Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa
File:                     3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa (raw, json)
Hash identifier:          c6xTlNOhtaNxq38XaqBGk20be1PS2xrmtHSghrSiWqw=
Subject key identifier:   C9:99:F5:DC:DD:0A:EF:33:E5:D1:24:88:2C:17:71:C9:98:FA:6E:9F
Certificate issuer:       /CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
Certificate serial:       58261B92DA2D23174BA54FE577EB79EFF95542FD
Authority key identifier: 36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa
Signing time:             Thu 27 Aug 2026 20:19:03 +0000
ROA not before:           Thu 27 Aug 2026 20:14:03 +0000
ROA not after:            Thu 26 Aug 2027 20:19:03 +0000
asID:                     262797
IP address blocks:        186.237.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl
                          rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 21:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:1b:92:da:2d:23:17:4b:a5:4f:e5:77:eb:79:ef:f9:55:42:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6
        Validity
            Not Before: Aug 27 20:14:03 2026 GMT
            Not After : Aug 26 20:19:03 2027 GMT
        Subject: CN=C999F5DCDD0AEF33E5D124882C1771C998FA6E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4c:6b:2b:03:96:d3:9e:b2:5b:96:10:e8:f4:
                    6e:1e:25:93:69:0c:48:80:bc:f5:21:e7:be:ae:46:
                    ab:3f:9c:19:eb:e2:dd:3e:d3:f7:b4:73:4f:93:ad:
                    48:e3:b9:56:7f:2f:f5:18:9e:f2:6c:aa:ee:a5:d2:
                    51:3f:7a:d4:da:a6:97:e9:98:4d:29:5d:f9:a0:02:
                    f8:22:d8:8e:b9:a2:7c:a7:5a:b2:59:84:6a:a5:4d:
                    c4:27:f9:66:e3:62:e4:ad:f3:3b:fe:e9:8b:38:dd:
                    9d:d2:8b:86:03:88:9a:58:9a:e5:85:8b:8d:ae:80:
                    7d:ef:1b:31:9e:f6:82:84:9d:96:2a:64:6b:46:b9:
                    89:90:3f:cb:55:1c:48:1f:42:96:90:60:04:d2:a6:
                    89:25:e9:9f:80:0f:15:7b:2c:92:61:80:43:fb:e9:
                    aa:e1:63:47:91:cc:2f:f4:f2:db:60:66:ae:bf:f5:
                    11:1b:77:25:44:51:2c:b0:e1:a8:fb:01:0e:3e:fe:
                    f4:56:5a:ab:0a:67:ee:ad:2d:1a:0d:e3:6c:05:6a:
                    d4:65:80:38:dc:da:e1:c0:74:ed:e1:f1:1e:97:c7:
                    d6:28:4b:a5:1a:89:f7:7b:ad:7a:39:2d:8b:84:81:
                    48:9c:93:cf:31:9c:e9:7b:36:f4:72:90:50:e8:f5:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:F5:DC:DD:0A:EF:33:E5:D1:24:88:2C:17:71:C9:98:FA:6E:9F
            X509v3 Authority Key Identifier:
                keyid:36:C9:A9:AD:CE:53:2B:3D:4D:E3:67:78:AC:FD:C3:B3:AF:5F:D0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36C9A9ADCE532B3D4DE36778ACFDC3B3AF5FD0C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/0/3138362e3233372e31342e302f32342d3234203d3e20323632373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.237.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:a0:73:d8:1d:47:19:fa:99:ec:9f:5b:c9:27:e7:df:30:b6:
