Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
File:                     3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa (raw, json)
Hash identifier:          SdGjoyrQgbBg9y5vxF5roWXx3I0rNoxtxCBxC96Jsqs=
Subject key identifier:   08:FD:1D:BC:E6:F0:24:E1:04:5A:1D:E8:59:DE:6F:0D:AB:DC:B5:A7
Certificate issuer:       /CN=0667C1E975614C995A6FB737132548928E943717
Certificate serial:       6971AF748975CE3DEA0952B213C45BE2E36CB63E
Authority key identifier: 06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa
Signing time:             Sat 24 Oct 2026 13:46:07 +0000
ROA not before:           Sat 24 Oct 2026 13:41:07 +0000
ROA not after:            Sat 23 Oct 2027 13:46:07 +0000
asID:                     271680
IP address blocks:        187.111.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl
                          rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 01:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:71:af:74:89:75:ce:3d:ea:09:52:b2:13:c4:5b:e2:e3:6c:b6:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0667C1E975614C995A6FB737132548928E943717
        Validity
            Not Before: Oct 24 13:41:07 2026 GMT
            Not After : Oct 23 13:46:07 2027 GMT
        Subject: CN=08FD1DBCE6F024E1045A1DE859DE6F0DABDCB5A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:cc:a2:b6:29:93:a0:4c:1e:3f:f2:a8:ad:
                    29:6e:21:91:7e:79:90:3a:71:e0:b5:0a:62:c2:8f:
                    20:93:67:19:6a:6d:5b:08:3a:3a:38:95:29:d6:e3:
                    86:d7:78:d5:b7:b6:09:15:11:2c:25:09:a4:20:3f:
                    c5:38:23:fa:c7:ef:ff:ee:a0:9a:33:1a:7e:2a:67:
                    f0:a0:92:be:0a:27:48:7f:31:6a:ae:d6:21:57:f0:
                    50:24:05:b7:80:45:e4:bd:c6:0c:02:c0:f9:95:06:
                    13:ea:50:c4:9c:ec:54:bf:97:a9:77:64:e6:9b:6b:
                    26:19:9d:c2:f8:6b:33:cc:65:c6:9f:4f:2f:85:46:
                    dc:fb:7c:45:fc:97:e1:6d:d1:be:eb:52:a1:c2:98:
                    9b:27:e2:d6:5b:33:b6:e8:6d:36:a3:c3:d5:ae:61:
                    f8:1f:9b:7c:3c:d4:78:f7:fd:8f:29:e7:76:90:60:
                    97:e2:f0:53:59:46:cd:ea:32:68:ab:fd:49:96:cd:
                    e0:1c:68:01:86:c8:2d:b6:6b:22:99:1c:51:0e:f5:
                    c3:c7:83:38:ea:9d:72:c2:6d:33:b7:60:a6:60:e7:
                    8b:d4:cf:97:3b:d8:e6:10:bf:b4:8f:14:20:0b:8c:
                    7c:fc:5e:0d:c9:bb:8f:48:15:2c:b2:5b:a8:c4:e2:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:1D:BC:E6:F0:24:E1:04:5A:1D:E8:59:DE:6F:0D:AB:DC:B5:A7
            X509v3 Authority Key Identifier:
                keyid:06:67:C1:E9:75:61:4C:99:5A:6F:B7:37:13:25:48:92:8E:94:37:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/0667C1E975614C995A6FB737132548928E943717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0667C1E975614C995A6FB737132548928E943717.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/23mRnsJn1S1TBhqydYDNBpVxKA9d2PwzSR2MWLZnzca2/1/3138372e3131312e3131322e302f32322d3232203d3e20323731363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:a7:67:cf:96:65:6a:a4:95:7a:4d:89:5f:56:b9:d0:4f:90:
