Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa
File:                     3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa (raw, json)
Hash identifier:          6nG6zXl3LwP3uO0DYikCJZtKod0Sad98g+oXlOiECx8=
Subject key identifier:   41:E2:4C:DE:A3:64:31:45:1C:56:95:39:82:48:76:57:33:F7:4B:EB
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       5A10BD218A7CACD47355E02C3A3E12550256ABBB
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa
Signing time:             Thu 02 Apr 2026 04:18:18 +0000
ROA not before:           Thu 02 Apr 2026 04:13:18 +0000
ROA not after:            Thu 01 Apr 2027 04:18:18 +0000
asID:                     262978
IP address blocks:        186.250.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 05:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:bd:21:8a:7c:ac:d4:73:55:e0:2c:3a:3e:12:55:02:56:ab:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Apr  2 04:13:18 2026 GMT
            Not After : Apr  1 04:18:18 2027 GMT
        Subject: CN=41E24CDEA36431451C5695398248765733F74BEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:bc:11:f3:77:12:0b:bc:97:e6:cc:34:65:
                    0f:4f:e4:c6:a2:e3:1f:5b:02:d6:85:a2:b3:a0:fe:
                    5d:88:d4:9b:68:28:76:44:c4:32:da:4f:13:c1:a0:
                    3a:77:9b:e0:77:85:1e:1b:8d:ae:6b:40:e5:2b:3a:
                    83:d1:78:85:8d:02:66:ad:ff:f2:39:1f:98:ee:c6:
                    9c:31:d2:64:75:02:26:15:71:f3:82:d5:95:a5:e6:
                    f2:23:80:53:21:6c:96:07:33:08:32:f5:d3:30:8e:
                    58:93:0b:d5:2c:f9:d8:86:6b:33:6f:da:a2:7f:37:
                    3c:62:63:24:8e:25:94:fe:ac:e8:f6:f1:5e:13:ba:
                    98:52:59:46:6a:8a:35:bd:fd:13:24:2f:83:73:35:
                    1f:31:1d:36:ed:f1:e0:fa:30:48:f0:ec:e3:d2:92:
                    f1:8c:c0:46:65:31:9a:9b:35:4c:f5:77:1b:77:05:
                    72:0b:d2:8b:95:bf:e6:e1:25:64:97:5a:f9:26:a7:
                    30:5b:c5:9f:a5:bb:24:7d:1d:83:61:7d:c0:f0:e3:
                    c0:3c:b5:ca:20:32:a2:e1:5f:42:f6:3e:7f:cf:cb:
                    d3:ef:bb:37:ab:6f:c8:7a:33:5f:4a:f0:d0:d8:8b:
                    bd:17:18:11:fe:1b:67:bf:c6:c2:b9:f9:9f:d5:98:
                    01:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E2:4C:DE:A3:64:31:45:1C:56:95:39:82:48:76:57:33:F7:4B:EB
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/3138362e3235302e3138342e302f32322d3234203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:60:d6:a0:45:ac:49:0a:12:8a:27:8c:18:75:91:dd:3c:8a:
         93:8f:01:9f:1f:96:59:dc:53:f6:26:3b:43:ba:98:9b:2d:15:
         54:8d:9e:a4:a7:34:f2:e7:a2:dc:f2:30:06:a8:f6:ae:28:dd:
         e4:4a:09:0a:9c:eb:62:40:1f:4d:49:b4:f5:33:9e:f9:1c:5a:
         50:f5:f6:3a:84:5f:a2:b0:dc:c3:22:8a:14:64:19:33:55:34:
         66:31:f4:73:cd:10:b3:f8:9f:5b:34:13:48:fe:9a:f7:df:62:
         81:af:13:54:ae:df:00:db:40:42:09:dc:d8:ab:e5:a7:4f:7f:
         eb:90:0d:c5:81:d9:60:0f:4e:1f:bb:94:7b:84:09:9a:c7:25:
         d8:67:34:a5:58:cf:cf:d7:66:24:4e:a6:17:27:49:b5:fe:0c:
         fe:8f:a7:63:cb:93:e6:78:da:07:d1:a2:e7:5e:4c:ab:ee:f1:
         69:32:36:2e:70:d1:01:d7:62:82:7d:7b:fd:ab:d0:3a:53:c2:
         d9:5c:a4:c2:f1:50:32:85:3b:8a:ba:48:6c:61:f8:68:73:62:
         e4:9a:25:4a:ef:26:41:84:23:8e:da:98:e8:d8:bf:f2:0c:e8:
         fb:6a:02:f2:92:da:d8:07:30:3d:5a:b2:78:21:df:be:92:ee:
         8e:18:6f:02
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWhC9IYp8rNRzVeAsOj4SVQJWq7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI4MzI4MTg5QTBDRkY1M0U5RUQzQTJGMjA3RkZCQjlD
QUU2MUE0MTAeFw0yNjA0MDIwNDEzMThaFw0yNzA0MDEwNDE4MThaMDMxMTAvBgNV
BAMTKDQxRTI0Q0RFQTM2NDMxNDUxQzU2OTUzOTgyNDg3NjU3MzNGNzRCRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxl7wR83cSC7yX5sw0ZQ9P5Mai
4x9bAtaForOg/l2I1JtoKHZExDLaTxPBoDp3m+B3hR4bja5rQOUrOoPReIWNAmat
//I5H5juxpwx0mR1AiYVcfOC1ZWl5vIjgFMhbJYHMwgy9dMwjliTC9Us+diGazNv
2qJ/NzxiYySOJZT+rOj28V4TuphSWUZqijW9/RMkL4NzNR8xHTbt8eD6MEjw7OPS
kvGMwEZlMZqbNUz1dxt3BXIL0ouVv+bhJWSXWvkmpzBbxZ+luyR9HYNhfcDw48A8
tcogMqLhX0L2Pn/Py9Pvuzerb8h6M19K8NDYi70XGBH+G2e/xsK5+Z/VmAE3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUQeJM3qNkMUUcVpU5gkh2VzP3S+swHwYDVR0j
BBgwFoAUm4MoGJoM/1Pp7TovIH/7ucrmGkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMloxSmVOY2NvbjdkcVNxVlFSdkpGb3pHN21EQlVlM0RvUk1GWTFNM1F4
WlcvMS85QjgzMjgxODlBMENGRjUzRTlFRDNBMkYyMDdGRkJCOUNBRTYxQTQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCODMyODE4OUEwQ0ZGNTNF
OUVEM0EyRjIwN0ZGQkI5Q0FFNjFBNDEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJaMUplTmNjb243ZHFTcVZRUnZKRm96RzdtREJVZTNEb1JNRlkxTTNReFpXLzEv
MzEzODM2MmUzMjM1MzAyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr6uDANBgkqhkiG9w0BAQsFAAOCAQEABGDW
oEWsSQoSiieMGHWR3TyKk48Bnx+WWdxT9iY7Q7qYmy0VVI2epKc08uei3PIwBqj2
rijd5EoJCpzrYkAfTUm09TOe+RxaUPX2OoRforDcwyKKFGQZM1U0ZjH0c80Qs/if
WzQTSP6a999iga8TVK7fANtAQgnc2Kvlp09/65ANxYHZYA9OH7uUe4QJmscl2Gc0
pVjPz9dmJE6mFydJtf4M/o+nY8uT5njaB9Gi515Mq+7xaTI2LnDRAddign17/avQ
OlPC2VykwvFQMoU7irpIbGH4aHNi5JolSu8mQYQjjtqY6Ni/8gzo+2oC8pLa2Acw
PVqyeCHfvpLujhhvAg==
-----END CERTIFICATE-----
Generated at Wed Apr 8 12:36:19 2026 by rpki-client