         2b:70:17:a9:8d:c6:09:98:1e:61:e1:12:58:28:b9:9a:c8:0f:
         4e:18:b6:a9:0e:b3:2e:f8:8c:7d:51:69:c2:e0:67:32:e8:3d:
         0a:a1:65:e9:ef:e4:a5:49:f7:8d:90:29:b5:b7:71:e9:22:53:
         32:c1:ec:c7:7d:22:55:23:89:dd:46:3e:fe:68:35:f7:d7:6b:
         14:8e:59:4d:3d:9d:2c:86:f0:7f:c2:34:d5:ad:fd:a4:46:61:
         df:e9:84:93:b1:2c:22:9f:b2:74:35:61:ca:c7:33:32:6f:b9:
         b0:c1:fd:ec:76:81:2d:75:42:34:c6:b1:e9:ee:a3:3d:78:e0:
         c4:16:58:ea:cf:2f:15:5f:79:4a:01:9a:31:a3:a0:c0:7d:65:
         5f:21:20:a0:c5:6d:08:b3:bc:ea:9d:8d:66:c1:41:73:5a:9f:
         c1:68:35:b4:83:15:f5:af:52:25:e7:dd:d9:34:0f:7d:10:b4:
         ac:1e:8d:4a:af:3e:f7:56:58:73:f0:dc:88:63:79:22:eb:c3:
         84:68:1a:87:1e:f4:a8:c0:1b:64:bd:8e:8b:56:ce:3d:64:e5:
         12:ac:2f:44:10:e0:19:7a:0d:12:b4:7e:36:9d:7b:31:1b:32:
         ea:a7:af:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWCYbktotIxdLpU/ld+t57/lVQv0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZDOUE5QURDRTUzMkIzRDRERTM2Nzc4QUNGREMzQjNB
RjVGRDBDNjAeFw0yNjA4MjcyMDE0MDNaFw0yNzA4MjYyMDE5MDNaMDMxMTAvBgNV
BAMTKEM5OTlGNURDREQwQUVGMzNFNUQxMjQ4ODJDMTc3MUM5OThGQTZFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTGsrA5bTnrJblhDo9G4eJZNp
DEiAvPUh576uRqs/nBnr4t0+0/e0c0+TrUjjuVZ/L/UYnvJsqu6l0lE/etTappfp
mE0pXfmgAvgi2I65onynWrJZhGqlTcQn+WbjYuSt8zv+6Ys43Z3Si4YDiJpYmuWF
i42ugH3vGzGe9oKEnZYqZGtGuYmQP8tVHEgfQpaQYATSpokl6Z+ADxV7LJJhgEP7
6arhY0eRzC/08ttgZq6/9REbdyVEUSyw4aj7AQ4+/vRWWqsKZ+6tLRoN42wFatRl
gDjc2uHAdO3h8R6Xx9YoS6Uaifd7rXo5LYuEgUick88xnOl7NvRykFDo9YNZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyZn13N0K7zPl0SSILBdxyZj6bp8wHwYDVR0j
BBgwFoAUNsmprc5TKz1N42d4rP3Ds69f0MYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1lwUHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlRO
UFMvMC8zNkM5QTlBRENFNTMyQjNENERFMzY3NzhBQ0ZEQzNCM0FGNUZEMEM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM2QzlBOUFEQ0U1MzJCM0Q0
REUzNjc3OEFDRkRDM0IzQUY1RkQwQzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NZcFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzAv
MzEzODM2MmUzMjMzMzcyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC67Q4wDQYJKoZIhvcNAQELBQADggEBACKgc9gd
Rxn6meyfW8kn598wtitwF6mNxgmYHmHhElgouZrID04YtqkOsy74jH1RacLgZzLo
PQqhZenv5KVJ942QKbW3cekiUzLB7Md9IlUjid1GPv5oNffXaxSOWU09nSyG8H/C
NNWt/aRGYd/phJOxLCKfsnQ1YcrHMzJvubDB/ex2gS11QjTGsenuoz144MQWWOrP
LxVfeUoBmjGjoMB9ZV8hIKDFbQizvOqdjWbBQXNan8FoNbSDFfWvUiXn3dk0D30Q
tKwejUqvPvdWWHPw3IhjeSLrw4RoGoce9KjAG2S9jotWzj1k5RKsL0QQ4Bl6DRK0
fjadezEbMuqnr2s=
-----END CERTIFICATE-----
Generated at Fri Sep 4 11:24:08 2026 by rpki-client