         9a:e5:a4:e3:ff:6c:31:d8:25:2d:dd:96:cb:40:de:93:77:86:
         d0:a7:3a:0c:ae:54:1e:d4:3b:26:fa:8e:71:1e:2b:76:7c:4e:
         3a:9c:73:7f:4b:b2:eb:4e:46:ef:4e:c4:b6:53:56:28:53:bd:
         69:bb:1a:b1:e3:d7:df:cb:34:7a:f0:fd:9b:b8:e5:a0:ad:4e:
         91:ea:1b:97:c5:12:e0:2f:a2:be:6d:38:17:36:49:ee:93:2f:
         ce:86:28:bb:aa:c9:05:c1:2e:f5:69:42:86:0b:14:fa:07:59:
         1a:d3:c0:61:b3:92:8e:b3:1b:53:14:22:d6:ce:9c:a5:62:e1:
         31:ba:69:98:c1:56:4c:d3:fe:c7:67:ae:56:7a:dc:18:26:4d:
         33:5a:a0:e9:ac:0e:87:94:f6:50:22:95:57:f3:a1:dd:fe:c5:
         d0:e7:fb:10:97:a9:56:78:9b:ce:c1:19:b3:1e:83:0b:fc:3f:
         19:55:34:3f:53:e3:53:aa:80:48:e4:b1:89:32:eb:52:e9:c6:
         a2:8b:c1:83:58:fa:e6:db:87:b9:80:6a:20:6c:9b:35:4c:82:
         99:b7:93:36:d2:d4:af:2a:6e:0b:f0:f2:ee:f0:79:ed:19:cc:
         69:4a:7a:91
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaXGvdIl1zj3qCVKyE8Rb4uNstj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY2N0MxRTk3NTYxNEM5OTVBNkZCNzM3MTMyNTQ4OTI4
RTk0MzcxNzAeFw0yNjEwMjQxMzQxMDdaFw0yNzEwMjMxMzQ2MDdaMDMxMTAvBgNV
BAMTKDA4RkQxREJDRTZGMDI0RTEwNDVBMURFODU5REU2RjBEQUJEQ0I1QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZLsyitimToEweP/KorSluIZF+
eZA6ceC1CmLCjyCTZxlqbVsIOjo4lSnW44bXeNW3tgkVESwlCaQgP8U4I/rH7//u
oJozGn4qZ/Cgkr4KJ0h/MWqu1iFX8FAkBbeAReS9xgwCwPmVBhPqUMSc7FS/l6l3
ZOabayYZncL4azPMZcafTy+FRtz7fEX8l+Ft0b7rUqHCmJsn4tZbM7bobTajw9Wu
Yfgfm3w81Hj3/Y8p53aQYJfi8FNZRs3qMmir/UmWzeAcaAGGyC22ayKZHFEO9cPH
gzjqnXLCbTO3YKZg54vUz5c72OYQv7SPFCALjHz8Xg3Ju49IFSyyW6jE4n/9AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCP0dvObwJOEEWh3oWd5vDavctacwHwYDVR0j
BBgwFoAUBmfB6XVhTJlab7c3EyVIko6UNxcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjNtUm5zSm4xUzFUQmhxeWRZRE5CcFZ4S0E5ZDJQd3pTUjJNV0xabnpj
YTIvMS8wNjY3QzFFOTc1NjE0Qzk5NUE2RkI3MzcxMzI1NDg5MjhFOTQzNzE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NjdDMUU5NzU2MTRDOTk1
QTZGQjczNzEzMjU0ODkyOEU5NDM3MTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIzbVJuc0puMVMxVEJocXlkWUROQnBWeEtBOWQyUHd6U1IyTVdMWm56Y2EyLzEv
MzEzODM3MmUzMTMxMzEyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzczMTM2MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArtvcDANBgkqhkiG9w0BAQsFAAOCAQEAmKdn
z5ZlaqSVek2JX1a50E+QmuWk4/9sMdglLd2Wy0Dek3eG0Kc6DK5UHtQ7JvqOcR4r
dnxOOpxzf0uy605G707EtlNWKFO9absasePX38s0evD9m7jloK1Okeobl8US4C+i
vm04FzZJ7pMvzoYou6rJBcEu9WlChgsU+gdZGtPAYbOSjrMbUxQi1s6cpWLhMbpp
mMFWTNP+x2euVnrcGCZNM1qg6awOh5T2UCKVV/Oh3f7F0Of7EJepVnibzsEZsx6D
C/w/GVU0P1PjU6qASOSxiTLrUunGoovBg1j65tuHuYBqIGybNUyCmbeTNtLUrypu
C/Dy7vB57RnMaUp6kQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:24:05 2026 by rpki-client