Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa
File:                     3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa (raw, json)
Hash identifier:          xnujlnYIBkdKbiZMsy9eTuuFDtmn5t5JLEWXElMM3Dc=
Subject key identifier:   90:4E:6F:4A:26:5C:5A:36:B6:5B:3A:EE:D3:C7:1A:24:E2:F9:7D:86
Certificate issuer:       /CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
Certificate serial:       793A1E067F49AF2834E5E4F5A86B2413172314A5
Authority key identifier: C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa
Signing time:             Tue 11 Aug 2026 14:25:12 +0000
ROA not before:           Tue 11 Aug 2026 14:20:12 +0000
ROA not after:            Tue 10 Aug 2027 14:25:12 +0000
asID:                     264323
IP address blocks:        138.121.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl
                          rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3a:1e:06:7f:49:af:28:34:e5:e4:f5:a8:6b:24:13:17:23:14:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811
        Validity
            Not Before: Aug 11 14:20:12 2026 GMT
            Not After : Aug 10 14:25:12 2027 GMT
        Subject: CN=904E6F4A265C5A36B65B3AEED3C71A24E2F97D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:5f:53:a0:e7:6c:16:c8:31:58:17:fd:0e:
                    5f:8e:61:07:ff:a2:3c:ec:d1:4d:b1:b8:66:b5:a6:
                    d4:c2:bc:36:25:ff:c3:7a:15:3d:d9:b1:21:83:06:
                    36:df:d1:c9:f3:c3:ad:31:91:66:03:75:e1:49:9d:
                    ea:99:ea:5f:af:c0:fb:9c:d8:a4:5c:81:4d:bb:7c:
                    21:98:79:03:eb:1b:39:c4:64:0b:e7:70:28:93:68:
                    a9:9c:a9:fb:de:84:47:55:88:35:2d:b2:e0:61:e8:
                    00:3a:65:6c:1c:93:0a:6c:da:9d:c6:2d:60:18:61:
                    16:e5:7c:27:ea:5f:af:10:72:42:b6:00:eb:bc:a1:
                    27:2e:39:7d:f5:c0:63:73:9e:1c:b8:84:26:c6:5e:
                    08:03:27:b8:41:ee:3c:0f:2a:88:a8:3b:4b:d6:cf:
                    86:67:80:ed:9c:5a:49:31:00:b1:1f:b9:5f:0d:43:
                    47:2c:b8:4f:2e:1c:b2:e6:0d:49:65:eb:99:2f:aa:
                    cc:13:69:e2:f8:d7:85:bc:e3:95:8a:56:25:dc:fa:
                    a0:bc:b4:47:8c:86:dc:a2:9d:ad:60:90:df:48:b0:
                    70:61:73:78:be:9b:0d:bd:e5:ef:94:0c:c7:d1:3c:
                    bd:61:ac:2f:d7:86:d4:d0:58:97:35:80:a4:1c:24:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:6F:4A:26:5C:5A:36:B6:5B:3A:EE:D3:C7:1A:24:E2:F9:7D:86
            X509v3 Authority Key Identifier:
                keyid:C4:F9:F7:2E:86:B4:6C:3F:C5:4C:99:39:A9:FF:0C:2C:22:0F:D8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C4F9F72E86B46C3FC54C9939A9FF0C2C220FD811.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/3133382e3132312e3234372e302f32342d3234203d3e20323634333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:e2:c8:4e:17:21:d9:88:da:4c:f0:22:db:20:0d:86:b8:a6:
