Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa
File:                     3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa (raw, json)
Hash identifier:          duGg2RtgzvyfmzG3NS47KG2GkSFR1L+8H/Q5bCvKNCs=
Subject key identifier:   E9:13:E8:38:6E:64:93:B6:FE:32:D3:78:85:01:9E:0D:18:62:8D:54
Certificate issuer:       /CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
Certificate serial:       41595EDF5D704FF91F3A00E3750AEBE10D068CA7
Authority key identifier: 95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa
Signing time:             Mon 15 Jun 2026 22:17:16 +0000
ROA not before:           Mon 15 Jun 2026 22:12:16 +0000
ROA not after:            Mon 14 Jun 2027 22:17:16 +0000
asID:                     263047
IP address blocks:        187.61.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl
                          rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 07:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:59:5e:df:5d:70:4f:f9:1f:3a:00:e3:75:0a:eb:e1:0d:06:8c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=953D3B8F2A529D58CD089958DDC510BFFCC2B0B4
        Validity
            Not Before: Jun 15 22:12:16 2026 GMT
            Not After : Jun 14 22:17:16 2027 GMT
        Subject: CN=E913E8386E6493B6FE32D37885019E0D18628D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:18:f3:2b:70:7a:1e:57:d0:1e:db:ea:72:
                    c7:23:13:b3:bc:13:26:c4:78:7a:50:74:ab:70:d6:
                    9b:22:e2:11:3a:da:b7:a8:65:36:b1:80:d8:9b:4f:
                    58:e5:d0:76:8a:88:c8:15:e1:2d:02:06:51:67:55:
                    ae:7d:c1:ea:f9:d7:32:94:22:4b:4b:da:28:f0:46:
                    22:91:3b:04:fa:e5:26:05:95:7a:34:a2:80:9f:00:
                    0a:64:b5:e4:8f:07:f1:bf:0b:d7:b4:d0:90:9a:5f:
                    ab:35:24:04:9a:5d:8e:33:e1:98:23:c3:40:f2:28:
                    47:83:30:73:87:8f:da:75:3a:ab:5c:bf:b7:dc:3e:
                    45:63:aa:ef:f5:67:83:8b:2f:0e:a5:2b:29:81:a9:
                    f4:86:c5:1d:da:3b:0a:b7:d5:47:bd:d9:4d:0a:8c:
                    ea:33:21:3f:3b:1a:88:20:78:00:3f:19:da:a7:fe:
                    2c:f3:b7:e6:62:56:d5:e5:11:92:11:2d:18:78:fb:
                    ec:4d:5d:53:59:1f:b6:76:a4:35:98:2b:1f:4e:94:
                    4e:46:94:0d:1e:84:38:af:fc:43:4e:bc:28:50:fd:
                    2c:e2:7d:67:06:ab:af:de:7b:91:cb:1e:b9:36:0f:
                    c4:86:a4:0b:ad:03:83:09:51:bf:79:20:cd:88:4d:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:13:E8:38:6E:64:93:B6:FE:32:D3:78:85:01:9E:0D:18:62:8D:54
            X509v3 Authority Key Identifier:
                keyid:95:3D:3B:8F:2A:52:9D:58:CD:08:99:58:DD:C5:10:BF:FC:C2:B0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/953D3B8F2A529D58CD089958DDC510BFFCC2B0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tGNA9QKiEfttpXYbwWoPKkYvsS5SdgcMKd24SUwoV8G/0/3138372e36312e3131322e302f32312d3234203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:b4:b5:96:06:f1:b8:dd:a0:32:86:cc:c4:78:b7:44:4b:
