Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3332203d3e203238323736.roa
File:                     3138372e3130322e3131302e302f32342d3332203d3e203238323736.roa (raw, json)
Hash identifier:          LMQi8wGEfRZx6SU1hUutQ6D00sAI7q8a9yzhWx94WJ0=
Subject key identifier:   08:C0:E7:B0:F7:D8:D4:C3:BE:80:9F:7C:18:A1:00:92:B3:0D:C7:85
Certificate issuer:       /CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
Certificate serial:       4A550C8327D8A04BEB0D669CAE5F3FBB01F1D04C
Authority key identifier: A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3332203d3e203238323736.roa
Signing time:             Mon 23 Mar 2026 11:43:10 +0000
ROA not before:           Mon 23 Mar 2026 11:38:10 +0000
ROA not after:            Mon 22 Mar 2027 11:43:10 +0000
asID:                     28276
IP address blocks:        187.102.110.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl
                          rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:55:0c:83:27:d8:a0:4b:eb:0d:66:9c:ae:5f:3f:bb:01:f1:d0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4EE038911DF33B6C5078A0D31896E9E63D13909
        Validity
            Not Before: Mar 23 11:38:10 2026 GMT
            Not After : Mar 22 11:43:10 2027 GMT
        Subject: CN=08C0E7B0F7D8D4C3BE809F7C18A10092B30DC785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:b7:1c:fd:b9:b8:f4:56:ea:a2:55:61:63:
                    09:12:35:99:97:df:2d:23:0d:4b:2b:83:a9:da:b3:
                    5a:e3:3a:4f:33:6a:c5:c5:b2:08:ca:32:e9:fb:30:
                    61:2f:3f:37:9b:12:8f:6c:92:1c:4e:ae:bf:c1:ff:
                    4c:a5:86:fb:4c:a9:26:39:83:1a:b6:5a:f1:36:a9:
                    49:ea:62:4d:96:ac:d6:31:58:7c:ae:68:9b:cc:43:
                    fc:fe:f3:03:ea:e2:b0:57:41:34:8e:70:71:9d:9b:
                    00:34:bb:e2:d3:a1:11:c0:dd:f7:d9:25:82:ab:3d:
                    1e:97:99:9d:80:2a:3f:d9:c1:79:9f:c8:ff:e9:60:
                    aa:a9:a2:e5:4b:c5:46:f2:4a:a0:ca:f8:31:be:4c:
                    35:20:a4:63:be:87:2b:97:45:6d:49:9a:e5:84:78:
                    41:e6:d2:c1:3a:35:bb:6c:7c:24:3e:85:d3:ab:20:
                    e2:7e:63:80:73:e5:e5:26:9c:ad:46:ed:12:60:a2:
                    b1:12:e3:24:0f:ef:f7:ed:9e:37:f6:84:a6:cf:e6:
                    7c:a3:22:be:af:ad:79:e0:8d:51:95:75:cf:d1:54:
                    3d:35:c4:9a:db:73:c4:a8:4b:25:6a:60:51:3e:23:
                    57:a2:0b:31:f0:4a:2b:b0:ae:55:8a:68:d4:f3:c8:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C0:E7:B0:F7:D8:D4:C3:BE:80:9F:7C:18:A1:00:92:B3:0D:C7:85
            X509v3 Authority Key Identifier:
                keyid:A4:EE:03:89:11:DF:33:B6:C5:07:8A:0D:31:89:6E:9E:63:D1:39:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/A4EE038911DF33B6C5078A0D31896E9E63D13909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4EE038911DF33B6C5078A0D31896E9E63D13909.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/3138372e3130322e3131302e302f32342d3332203d3e203238323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:ba:7f:f1:6d:88:5e:48:91:65:3c:7c:2d:a8:e8:5a:15:
