Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136302e302f32302d3230203d3e20323632393839.roa
File:                     3139302e3130332e3136302e302f32302d3230203d3e20323632393839.roa (raw, json)
Hash identifier:          duxgdf6ZCYsznY3aRrPvdY6cUTy7OY0mLhG9JMH0vKM=
Subject key identifier:   F0:88:0A:FC:EC:D9:57:41:B1:C1:10:50:92:B3:2D:F9:2F:AD:DF:B9
Certificate issuer:       /CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
Certificate serial:       20FAC8E992313400B24A911CD146FA0D4DFF4540
Authority key identifier: CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136302e302f32302d3230203d3e20323632393839.roa
Signing time:             Tue 04 Aug 2026 17:20:09 +0000
ROA not before:           Tue 04 Aug 2026 17:15:09 +0000
ROA not after:            Tue 03 Aug 2027 17:20:09 +0000
asID:                     262989
IP address blocks:        190.103.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl
                          rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fa:c8:e9:92:31:34:00:b2:4a:91:1c:d1:46:fa:0d:4d:ff:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE0E887EF61F71B4438C48E64615124DF0463AF5
        Validity
            Not Before: Aug  4 17:15:09 2026 GMT
            Not After : Aug  3 17:20:09 2027 GMT
        Subject: CN=F0880AFCECD95741B1C1105092B32DF92FADDFB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:38:47:bc:85:89:b7:27:07:f7:be:40:e4:
                    6d:d6:13:ce:23:34:dc:d5:c9:22:e6:5a:d5:7c:ab:
                    d7:f9:ff:fa:c2:0c:0d:5d:df:11:94:38:8f:b7:28:
                    48:b7:17:ae:9b:89:22:5a:7c:48:db:ee:d4:fd:95:
                    a0:e3:56:bf:82:af:42:f6:ba:9b:5b:a6:6b:88:1f:
                    bf:8d:95:3a:b0:3a:3c:1c:b7:53:4a:fa:13:fe:6c:
                    49:7f:fa:f4:9a:2c:7f:14:54:24:0c:c6:0e:f8:86:
                    4f:24:70:cd:fb:c9:ce:b9:e4:ca:b3:07:91:1d:b0:
                    7e:40:2f:c9:5e:3e:1b:d9:d2:52:df:1c:d7:4e:10:
                    8d:3e:92:ea:0b:42:23:be:82:30:f4:10:82:db:b5:
                    ea:6b:0d:3c:6a:e9:5f:96:84:8a:f3:4e:dd:9b:3f:
                    d3:f6:a9:ac:a6:d7:bf:3e:38:bb:33:2c:7f:08:b1:
                    62:11:fd:61:d3:e8:7a:ad:77:ab:b8:ab:50:74:b2:
                    6e:4b:aa:d2:82:df:22:32:16:03:98:d8:5a:b7:73:
                    d1:52:17:6e:95:a9:df:dc:f4:5e:7e:f0:66:14:76:
                    d3:8f:fc:6d:6c:15:85:70:ad:08:b9:eb:be:23:09:
                    d0:69:c0:6d:f9:ee:20:55:61:13:31:06:80:dc:0d:
                    a8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:88:0A:FC:EC:D9:57:41:B1:C1:10:50:92:B3:2D:F9:2F:AD:DF:B9
            X509v3 Authority Key Identifier:
