Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          q3J9QCQ1iIFOJQi0keSwc5kzRUOsF3WzaGyGbEw7wbE=
Subject key identifier:   04:C4:E0:8C:A1:2F:CD:CF:BE:4A:E5:67:DB:BF:76:62:BA:60:88:1C
Certificate issuer:       /CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
Certificate serial:       2037C502772B3921C8F385386BC004CEDF4AFA3D
Authority key identifier: BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa
Signing time:             Thu 03 Sep 2026 18:50:34 +0000
ROA not before:           Thu 03 Sep 2026 18:45:34 +0000
ROA not after:            Thu 02 Sep 2027 18:50:34 +0000
asID:                     269359
IP address blocks:        168.194.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl
                          rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 19:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:37:c5:02:77:2b:39:21:c8:f3:85:38:6b:c0:04:ce:df:4a:fa:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Validity
            Not Before: Sep  3 18:45:34 2026 GMT
            Not After : Sep  2 18:50:34 2027 GMT
        Subject: CN=04C4E08CA12FCDCFBE4AE567DBBF7662BA60881C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a5:48:8d:58:d4:59:d9:19:e9:1d:0c:76:9f:
                    2e:d4:1d:79:0f:a9:da:f3:60:14:66:43:ae:e5:8e:
                    a6:58:be:31:34:04:ff:22:63:85:9a:94:87:f0:a4:
                    63:37:53:68:de:30:f9:19:07:3f:28:7f:93:f9:2f:
                    39:c5:8d:05:aa:75:e0:0a:22:54:2b:79:ec:ed:0e:
                    38:85:f2:db:c4:d9:14:c5:60:3e:b0:32:d9:a8:95:
                    4b:9d:61:f0:a2:b8:e9:08:cf:1b:d0:bd:77:ec:c5:
                    50:2a:5a:72:28:ee:f0:f0:0d:c2:1e:c3:c5:09:c8:
                    a0:5d:8e:47:63:67:15:52:7b:1d:80:c7:bd:a6:f8:
                    6b:88:90:78:88:1f:26:6b:d7:f8:d0:eb:41:56:b9:
                    6f:8c:88:1b:73:26:f3:f5:a9:b7:2e:eb:bc:8e:6a:
                    14:21:0e:0a:42:6c:0a:86:c9:3d:7a:51:a1:90:e3:
                    e7:a8:58:9f:b4:05:47:a3:62:f2:c4:bb:ae:60:f6:
                    c6:70:9c:10:d5:9c:7b:d5:17:1a:67:44:37:0e:df:
                    0a:17:b2:da:5e:a4:c3:6b:62:47:f0:ed:8a:75:b0:
                    71:86:6a:14:97:49:7e:f7:aa:74:ea:79:5e:96:a5:
                    d1:25:5c:c4:db:e6:d9:65:f0:97:30:1a:fb:ee:da:
                    cc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C4:E0:8C:A1:2F:CD:CF:BE:4A:E5:67:DB:BF:76:62:BA:60:88:1C
            X509v3 Authority Key Identifier:
                keyid:BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234392e302f32342d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:c2:da:1b:29:28:e2:e1:5e:87:ff:b8:a8:93:7c:c8:fb:
         cc:25:0e:a3:75:88:b4:83:30:c9:65:e7:f2:ca:10:14:b8:bb:
         bd:3c:5c:c8:9a:32:b0:9c:13:58:83:76:0f:35:d4:15:4f:69:
         93:68:6a:6a:e3:ab:f3:2e:8c:b6:2c:8d:9b:a1:95:22:af:96:
         68:d4:d3:cc:a9:2d:b4:6a:65:b8:0f:8b:15:fe:a1:03:d8:9c:
         1c:c8:c8:41:6f:a2:0b:19:a8:f3:22:c7:28:34:90:b2:b4:20:
         e2:bb:b2:2a:55:3d:9a:3d:78:7c:bc:dd:26:2e:13:54:fe:c8:
         e5:5f:63:50:5c:02:ac:d0:b2:27:8a:b5:bc:93:b2:73:c4:d4:
         da:4b:ce:5a:fd:54:00:48:ea:61:f0:a4:56:76:e8:55:ba:c1:
         78:e7:e2:3d:7c:2e:88:d4:ad:15:7f:3a:2d:d4:13:78:12:20:
         f6:6e:13:c4:56:b4:f4:29:11:f3:e7:68:73:2c:5d:76:f2:44:
         98:f4:56:ad:c5:8c:53:0d:81:d6:49:6e:ec:66:d4:9a:01:4e:
         18:a0:8d:ca:53:8e:84:7a:34:2e:d3:64:08:1c:45:08:9f:45:
         ad:3e:18:38:af:cf:1c:55:77:a6:22:38:6b:46:0e:42:a6:e9:
         a9:59:e5:84
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIDfFAncrOSHI84U4a8AEzt9K+j0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNGOTI3M0ZDM0U4M0VDRjdDNEIxOTM2QTMyOEQzREYw
MjUxQUM2MzAeFw0yNjA5MDMxODQ1MzRaFw0yNzA5MDIxODUwMzRaMDMxMTAvBgNV
BAMTKDA0QzRFMDhDQTEyRkNEQ0ZCRTRBRTU2N0RCQkY3NjYyQkE2MDg4MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpUiNWNRZ2RnpHQx2ny7UHXkP
qdrzYBRmQ67ljqZYvjE0BP8iY4WalIfwpGM3U2jeMPkZBz8of5P5LznFjQWqdeAK
IlQreeztDjiF8tvE2RTFYD6wMtmolUudYfCiuOkIzxvQvXfsxVAqWnIo7vDwDcIe
w8UJyKBdjkdjZxVSex2Ax72m+GuIkHiIHyZr1/jQ60FWuW+MiBtzJvP1qbcu67yO
ahQhDgpCbAqGyT16UaGQ4+eoWJ+0BUejYvLEu65g9sZwnBDVnHvVFxpnRDcO3woX
stpepMNrYkfw7Yp1sHGGahSXSX73qnTqeV6WpdElXMTb5tll8JcwGvvu2szRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBMTgjKEvzc++SuVn2792YrpgiBwwHwYDVR0j
BBgwFoAUvPknP8PoPs98Sxk2oyjT3wJRrGMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmpiM05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFm
dk4vMC9CQ0Y5MjczRkMzRTgzRUNGN0M0QjE5MzZBMzI4RDNERjAyNTFBQzYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JDRjkyNzNGQzNFODNFQ0Y3
QzRCMTkzNkEzMjhEM0RGMDI1MUFDNjMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZqYjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAv
MzEzNjM4MmUzMTM5MzQyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzOTMzMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjC+TANBgkqhkiG9w0BAQsFAAOCAQEAJ6nC
2hspKOLhXof/uKiTfMj7zCUOo3WItIMwyWXn8soQFLi7vTxcyJoysJwTWIN2DzXU
FU9pk2hqauOr8y6MtiyNm6GVIq+WaNTTzKkttGpluA+LFf6hA9icHMjIQW+iCxmo
8yLHKDSQsrQg4ruyKlU9mj14fLzdJi4TVP7I5V9jUFwCrNCyJ4q1vJOyc8TU2kvO
Wv1UAEjqYfCkVnboVbrBeOfiPXwuiNStFX86LdQTeBIg9m4TxFa09CkR8+docyxd
dvJEmPRWrcWMUw2B1klu7GbUmgFOGKCNylOOhHo0LtNkCBxFCJ9FrT4YOK/PHFV3
piI4a0YOQqbpqVnlhA==
-----END CERTIFICATE-----
Generated at Fri Sep 4 03:09:41 2026 by rpki-client