Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa
File:                     3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa (raw, json)
Hash identifier:          edTC9RIbe9NFEm0l5fhNR61EksWtapJb4Y2GyU8Hm/0=
Subject key identifier:   4D:DF:B9:7A:15:71:95:60:E9:4D:0A:A7:32:70:CF:31:E4:97:98:70
Certificate issuer:       /CN=103C563F76C2FC07B4105E588114D30162C3DB49
Certificate serial:       2912260D7311F21F8BC03CD1D13BF977BFE62CD1
Authority key identifier: 10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa
Signing time:             Thu 03 Sep 2026 19:26:07 +0000
ROA not before:           Thu 03 Sep 2026 19:21:07 +0000
ROA not after:            Thu 02 Sep 2027 19:26:07 +0000
asID:                     61745
IP address blocks:        186.219.240.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl
                          rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 15:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:12:26:0d:73:11:f2:1f:8b:c0:3c:d1:d1:3b:f9:77:bf:e6:2c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103C563F76C2FC07B4105E588114D30162C3DB49
        Validity
            Not Before: Sep  3 19:21:07 2026 GMT
            Not After : Sep  2 19:26:07 2027 GMT
        Subject: CN=4DDFB97A15719560E94D0AA73270CF31E4979870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:dc:43:0a:43:e4:68:d8:bb:dd:93:14:99:
                    f6:4f:6b:20:f2:59:39:96:48:ae:81:6d:9b:86:6f:
                    60:18:57:64:e7:02:c7:07:af:ad:2d:8a:bc:87:6f:
                    46:fb:47:a0:fb:db:4e:9e:10:f1:be:2a:24:cf:1d:
                    8e:5f:a0:f2:58:05:d8:51:7d:02:a8:3c:53:31:09:
                    51:25:79:75:01:b6:ed:2d:dc:95:97:a6:7a:6b:75:
                    ce:51:a6:4e:04:90:14:6a:c3:c4:c0:82:09:53:f1:
                    0a:c8:3c:6e:d3:1b:28:87:a6:e6:37:31:77:c5:cf:
                    2f:3f:11:24:7f:e1:a8:56:07:f2:c5:0d:b5:ae:6b:
                    7a:92:d7:58:75:7b:c8:6a:83:c1:09:2e:f2:90:f2:
                    a1:95:a1:41:72:a7:55:96:b7:0c:00:0c:ac:7e:63:
                    0b:2f:2d:dd:7d:f2:ea:36:b6:a7:db:6e:64:3c:5e:
                    b0:25:39:08:72:b9:80:4a:52:a7:cf:1a:f5:0a:d0:
                    09:fe:99:92:1a:9a:62:ee:41:94:e1:e9:c3:57:29:
                    bb:b8:f9:89:04:bf:d8:c3:34:33:ee:c6:e4:a5:9f:
                    01:a0:f2:02:1c:ee:e3:64:a4:95:5a:4a:cf:f2:e3:
                    7c:95:b6:97:6e:11:45:1f:b5:b3:5a:dc:2e:c7:ff:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DF:B9:7A:15:71:95:60:E9:4D:0A:A7:32:70:CF:31:E4:97:98:70
            X509v3 Authority Key Identifier:
                keyid:10:3C:56:3F:76:C2:FC:07:B4:10:5E:58:81:14:D3:01:62:C3:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/103C563F76C2FC07B4105E588114D30162C3DB49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/103C563F76C2FC07B4105E588114D30162C3DB49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8CT8EkQSnErwUR9av1h1ucPUQJhqTnwTF9a8744h14g/0/3138362e3231392e3234302e302f32312d3332203d3e203631373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:57:62:7d:7c:37:9c:95:f5:a0:61:5d:bd:26:8f:32:b4:63:
         2e:4b:41:03:73:e5:f0:96:7e:d2:5e:e0:86:3c:e3:08:91:53:
         06:0d:97:dd:63:41:b0:96:6e:03:5a:0d:05:55:5d:82:47:c9:
         bf:3c:77:c8:07:3e:38:48:50:2d:15:f8:26:b0:b1:d1:14:5c:
         e2:b4:b2:de:ae:bc:5c:e4:bd:d7:af:c4:64:b0:50:22:98:f2:
         55:98:41:4e:e5:03:bc:68:79:61:46:be:7a:a2:85:ce:70:d4:
         bf:fa:d4:84:25:5f:48:84:e5:3a:a4:c7:bb:c0:a1:e6:d9:23:
         55:ad:0e:9d:5c:28:cc:ab:ef:fb:5a:90:59:1b:c8:49:05:e5:
         c0:da:2b:78:7d:fb:56:64:7a:28:71:22:5a:ee:94:cc:49:28:
         3e:04:81:d4:ea:6a:9a:c4:81:82:63:39:a6:03:ff:18:53:a3:
         8b:f0:42:ac:e7:e5:02:99:b2:98:cf:7b:57:5a:ef:d5:6b:40:
         27:97:e1:f9:36:99:a6:01:b3:8f:0d:a7:5a:87:eb:c5:8b:d7:
         14:57:a2:94:8f:8f:e4:28:6e:bc:35:ad:4a:2b:70:30:1d:a6:
         e2:58:f8:e9:2f:3e:d8:24:02:2a:ca:d8:49:07:5a:a9:21:23:
         05:e3:3a:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKRImDXMR8h+LwDzR0Tv5d7/mLNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAzQzU2M0Y3NkMyRkMwN0I0MTA1RTU4ODExNEQzMDE2
MkMzREI0OTAeFw0yNjA5MDMxOTIxMDdaFw0yNzA5MDIxOTI2MDdaMDMxMTAvBgNV
BAMTKDREREZCOTdBMTU3MTk1NjBFOTREMEFBNzMyNzBDRjMxRTQ5Nzk4NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3NxDCkPkaNi73ZMUmfZPayDy
WTmWSK6BbZuGb2AYV2TnAscHr60tiryHb0b7R6D7206eEPG+KiTPHY5foPJYBdhR
fQKoPFMxCVEleXUBtu0t3JWXpnprdc5Rpk4EkBRqw8TAgglT8QrIPG7TGyiHpuY3
MXfFzy8/ESR/4ahWB/LFDbWua3qS11h1e8hqg8EJLvKQ8qGVoUFyp1WWtwwADKx+
YwsvLd198uo2tqfbbmQ8XrAlOQhyuYBKUqfPGvUK0An+mZIammLuQZTh6cNXKbu4
+YkEv9jDNDPuxuSlnwGg8gIc7uNkpJVaSs/y43yVtpduEUUftbNa3C7H/+lrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTd+5ehVxlWDpTQqnMnDPMeSXmHAwHwYDVR0j
BBgwFoAUEDxWP3bC/Ae0EF5YgRTTAWLD20kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhDVDhFa1FTbkVyd1VSOWF2MWgxdWNQVVFKaHFUbndURjlhODc0NGgx
NGcvMC8xMDNDNTYzRjc2QzJGQzA3QjQxMDVFNTg4MTE0RDMwMTYyQzNEQjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzEwM0M1NjNGNzZDMkZDMDdC
NDEwNUU1ODgxMTREMzAxNjJDM0RCNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4Q1Q4RWtRU25FcndVUjlhdjFoMXVjUFVRSmhxVG53VEY5YTg3NDRoMTRnLzAv
MzEzODM2MmUzMjMxMzkyZTMyMzQzMDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDM2
MzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO62/AwDQYJKoZIhvcNAQELBQADggEBAAVXYn18
N5yV9aBhXb0mjzK0Yy5LQQNz5fCWftJe4IY84wiRUwYNl91jQbCWbgNaDQVVXYJH
yb88d8gHPjhIUC0V+CawsdEUXOK0st6uvFzkvdevxGSwUCKY8lWYQU7lA7xoeWFG
vnqihc5w1L/61IQlX0iE5Tqkx7vAoebZI1WtDp1cKMyr7/takFkbyEkF5cDaK3h9
+1ZkeihxIlrulMxJKD4EgdTqaprEgYJjOaYD/xhTo4vwQqzn5QKZspjPe1da79Vr
QCeX4fk2maYBs48Np1qH68WL1xRXopSPj+Qobrw1rUorcDAdpuJY+OkvPtgkAirK
2EkHWqkhIwXjOlU=
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:10:28 2026 by rpki-client