20323637343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:33:e8:6f:17:39:d2:7a:e3:a6:ba:b4:4f:ea:73:9b:04:
         90:a7:5a:d4:f7:ec:e0:e8:11:fe:44:9e:e4:05:a7:f1:40:5f:
         a6:5e:98:b3:2f:fb:7f:de:f0:c1:5f:75:cd:72:17:c2:6d:d6:
         a3:a0:05:74:df:57:be:bb:5e:22:05:46:7c:be:aa:1e:7d:d6:
         83:7c:8e:20:85:9d:ca:01:f7:77:55:05:10:12:05:f5:4d:2c:
         d8:07:32:0a:a5:18:fc:6c:1f:33:ac:e2:da:7e:31:3f:8c:7d:
         e4:ca:ad:9f:73:77:a6:58:c2:84:e3:b3:ad:36:ac:d1:3e:ca:
         62:1b:06:42:d0:c6:91:5f:bb:90:97:1d:a2:04:08:c0:e2:f6:
         f6:72:84:4b:5c:a6:78:d0:ba:63:30:59:36:62:8c:1f:0f:da:
         c6:fe:ed:76:99:22:83:28:fd:19:d6:ff:98:f0:34:ce:c3:00:
         a8:0a:7c:22:0f:bc:83:e6:08:b7:39:74:47:c3:c0:8c:77:71:
         aa:4b:ae:fc:0b:88:f2:ae:44:b6:66:ee:0d:fd:83:9b:2b:6b:
         3b:6b:26:be:75:d5:65:c0:3d:7c:64:dd:1f:ad:af:c3:e5:98:
         83:cd:dc:9a:02:e0:7d:7e:92:a0:33:6e:6b:ef:26:4e:8e:96:
         5e:42:62:f9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUagBRYBRFJ7Hsw339BzbOrk67uW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY0ODJGQzEzNkY1NUExRUM4NUU2MjVGQTEyMDNDMjc1
MDE4OUM0ODAeFw0yNjAzMDUxNTMyMDJaFw0yNzAzMDQxNTM3MDJaMDMxMTAvBgNV
BAMTKEJFNjFCMTIxRDIyODU3RkRFRDQzMjNBN0RFREIzRkNFMTU0OTQwNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtyi/z1OA+ekFDRpWhixBBEK6r
cutDVxVCOxlqVbhbQUPt0SRpM64Y1QDrfuwzwAKjLkYN+1TxYF0bRjl9g+RuAgJG
ZmRVre7vsEl1S1lTprlaArx1HllJpx1ZGf0chYuon122hB2OVyoGy8rITaihcBjA
fnLOEK9wXSPpOLZcPg7BxDJWBPm/SmEtDw9MpTdRMknxSS1QGNpUcVLTJyor/wQX
7J20l+9uZQwLVVg+KZgwjG95MATq1oxPj3mgR1mfN+3MxDzDRcaEYtI4NRCQ3BTa
5qfeL3tOVYhPMXK6OS3DqOxMUXxj+otkxRrCP7Z/mp4Niz1+eQgLDDlY2oM9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUvmGxIdIoV/3tQyOn3ts/zhVJQFUwHwYDVR0j
BBgwFoAUJkgvwTb1Wh7IXmJfoSA8J1AYnEgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkFQUUJjWk43VVVhVVNkRjlDWDh2Q0NIeGdia3FrbXZCWk5VaTFhcHFn
TDIvMC8yNjQ4MkZDMTM2RjU1QTFFQzg1RTYyNUZBMTIwM0MyNzUwMTg5QzQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2NDgyRkMxMzZGNTVBMUVD
ODVFNjI1RkExMjAzQzI3NTAxODlDNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZBUFFCY1pON1VVYVVTZEY5Q1g4dkNDSHhnYmtxa212QlpOVWkxYXBxZ0wyLzAv
MzEzODMxMmUzMTM5MzEyZTMxMzEzNjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNzM0MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/dDANBgkqhkiG9w0BAQsFAAOCAQEAiVoz
6G8XOdJ646a6tE/qc5sEkKda1Pfs4OgR/kSe5AWn8UBfpl6Ysy/7f97wwV91zXIX
wm3Wo6AFdN9XvrteIgVGfL6qHn3Wg3yOIIWdygH3d1UFEBIF9U0s2AcyCqUY/Gwf
M6zi2n4xP4x95Mqtn3N3pljChOOzrTas0T7KYhsGQtDGkV+7kJcdogQIwOL29nKE
S1ymeNC6YzBZNmKMHw/axv7tdpkigyj9Gdb/mPA0zsMAqAp8Ig+8g+YItzl0R8PA
jHdxqkuu/AuI8q5EtmbuDf2DmytrO2smvnXVZcA9fGTdH62vw+WYg83cmgLgfX6S
oDNua+8mTo6WXkJi+Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:20 2026 by rpki-client