Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235332e302f32342d3234203d3e20323633303938.roa
File:                     3138362e3230382e3235332e302f32342d3234203d3e20323633303938.roa (raw, json)
Hash identifier:          6Y8SyCDDyANDcn2l4CiJqLFiL7Z5ddAI6qpeJDoJbe4=
Subject key identifier:   A1:45:4C:06:9E:92:63:55:80:0F:5A:43:70:72:A9:64:BE:63:4B:70
Certificate issuer:       /CN=74F9C88A4F4F16E11392F600961CE950348548CB
Certificate serial:       12BA1E99AFACAAE629D76DF3E602BA09DAACEA35
Authority key identifier: 74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235332e302f32342d3234203d3e20323633303938.roa
Signing time:             Wed 03 Jun 2026 16:11:26 +0000
ROA not before:           Wed 03 Jun 2026 16:06:26 +0000
ROA not after:            Wed 02 Jun 2027 16:11:26 +0000
asID:                     263098
IP address blocks:        186.208.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl
                          rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 09:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ba:1e:99:af:ac:aa:e6:29:d7:6d:f3:e6:02:ba:09:da:ac:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74F9C88A4F4F16E11392F600961CE950348548CB
        Validity
            Not Before: Jun  3 16:06:26 2026 GMT
            Not After : Jun  2 16:11:26 2027 GMT
        Subject: CN=A1454C069E926355800F5A437072A964BE634B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:65:0f:9b:df:54:34:49:f7:b5:10:48:43:
                    75:92:98:16:97:a9:8d:3c:59:d2:72:37:f7:14:2b:
                    f1:67:71:14:09:f7:77:52:58:4d:d5:87:81:45:b8:
                    22:42:67:9a:c6:99:96:ed:fb:16:17:5b:6d:2c:68:
                    40:50:a6:a3:8a:cf:1d:81:98:bd:c7:73:7f:c0:b3:
                    1a:a4:68:cd:44:b6:9e:2c:4f:0c:3a:90:53:93:85:
                    dd:c2:db:9c:89:d1:78:4f:ec:9a:53:ec:03:ea:36:
                    db:d0:d6:a0:c6:45:1b:5f:4a:6f:9b:2d:39:f7:3c:
                    c4:95:04:7d:57:aa:f2:3e:98:ca:ba:2c:52:17:cb:
                    60:2e:f0:d0:32:44:79:d7:52:ff:8e:ce:39:ec:34:
                    2d:a8:2c:02:a4:1b:4d:fd:74:ff:bf:32:43:60:40:
                    ee:e9:da:09:97:e5:fa:f1:56:d4:8a:ea:02:51:6d:
                    8f:72:7f:07:60:c1:d7:c8:c7:f4:83:08:07:75:9a:
                    a2:94:e3:09:dc:5b:b6:84:35:f5:90:70:ab:d3:e4:
                    32:43:85:51:3b:63:95:1a:2b:33:9e:13:79:a0:c2:
                    6d:0e:fa:52:01:c8:04:20:ef:9f:84:ce:d0:1a:47:
                    72:9c:fe:06:68:a2:dc:6a:f7:59:1b:c7:7d:87:77:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:45:4C:06:9E:92:63:55:80:0F:5A:43:70:72:A9:64:BE:63:4B:70
            X509v3 Authority Key Identifier:
                keyid:74:F9:C8:8A:4F:4F:16:E1:13:92:F6:00:96:1C:E9:50:34:85:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/74F9C88A4F4F16E11392F600961CE950348548CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/74F9C88A4F4F16E11392F600961CE950348548CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/0/3138362e3230382e3235332e302f32342d3234203d3e20323633303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.208.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:76:a1:39:bb:24:4f:75:71:42:b8:f1:b1:43:d6:c4:9e:6d:
         87:e6:7c:ae:9c:93:4b:20:43:0f:ca:fb:72:3d:3f:bc:7d:18:
         8b:08:12:16:d2:a2:1d:91:b4:cc:30:2d:f7:39:fb:35:17:f0:
         ae:02:e3:e0:a3:22:fd:0f:7c:98:7e:ef:cc:d9:c5:11:f7:9a:
         c5:f5:7c:db:33:87:25:b8:99:6c:f5:3a:12:d9:d8:d8:d1:5b:
         fa:31:b0:e8:9e:e7:38:48:d9:90:43:25:12:99:77:af:14:ab:
         00:80:66:d3:34:c3:6d:00:00:fa:ab:3b:89:b8:a7:40:95:1f:
         7c:0d:84:35:b9:56:52:e1:cb:f6:0e:16:a5:31:6d:30:7d:13:
         d8:70:f7:79:35:88:8e:09:dc:a8:0d:be:54:3b:f7:dd:7f:65:
         ae:06:58:a6:0a:48:6e:ed:84:21:f4:89:ef:61:4c:57:1f:bd:
         ae:b3:63:84:01:22:53:cc:4e:93:1e:d9:49:7b:22:8d:04:8f:
         c4:9d:43:87:1c:5f:a0:2b:44:eb:9b:9c:44:8b:f1:7c:13:c3:
         11:14:56:b2:73:13:53:53:7e:c2:8d:d7:75:f0:e0:84:c3:ff:
         95:fe:97:74:c6:37:46:d6:c7:d3:b5:8a:ab:88:ad:53:e3:8c:
         fd:47:3b:d6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEroema+squYp123z5gK6Cdqs6jUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRGOUM4OEE0RjRGMTZFMTEzOTJGNjAwOTYxQ0U5NTAz
NDg1NDhDQjAeFw0yNjA2MDMxNjA2MjZaFw0yNzA2MDIxNjExMjZaMDMxMTAvBgNV
BAMTKEExNDU0QzA2OUU5MjYzNTU4MDBGNUE0MzcwNzJBOTY0QkU2MzRCNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8smUPm99UNEn3tRBIQ3WSmBaX
qY08WdJyN/cUK/FncRQJ93dSWE3Vh4FFuCJCZ5rGmZbt+xYXW20saEBQpqOKzx2B
mL3Hc3/AsxqkaM1Etp4sTww6kFOThd3C25yJ0XhP7JpT7APqNtvQ1qDGRRtfSm+b
LTn3PMSVBH1XqvI+mMq6LFIXy2Au8NAyRHnXUv+OzjnsNC2oLAKkG039dP+/MkNg
QO7p2gmX5frxVtSK6gJRbY9yfwdgwdfIx/SDCAd1mqKU4wncW7aENfWQcKvT5DJD
hVE7Y5UaKzOeE3mgwm0O+lIByAQg75+EztAaR3Kc/gZootxq91kbx32HdxfxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoUVMBp6SY1WAD1pDcHKpZL5jS3AwHwYDVR0j
BBgwFoAUdPnIik9PFuETkvYAlhzpUDSFSMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXBRdTJzdUJpVFE4ZVRva01ORHUyWUNEMUVFdHZtU2o3WUx3bTJ3aXNM
N00vMC83NEY5Qzg4QTRGNEYxNkUxMTM5MkY2MDA5NjFDRTk1MDM0ODU0OENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0RjlDODhBNEY0RjE2RTEx
MzkyRjYwMDk2MUNFOTUwMzQ4NTQ4Q0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VwUXUyc3VCaVRROGVUb2tNTkR1MllDRDFFRXR2bVNqN1lMd20yd2lzTDdNLzAv
MzEzODM2MmUzMjMwMzgyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrQ/TANBgkqhkiG9w0BAQsFAAOCAQEAmHah
ObskT3VxQrjxsUPWxJ5th+Z8rpyTSyBDD8r7cj0/vH0YiwgSFtKiHZG0zDAt9zn7
NRfwrgLj4KMi/Q98mH7vzNnFEfeaxfV82zOHJbiZbPU6EtnY2NFb+jGw6J7nOEjZ
kEMlEpl3rxSrAIBm0zTDbQAA+qs7ibinQJUffA2ENblWUuHL9g4WpTFtMH0T2HD3
eTWIjgncqA2+VDv33X9lrgZYpgpIbu2EIfSJ72FMVx+9rrNjhAEiU8xOkx7ZSXsi
jQSPxJ1DhxxfoCtE65ucRIvxfBPDERRWsnMTU1N+wo3XdfDghMP/lf6XdMY3RtbH
07WKq4itU+OM/Uc71g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:17:01 2026 by rpki-client