Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa
File:                     3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa (raw, json)
Hash identifier:          /IRbKKXJZ83Cq/UMNzYy/zYnvz1/WxbTe+9ZQs5cXLM=
Subject key identifier:   CC:06:2D:7B:35:CB:8F:1B:7A:69:C7:44:96:11:80:E4:C5:27:2C:B3
Certificate issuer:       /CN=20674F90DF856F3F8739700240DF50D6A305643F
Certificate serial:       6C877C00F0C7983BDA6225474AFA1143681707C8
Authority key identifier: 20:67:4F:90:DF:85:6F:3F:87:39:70:02:40:DF:50:D6:A3:05:64:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20674F90DF856F3F8739700240DF50D6A305643F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa
Signing time:             Mon 28 Sep 2026 20:10:06 +0000
ROA not before:           Mon 28 Sep 2026 20:05:06 +0000
ROA not after:            Mon 27 Sep 2027 20:10:06 +0000
asID:                     275648
IP address blocks:        191.227.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/20674F90DF856F3F8739700240DF50D6A305643F.crl
                          rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/20674F90DF856F3F8739700240DF50D6A305643F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20674F90DF856F3F8739700240DF50D6A305643F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:7c:00:f0:c7:98:3b:da:62:25:47:4a:fa:11:43:68:17:07:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20674F90DF856F3F8739700240DF50D6A305643F
        Validity
            Not Before: Sep 28 20:05:06 2026 GMT
            Not After : Sep 27 20:10:06 2027 GMT
        Subject: CN=CC062D7B35CB8F1B7A69C744961180E4C5272CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4b:60:24:c8:75:ea:f9:0d:cb:3e:03:f3:a3:
                    42:96:05:ea:a0:b1:4a:90:f7:f4:d4:e0:20:a3:51:
                    37:99:f4:e7:ce:0e:a8:9c:2c:ce:7a:3f:18:ec:b2:
                    c9:f1:c0:93:21:dd:4a:ac:34:67:34:7b:61:5f:bc:
                    5d:fe:70:de:37:a6:a2:d6:53:2e:a8:df:f2:ae:74:
                    79:da:0a:4b:ea:3e:6f:69:da:22:3c:61:ad:21:13:
                    81:ee:aa:43:7b:cb:1d:86:d6:0c:b0:cb:ba:61:6e:
                    8a:ad:eb:0a:b2:b4:4e:f8:56:a9:7a:02:75:50:38:
                    49:5a:2c:1d:59:6e:0f:e8:55:bc:77:0c:bf:a3:e9:
                    6c:4a:d6:ed:0f:c9:6b:a2:c5:55:33:1b:0a:28:ff:
                    74:72:ef:75:41:5e:49:53:76:0e:97:ed:8f:c3:31:
                    d6:81:b0:57:5a:66:ca:50:56:b6:a4:24:d4:cc:27:
                    17:2a:57:e8:c1:a3:8f:aa:72:a6:3c:a1:e0:5e:4c:
                    b0:ec:10:f0:b8:8c:38:f3:23:df:37:65:cb:85:d3:
                    82:85:5f:27:f5:ae:0d:41:a9:17:38:22:de:fa:b8:
                    c3:30:63:45:c0:bc:ec:39:09:88:e0:80:2d:55:29:
                    ed:b8:64:c9:70:37:b0:f9:3e:98:d3:0a:59:8d:7f:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:06:2D:7B:35:CB:8F:1B:7A:69:C7:44:96:11:80:E4:C5:27:2C:B3
            X509v3 Authority Key Identifier:
                keyid:20:67:4F:90:DF:85:6F:3F:87:39:70:02:40:DF:50:D6:A3:05:64:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/20674F90DF856F3F8739700240DF50D6A305643F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/20674F90DF856F3F8739700240DF50D6A305643F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MT78YhFL6XJexU4RbCwioRLZGU9DweTvhtYnXc9sBdF/0/3139312e3232372e3134322e302f32332d3234203d3e20323735363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.227.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:17:2c:2a:f3:72:6c:90:e3:19:b8:17:62:c0:ab:25:96:
         90:ab:bd:a8:3e:47:72:9a:ba:83:5e:12:04:d2:da:bf:33:a9:
         ca:b6:9a:47:ec:a5:0c:74:72:ea:fb:9e:b4:0e:43:63:21:3b:
         5e:3c:07:f9:57:4b:2a:0b:b6:1b:6e:96:8d:f6:7c:ab:20:b3:
         32:ca:71:e7:58:a7:b7:53:0f:bb:88:e6:af:dc:07:62:cc:4e:
         7c:0e:bd:90:d0:ea:e3:e9:48:97:e5:c0:25:6a:a2:3e:9d:87:
         af:c7:f6:db:0c:22:67:3b:fd:94:0e:3d:50:d1:90:33:09:17:
         76:64:f0:b5:6d:af:9b:9f:62:cd:bf:31:04:e2:e3:23:8a:15:
         b9:f3:74:13:99:67:ca:22:19:64:2c:36:0b:74:37:9c:e1:4a:
         99:59:50:7f:5a:84:e3:80:60:8b:98:74:1e:3a:0d:cb:74:89:
         66:98:40:71:49:31:87:e5:d7:ed:01:7f:aa:7d:21:63:ea:e0:
         33:28:42:91:4c:30:2c:38:d5:25:b1:5a:38:28:70:99:dd:52:
         e7:79:cf:f9:f8:b1:e6:1c:9b:69:06:ee:bd:b3:83:97:d5:e1:
         d6:d5:14:72:09:25:e6:1b:c3:ca:ed:ee:5c:bb:a2:6c:db:92:
         95:b9:9c:5c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbId8APDHmDvaYiVHSvoRQ2gXB8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2NzRGOTBERjg1NkYzRjg3Mzk3MDAyNDBERjUwRDZB
MzA1NjQzRjAeFw0yNjA5MjgyMDA1MDZaFw0yNzA5MjcyMDEwMDZaMDMxMTAvBgNV
BAMTKENDMDYyRDdCMzVDQjhGMUI3QTY5Qzc0NDk2MTE4MEU0QzUyNzJDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCS2AkyHXq+Q3LPgPzo0KWBeqg
sUqQ9/TU4CCjUTeZ9OfODqicLM56PxjsssnxwJMh3UqsNGc0e2FfvF3+cN43pqLW
Uy6o3/KudHnaCkvqPm9p2iI8Ya0hE4HuqkN7yx2G1gywy7phboqt6wqytE74Vql6
AnVQOElaLB1Zbg/oVbx3DL+j6WxK1u0PyWuixVUzGwoo/3Ry73VBXklTdg6X7Y/D
MdaBsFdaZspQVrakJNTMJxcqV+jBo4+qcqY8oeBeTLDsEPC4jDjzI983ZcuF04KF
Xyf1rg1BqRc4It76uMMwY0XAvOw5CYjggC1VKe24ZMlwN7D5PpjTClmNfyojAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzAYtezXLjxt6acdElhGA5MUnLLMwHwYDVR0j
BBgwFoAUIGdPkN+Fbz+HOXACQN9Q1qMFZD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNk1UNzhZaEZMNlhKZXhVNFJiQ3dpb1JMWkdVOUR3ZVR2aHRZblhjOXNC
ZEYvMC8yMDY3NEY5MERGODU2RjNGODczOTcwMDI0MERGNTBENkEzMDU2NDNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIwNjc0RjkwREY4NTZGM0Y4
NzM5NzAwMjQwREY1MEQ2QTMwNTY0M0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZNVDc4WWhGTDZYSmV4VTRSYkN3aW9STFpHVTlEd2VUdmh0WW5YYzlzQmRGLzAv
MzEzOTMxMmUzMjMyMzcyZTMxMzQzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzczNTM2MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAb/jjjANBgkqhkiG9w0BAQsFAAOCAQEAA7wX
LCrzcmyQ4xm4F2LAqyWWkKu9qD5Hcpq6g14SBNLavzOpyraaR+ylDHRy6vuetA5D
YyE7XjwH+VdLKgu2G26WjfZ8qyCzMspx51int1MPu4jmr9wHYsxOfA69kNDq4+lI
l+XAJWqiPp2Hr8f22wwiZzv9lA49UNGQMwkXdmTwtW2vm59izb8xBOLjI4oVufN0
E5lnyiIZZCw2C3Q3nOFKmVlQf1qE44Bgi5h0HjoNy3SJZphAcUkxh+XX7QF/qn0h
Y+rgMyhCkUwwLDjVJbFaOChwmd1S53nP+fix5hybaQbuvbODl9Xh1tUUcgkl5hvD
yu3uXLuibNuSlbmcXA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 18:24:39 2026 by rpki-client