Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/3137392e34392e3134302e302f32322d3332203d3e20323731313939.roa
File:                     3137392e34392e3134302e302f32322d3332203d3e20323731313939.roa (raw, json)
Hash identifier:          MCXzkzZVniru8cLkwSPh76XY6uXwZG6xu2REnlHTyOk=
Subject key identifier:   18:66:99:A6:53:5C:86:84:B0:A2:F7:82:EE:4A:A7:A8:35:12:16:1E
Certificate issuer:       /CN=A08F451FD85479B52ED3AE752B8C117E9D210337
Certificate serial:       784E5A7A658C553614601CDE03ADBF82BF35CE5F
Authority key identifier: A0:8F:45:1F:D8:54:79:B5:2E:D3:AE:75:2B:8C:11:7E:9D:21:03:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A08F451FD85479B52ED3AE752B8C117E9D210337.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/3137392e34392e3134302e302f32322d3332203d3e20323731313939.roa
Signing time:             Thu 13 Aug 2026 19:07:31 +0000
ROA not before:           Thu 13 Aug 2026 19:02:31 +0000
ROA not after:            Thu 12 Aug 2027 19:07:31 +0000
asID:                     271199
IP address blocks:        179.49.140.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/A08F451FD85479B52ED3AE752B8C117E9D210337.crl
                          rsync://rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/A08F451FD85479B52ED3AE752B8C117E9D210337.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A08F451FD85479B52ED3AE752B8C117E9D210337.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 06:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4e:5a:7a:65:8c:55:36:14:60:1c:de:03:ad:bf:82:bf:35:ce:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08F451FD85479B52ED3AE752B8C117E9D210337
        Validity
            Not Before: Aug 13 19:02:31 2026 GMT
            Not After : Aug 12 19:07:31 2027 GMT
        Subject: CN=186699A6535C8684B0A2F782EE4AA7A83512161E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:07:1b:85:8f:e0:f8:59:4b:37:d4:02:1f:
                    c0:05:aa:a5:07:d6:39:b7:46:d8:73:db:32:51:ce:
                    e8:13:4d:a5:2e:bd:c3:1a:f5:9b:32:ac:e5:39:a1:
                    e3:f8:c6:3c:35:60:1a:6b:60:2f:ed:25:83:cc:03:
                    f0:0a:b1:83:0a:94:ab:bb:2b:46:a4:29:6b:f7:ee:
                    2d:71:0e:31:78:cf:85:08:23:99:53:41:a7:22:bd:
                    a0:12:67:38:df:23:52:eb:1d:35:fa:2d:0f:9d:f6:
                    c2:89:47:b7:6f:97:52:d3:27:47:71:15:87:6d:9d:
                    0e:fd:99:19:49:ac:34:c5:29:6c:c0:cf:81:2d:09:
                    da:c0:32:a6:da:56:bf:6b:b4:85:45:2b:4a:a8:b9:
                    24:50:e1:75:25:c3:92:d1:e1:7a:a2:27:41:29:77:
                    da:af:2e:97:96:73:2c:4f:bf:4d:d3:24:e3:73:d8:
                    4d:b0:e0:db:ca:d4:a0:46:d6:47:00:fa:0b:c0:75:
                    ad:c1:dd:ed:c5:cc:79:ab:c1:68:ae:a1:2b:02:91:
                    a2:65:32:c9:f4:de:ca:c9:00:39:0a:b4:47:c8:53:
                    42:d2:a2:79:ee:a1:02:89:2a:cf:ef:1c:11:45:37:
                    f3:fd:b0:64:38:94:94:b0:41:91:e7:2d:03:5b:cb:
                    59:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:99:A6:53:5C:86:84:B0:A2:F7:82:EE:4A:A7:A8:35:12:16:1E
            X509v3 Authority Key Identifier:
                keyid:A0:8F:45:1F:D8:54:79:B5:2E:D3:AE:75:2B:8C:11:7E:9D:21:03:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/A08F451FD85479B52ED3AE752B8C117E9D210337.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A08F451FD85479B52ED3AE752B8C117E9D210337.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6UjSoLUaeg2LYpgMpTcCdvtmAqwG4wz6gpd3uJGVu29s/0/3137392e34392e3134302e302f32322d3332203d3e20323731313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:6a:d2:5f:89:50:a5:86:30:98:9e:bb:ff:fa:f0:ef:ea:
         3f:c4:30:fc:21:49:d9:14:71:3d:69:99:73:55:b6:bc:e4:d0:
         cc:d6:91:85:37:fb:83:59:a3:a4:39:27:6b:bb:48:74:2c:3e:
         3e:72:d1:2f:73:f7:03:a4:3c:c3:48:2a:e7:3f:a8:3c:fc:65:
         e3:4d:00:02:8b:16:e5:02:35:86:43:ba:83:f3:8c:c8:a3:f8:
         47:8d:8d:9b:5c:58:25:1d:09:ab:f1:ec:a7:7f:a2:f4:3c:73:
         9a:fc:29:3f:24:76:2b:7d:8d:8c:a3:6f:1e:a3:52:d0:7c:ea:
         9a:bc:59:18:31:fc:58:63:a9:4d:01:e2:4e:3d:e1:5a:39:d8:
         db:ad:03:3f:06:ab:79:90:09:57:5f:8a:d0:f1:99:ae:c0:6f:
         eb:1e:d0:4d:ce:df:22:da:d5:e2:8c:ef:b4:93:34:13:61:85:
         07:c2:1a:96:8d:05:b1:57:26:82:5c:af:e3:3a:34:91:34:07:
         99:6e:2f:06:ce:f4:2a:d1:61:20:f5:a9:77:82:fc:08:89:30:
         f1:64:40:33:9e:1d:76:a4:56:5b:84:15:3e:c7:86:cd:0d:54:
         22:21:48:f6:8c:82:dd:fa:b8:81:2f:90:b2:ac:02:80:23:c5:
         e4:32:3e:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeE5aemWMVTYUYBzeA62/gr81zl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA4RjQ1MUZEODU0NzlCNTJFRDNBRTc1MkI4QzExN0U5
RDIxMDMzNzAeFw0yNjA4MTMxOTAyMzFaFw0yNzA4MTIxOTA3MzFaMDMxMTAvBgNV
BAMTKDE4NjY5OUE2NTM1Qzg2ODRCMEEyRjc4MkVFNEFBN0E4MzUxMjE2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhwcbhY/g+FlLN9QCH8AFqqUH
1jm3Rthz2zJRzugTTaUuvcMa9ZsyrOU5oeP4xjw1YBprYC/tJYPMA/AKsYMKlKu7
K0akKWv37i1xDjF4z4UII5lTQacivaASZzjfI1LrHTX6LQ+d9sKJR7dvl1LTJ0dx
FYdtnQ79mRlJrDTFKWzAz4EtCdrAMqbaVr9rtIVFK0qouSRQ4XUlw5LR4XqiJ0Ep
d9qvLpeWcyxPv03TJONz2E2w4NvK1KBG1kcA+gvAda3B3e3FzHmrwWiuoSsCkaJl
Msn03srJADkKtEfIU0LSonnuoQKJKs/vHBFFN/P9sGQ4lJSwQZHnLQNby1nlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGGaZplNchoSwoveC7kqnqDUSFh4wHwYDVR0j
BBgwFoAUoI9FH9hUebUu0651K4wRfp0hAzcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlVqU29MVWFlZzJMWXBnTXBUY0NkdnRtQXF3RzR3ejZncGQzdUpHVnUy
OXMvMC9BMDhGNDUxRkQ4NTQ3OUI1MkVEM0FFNzUyQjhDMTE3RTlEMjEwMzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwOEY0NTFGRDg1NDc5QjUy
RUQzQUU3NTJCOEMxMTdFOUQyMTAzMzcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZValNvTFVhZWcyTFlwZ01wVGNDZHZ0bUFxd0c0d3o2Z3BkM3VKR1Z1MjlzLzAv
MzEzNzM5MmUzNDM5MmUzMTM0MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzEzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKzMYwwDQYJKoZIhvcNAQELBQADggEBAGuJatJf
iVClhjCYnrv/+vDv6j/EMPwhSdkUcT1pmXNVtrzk0MzWkYU3+4NZo6Q5J2u7SHQs
Pj5y0S9z9wOkPMNIKuc/qDz8ZeNNAAKLFuUCNYZDuoPzjMij+EeNjZtcWCUdCavx
7Kd/ovQ8c5r8KT8kdit9jYyjbx6jUtB86pq8WRgx/FhjqU0B4k494Vo52NutAz8G
q3mQCVdfitDxma7Ab+se0E3O3yLa1eKM77STNBNhhQfCGpaNBbFXJoJcr+M6NJE0
B5luLwbO9CrRYSD1qXeC/AiJMPFkQDOeHXakVluEFT7Hhs0NVCIhSPaMgt36uIEv
kLKsAoAjxeQyPj8=
-----END CERTIFICATE-----
Generated at Sun Aug 23 20:38:23 2026 by rpki-client