                keyid:CE:0E:88:7E:F6:1F:71:B4:43:8C:48:E6:46:15:12:4D:F0:46:3A:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/CE0E887EF61F71B4438C48E64615124DF0463AF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE0E887EF61F71B4438C48E64615124DF0463AF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/0/3139302e3130332e3136302e302f32302d3230203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:61:68:28:4f:d4:ae:a6:ba:91:a7:14:9f:36:77:0f:96:
         3a:b1:09:c0:2b:08:c0:3c:33:ee:15:a6:ed:b2:0f:26:37:bd:
         85:82:23:9d:de:49:35:12:3d:76:99:4e:f1:c9:8b:8c:d1:4c:
         46:fe:0f:83:25:6c:81:e8:ba:cb:fd:1b:87:84:ca:95:38:8a:
         f9:77:7e:eb:5b:98:18:cf:ad:52:dc:55:a8:96:86:85:a7:d6:
         e3:a2:1d:2f:9f:c8:8a:7e:41:b3:45:43:4f:0a:56:14:10:16:
         45:5e:02:19:44:b6:ab:d2:25:f4:ec:d5:87:a2:db:8b:3b:4b:
         2e:43:32:fc:66:9c:43:86:c1:a5:4d:a9:53:92:3e:35:df:9c:
         7c:1f:68:ea:aa:f3:a8:eb:e7:a1:d2:e0:9a:c8:1b:73:c9:ef:
         37:12:57:93:0b:64:ac:55:86:9d:a1:76:f1:a5:f2:17:14:1b:
         32:c4:64:28:d6:ba:b6:ce:4a:27:c1:9a:0f:8d:75:0b:8d:93:
         98:39:9d:53:47:56:34:3b:8a:3f:2d:45:24:85:3a:fd:f1:66:
         02:78:51:67:43:24:0e:e2:71:8c:d8:6d:34:4f:4b:2f:8e:b8:
         ef:3c:1b:9b:51:36:8a:88:b2:ab:96:62:f9:54:84:90:f3:17:
         2d:b9:4c:8a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIPrI6ZIxNACySpEc0Ub6DU3/RUAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UwRTg4N0VGNjFGNzFCNDQzOEM0OEU2NDYxNTEyNERG
MDQ2M0FGNTAeFw0yNjA4MDQxNzE1MDlaFw0yNzA4MDMxNzIwMDlaMDMxMTAvBgNV
BAMTKEYwODgwQUZDRUNEOTU3NDFCMUMxMTA1MDkyQjMyREY5MkZBRERGQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUHThHvIWJtycH975A5G3WE84j
NNzVySLmWtV8q9f5//rCDA1d3xGUOI+3KEi3F66biSJafEjb7tT9laDjVr+Cr0L2
uptbpmuIH7+NlTqwOjwct1NK+hP+bEl/+vSaLH8UVCQMxg74hk8kcM37yc655Mqz
B5EdsH5AL8lePhvZ0lLfHNdOEI0+kuoLQiO+gjD0EILbteprDTxq6V+WhIrzTt2b
P9P2qaym178+OLszLH8IsWIR/WHT6Hqtd6u4q1B0sm5LqtKC3yIyFgOY2Fq3c9FS
F26Vqd/c9F5+8GYUdtOP/G1sFYVwrQi5674jCdBpwG357iBVYRMxBoDcDagLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8IgK/OzZV0GxwRBQkrMt+S+t37kwHwYDVR0j
BBgwFoAUzg6IfvYfcbRDjEjmRhUSTfBGOvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMC9DRTBFODg3RUY2MUY3MUI0NDM4QzQ4RTY0NjE1MTI0REYwNDYzQUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NFMEU4ODdFRjYxRjcxQjQ0
MzhDNDhFNjQ2MTUxMjRERjA0NjNBRjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzAv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBL5noDANBgkqhkiG9w0BAQsFAAOCAQEAbRBh
aChP1K6mupGnFJ82dw+WOrEJwCsIwDwz7hWm7bIPJje9hYIjnd5JNRI9dplO8cmL
jNFMRv4PgyVsgei6y/0bh4TKlTiK+Xd+61uYGM+tUtxVqJaGhafW46IdL5/Iin5B
s0VDTwpWFBAWRV4CGUS2q9Il9OzVh6LbiztLLkMy/GacQ4bBpU2pU5I+Nd+cfB9o
6qrzqOvnodLgmsgbc8nvNxJXkwtkrFWGnaF28aXyFxQbMsRkKNa6ts5KJ8GaD411
C42TmDmdU0dWNDuKPy1FJIU6/fFmAnhRZ0MkDuJxjNhtNE9LL4647zwbm1E2ioiy
q5Zi+VSEkPMXLblMig==
-----END CERTIFICATE-----
Generated at Mon Aug 24 04:34:45 2026 by rpki-client