Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa
File:                     3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa (raw, json)
Hash identifier:          6RufVOjRX9HbX1SWIijClFVumnoC1HpgfqscqiyTnM4=
Subject key identifier:   40:3F:C8:7C:78:4A:15:84:DF:19:3D:6B:44:F5:16:E6:49:0C:86:FF
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       142DBC42F35F4E604141D2088141E38167065AD6
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:32 +0000
ROA not before:           Mon 17 Aug 2026 17:43:32 +0000
ROA not after:            Mon 16 Aug 2027 17:48:32 +0000
asID:                     14868
IP address blocks:        200.195.128.0/18 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:2d:bc:42:f3:5f:4e:60:41:41:d2:08:81:41:e3:81:67:06:5a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:32 2026 GMT
            Not After : Aug 16 17:48:32 2027 GMT
        Subject: CN=403FC87C784A1584DF193D6B44F516E6490C86FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:ed:c7:9f:0a:0c:00:12:d9:a5:88:b1:02:
                    4b:6d:dd:6c:45:47:6f:eb:b9:2f:2b:5e:d8:cf:94:
                    5c:bd:aa:ef:1a:98:68:f8:fb:91:91:96:18:c4:75:
                    b2:da:7b:5b:00:9c:18:64:3c:81:36:d1:a6:62:44:
                    ec:1b:c8:ef:45:8b:87:31:39:ef:91:8b:18:ae:66:
                    f7:05:94:3c:39:61:5b:4e:38:0e:00:bb:a4:f6:9d:
                    97:3f:9b:1e:d9:fd:e1:42:4f:11:79:c6:c3:76:e1:
                    8b:f6:0f:50:af:43:09:7a:13:97:06:6d:d5:fe:99:
                    cf:ef:fa:1a:b2:03:d2:2e:4f:24:ce:3a:b0:97:d2:
                    ab:cd:23:35:28:ce:06:52:55:0a:fa:6b:93:82:a0:
                    54:73:0d:5e:1b:9a:87:96:58:ea:47:2b:ce:a5:db:
                    2f:42:c3:7f:11:cf:92:e4:54:27:a2:4c:02:10:e8:
                    d6:85:29:63:ed:4e:1b:2c:70:f6:7c:08:95:d9:13:
                    01:a7:10:f2:72:e2:ab:34:47:f6:66:8c:7f:6c:1d:
                    04:e7:0c:59:22:9f:45:75:e4:7a:78:ff:b9:bc:02:
                    25:43:46:6e:02:28:0b:1b:d5:e8:83:b2:8c:67:55:
                    bd:39:b6:2a:1c:d3:64:89:af:79:6a:de:19:04:97:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3F:C8:7C:78:4A:15:84:DF:19:3D:6B:44:F5:16:E6:49:0C:86:FF
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3132382e302f31382d3231203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.195.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:48:e0:a0:02:8d:cb:2d:89:14:5d:04:f5:9a:de:6c:f5:a0:
         a0:e9:e7:09:db:8b:0b:a8:1c:27:21:9b:fa:93:89:7e:35:35:
         8c:e3:cc:17:23:79:62:76:7f:96:68:ef:9a:97:c3:8a:33:e3:
         10:b1:d0:0d:99:89:5d:47:f8:b0:88:96:cc:0b:88:32:2f:9c:
         08:92:b7:1a:7c:70:97:74:d4:14:56:92:5b:63:7c:f9:55:1d:
         c2:16:d5:5f:1d:6d:91:8a:68:69:b6:48:8d:77:82:6e:6e:65:
         31:38:44:51:ae:2d:bf:b8:57:96:94:9b:13:96:2c:15:fe:a7:
         58:bd:b9:ad:b7:b6:78:37:ac:91:8f:e0:b9:f8:f7:89:39:a3:
         76:66:09:30:d6:41:7d:b6:7b:e6:cc:6c:ca:82:4f:94:df:6e:
         d5:1f:00:5c:1e:f6:81:d4:89:a1:6e:13:4f:65:5b:a4:68:88:
         7e:de:6f:7d:a7:07:70:d3:2f:8c:9f:f3:fd:fe:5f:3c:61:e1:
         3e:e2:c8:4f:ba:78:81:7a:ce:da:6c:ea:f8:57:74:45:55:99:
         b2:c7:2c:3f:cc:7c:51:00:0a:36:48:2f:33:0d:2f:5b:d2:a9:
         3d:54:d8:85:5b:f2:d9:ac:29:2c:b3:3f:49:2c:97:7e:db:c8:
         c6:f0:76:55
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFC28QvNfTmBBQdIIgUHjgWcGWtYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTkyMDY1NzUwOEQ5MDYwQzNDNkU5Mzk0Mjc4ODNBNDcx
RjREQTM0RjAeFw0yNjA4MTcxNzQzMzJaFw0yNzA4MTYxNzQ4MzJaMDMxMTAvBgNV
BAMTKDQwM0ZDODdDNzg0QTE1ODRERjE5M0Q2QjQ0RjUxNkU2NDkwQzg2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQv+3HnwoMABLZpYixAktt3WxF
R2/ruS8rXtjPlFy9qu8amGj4+5GRlhjEdbLae1sAnBhkPIE20aZiROwbyO9Fi4cx
Oe+RixiuZvcFlDw5YVtOOA4Au6T2nZc/mx7Z/eFCTxF5xsN24Yv2D1CvQwl6E5cG
bdX+mc/v+hqyA9IuTyTOOrCX0qvNIzUozgZSVQr6a5OCoFRzDV4bmoeWWOpHK86l
2y9Cw38Rz5LkVCeiTAIQ6NaFKWPtThsscPZ8CJXZEwGnEPJy4qs0R/ZmjH9sHQTn
DFkin0V15Hp4/7m8AiVDRm4CKAsb1eiDsoxnVb05tioc02SJr3lq3hkEl1jLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQD/IfHhKFYTfGT1rRPUW5kkMhv8wHwYDVR0j
BBgwFoAUmSBldQjZBgw8bpOUJ4g6Rx9No08wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtmTExzaE5BOEtCVjFtaUpNZ2p2OTV2Z2ZrdmE4V3pndktVNEFvaGM3
WWovMi85OTIwNjU3NTA4RDkwNjBDM0M2RTkzOTQyNzg4M0E0NzFGNERBMzRGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5MjA2NTc1MDhEOTA2MEMz
QzZFOTM5NDI3ODgzQTQ3MUY0REEzNEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRrZkxMc2hOQThLQlYxbWlKTWdqdjk1dmdma3ZhOFd6Z3ZLVTRBb2hjN1lqLzIv
MzIzMDMwMmUzMTM5MzUyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzEyMDNkM2UyMDMx
MzQzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAbIw4AwDQYJKoZIhvcNAQELBQADggEBAFRI4KAC
jcstiRRdBPWa3mz1oKDp5wnbiwuoHCchm/qTiX41NYzjzBcjeWJ2f5Zo75qXw4oz
4xCx0A2ZiV1H+LCIlswLiDIvnAiStxp8cJd01BRWkltjfPlVHcIW1V8dbZGKaGm2
SI13gm5uZTE4RFGuLb+4V5aUmxOWLBX+p1i9ua23tng3rJGP4Ln494k5o3ZmCTDW
QX22e+bMbMqCT5TfbtUfAFwe9oHUiaFuE09lW6RoiH7eb32nB3DTL4yf8/3+Xzxh
4T7iyE+6eIF6ztps6vhXdEVVmbLHLD/MfFEACjZILzMNL1vSqT1U2IVb8tmsKSyz
P0ksl37byMbwdlU=
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:35 2026 by rpki-client