         f8:b4:c6:e2:cc:ef:3c:54:00:5a:53:09:d8:1f:96:ed:26:46:
         02:62:e7:05:0c:d3:f4:24:3b:f7:00:15:45:20:a8:19:ec:e3:
         d2:a7:b3:aa:ae:4c:b7:60:a5:d3:56:4d:19:10:ed:5d:5d:8d:
         87:7e:84:39:14:03:f1:4e:7b:84:9c:33:c5:39:e7:d3:08:c0:
         28:87:e8:4c:bd:1d:eb:c3:2a:f0:cd:c9:8d:a9:f5:e6:dd:4f:
         d6:57:09:a3:7a:5c:9c:23:b2:8c:40:46:46:2b:ae:e5:91:98:
         35:60:c2:64:f7:0d:b5:71:2e:fe:82:dc:dd:8c:c5:98:cd:17:
         91:6e:8e:0e:6c:db:4e:9e:87:e0:aa:b0:0b:50:b4:43:54:38:
         9b:96:04:ec:c6:f1:ea:e8:b7:01:79:ea:88:03:11:f2:e7:ea:
         a3:0e:94:ff:9f:06:e7:02:c6:de:6a:dd:c3:0c:58:18:34:fd:
         d3:3c:b1:fb:04:83:11:b8:56:1a:73:b2:da:06:48:7a:bd:4b:
         f0:90:e3:33:50:58:06:1c:21:15:98:05:d3:0e:55:d8:d2:41:
         6e:f9:cf:2e:6f:7c:62:ef:00:dc:58:72:2d:52:da:5c:f4:a2:
         0c:f6:f0:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQVle311wT/kfOgDjdQrr4Q0GjKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzRDNCOEYyQTUyOUQ1OENEMDg5OTU4RERDNTEwQkZG
Q0MyQjBCNDAeFw0yNjA2MTUyMjEyMTZaFw0yNzA2MTQyMjE3MTZaMDMxMTAvBgNV
BAMTKEU5MTNFODM4NkU2NDkzQjZGRTMyRDM3ODg1MDE5RTBEMTg2MjhENTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKPxjzK3B6HlfQHtvqcscjE7O8
EybEeHpQdKtw1psi4hE62reoZTaxgNibT1jl0HaKiMgV4S0CBlFnVa59wer51zKU
IktL2ijwRiKROwT65SYFlXo0ooCfAApkteSPB/G/C9e00JCaX6s1JASaXY4z4Zgj
w0DyKEeDMHOHj9p1Oqtcv7fcPkVjqu/1Z4OLLw6lKymBqfSGxR3aOwq31Ue92U0K
jOozIT87GoggeAA/Gdqn/izzt+ZiVtXlEZIRLRh4++xNXVNZH7Z2pDWYKx9OlE5G
lA0ehDiv/ENOvChQ/SzifWcGq6/ee5HLHrk2D8SGpAutA4MJUb95IM2ITZXRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6RPoOG5kk7b+MtN4hQGeDRhijVQwHwYDVR0j
BBgwFoAUlT07jypSnVjNCJlY3cUQv/zCsLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnRHTkE5UUtpRWZ0dHBYWWJ3V29QS2tZdnNTNVNkZ2NNS2QyNFNVd29W
OEcvMC85NTNEM0I4RjJBNTI5RDU4Q0QwODk5NThEREM1MTBCRkZDQzJCMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk1M0QzQjhGMkE1MjlENThD
RDA4OTk1OEREQzUxMEJGRkNDMkIwQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ0R05BOVFLaUVmdHRwWFlid1dvUEtrWXZzUzVTZGdjTUtkMjRTVXdvVjhHLzAv
MzEzODM3MmUzNjMxMmUzMTMxMzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM2
MzMzMDM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO7PXAwDQYJKoZIhvcNAQELBQADggEBAK5wtLWW
BvG43aAyhszEeLdES/i0xuLM7zxUAFpTCdgflu0mRgJi5wUM0/QkO/cAFUUgqBns
49Kns6quTLdgpdNWTRkQ7V1djYd+hDkUA/FOe4ScM8U559MIwCiH6Ey9HevDKvDN
yY2p9ebdT9ZXCaN6XJwjsoxARkYrruWRmDVgwmT3DbVxLv6C3N2MxZjNF5Fujg5s
206eh+CqsAtQtENUOJuWBOzG8erotwF56ogDEfLn6qMOlP+fBucCxt5q3cMMWBg0
/dM8sfsEgxG4VhpzstoGSHq9S/CQ4zNQWAYcIRWYBdMOVdjSQW75zy5vfGLvANxY
ci1S2lz0ogz28Cs=
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:09:34 2026 by rpki-client