Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
File:                     3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa (raw, json)
Hash identifier:          8L5zHPkgN3btTubQyhZjje/aZYVVn4dB7bgkm7uDDLY=
Subject key identifier:   16:33:C5:F6:D5:C6:C2:F2:93:31:96:66:0C:F6:BC:0F:95:8C:88:18
Certificate issuer:       /CN=75A4972B7CD4E111D558A51F98974C6685D9043C
Certificate serial:       23BBCC415027E2925B65D94F9182EB8E07E108DD
Authority key identifier: 75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa
Signing time:             Tue 31 Mar 2026 20:15:24 +0000
ROA not before:           Tue 31 Mar 2026 20:10:24 +0000
ROA not after:            Tue 30 Mar 2027 20:15:24 +0000
asID:                     263027
IP address blocks:        186.249.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl
                          rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 Apr 2026 19:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bb:cc:41:50:27:e2:92:5b:65:d9:4f:91:82:eb:8e:07:e1:08:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75A4972B7CD4E111D558A51F98974C6685D9043C
        Validity
            Not Before: Mar 31 20:10:24 2026 GMT
            Not After : Mar 30 20:15:24 2027 GMT
        Subject: CN=1633C5F6D5C6C2F2933196660CF6BC0F958C8818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2f:12:bf:03:30:72:2c:9b:6a:31:ee:9c:21:
                    ba:39:2a:f2:55:6e:57:81:42:f9:95:1e:c2:25:99:
                    a6:50:3a:e4:b6:7f:f6:a4:c4:e0:30:f5:79:b1:24:
                    b6:a9:dd:53:d6:99:95:96:f3:2d:73:2f:27:e2:bf:
                    d1:d1:d8:3c:50:4c:17:68:17:35:75:b7:e7:8e:79:
                    89:4a:ad:af:8d:c0:db:8b:23:55:c6:8e:8b:0b:59:
                    d1:f7:b7:9a:3d:e2:36:68:bb:aa:01:e8:f5:04:10:
                    31:27:95:f2:6b:b8:c9:53:a8:2b:88:74:0f:5e:b3:
                    79:80:ff:f2:1e:36:a5:67:1f:d5:8e:b3:da:ef:5c:
                    10:8a:9a:b6:f4:58:ed:03:b7:94:33:4b:4a:20:13:
                    d2:5b:8f:0b:7f:d5:55:8f:71:09:5a:24:38:8a:61:
                    73:21:14:ff:fe:2c:c5:24:48:7e:e5:d5:4f:71:6a:
                    d4:31:f1:a2:a5:47:a0:3d:25:08:db:27:ab:00:21:
                    10:ea:0c:33:b2:8f:c4:fa:48:73:96:e8:57:0c:71:
                    4e:e2:9c:e6:7b:61:c8:af:56:5f:b8:57:b0:2c:2f:
                    6b:ac:b3:27:94:d4:59:80:61:d7:6e:53:3b:1b:5c:
                    09:f6:50:a8:47:78:10:83:6f:bf:8d:29:7d:98:86:
                    5a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:C5:F6:D5:C6:C2:F2:93:31:96:66:0C:F6:BC:0F:95:8C:88:18
            X509v3 Authority Key Identifier:
