Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3133382e3138362e3139322e302f32322d3332203d3e20323632353733.roa
File:                     3133382e3138362e3139322e302f32322d3332203d3e20323632353733.roa (raw, json)
Hash identifier:          s/2eVfvO+dRcasPJZs6iwgHUO7PTn25y4I7ZyIw2us4=
Subject key identifier:   38:DB:A1:A0:92:F1:D7:77:8F:D3:F7:C1:2C:82:5B:61:C0:01:82:26
Certificate issuer:       /CN=EF8E653F55597910A76FC271E222514D7CDB9D90
Certificate serial:       731C99A4E1A923432543DC58C702088EFDA09190
Authority key identifier: EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3133382e3138362e3139322e302f32322d3332203d3e20323632353733.roa
Signing time:             Mon 20 Jul 2026 13:48:34 +0000
ROA not before:           Mon 20 Jul 2026 13:43:34 +0000
ROA not after:            Mon 19 Jul 2027 13:48:34 +0000
asID:                     262573
IP address blocks:        138.186.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl
                          rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Jul 2026 10:31:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:1c:99:a4:e1:a9:23:43:25:43:dc:58:c7:02:08:8e:fd:a0:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF8E653F55597910A76FC271E222514D7CDB9D90
        Validity
            Not Before: Jul 20 13:43:34 2026 GMT
            Not After : Jul 19 13:48:34 2027 GMT
        Subject: CN=38DBA1A092F1D7778FD3F7C12C825B61C0018226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:32:95:8b:a7:f9:97:5b:27:dd:87:b7:a8:
                    cc:bd:11:2c:14:4c:f1:7b:44:ee:80:9b:41:be:b0:
                    1a:2f:a3:4b:f4:ea:ed:d7:bf:e0:a8:50:7f:db:b0:
                    73:7f:0c:e7:88:36:62:56:b9:f1:1f:f1:60:33:ea:
                    b9:f9:9f:38:41:42:36:0a:64:a1:03:ae:51:e8:85:
                    27:9c:10:48:c4:18:81:e6:5d:6b:14:49:c6:99:d3:
                    27:ee:51:f4:42:d0:d2:11:06:7b:8a:47:76:7c:d1:
                    dd:da:11:65:f1:64:6b:3b:b4:f4:ce:28:ca:1a:a2:
                    23:5e:66:a2:d4:fa:7e:25:42:75:e6:fa:eb:06:c5:
                    a8:58:18:c2:87:f7:2c:fa:a6:0f:1d:c0:03:c1:69:
                    bf:5a:b7:f3:be:54:f2:5f:76:ee:6a:4f:55:29:bb:
                    02:34:a0:80:6d:35:94:8c:75:7c:f7:cf:da:72:96:
                    94:41:fe:00:7b:1b:2d:75:4c:ef:86:84:aa:aa:32:
                    aa:79:c1:08:f9:33:6a:20:bd:54:8e:6f:af:9f:f2:
                    b5:2f:0e:e5:10:23:00:58:ca:62:c1:af:17:81:94:
                    c5:17:93:5c:2d:fa:23:49:64:26:e1:86:e5:f2:4f:
                    fd:8c:56:e7:d5:ba:dd:e5:25:08:fa:db:e3:05:d3:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:A1:A0:92:F1:D7:77:8F:D3:F7:C1:2C:82:5B:61:C0:01:82:26
            X509v3 Authority Key Identifier:
                keyid:EF:8E:65:3F:55:59:79:10:A7:6F:C2:71:E2:22:51:4D:7C:DB:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/EF8E653F55597910A76FC271E222514D7CDB9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF8E653F55597910A76FC271E222514D7CDB9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56WmRKvGq1fV24RjgnVrEPe7jh2Wj6ynYi1E2GrCZxrk/0/3133382e3138362e3139322e302f32322d3332203d3e20323632353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:d0:8c:57:d2:a5:30:c5:5c:16:4c:5d:75:81:c5:a3:b5:
         00:07:5c:79:f8:1f:85:da:cf:92:de:3e:b4:7f:62:90:08:7c:
         2d:10:90:36:9c:58:ff:64:69:26:41:75:e9:4f:27:5c:fb:b9:
         76:37:4f:2c:72:27:8a:64:87:3b:a3:85:ba:fb:18:ed:18:05:
         0f:d6:b1:e1:36:01:ee:ba:17:29:5e:5f:3d:20:d9:8b:6c:c5:
         55:ee:a6:02:63:39:ca:04:0d:50:fb:d7:76:fa:e6:1e:9d:19:
         df:6d:1d:3b:16:29:c1:d4:c2:d5:f9:15:8a:db:fd:7c:15:0a:
         12:96:ec:83:9a:b6:3a:d3:5f:b9:15:91:e5:13:0a:f0:f2:b1:
         86:9d:5f:ed:29:1c:60:ea:8c:b4:b8:90:9f:f6:2f:01:12:70:
         b8:65:ec:9c:a8:89:d9:72:3e:8f:5b:36:6f:a2:02:1d:cf:f4:
         00:dd:0b:d2:45:2e:16:80:7b:7f:59:18:7b:2b:1b:b0:68:d6:
         85:bc:2e:95:80:db:f4:1a:a7:98:31:34:66:6b:ab:74:3c:2d:
         b2:73:57:50:da:de:b5:da:36:13:84:06:87:4b:6c:e4:57:9f:
         77:f5:dc:3e:54:fc:58:26:dc:4a:a0:ba:3e:c5:8d:37:48:82:
         14:b6:09:b8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcxyZpOGpI0MlQ9xYxwIIjv2gkZAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY4RTY1M0Y1NTU5NzkxMEE3NkZDMjcxRTIyMjUxNEQ3
Q0RCOUQ5MDAeFw0yNjA3MjAxMzQzMzRaFw0yNzA3MTkxMzQ4MzRaMDMxMTAvBgNV
BAMTKDM4REJBMUEwOTJGMUQ3Nzc4RkQzRjdDMTJDODI1QjYxQzAwMTgyMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NDKVi6f5l1sn3Ye3qMy9ESwU
TPF7RO6Am0G+sBovo0v06u3Xv+CoUH/bsHN/DOeINmJWufEf8WAz6rn5nzhBQjYK
ZKEDrlHohSecEEjEGIHmXWsUScaZ0yfuUfRC0NIRBnuKR3Z80d3aEWXxZGs7tPTO
KMoaoiNeZqLU+n4lQnXm+usGxahYGMKH9yz6pg8dwAPBab9at/O+VPJfdu5qT1Up
uwI0oIBtNZSMdXz3z9pylpRB/gB7Gy11TO+GhKqqMqp5wQj5M2ogvVSOb6+f8rUv
DuUQIwBYymLBrxeBlMUXk1wt+iNJZCbhhuXyT/2MVufVut3lJQj62+MF030pAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUONuhoJLx13eP0/fBLIJbYcABgiYwHwYDVR0j
BBgwFoAU745lP1VZeRCnb8Jx4iJRTXzbnZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZXbVJLdkdxMWZWMjRSamduVnJFUGU3amgyV2o2eW5ZaTFFMkdyQ1p4
cmsvMC9FRjhFNjUzRjU1NTk3OTEwQTc2RkMyNzFFMjIyNTE0RDdDREI5RDkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGOEU2NTNGNTU1OTc5MTBB
NzZGQzI3MUUyMjI1MTREN0NEQjlEOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2V21SS3ZHcTFmVjI0UmpnblZyRVBlN2poMldqNnluWWkxRTJHckNaeHJrLzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzkzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMjM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq6wDANBgkqhkiG9w0BAQsFAAOCAQEAdczQ
jFfSpTDFXBZMXXWBxaO1AAdcefgfhdrPkt4+tH9ikAh8LRCQNpxY/2RpJkF16U8n
XPu5djdPLHInimSHO6OFuvsY7RgFD9ax4TYB7roXKV5fPSDZi2zFVe6mAmM5ygQN
UPvXdvrmHp0Z320dOxYpwdTC1fkVitv9fBUKEpbsg5q2OtNfuRWR5RMK8PKxhp1f
7SkcYOqMtLiQn/YvARJwuGXsnKiJ2XI+j1s2b6ICHc/0AN0L0kUuFoB7f1kYeysb
sGjWhbwulYDb9BqnmDE0ZmurdDwtsnNXUNretdo2E4QGh0ts5Fefd/XcPlT8WCbc
SqC6PsWNN0iCFLYJuA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:48 2026 by rpki-client