Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32322d3232203d3e203532363632.roa
File:                     3138392e3131332e3133322e302f32322d3232203d3e203532363632.roa (raw, json)
Hash identifier:          KWdlhYusyeOn8apOCFfcHsw0EOuucQp8htD907b20Kw=
Subject key identifier:   0B:B3:85:59:78:AB:97:D6:8C:97:E5:37:C6:12:6D:1B:52:0F:33:16
Certificate issuer:       /CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
Certificate serial:       563C00A2C2EE9E798C0DCAE40E3D028A5C5F514A
Authority key identifier: C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32322d3232203d3e203532363632.roa
Signing time:             Thu 30 Jul 2026 17:00:09 +0000
ROA not before:           Thu 30 Jul 2026 16:55:09 +0000
ROA not after:            Thu 29 Jul 2027 17:00:09 +0000
asID:                     52662
IP address blocks:        189.113.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl
                          rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 04:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3c:00:a2:c2:ee:9e:79:8c:0d:ca:e4:0e:3d:02:8a:5c:5f:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89D21B0702105D4AEE7B265B3975D34154B1C06
        Validity
            Not Before: Jul 30 16:55:09 2026 GMT
            Not After : Jul 29 17:00:09 2027 GMT
        Subject: CN=0BB3855978AB97D68C97E537C6126D1B520F3316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:fa:35:40:7f:58:f3:0f:f3:b2:7c:b4:68:
                    cc:3d:35:62:ff:76:d8:75:0d:e3:35:43:f1:ae:c8:
                    1f:0b:00:f9:d1:9d:f1:9f:2e:82:e0:3b:4c:2a:c9:
                    1e:e5:6c:23:62:c4:c6:a4:29:41:cd:8c:b2:b3:8d:
                    0e:47:1b:a7:9b:df:30:cb:4b:2d:51:a9:95:52:80:
                    1d:4e:5f:07:c6:68:08:3d:59:0c:0b:37:ea:04:da:
                    b8:f8:fb:1a:9e:09:8d:26:00:0e:43:a0:37:01:65:
                    db:d9:2f:5a:ec:99:44:6a:ff:da:6c:b4:ff:24:ea:
                    a1:81:1c:74:1e:54:d5:6f:95:60:61:a4:da:f9:67:
                    40:47:dd:2e:b1:78:ad:d0:6c:4f:fc:11:ac:23:a0:
                    4e:96:1c:1d:9b:ad:d5:4e:0f:e6:df:ed:a0:40:b9:
                    1f:b5:6f:80:26:5b:d4:f9:3c:6f:98:9c:98:09:77:
                    65:d6:0c:fd:bd:ef:e9:a0:d4:31:21:be:83:06:d4:
                    00:d5:b9:95:2a:e3:1a:d8:dd:d2:6d:be:c0:50:98:
                    2f:14:f8:7e:45:b5:79:1b:4c:5b:f6:2b:52:3f:fc:
                    aa:bc:cc:44:82:7f:b9:09:b7:45:38:96:8c:c1:1e:
                    79:78:97:06:e0:88:c1:ea:84:7a:86:9f:82:fb:b0:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:85:59:78:AB:97:D6:8C:97:E5:37:C6:12:6D:1B:52:0F:33:16
            X509v3 Authority Key Identifier:
                keyid:C8:9D:21:B0:70:21:05:D4:AE:E7:B2:65:B3:97:5D:34:15:4B:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/C89D21B0702105D4AEE7B265B3975D34154B1C06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C89D21B0702105D4AEE7B265B3975D34154B1C06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5j8CSdseAymt4weXXCZtTZUdT97CLBvW2JMwA973KCDT/0/3138392e3131332e3133322e302f32322d3232203d3e203532363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:2a:33:35:d7:12:5d:13:ef:6f:38:af:93:0b:50:c2:a3:90:
         1e:78:1b:ae:a6:f9:aa:24:a6:a3:2e:47:fb:e1:13:e4:e6:3e:
         bb:6f:44:bc:f1:2e:17:c2:fa:50:8b:f9:1c:ff:87:5f:72:eb:
         63:aa:dc:64:28:e5:80:4b:3f:f4:b0:5c:fc:c8:0f:98:93:4f:
         4a:b2:14:0b:a9:e0:87:c3:3a:8e:51:64:3a:5d:8f:f4:25:04:
         b2:6b:78:6c:1a:a1:7d:c6:34:e2:7a:49:78:17:e4:e0:86:b1:
         4a:6c:a0:07:03:29:11:62:e2:dc:e6:42:2f:f7:c2:ef:b1:b7:
         d6:51:c1:83:67:cc:31:32:2d:fe:e1:5e:7b:39:16:90:7c:e2:
         d5:b2:f3:02:bd:cc:02:9a:76:a9:b4:98:78:dd:6a:28:21:a7:
         1c:81:d7:ac:ab:61:5b:7e:b1:93:6d:03:da:05:16:06:58:77:
         c4:d9:f7:d1:e5:fe:8b:bd:36:fb:eb:42:90:06:73:c4:2c:8a:
         0e:8a:13:fb:3f:6c:cb:ea:33:96:56:05:bc:eb:24:ba:27:70:
         5f:02:9e:ba:d6:e0:05:56:60:31:61:78:71:66:70:19:ab:3c:
         90:0a:83:cb:a9:87:7b:8e:7f:80:cf:5a:3d:89:94:02:41:58:
         f9:77:6c:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVjwAosLunnmMDcrkDj0CilxfUUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5RDIxQjA3MDIxMDVENEFFRTdCMjY1QjM5NzVEMzQx
NTRCMUMwNjAeFw0yNjA3MzAxNjU1MDlaFw0yNzA3MjkxNzAwMDlaMDMxMTAvBgNV
BAMTKDBCQjM4NTU5NzhBQjk3RDY4Qzk3RTUzN0M2MTI2RDFCNTIwRjMzMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG/o1QH9Y8w/zsny0aMw9NWL/
dth1DeM1Q/GuyB8LAPnRnfGfLoLgO0wqyR7lbCNixMakKUHNjLKzjQ5HG6eb3zDL
Sy1RqZVSgB1OXwfGaAg9WQwLN+oE2rj4+xqeCY0mAA5DoDcBZdvZL1rsmURq/9ps
tP8k6qGBHHQeVNVvlWBhpNr5Z0BH3S6xeK3QbE/8EawjoE6WHB2brdVOD+bf7aBA
uR+1b4AmW9T5PG+YnJgJd2XWDP297+mg1DEhvoMG1ADVuZUq4xrY3dJtvsBQmC8U
+H5FtXkbTFv2K1I//Kq8zESCf7kJt0U4lozBHnl4lwbgiMHqhHqGn4L7sBb/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUC7OFWXirl9aMl+U3xhJtG1IPMxYwHwYDVR0j
BBgwFoAUyJ0hsHAhBdSu57Jls5ddNBVLHAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWo4Q1Nkc2VBeW10NHdlWFhDWnRUWlVkVDk3Q0xCdlcySk13QTk3M0tD
RFQvMC9DODlEMjFCMDcwMjEwNUQ0QUVFN0IyNjVCMzk3NUQzNDE1NEIxQzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M4OUQyMUIwNzAyMTA1RDRB
RUU3QjI2NUIzOTc1RDM0MTU0QjFDMDYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqOENTZHNlQXltdDR3ZVhYQ1p0VFpVZFQ5N0NMQnZXMkpNd0E5NzNLQ0RULzAv
MzEzODM5MmUzMTMxMzMyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK9cYQwDQYJKoZIhvcNAQELBQADggEBAK4qMzXX
El0T7284r5MLUMKjkB54G66m+aokpqMuR/vhE+TmPrtvRLzxLhfC+lCL+Rz/h19y
62Oq3GQo5YBLP/SwXPzID5iTT0qyFAup4IfDOo5RZDpdj/QlBLJreGwaoX3GNOJ6
SXgX5OCGsUpsoAcDKRFi4tzmQi/3wu+xt9ZRwYNnzDEyLf7hXns5FpB84tWy8wK9
zAKadqm0mHjdaighpxyB16yrYVt+sZNtA9oFFgZYd8TZ99Hl/ou9NvvrQpAGc8Qs
ig6KE/s/bMvqM5ZWBbzrJLoncF8CnrrW4AVWYDFheHFmcBmrPJAKg8uph3uOf4DP
Wj2JlAJBWPl3bLw=
-----END CERTIFICATE-----
Generated at Mon Aug 24 15:54:59 2026 by rpki-client