Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133322e302f32322d3234203d3e20323633303738.roa
File:                     3137302e3234342e3133322e302f32322d3234203d3e20323633303738.roa (raw, json)
Hash identifier:          90hCGvKJ9J1TwTXZdb+uF01bgYvquaWPZFndIHCsHTQ=
Subject key identifier:   08:B4:AC:A8:7B:CC:CB:65:BA:14:69:44:E2:B3:AB:AD:69:2A:6D:BC
Certificate issuer:       /CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
Certificate serial:       540D02576C5E78D7CE87E9E947159823A2CFB572
Authority key identifier: D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133322e302f32322d3234203d3e20323633303738.roa
Signing time:             Fri 28 Aug 2026 13:33:51 +0000
ROA not before:           Fri 28 Aug 2026 13:28:51 +0000
ROA not after:            Fri 27 Aug 2027 13:33:51 +0000
asID:                     263078
IP address blocks:        170.244.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.crl
                          rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 11:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0d:02:57:6c:5e:78:d7:ce:87:e9:e9:47:15:98:23:a2:cf:b5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5036AFE3F0B804DA242F855D55F7C467A9BF493
        Validity
            Not Before: Aug 28 13:28:51 2026 GMT
            Not After : Aug 27 13:33:51 2027 GMT
        Subject: CN=08B4ACA87BCCCB65BA146944E2B3ABAD692A6DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:29:9b:ed:a4:35:f1:6f:96:be:6f:e2:c4:07:
                    a4:07:bf:7b:a6:06:39:1b:ce:d8:2f:61:ec:70:02:
                    30:41:4a:3e:c9:92:1b:b6:73:a6:73:77:fb:cf:7e:
                    cc:29:36:41:c2:d4:46:83:27:6a:66:55:80:6e:fd:
                    74:4b:98:14:b4:fd:4d:d8:70:a4:57:cf:06:ca:63:
                    9a:c2:18:47:44:e4:41:22:96:03:bd:22:4a:6c:5c:
                    96:dc:6f:d1:03:33:61:cd:8a:17:66:31:46:12:e9:
                    36:ce:e0:6d:ec:73:47:12:52:1d:e3:0b:c4:13:a0:
                    c2:51:54:cb:bf:27:90:7b:c8:59:57:7f:72:aa:f8:
                    26:dc:17:a6:0e:0f:f7:09:4e:8a:7c:ef:31:a8:eb:
                    a0:4d:2d:c0:aa:7e:0d:ef:f3:26:e0:42:61:ff:30:
                    6a:31:f7:94:46:73:73:1d:c1:e9:fd:30:f9:c9:dc:
                    20:7d:41:be:57:52:2a:18:0b:a9:ff:71:69:4e:28:
                    d9:1e:5c:db:00:28:75:97:d1:91:4e:e6:79:a3:2e:
                    a0:68:6f:35:b3:21:0b:31:ed:7f:ed:43:a2:6f:42:
                    0b:d3:ae:18:30:74:00:dc:27:93:46:a5:07:de:f5:
                    c3:4d:c0:d8:0b:85:91:4f:d9:5c:0e:ca:75:67:a2:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:AC:A8:7B:CC:CB:65:BA:14:69:44:E2:B3:AB:AD:69:2A:6D:BC
            X509v3 Authority Key Identifier:
