Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa
File:                     3138362e3139352e36372e302f32342d3332203d3e203532353830.roa (raw, json)
Hash identifier:          5l7PRKTEd+P3VSOXwjbc3xYaHXMMzUemr80SP6OZtkI=
Subject key identifier:   A9:CB:C2:E6:4B:09:DE:CF:0C:19:9B:12:B1:38:90:7C:13:3B:7C:5A
Certificate issuer:       /CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
Certificate serial:       74C0F320CA97EF9068BD0A12221F696C6F42CBC7
Authority key identifier: C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa
Signing time:             Wed 01 Apr 2026 19:28:14 +0000
ROA not before:           Wed 01 Apr 2026 19:23:14 +0000
ROA not after:            Wed 31 Mar 2027 19:28:14 +0000
asID:                     52580
IP address blocks:        186.195.67.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl
                          rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 00:38:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:c0:f3:20:ca:97:ef:90:68:bd:0a:12:22:1f:69:6c:6f:42:cb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0
        Validity
            Not Before: Apr  1 19:23:14 2026 GMT
            Not After : Mar 31 19:28:14 2027 GMT
        Subject: CN=A9CBC2E64B09DECF0C199B12B138907C133B7C5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:72:f2:f5:01:09:0b:83:d4:ee:ca:b3:3b:e1:
                    e6:8a:57:8e:06:6c:af:6c:d9:03:56:72:ba:a9:c5:
                    2a:c3:d6:29:ce:23:59:cb:9c:77:e2:a1:29:d0:31:
                    b4:48:1d:65:17:be:9a:ef:81:c4:78:1e:37:39:90:
                    84:ff:95:2f:6c:db:5e:f8:94:13:12:45:2c:dc:b0:
                    38:68:28:84:6c:cb:bf:6a:13:91:f8:e9:ed:f4:22:
                    29:94:39:e5:6e:8c:a8:55:0f:25:2b:ec:b0:c6:1c:
                    c4:ff:23:e2:e5:05:1f:bd:f6:63:14:46:09:99:2f:
                    53:8c:a0:3e:f8:d9:38:3c:df:f9:99:f5:b3:42:39:
                    c7:8f:d3:a8:74:0f:b5:b0:62:e2:04:f0:cf:96:e0:
                    8a:ab:1c:31:90:1c:8a:99:9c:15:50:82:7b:62:23:
                    56:16:97:d1:16:55:72:bf:6a:ed:b3:a7:7b:0d:39:
                    dd:ca:f7:e8:82:80:78:92:43:18:9d:75:91:2a:fe:
                    e2:6e:a3:cd:8a:e7:ce:58:4c:0b:13:79:7a:72:e9:
                    4a:18:f8:75:72:d6:ba:ea:36:fa:4e:d2:7a:c9:09:
                    de:52:68:85:aa:d7:a4:f6:c2:7a:ac:a5:39:b4:1b:
                    cb:c5:14:b5:f4:b4:e4:0d:b2:00:d9:f5:a6:60:28:
                    64:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CB:C2:E6:4B:09:DE:CF:0C:19:9B:12:B1:38:90:7C:13:3B:7C:5A
            X509v3 Authority Key Identifier:
                keyid:C1:31:36:AD:EE:BB:54:11:1E:2C:09:F2:C7:DF:BB:39:51:EB:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C13136ADEEBB54111E2C09F2C7DFBB3951EBCFD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/3138362e3139352e36372e302f32342d3332203d3e203532353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:4a:be:13:91:3e:d5:17:47:ea:05:fa:de:68:24:9d:a3:6e:
         58:42:52:50:93:75:8a:8f:4c:88:f2:a9:e2:7b:6c:9f:0e:44:
         c8:66:86:82:1a:b7:d7:59:17:7d:a4:6b:b5:18:22:f7:c2:f2:
         d8:6a:83:cf:6f:52:63:84:2c:0f:94:e8:c3:36:1e:8f:29:b2:
         4a:dd:3f:de:3a:40:09:82:4b:23:33:26:09:1b:8c:03:f8:8d:
         e1:8d:dd:9d:ad:3e:46:2e:d8:0a:00:3d:24:d1:74:93:8d:0d:
         c7:69:0f:7e:25:e3:0b:32:f2:b0:36:08:6d:7b:8d:f8:e0:c4:
         a4:55:7a:00:47:1b:a1:02:29:53:b0:19:a2:f7:1e:a9:ea:3a:
         fd:bc:79:07:f1:77:0f:60:e0:b7:c2:3c:a1:6e:61:cb:f6:8c:
         3d:7d:69:da:67:c7:cd:41:63:e4:b7:d7:dc:9d:b3:42:cc:4c:
         c6:ab:99:19:43:7b:99:31:83:fd:c7:06:ee:97:9e:2b:53:31:
         c3:fa:53:05:d8:5a:09:06:1e:2c:2f:0c:33:f7:f7:57:62:a1:
         40:cd:31:de:80:d4:43:24:35:8b:05:c1:60:15:58:3e:df:2f:
         6a:5b:ba:9e:c9:01:98:c4:52:1e:4f:a0:23:e1:f2:ca:c1:f9:
         27:b3:a0:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdMDzIMqX75BovQoSIh9pbG9Cy8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzEzMTM2QURFRUJCNTQxMTFFMkMwOUYyQzdERkJCMzk1
MUVCQ0ZEMDAeFw0yNjA0MDExOTIzMTRaFw0yNzAzMzExOTI4MTRaMDMxMTAvBgNV
BAMTKEE5Q0JDMkU2NEIwOURFQ0YwQzE5OUIxMkIxMzg5MDdDMTMzQjdDNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTcvL1AQkLg9TuyrM74eaKV44G
bK9s2QNWcrqpxSrD1inOI1nLnHfioSnQMbRIHWUXvprvgcR4Hjc5kIT/lS9s2174
lBMSRSzcsDhoKIRsy79qE5H46e30IimUOeVujKhVDyUr7LDGHMT/I+LlBR+99mMU
RgmZL1OMoD742Tg83/mZ9bNCOceP06h0D7WwYuIE8M+W4IqrHDGQHIqZnBVQgnti
I1YWl9EWVXK/au2zp3sNOd3K9+iCgHiSQxiddZEq/uJuo82K585YTAsTeXpy6UoY
+HVy1rrqNvpO0nrJCd5SaIWq16T2wnqspTm0G8vFFLX0tOQNsgDZ9aZgKGSvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqcvC5ksJ3s8MGZsSsTiQfBM7fFowHwYDVR0j
BBgwFoAUwTE2re67VBEeLAnyx9+7OVHrz9AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBUOGppQldteU4zUnhuakdvUGNZR3BWUnd1VkYzZE1Wd1JldjNGTnp0
aTEvMC9DMTMxMzZBREVFQkI1NDExMUUyQzA5RjJDN0RGQkIzOTUxRUJDRkQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MxMzEzNkFERUVCQjU0MTEx
RTJDMDlGMkM3REZCQjM5NTFFQkNGRDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwVDhqaUJXbXlOM1J4bmpHb1BjWUdwVlJ3dVZGM2RNVndSZXYzRk56dGkxLzAv
MzEzODM2MmUzMTM5MzUyZTM2MzcyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMy
MzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusNDMA0GCSqGSIb3DQEBCwUAA4IBAQCVSr4TkT7V
F0fqBfreaCSdo25YQlJQk3WKj0yI8qnie2yfDkTIZoaCGrfXWRd9pGu1GCL3wvLY
aoPPb1JjhCwPlOjDNh6PKbJK3T/eOkAJgksjMyYJG4wD+I3hjd2drT5GLtgKAD0k
0XSTjQ3HaQ9+JeMLMvKwNghte4344MSkVXoARxuhAilTsBmi9x6p6jr9vHkH8XcP
YOC3wjyhbmHL9ow9fWnaZ8fNQWPkt9fcnbNCzEzGq5kZQ3uZMYP9xwbul54rUzHD
+lMF2FoJBh4sLwwz9/dXYqFAzTHegNRDJDWLBcFgFVg+3y9qW7qeyQGYxFIeT6Aj
4fLKwfkns6C3
-----END CERTIFICATE-----
Generated at Wed Apr 8 13:37:38 2026 by rpki-client