         6a:56:13:40:6e:05:bb:2c:b6:7c:28:f6:7a:59:5b:fc:14:30:
         e5:f3:00:e5:8a:79:9e:33:8a:19:13:59:45:69:6b:d4:b5:c7:
         03:e0:2e:70:ea:59:b3:65:7b:53:1a:a4:fb:63:55:5e:94:13:
         6e:e9:84:dc:1a:f0:45:b1:a5:57:dc:ba:02:a6:29:52:06:31:
         14:02:18:eb:91:fe:ac:c5:d6:57:57:f5:c2:b8:a5:4c:32:a3:
         aa:a1:38:50:2c:df:1d:98:19:69:b1:c9:ab:1e:21:c0:1a:21:
         4c:3f:72:77:59:b9:45:20:1a:c0:c0:ae:43:e2:23:96:b1:8e:
         3b:4d:78:ad:e4:fd:ed:d3:35:b5:ac:99:18:6e:07:07:12:ef:
         ab:ae:16:1e:b0:7d:21:07:b7:a7:3e:1a:27:6a:04:c8:86:8b:
         38:38:4e:d8:c1:6c:f2:ee:a8:8a:fc:50:db:5e:90:e7:fa:47:
         5d:6a:f9:9d:67:af:92:eb:c2:42:ba:b6:00:55:96:45:34:53:
         41:aa:8b:d1:64:9e:92:b7:9b:ed:fb:92:9f:c8:45:c0:21:81:
         93:9f:ef:fe:9e:dc:8f:b6:28:98:e1:3d:c2:7a:52:7a:e8:79:
         87:67:e8:ae
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeToeBn9Jryg05eT1qGskExcjFKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRGOUY3MkU4NkI0NkMzRkM1NEM5OTM5QTlGRjBDMkMy
MjBGRDgxMTAeFw0yNjA4MTExNDIwMTJaFw0yNzA4MTAxNDI1MTJaMDMxMTAvBgNV
BAMTKDkwNEU2RjRBMjY1QzVBMzZCNjVCM0FFRUQzQzcxQTI0RTJGOTdEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncF9ToOdsFsgxWBf9Dl+OYQf/
ojzs0U2xuGa1ptTCvDYl/8N6FT3ZsSGDBjbf0cnzw60xkWYDdeFJneqZ6l+vwPuc
2KRcgU27fCGYeQPrGznEZAvncCiTaKmcqfvehEdViDUtsuBh6AA6ZWwckwps2p3G
LWAYYRblfCfqX68QckK2AOu8oScuOX31wGNznhy4hCbGXggDJ7hB7jwPKoioO0vW
z4ZngO2cWkkxALEfuV8NQ0csuE8uHLLmDUll65kvqswTaeL414W845WKViXc+qC8
tEeMhtyina1gkN9IsHBhc3i+mw295e+UDMfRPL1hrC/XhtTQWJc1gKQcJB3bAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkE5vSiZcWja2Wzru08caJOL5fYYwHwYDVR0j
BBgwFoAUxPn3Loa0bD/FTJk5qf8MLCIP2BEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVZLcVVNc3JlbU1qTFFZZURoS3JoU2pjOTJtM1lubmtmelhCbnprZ0F6
Qk4vMC9DNEY5RjcyRTg2QjQ2QzNGQzU0Qzk5MzlBOUZGMEMyQzIyMEZEODExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0RjlGNzJFODZCNDZDM0ZD
NTRDOTkzOUE5RkYwQzJDMjIwRkQ4MTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVWS3FVTXNyZW1NakxRWWVEaEtyaFNqYzkybTNZbm5rZnpYQm56a2dBekJOLzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp59zANBgkqhkiG9w0BAQsFAAOCAQEAeOLI
Thch2YjaTPAi2yANhrimalYTQG4Fuyy2fCj2ellb/BQw5fMA5Yp5njOKGRNZRWlr
1LXHA+AucOpZs2V7Uxqk+2NVXpQTbumE3BrwRbGlV9y6AqYpUgYxFAIY65H+rMXW
V1f1wrilTDKjqqE4UCzfHZgZabHJqx4hwBohTD9yd1m5RSAawMCuQ+IjlrGOO014
reT97dM1tayZGG4HBxLvq64WHrB9IQe3pz4aJ2oEyIaLODhO2MFs8u6oivxQ216Q
5/pHXWr5nWevkuvCQrq2AFWWRTRTQaqL0WSekreb7fuSn8hFwCGBk5/v/p7cj7Yo
mOE9wnpSeuh5h2forg==
-----END CERTIFICATE-----
Generated at Sun Aug 23 14:13:20 2026 by rpki-client