Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32342d3234203d3e20323633303032.roa
File:                     3138362e3232372e3131322e302f32342d3234203d3e20323633303032.roa (raw, json)
Hash identifier:          FV2CjL72xFD+twu2wEfxZyYrtk7Rfn9Hc/QTYtQgEX4=
Subject key identifier:   98:8A:CD:A4:C2:E8:0B:F3:07:73:9A:74:94:CE:95:0D:5B:AE:95:98
Certificate issuer:       /CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
Certificate serial:       299C852474597E372DF5CC08EC2913A2C4EA611D
Authority key identifier: 69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32342d3234203d3e20323633303032.roa
Signing time:             Mon 03 Aug 2026 14:22:16 +0000
ROA not before:           Mon 03 Aug 2026 14:17:16 +0000
ROA not after:            Mon 02 Aug 2027 14:22:16 +0000
asID:                     263002
IP address blocks:        186.227.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl
                          rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 23:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9c:85:24:74:59:7e:37:2d:f5:cc:08:ec:29:13:a2:c4:ea:61:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69A84F767171DEAFFA39FA0F9F5E45777D776E7F
        Validity
            Not Before: Aug  3 14:17:16 2026 GMT
            Not After : Aug  2 14:22:16 2027 GMT
        Subject: CN=988ACDA4C2E80BF307739A7494CE950D5BAE9598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:9b:65:ed:1d:5d:e8:8c:09:ec:5c:3b:19:
                    6f:19:76:80:35:94:bf:61:46:87:2f:f7:59:92:7d:
                    26:a3:bc:e2:df:5a:80:ad:90:42:e8:4d:80:ed:2c:
                    0f:f6:9f:33:d8:2e:2e:30:b7:97:ab:4f:5e:97:4b:
                    dc:b3:33:01:48:fa:2e:9d:f9:f4:90:61:66:69:39:
                    54:67:b3:bb:d8:7a:01:94:97:a1:d8:e0:d1:68:3a:
                    04:1c:e4:60:3b:50:42:db:e1:af:a9:df:9a:4e:ab:
                    e4:64:ee:86:a0:17:0f:25:21:73:44:f4:02:a4:71:
                    d0:52:2e:7a:ea:b2:f4:36:a6:1b:ed:ac:3d:b2:d7:
                    81:35:ca:98:f8:c9:72:74:e3:8a:11:e4:f7:f7:80:
                    01:67:87:5a:6b:c7:c2:ef:46:b8:e0:c0:98:2a:60:
                    80:da:d8:ef:c3:0e:ac:50:01:5a:6f:3d:61:64:b9:
                    ff:82:85:24:a1:bc:d6:93:f8:e7:a4:e3:c6:65:9c:
                    7e:72:e1:02:86:9c:a6:f9:9e:a5:23:77:1f:c0:f0:
                    f9:fe:e9:70:a2:48:c6:eb:ce:4c:b8:ba:00:98:7c:
                    e9:39:1f:19:8a:5f:76:f9:0b:10:79:7a:a7:f5:74:
                    b7:7d:ae:45:c2:ad:d0:d6:a9:17:61:44:51:24:3e:
                    1d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8A:CD:A4:C2:E8:0B:F3:07:73:9A:74:94:CE:95:0D:5B:AE:95:98
            X509v3 Authority Key Identifier:
                keyid:69:A8:4F:76:71:71:DE:AF:FA:39:FA:0F:9F:5E:45:77:7D:77:6E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69A84F767171DEAFFA39FA0F9F5E45777D776E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/54upKAdE3HBMPn7vCbfmUC67zurVFi16TeACxjqexA4K/0/3138362e3232372e3131322e302f32342d3234203d3e20323633303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:21:22:73:64:c4:e3:c5:30:17:df:84:0e:7f:4b:da:b7:70:
         72:56:62:54:c3:73:b7:fa:22:f8:67:cb:f4:2c:e1:10:d0:53:
         15:82:ce:55:12:8a:92:e7:c1:f8:65:57:0c:ec:e3:81:5e:0d:
         65:2c:3e:ad:2b:08:f0:f9:98:9e:7e:8f:04:51:0e:6e:91:10:
         cf:09:e8:4c:b1:b9:32:ce:e1:fb:dd:47:a2:ac:d3:a3:93:cc:
         72:0a:98:0a:8e:cd:be:12:d9:80:e5:7e:a1:04:61:a9:12:d8:
         06:f9:51:f8:25:85:2d:60:23:a5:55:43:67:d8:84:fc:22:74:
         d8:be:b6:4c:cb:e3:3c:6b:7f:7f:09:47:df:76:b2:23:21:9b:
         9d:d8:ed:8b:00:0c:a0:01:8c:6e:70:2c:f5:08:ed:89:4e:e0:
         1b:28:d1:9d:28:0d:2a:fd:cf:59:70:27:68:27:36:f0:3d:5c:
         4a:a0:6b:26:54:30:c7:be:b4:0e:84:60:ee:1e:77:58:56:5c:
         72:02:3e:61:59:9f:88:39:dd:6e:16:c4:09:61:5c:8d:23:08:
         bf:61:1a:f4:07:b0:c3:06:ed:8e:af:b3:e6:bc:09:91:34:ad:
         be:2d:f7:2f:c0:76:4f:0f:a3:40:d1:a7:87:52:76:79:25:75:
         03:55:6e:07
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKZyFJHRZfjct9cwI7CkTosTqYR0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlBODRGNzY3MTcxREVBRkZBMzlGQTBGOUY1RTQ1Nzc3
RDc3NkU3RjAeFw0yNjA4MDMxNDE3MTZaFw0yNzA4MDIxNDIyMTZaMDMxMTAvBgNV
BAMTKDk4OEFDREE0QzJFODBCRjMwNzczOUE3NDk0Q0U5NTBENUJBRTk1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7z5tl7R1d6IwJ7Fw7GW8ZdoA1
lL9hRocv91mSfSajvOLfWoCtkELoTYDtLA/2nzPYLi4wt5erT16XS9yzMwFI+i6d
+fSQYWZpOVRns7vYegGUl6HY4NFoOgQc5GA7UELb4a+p35pOq+Rk7oagFw8lIXNE
9AKkcdBSLnrqsvQ2phvtrD2y14E1ypj4yXJ044oR5Pf3gAFnh1prx8LvRrjgwJgq
YIDa2O/DDqxQAVpvPWFkuf+ChSShvNaT+Oek48ZlnH5y4QKGnKb5nqUjdx/A8Pn+
6XCiSMbrzky4ugCYfOk5HxmKX3b5CxB5eqf1dLd9rkXCrdDWqRdhRFEkPh3vAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUmIrNpMLoC/MHc5p0lM6VDVuulZgwHwYDVR0j
BBgwFoAUaahPdnFx3q/6OfoPn15Fd313bn8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTR1cEtBZEUzSEJNUG43dkNiZm1VQzY3enVyVkZpMTZUZUFDeGpxZXhB
NEsvMC82OUE4NEY3NjcxNzFERUFGRkEzOUZBMEY5RjVFNDU3NzdENzc2RTdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5QTg0Rjc2NzE3MURFQUZG
QTM5RkEwRjlGNUU0NTc3N0Q3NzZFN0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU0dXBLQWRFM0hCTVBuN3ZDYmZtVUM2N3p1clZGaTE2VGVBQ3hqcWV4QTRLLzAv
MzEzODM2MmUzMjMyMzcyZTMxMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMwMzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrjcDANBgkqhkiG9w0BAQsFAAOCAQEAeSEi
c2TE48UwF9+EDn9L2rdwclZiVMNzt/oi+GfL9CzhENBTFYLOVRKKkufB+GVXDOzj
gV4NZSw+rSsI8PmYnn6PBFEObpEQzwnoTLG5Ms7h+91HoqzTo5PMcgqYCo7NvhLZ
gOV+oQRhqRLYBvlR+CWFLWAjpVVDZ9iE/CJ02L62TMvjPGt/fwlH33ayIyGbndjt
iwAMoAGMbnAs9QjtiU7gGyjRnSgNKv3PWXAnaCc28D1cSqBrJlQwx760DoRg7h53
WFZccgI+YVmfiDndbhbECWFcjSMIv2Ea9Aewwwbtjq+z5rwJkTStvi33L8B2Tw+j
QNGnh1J2eSV1A1VuBw==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:55:15 2026 by rpki-client