Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133322e302f32332d3233203d3e203631383238.roa
File:                     3137302e3135302e3133322e302f32332d3233203d3e203631383238.roa (raw, json)
Hash identifier:          hPpOUAT921e15yeHZm+E4NwaDwgRdYBMJ2HWk3lkQpI=
Subject key identifier:   5E:38:F1:D9:5D:38:D4:7B:24:BB:46:97:77:BC:6A:F1:31:F7:C9:AA
Certificate issuer:       /CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
Certificate serial:       5C5235D9EA237935CCB06120AFDA09D12F429674
Authority key identifier: 14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133322e302f32332d3233203d3e203631383238.roa
Signing time:             Tue 23 Jun 2026 22:43:44 +0000
ROA not before:           Tue 23 Jun 2026 22:38:44 +0000
ROA not after:            Tue 22 Jun 2027 22:43:44 +0000
asID:                     61828
IP address blocks:        170.150.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl
                          rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:52:35:d9:ea:23:79:35:cc:b0:61:20:af:da:09:d1:2f:42:96:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14E46DA999E68BFE84E5BEA28A4363235132F2AE
        Validity
            Not Before: Jun 23 22:38:44 2026 GMT
            Not After : Jun 22 22:43:44 2027 GMT
        Subject: CN=5E38F1D95D38D47B24BB469777BC6AF131F7C9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9e:71:d5:f5:2e:77:f2:dd:82:82:b6:a7:97:
                    a9:5b:e9:29:24:c7:34:94:de:a5:af:ff:af:8a:f6:
                    c4:25:6a:81:6a:f6:f7:17:a2:57:04:e6:0d:dc:89:
                    12:34:a7:5b:95:c1:02:c4:90:de:15:53:64:08:7c:
                    42:8d:a0:5e:5c:c7:a9:ca:62:9c:c4:90:35:92:1f:
                    c1:f5:74:6d:33:3d:06:38:9a:5d:2d:2e:f4:1b:9d:
                    c2:66:76:a6:49:87:a2:19:c9:27:09:4a:10:28:1c:
                    09:1a:f8:15:94:7c:e5:84:33:54:9f:01:8f:49:cb:
                    9e:6a:b2:78:48:b4:49:5b:24:fd:33:da:db:55:3d:
                    7d:71:86:ef:95:fc:59:de:fd:78:d0:14:11:2f:1d:
                    f3:ca:d2:84:8f:7d:b2:38:16:74:ba:3a:c5:ef:c4:
                    37:bd:cd:ff:2f:57:0c:d5:b2:d3:b2:6c:29:4a:ef:
                    39:77:f4:01:20:cb:a6:fa:54:12:0e:30:15:1f:72:
                    e5:1a:ed:ec:00:a6:13:8d:c0:f1:cb:28:ff:8e:4f:
                    a6:c3:11:15:75:97:3b:7e:47:57:6b:d9:27:ac:53:
                    9c:f1:6e:26:5c:c9:b0:b9:25:f7:95:32:8e:ef:88:
                    92:05:e6:b0:ef:80:10:89:d8:83:a6:c3:67:48:08:
                    5d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:F1:D9:5D:38:D4:7B:24:BB:46:97:77:BC:6A:F1:31:F7:C9:AA
            X509v3 Authority Key Identifier:
                keyid:14:E4:6D:A9:99:E6:8B:FE:84:E5:BE:A2:8A:43:63:23:51:32:F2:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/14E46DA999E68BFE84E5BEA28A4363235132F2AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14E46DA999E68BFE84E5BEA28A4363235132F2AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mbaejhaZMXQEUD9EPfRutBTq7RiGzLkuKVixBgD4Jpz/0/3137302e3135302e3133322e302f32332d3233203d3e203631383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:36:5a:90:0a:15:2f:f2:36:bb:27:0d:e9:3f:bd:4c:6c:fa:
         df:bd:84:33:66:fa:75:6a:02:cc:b0:fc:84:f9:c0:e7:f7:3a:
         2a:92:25:d7:dd:58:62:55:33:6d:cf:99:87:10:31:a5:25:55:
         2b:02:9c:b8:40:03:f8:51:ae:f7:5a:d2:25:89:76:e9:eb:41:
         4d:1e:6d:79:36:99:41:e9:d4:18:de:26:81:20:30:57:47:7c:
         04:86:e3:4a:fc:49:0b:ae:3c:77:5d:30:0e:c8:85:45:a1:ab:
         07:ea:a3:15:9b:1b:a7:94:b6:0b:11:3f:1b:99:de:52:fe:99:
         6a:5f:a3:6e:8b:6f:ce:39:48:85:a4:94:30:61:1d:6f:7d:67:
         67:d5:79:ec:9d:e4:87:3b:65:70:09:51:29:e1:2d:44:d6:15:
         84:2f:04:44:d4:11:77:e5:8b:1b:b3:9d:71:fa:0d:59:fb:a1:
         46:85:64:62:de:28:1a:6a:a1:7c:79:5b:15:56:16:0f:1f:2e:
         3d:67:6e:5e:da:75:b7:b2:5b:99:9a:5c:2c:44:ac:4a:ad:8f:
         7f:cc:0e:d0:35:31:bf:ba:51:c1:4e:24:ce:29:80:74:3b:3f:
         a8:f0:16:c6:fa:db:3f:b9:2b:a5:d0:4f:5c:a3:e9:bb:70:23:
         68:ff:77:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXFI12eojeTXMsGEgr9oJ0S9ClnQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRFNDZEQTk5OUU2OEJGRTg0RTVCRUEyOEE0MzYzMjM1
MTMyRjJBRTAeFw0yNjA2MjMyMjM4NDRaFw0yNzA2MjIyMjQzNDRaMDMxMTAvBgNV
BAMTKDVFMzhGMUQ5NUQzOEQ0N0IyNEJCNDY5Nzc3QkM2QUYxMzFGN0M5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnnHV9S538t2Cgranl6lb6Skk
xzSU3qWv/6+K9sQlaoFq9vcXolcE5g3ciRI0p1uVwQLEkN4VU2QIfEKNoF5cx6nK
YpzEkDWSH8H1dG0zPQY4ml0tLvQbncJmdqZJh6IZyScJShAoHAka+BWUfOWEM1Sf
AY9Jy55qsnhItElbJP0z2ttVPX1xhu+V/Fne/XjQFBEvHfPK0oSPfbI4FnS6OsXv
xDe9zf8vVwzVstOybClK7zl39AEgy6b6VBIOMBUfcuUa7ewAphONwPHLKP+OT6bD
ERV1lzt+R1dr2SesU5zxbiZcybC5JfeVMo7viJIF5rDvgBCJ2IOmw2dICF0nAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXjjx2V041Hsku0aXd7xq8TH3yaowHwYDVR0j
BBgwFoAUFORtqZnmi/6E5b6iikNjI1Ey8q4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm1iYWVqaGFaTVhRRVVEOUVQZlJ1dEJUcTdSaUd6TGt1S1ZpeEJnRDRK
cHovMC8xNEU0NkRBOTk5RTY4QkZFODRFNUJFQTI4QTQzNjMyMzUxMzJGMkFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0RTQ2REE5OTlFNjhCRkU4
NEU1QkVBMjhBNDM2MzIzNTEzMkYyQUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJtYmFlamhhWk1YUUVVRDlFUGZSdXRCVHE3UmlHekxrdUtWaXhCZ0Q0SnB6LzAv
MzEzNzMwMmUzMTM1MzAyZTMxMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzODMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGqloQwDQYJKoZIhvcNAQELBQADggEBAIc2WpAK
FS/yNrsnDek/vUxs+t+9hDNm+nVqAsyw/IT5wOf3OiqSJdfdWGJVM23PmYcQMaUl
VSsCnLhAA/hRrvda0iWJdunrQU0ebXk2mUHp1BjeJoEgMFdHfASG40r8SQuuPHdd
MA7IhUWhqwfqoxWbG6eUtgsRPxuZ3lL+mWpfo26Lb845SIWklDBhHW99Z2fVeeyd
5Ic7ZXAJUSnhLUTWFYQvBETUEXflixuznXH6DVn7oUaFZGLeKBpqoXx5WxVWFg8f
Lj1nbl7adbeyW5maXCxErEqtj3/MDtA1Mb+6UcFOJM4pgHQ7P6jwFsb62z+5K6XQ
T1yj6btwI2j/dx4=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:00 2026 by rpki-client