                keyid:D5:03:6A:FE:3F:0B:80:4D:A2:42:F8:55:D5:5F:7C:46:7A:9B:F4:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/D5036AFE3F0B804DA242F855D55F7C467A9BF493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5036AFE3F0B804DA242F855D55F7C467A9BF493.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6Hvay2D4yfAizJ7Vt3qn3oUxVx3XjAsGQuBswtHzPiT/0/3137302e3234342e3133322e302f32322d3234203d3e20323633303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:a0:2e:4a:c0:b2:e6:a2:8b:ff:b2:0b:05:07:23:14:e8:
         af:19:0c:0b:14:ee:df:30:4c:a0:fd:d6:bd:50:c5:1e:0d:3d:
         5d:04:6f:c4:f6:dd:6a:d9:af:bd:03:5d:38:49:1e:b6:23:36:
         9b:21:96:3b:8c:9a:b5:76:0a:0b:f4:94:cc:16:32:52:2e:90:
         ee:a3:25:b5:77:fd:69:4e:bb:7a:b7:8a:e7:5d:49:91:71:43:
         9b:4d:b3:93:ee:d9:db:3b:47:3a:e7:ea:06:31:cc:1c:e3:95:
         6f:32:79:ba:3e:76:60:fe:eb:d2:5e:e7:c4:f0:6a:12:57:cd:
         38:df:62:a2:55:2f:5f:d3:12:4f:a5:30:5a:97:6e:23:28:da:
         ba:e7:97:49:0b:3a:e7:b3:f0:7b:d1:55:1d:94:88:59:64:31:
         d9:dd:ed:d2:7a:24:84:c1:0e:fb:73:64:20:4a:89:d3:72:93:
         17:bb:63:ed:ae:da:a5:ac:30:7e:bb:6f:8a:76:08:b4:c8:ec:
         13:54:2e:ed:80:a9:4f:fb:82:2d:6c:59:5f:6d:12:f5:ca:a8:
         b1:1e:7c:4b:1a:43:60:da:a8:71:c4:e5:f1:d6:cb:53:ca:2c:
         25:c0:b6:dd:6a:9f:a8:6f:9b:40:b5:72:ed:ac:a8:02:ea:c9:
         52:82:ad:3f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVA0CV2xeeNfOh+npRxWYI6LPtXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUwMzZBRkUzRjBCODA0REEyNDJGODU1RDU1RjdDNDY3
QTlCRjQ5MzAeFw0yNjA4MjgxMzI4NTFaFw0yNzA4MjcxMzMzNTFaMDMxMTAvBgNV
BAMTKDA4QjRBQ0E4N0JDQ0NCNjVCQTE0Njk0NEUyQjNBQkFENjkyQTZEQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKZvtpDXxb5a+b+LEB6QHv3um
BjkbztgvYexwAjBBSj7Jkhu2c6Zzd/vPfswpNkHC1EaDJ2pmVYBu/XRLmBS0/U3Y
cKRXzwbKY5rCGEdE5EEilgO9IkpsXJbcb9EDM2HNihdmMUYS6TbO4G3sc0cSUh3j
C8QToMJRVMu/J5B7yFlXf3Kq+CbcF6YOD/cJTop87zGo66BNLcCqfg3v8ybgQmH/
MGox95RGc3Mdwen9MPnJ3CB9Qb5XUioYC6n/cWlOKNkeXNsAKHWX0ZFO5nmjLqBo
bzWzIQsx7X/tQ6JvQgvTrhgwdADcJ5NGpQfe9cNNwNgLhZFP2VwOynVnol8bAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCLSsqHvMy2W6FGlE4rOrrWkqbbwwHwYDVR0j
BBgwFoAU1QNq/j8LgE2iQvhV1V98Rnqb9JMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjZIdmF5MkQ0eWZBaXpKN1Z0M3FuM29VeFZ4M1hqQXNHUXVCc3d0SHpQ
aVQvMC9ENTAzNkFGRTNGMEI4MDREQTI0MkY4NTVENTVGN0M0NjdBOUJGNDkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1MDM2QUZFM0YwQjgwNERB
MjQyRjg1NUQ1NUY3QzQ2N0E5QkY0OTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y2SHZheTJENHlmQWl6SjdWdDNxbjNvVXhWeDNYakFzR1F1QnN3dEh6UGlULzAv
MzEzNzMwMmUzMjM0MzQyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0hDANBgkqhkiG9w0BAQsFAAOCAQEAgsCg
LkrAsuaii/+yCwUHIxTorxkMCxTu3zBMoP3WvVDFHg09XQRvxPbdatmvvQNdOEke
tiM2myGWO4yatXYKC/SUzBYyUi6Q7qMltXf9aU67ereK511JkXFDm02zk+7Z2ztH
OufqBjHMHOOVbzJ5uj52YP7r0l7nxPBqElfNON9iolUvX9MST6UwWpduIyjauueX
SQs657Pwe9FVHZSIWWQx2d3t0nokhMEO+3NkIEqJ03KTF7tj7a7apawwfrtvinYI
tMjsE1Qu7YCpT/uCLWxZX20S9cqosR58SxpDYNqoccTl8dbLU8osJcC23WqfqG+b
QLVy7ayoAurJUoKtPw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:59:09 2026 by rpki-client