Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa
File:                     3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa (raw, json)
Hash identifier:          e8sMLgj021YW42JHCvZY7utzi+ln4M1AJL+Rfx8UGx8=
Subject key identifier:   5B:16:9F:B8:EE:8C:AE:9C:DF:D8:9C:A7:B9:E2:33:73:B5:0E:C2:69
Certificate issuer:       /CN=89DCCC087983CCF309AB03F388DFD612618A10BC
Certificate serial:       374DBB2749F71CB954138A34A0626459F42C30B2
Authority key identifier: 89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa
Signing time:             Mon 21 Sep 2026 19:33:25 +0000
ROA not before:           Mon 21 Sep 2026 19:28:25 +0000
ROA not after:            Mon 20 Sep 2027 19:33:25 +0000
asID:                     264295
IP address blocks:        170.246.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl
                          rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 09:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4d:bb:27:49:f7:1c:b9:54:13:8a:34:a0:62:64:59:f4:2c:30:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89DCCC087983CCF309AB03F388DFD612618A10BC
        Validity
            Not Before: Sep 21 19:28:25 2026 GMT
            Not After : Sep 20 19:33:25 2027 GMT
        Subject: CN=5B169FB8EE8CAE9CDFD89CA7B9E23373B50EC269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:a5:1a:88:d3:50:17:86:47:ee:7d:ec:38:
                    88:1c:98:36:1d:a5:d2:19:6f:33:61:61:d3:ca:d2:
                    fe:f9:c7:4c:22:7d:39:ed:f0:8f:c8:9d:1d:06:a4:
                    72:02:4f:b6:e6:a9:f9:0e:0e:24:d2:71:0b:21:21:
                    8d:ab:c7:fd:5c:63:bb:f9:0e:5c:5e:24:0a:71:c0:
                    e0:54:88:63:e6:f0:38:d5:1f:36:5b:a0:a2:90:f5:
                    2d:54:c4:4e:86:3b:9c:f6:58:ca:33:7e:7d:14:c8:
                    4f:19:c4:71:2b:83:71:06:c9:37:98:4a:d2:8b:c2:
                    c2:e6:1a:d7:e0:d9:ef:db:a9:4c:05:da:d9:2f:ea:
                    e5:eb:4e:37:09:87:96:6f:2a:87:b6:17:1a:5c:78:
                    dd:97:87:0c:5b:fc:b1:4e:6f:ac:22:2d:2d:4b:ab:
                    d9:af:68:9b:fa:54:4d:10:f8:a2:fb:b3:d8:2a:24:
                    e5:c5:79:81:90:f9:0f:74:54:ea:a1:c1:78:91:25:
                    20:63:b1:a6:13:e6:30:a1:1b:34:3f:1b:a9:19:69:
                    4b:c3:36:9d:0d:24:c9:0c:09:68:00:70:d3:36:2d:
                    bd:61:fa:cb:82:63:2a:85:75:22:16:50:7b:85:ba:
                    d1:fa:fb:8b:ec:ad:d6:60:58:3b:ef:e8:51:b4:b6:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:9F:B8:EE:8C:AE:9C:DF:D8:9C:A7:B9:E2:33:73:B5:0E:C2:69
            X509v3 Authority Key Identifier:
                keyid:89:DC:CC:08:79:83:CC:F3:09:AB:03:F3:88:DF:D6:12:61:8A:10:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/89DCCC087983CCF309AB03F388DFD612618A10BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89DCCC087983CCF309AB03F388DFD612618A10BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rn4XoHmNZngndGbFoDA9G7X5tZLcShDcvNN3t5B4Qxw/0/3137302e3234362e31362e302f32322d3234203d3e20323634323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:e1:2d:c0:e1:99:83:4a:3c:4b:c2:b6:80:62:a5:15:7c:
         51:b0:1d:05:b8:11:50:5d:c0:d6:ea:3e:47:f4:f1:7b:90:e8:
         64:bf:3a:c9:8c:ed:e3:2e:56:ed:08:d4:13:40:c1:9c:d3:d7:
         04:38:0f:aa:88:23:d1:a7:e7:48:44:3c:46:86:1a:21:9b:43:
         cf:c0:33:9e:5e:f6:41:40:6b:d1:43:c8:4d:4a:60:cc:7a:4c:
         81:13:60:8d:ca:84:35:62:57:d8:cd:f7:85:73:cc:6a:6b:79:
         a6:4b:ff:22:8e:d6:76:8a:67:c8:b2:3c:29:e3:57:c5:2f:5d:
         9a:32:2f:b9:5d:e4:fe:18:46:0f:02:22:dc:73:35:d0:02:59:
         fb:48:da:a5:95:c7:01:de:3b:d4:3e:28:84:28:3c:e9:7b:30:
         28:8f:9e:1d:ed:b8:a7:e4:42:d2:fb:a8:66:c9:3a:ec:79:d7:
         d8:4e:08:c8:d7:00:54:76:52:ac:6d:52:3f:4d:56:29:1e:ac:
         78:b8:a7:45:e2:a2:17:2e:30:98:ab:f5:c0:8b:ac:bf:09:f7:
         27:ef:48:6c:b4:89:74:62:24:03:f0:43:c8:ab:20:bf:90:f6:
         83:6c:0e:45:65:9c:63:24:a8:39:c2:1b:34:74:75:9c:d0:f4:
         1a:1d:15:19
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUN027J0n3HLlUE4o0oGJkWfQsMLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2
MThBMTBCQzAeFw0yNjA5MjExOTI4MjVaFw0yNzA5MjAxOTMzMjVaMDMxMTAvBgNV
BAMTKDVCMTY5RkI4RUU4Q0FFOUNERkQ4OUNBN0I5RTIzMzczQjUwRUMyNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwW6UaiNNQF4ZH7n3sOIgcmDYd
pdIZbzNhYdPK0v75x0wifTnt8I/InR0GpHICT7bmqfkODiTScQshIY2rx/1cY7v5
DlxeJApxwOBUiGPm8DjVHzZboKKQ9S1UxE6GO5z2WMozfn0UyE8ZxHErg3EGyTeY
StKLwsLmGtfg2e/bqUwF2tkv6uXrTjcJh5ZvKoe2FxpceN2Xhwxb/LFOb6wiLS1L
q9mvaJv6VE0Q+KL7s9gqJOXFeYGQ+Q90VOqhwXiRJSBjsaYT5jChGzQ/G6kZaUvD
Np0NJMkMCWgAcNM2Lb1h+suCYyqFdSIWUHuFutH6+4vsrdZgWDvv6FG0thPVAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUWxafuO6Mrpzf2JynueIzc7UOwmkwHwYDVR0j
BBgwFoAUidzMCHmDzPMJqwPziN/WEmGKELwwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ybjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3
LzAvODlEQ0NDMDg3OTgzQ0NGMzA5QUIwM0YzODhERkQ2MTI2MThBMTBCQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84OURDQ0MwODc5ODNDQ0YzMDlB
QjAzRjM4OERGRDYxMjYxOEExMEJDLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9y
bjRYb0htTlpuZ25kR2JGb0RBOUc3WDV0WkxjU2hEY3ZOTjN0NUI0UXh3LzAvMzEz
NzMwMmUzMjM0MzYyZTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQz
MjM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAKq9hAwDQYJKoZIhvcNAQELBQADggEBAAvD4S3A4ZmD
SjxLwraAYqUVfFGwHQW4EVBdwNbqPkf08XuQ6GS/OsmM7eMuVu0I1BNAwZzT1wQ4
D6qII9Gn50hEPEaGGiGbQ8/AM55e9kFAa9FDyE1KYMx6TIETYI3KhDViV9jN94Vz
zGpreaZL/yKO1naKZ8iyPCnjV8UvXZoyL7ld5P4YRg8CItxzNdACWftI2qWVxwHe
O9Q+KIQoPOl7MCiPnh3tuKfkQtL7qGbJOux519hOCMjXAFR2UqxtUj9NVikerHi4
p0XiohcuMJir9cCLrL8J9yfvSGy0iXRiJAPwQ8irIL+Q9oNsDkVlnGMkqDnCGzR0
dZzQ9BodFRk=
-----END CERTIFICATE-----
Generated at Sun Nov 1 15:19:50 2026 by rpki-client