                keyid:75:A4:97:2B:7C:D4:E1:11:D5:58:A5:1F:98:97:4C:66:85:D9:04:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/75A4972B7CD4E111D558A51F98974C6685D9043C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75A4972B7CD4E111D558A51F98974C6685D9043C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/0/3138362e3234392e3234302e302f32312d3234203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:08:df:8b:e8:36:89:1e:aa:61:1a:73:9d:ec:08:c7:e4:
         62:6d:4d:d0:d7:29:33:54:16:9d:83:ab:63:d6:79:91:b3:ac:
         63:47:05:70:04:53:15:9f:2f:5b:b4:d7:08:9f:89:71:b6:ae:
         46:de:7c:8b:5f:1d:4c:4a:cb:6e:41:8b:90:61:17:a5:b5:16:
         29:e8:84:82:85:e2:b7:39:18:47:7d:f1:c3:bc:0f:fa:99:06:
         5e:8a:ec:f4:fd:fb:5d:74:5c:6b:cb:02:98:d4:19:46:ec:ad:
         d9:05:9e:be:6a:03:f7:86:e4:4d:a1:ee:df:64:40:5e:43:9a:
         e0:75:d3:46:62:82:d2:63:0d:2b:7f:c5:9f:b4:d8:22:a7:92:
         0f:8c:e1:96:c5:62:30:94:ac:a7:69:30:cc:49:b1:61:6e:49:
         c0:94:68:a0:1d:b2:7e:db:74:a5:5e:9e:b3:c0:2e:4c:60:2a:
         d4:b1:b7:ba:03:ed:90:f7:ad:da:ee:28:ba:33:31:f5:b7:65:
         23:2a:94:19:3c:29:08:5f:28:6b:e8:39:be:cf:d3:69:e8:bf:
         a0:23:59:bf:56:51:27:bb:f3:04:21:c9:a9:4f:22:87:72:d1:
         87:81:90:3c:46:eb:20:43:ab:5a:a1:69:42:48:33:e2:84:71:
         95:1d:aa:bf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUI7vMQVAn4pJbZdlPkYLrjgfhCN0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzVBNDk3MkI3Q0Q0RTExMUQ1NThBNTFGOTg5NzRDNjY4
NUQ5MDQzQzAeFw0yNjAzMzEyMDEwMjRaFw0yNzAzMzAyMDE1MjRaMDMxMTAvBgNV
BAMTKDE2MzNDNUY2RDVDNkMyRjI5MzMxOTY2NjBDRjZCQzBGOTU4Qzg4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrLxK/AzByLJtqMe6cIbo5KvJV
bleBQvmVHsIlmaZQOuS2f/akxOAw9XmxJLap3VPWmZWW8y1zLyfiv9HR2DxQTBdo
FzV1t+eOeYlKra+NwNuLI1XGjosLWdH3t5o94jZou6oB6PUEEDEnlfJruMlTqCuI
dA9es3mA//IeNqVnH9WOs9rvXBCKmrb0WO0Dt5QzS0ogE9Jbjwt/1VWPcQlaJDiK
YXMhFP/+LMUkSH7l1U9xatQx8aKlR6A9JQjbJ6sAIRDqDDOyj8T6SHOW6FcMcU7i
nOZ7YcivVl+4V7AsL2ussyeU1FmAYdduUzsbXAn2UKhHeBCDb7+NKX2YhlpxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFjPF9tXGwvKTMZZmDPa8D5WMiBgwHwYDVR0j
BBgwFoAUdaSXK3zU4RHVWKUfmJdMZoXZBDwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3ZrY0FaZ2RzQWNYU2N2dWlqSGduNHlaZFVKNEZ1VENlZTlXRjRhUmcy
Q2ovMC83NUE0OTcyQjdDRDRFMTExRDU1OEE1MUY5ODk3NEM2Njg1RDkwNDNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc1QTQ5NzJCN0NENEUxMTFE
NTU4QTUxRjk4OTc0QzY2ODVEOTA0M0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N2a2NBWmdkc0FjWFNjdnVpakhnbjR5WmRVSjRGdVRDZWU5V0Y0YVJnMkNqLzAv
MzEzODM2MmUzMjM0MzkyZTMyMzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7r58DANBgkqhkiG9w0BAQsFAAOCAQEAhR4I
34voNokeqmEac53sCMfkYm1N0NcpM1QWnYOrY9Z5kbOsY0cFcARTFZ8vW7TXCJ+J
cbauRt58i18dTErLbkGLkGEXpbUWKeiEgoXitzkYR33xw7wP+pkGXors9P37XXRc
a8sCmNQZRuyt2QWevmoD94bkTaHu32RAXkOa4HXTRmKC0mMNK3/Fn7TYIqeSD4zh
lsViMJSsp2kwzEmxYW5JwJRooB2yftt0pV6es8AuTGAq1LG3ugPtkPet2u4oujMx
9bdlIyqUGTwpCF8oa+g5vs/Taei/oCNZv1ZRJ7vzBCHJqU8ih3LRh4GQPEbrIEOr
WqFpQkgz4oRxlR2qvw==
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:22:18 2026 by rpki-client