         89:2e:43:5b:ea:98:eb:d9:1c:5f:4c:1b:b3:40:dc:dc:b2:3b:
         9e:7d:0e:c6:04:0f:72:61:e0:e7:a5:14:b8:92:fd:6d:2c:c4:
         32:b3:d9:80:f1:9a:72:5a:77:6b:66:43:98:75:84:e5:a1:39:
         a5:57:d2:b0:64:10:03:9d:c3:e1:f9:fc:ad:d9:ba:52:07:d8:
         d9:ec:7e:19:69:f4:27:73:e8:73:6a:21:a7:e3:75:05:2f:74:
         85:09:ab:68:92:db:3d:41:5f:a6:e5:85:94:c9:9b:06:06:e5:
         48:ca:31:86:72:cd:93:c1:d2:cd:a2:6d:9a:49:52:93:43:0e:
         98:94:ee:68:bf:3b:01:ef:6e:ea:d3:da:0d:24:b4:ef:d4:cb:
         07:be:e9:1e:9b:83:81:8f:12:23:dc:ec:a3:5e:06:fd:ca:52:
         ba:bf:44:45:b3:1b:79:5e:48:8c:a6:f7:44:2e:11:fd:75:97:
         c6:e8:c8:84:19:0a:cd:05:59:9f:b6:6f:1c:06:2a:c6:dc:46:
         4c:5e:45:55:26:b0:a0:9a:ca:c3:24:37:55:46:31:ff:8c:09:
         87:81:a4:43:49:bc:4b:40:9f:eb:4e:75:7d:c7:a9:6d:92:30:
         53:19:75:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSlUMgyfYoEvrDWacrl8/uwHx0EwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTRFRTAzODkxMURGMzNCNkM1MDc4QTBEMzE4OTZFOUU2
M0QxMzkwOTAeFw0yNjAzMjMxMTM4MTBaFw0yNzAzMjIxMTQzMTBaMDMxMTAvBgNV
BAMTKDA4QzBFN0IwRjdEOEQ0QzNCRTgwOUY3QzE4QTEwMDkyQjMwREM3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoQ7cc/bm49FbqolVhYwkSNZmX
3y0jDUsrg6nas1rjOk8zasXFsgjKMun7MGEvPzebEo9skhxOrr/B/0ylhvtMqSY5
gxq2WvE2qUnqYk2WrNYxWHyuaJvMQ/z+8wPq4rBXQTSOcHGdmwA0u+LToRHA3ffZ
JYKrPR6XmZ2AKj/ZwXmfyP/pYKqpouVLxUbySqDK+DG+TDUgpGO+hyuXRW1JmuWE
eEHm0sE6NbtsfCQ+hdOrIOJ+Y4Bz5eUmnK1G7RJgorES4yQP7/ftnjf2hKbP5nyj
Ir6vrXngjVGVdc/RVD01xJrbc8SoSyVqYFE+I1eiCzHwSiuwrlWKaNTzyHZJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCMDnsPfY1MO+gJ98GKEAkrMNx4UwHwYDVR0j
BBgwFoAUpO4DiRHfM7bFB4oNMYlunmPROQkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFnTHJlV0xmY0xzMlA0eGlkUkxLMTRrdENqVzFLVW43aERCNEFMVHFI
bjgvMC9BNEVFMDM4OTExREYzM0I2QzUwNzhBMEQzMTg5NkU5RTYzRDEzOTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0RUUwMzg5MTFERjMzQjZD
NTA3OEEwRDMxODk2RTlFNjNEMTM5MDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxZ0xyZVdMZmNMczJQNHhpZFJMSzE0a3RDalcxS1VuN2hEQjRBTFRxSG44LzAv
MzEzODM3MmUzMTMwMzIyZTMxMzEzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzgzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7Zm4wDQYJKoZIhvcNAQELBQADggEBAH7Run/x
bYheSJFlPHwtqOhaFYkuQ1vqmOvZHF9MG7NA3NyyO559DsYED3Jh4OelFLiS/W0s
xDKz2YDxmnJad2tmQ5h1hOWhOaVX0rBkEAOdw+H5/K3ZulIH2Nnsfhlp9Cdz6HNq
IafjdQUvdIUJq2iS2z1BX6blhZTJmwYG5UjKMYZyzZPB0s2ibZpJUpNDDpiU7mi/
OwHvburT2g0ktO/Uywe+6R6bg4GPEiPc7KNeBv3KUrq/REWzG3leSIym90QuEf11
l8boyIQZCs0FWZ+2bxwGKsbcRkxeRVUmsKCaysMkN1VGMf+MCYeBpENJvEtAn+tO
dX3HqW2SMFMZdYY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:18:25 2026 by rpki-client