Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
File:                     3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa (raw, json)
Hash identifier:          5JX+lr3wZiffJ1dg7o5KldhoBfUtj+IwnLFdBHMs3Vw=
Subject key identifier:   83:B1:8A:61:A3:A7:2B:D1:53:77:28:B1:62:3E:22:CC:91:20:DF:FB
Certificate issuer:       /CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
Certificate serial:       72B6EEB32104513CA93BE897C2A1C4D1767BA2BF
Authority key identifier: D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa
Signing time:             Thu 18 Jun 2026 15:14:09 +0000
ROA not before:           Thu 18 Jun 2026 15:09:09 +0000
ROA not after:            Thu 17 Jun 2027 15:14:09 +0000
asID:                     266142
IP address blocks:        186.65.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl
                          rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b6:ee:b3:21:04:51:3c:a9:3b:e8:97:c2:a1:c4:d1:76:7b:a2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD
        Validity
            Not Before: Jun 18 15:09:09 2026 GMT
            Not After : Jun 17 15:14:09 2027 GMT
        Subject: CN=83B18A61A3A72BD1537728B1623E22CC9120DFFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:4f:9f:de:50:54:a9:73:6a:d4:3c:48:b7:
                    53:06:bf:c4:d1:82:bd:56:8e:a4:83:ca:da:58:5b:
                    38:2e:79:58:f7:4b:75:d2:df:a1:33:74:da:62:ff:
                    45:5e:00:65:62:c3:87:ff:78:8b:66:fe:05:b5:f6:
                    32:cb:b3:19:27:97:0c:0f:6f:9d:0b:9f:fe:f9:93:
                    dc:e7:89:b8:f4:7c:d7:52:bf:af:c9:de:02:78:d8:
                    72:7b:af:74:06:c5:9a:de:11:5a:72:d6:92:6f:05:
                    e4:13:27:79:79:3f:83:46:3b:0e:1b:02:04:21:29:
                    09:cd:3d:22:f1:2a:99:15:5a:be:06:84:e5:13:68:
                    8d:ac:a7:09:c2:4c:9a:75:99:bd:1d:52:6f:7e:ff:
                    87:4b:32:42:1c:46:14:b1:d1:c8:31:55:80:42:3c:
                    d7:aa:68:a6:26:22:2a:bf:f4:2c:0d:b6:6c:81:f0:
                    47:f5:58:bf:8e:c4:ab:f9:db:50:80:cf:67:af:d6:
                    b5:d0:5d:77:1a:44:f1:03:a0:ed:04:56:4c:5b:d1:
                    23:b0:74:e2:69:d9:fb:52:cb:1c:cd:5e:dd:ea:c6:
                    e0:fd:42:47:86:28:33:4c:6f:81:d9:a7:e6:f0:9f:
                    30:3d:d1:3a:6d:25:db:b7:ee:d5:4d:fa:d4:8f:8a:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:8A:61:A3:A7:2B:D1:53:77:28:B1:62:3E:22:CC:91:20:DF:FB
            X509v3 Authority Key Identifier:
                keyid:D7:FB:26:7F:FD:C9:AF:1A:63:7F:F4:78:B7:DB:2D:19:9B:1B:9C:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FB267FFDC9AF1A637FF478B7DB2D199B1B9CFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44BMbHDrygbUV6ZxM9mqp6p2HRnBKGafC45NFWYVUzWC/2/3138362e36352e3130342e302f32342d3234203d3e20323636313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:cb:d5:92:48:08:05:6a:6c:11:20:18:63:d8:88:3f:e8:
         ef:34:5a:ad:8f:06:82:a9:b1:97:72:9d:2e:b3:71:49:30:0d:
         71:8d:aa:ba:1f:29:f7:e1:2d:97:a7:3d:5b:ba:fa:7c:8d:4f:
         f4:ce:53:cc:dc:68:87:4a:c3:51:70:bb:d1:f8:a2:ec:da:48:
         bf:7a:6c:c4:33:a2:21:6b:0c:b7:55:82:68:e2:ef:86:0a:f4:
         0f:71:8d:de:f1:7f:ea:96:b7:56:bf:ce:43:64:5d:67:e5:bd:
         8c:f5:9f:fb:28:42:96:7e:b2:be:3e:d3:63:c1:3e:17:01:4d:
         65:f7:37:57:04:1e:d5:49:5d:55:14:6a:d1:df:79:b4:82:31:
         7c:b5:0a:61:29:c3:16:84:1f:10:0f:5b:48:39:f4:31:1b:94:
         7b:49:cc:41:07:56:61:a0:1d:28:9f:9e:4c:2f:04:a5:d3:b0:
         ff:38:e4:bb:06:62:79:0d:8a:1d:fc:56:04:bc:dc:3e:8d:74:
         3b:55:af:9a:88:d9:ae:6f:8c:11:48:d8:cd:0c:ab:7a:ad:ce:
         1d:9c:80:06:3d:fe:dc:70:bd:a0:ed:63:bb:62:ba:ad:fb:5c:
         a1:f9:91:b1:26:a2:fc:f6:2b:be:6a:ae:40:55:6a:0f:12:18:
         ba:05:a4:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcrbusyEEUTypO+iXwqHE0XZ7or8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGQjI2N0ZGREM5QUYxQTYzN0ZGNDc4QjdEQjJEMTk5
QjFCOUNGRDAeFw0yNjA2MTgxNTA5MDlaFw0yNzA2MTcxNTE0MDlaMDMxMTAvBgNV
BAMTKDgzQjE4QTYxQTNBNzJCRDE1Mzc3MjhCMTYyM0UyMkNDOTEyMERGRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLU+f3lBUqXNq1DxIt1MGv8TR
gr1WjqSDytpYWzgueVj3S3XS36EzdNpi/0VeAGViw4f/eItm/gW19jLLsxknlwwP
b50Ln/75k9znibj0fNdSv6/J3gJ42HJ7r3QGxZreEVpy1pJvBeQTJ3l5P4NGOw4b
AgQhKQnNPSLxKpkVWr4GhOUTaI2spwnCTJp1mb0dUm9+/4dLMkIcRhSx0cgxVYBC
PNeqaKYmIiq/9CwNtmyB8Ef1WL+OxKv521CAz2ev1rXQXXcaRPEDoO0EVkxb0SOw
dOJp2ftSyxzNXt3qxuD9QkeGKDNMb4HZp+bwnzA90TptJdu37tVN+tSPiu2DAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUg7GKYaOnK9FTdyixYj4izJEg3/swHwYDVR0j
BBgwFoAU1/smf/3Jrxpjf/R4t9stGZsbnP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRCTWJIRHJ5Z2JVVjZaeE05bXFwNnAySFJuQktHYWZDNDVORldZVlV6
V0MvMi9EN0ZCMjY3RkZEQzlBRjFBNjM3RkY0NzhCN0RCMkQxOTlCMUI5Q0ZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RkIyNjdGRkRDOUFGMUE2
MzdGRjQ3OEI3REIyRDE5OUIxQjlDRkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0Qk1iSERyeWdiVVY2WnhNOW1xcDZwMkhSbkJLR2FmQzQ1TkZXWVZVeldDLzIv
MzEzODM2MmUzNjM1MmUzMTMwMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMTM0MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6QWgwDQYJKoZIhvcNAQELBQADggEBAJgvy9WS
SAgFamwRIBhj2Ig/6O80Wq2PBoKpsZdynS6zcUkwDXGNqrofKffhLZenPVu6+nyN
T/TOU8zcaIdKw1Fwu9H4ouzaSL96bMQzoiFrDLdVgmji74YK9A9xjd7xf+qWt1a/
zkNkXWflvYz1n/soQpZ+sr4+02PBPhcBTWX3N1cEHtVJXVUUatHfebSCMXy1CmEp
wxaEHxAPW0g59DEblHtJzEEHVmGgHSifnkwvBKXTsP845LsGYnkNih38VgS83D6N
dDtVr5qI2a5vjBFI2M0Mq3qtzh2cgAY9/txwvaDtY7tiuq37XKH5kbEmovz2K75q
rkBVag8SGLoFpDg=
-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:02 2026 by rpki-client