Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32302d3332203d3e20323633353336.roa
File:                     3230312e33332e3131322e302f32302d3332203d3e20323633353336.roa (raw, json)
Hash identifier:          v7l9AkAn8wepmdB6GnMO3qhx8gsTlpMU2ii2dEEKDy8=
Subject key identifier:   60:24:E2:C8:15:F1:D9:B6:6F:E0:71:F7:5A:C4:AC:F5:96:E5:C3:1F
Certificate issuer:       /CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
Certificate serial:       6283ACDD562A5BC22C72B58013822094D91148BA
Authority key identifier: D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32302d3332203d3e20323633353336.roa
Signing time:             Tue 31 Mar 2026 11:30:49 +0000
ROA not before:           Tue 31 Mar 2026 11:25:49 +0000
ROA not after:            Tue 30 Mar 2027 11:30:49 +0000
asID:                     263536
IP address blocks:        201.33.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl
                          rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 14:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:83:ac:dd:56:2a:5b:c2:2c:72:b5:80:13:82:20:94:d9:11:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0
        Validity
            Not Before: Mar 31 11:25:49 2026 GMT
            Not After : Mar 30 11:30:49 2027 GMT
        Subject: CN=6024E2C815F1D9B66FE071F75AC4ACF596E5C31F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:51:b0:fd:51:88:22:c8:32:ce:58:b2:ab:
                    40:52:9d:34:f4:b1:60:84:f0:3f:c5:58:c7:b4:55:
                    e7:12:8b:e9:c5:b2:b5:dd:3b:62:8e:3e:0c:15:03:
                    16:a0:b6:4a:f4:c7:07:82:fc:c0:93:59:6b:85:3b:
                    74:65:6a:92:e1:a1:a1:0d:75:12:1f:7c:c6:44:ea:
                    97:8c:40:28:75:fd:9b:43:6e:90:13:e1:32:f9:b6:
                    c6:46:4c:c1:84:29:3d:72:e8:8f:98:eb:c7:ae:11:
                    dd:aa:88:72:7d:73:59:40:dd:fa:56:db:b5:cb:1e:
                    82:d6:85:a5:60:75:c3:8c:d0:4c:6a:8b:6a:2f:87:
                    02:94:d5:e6:02:bd:fd:ac:15:c6:3c:80:20:3c:92:
                    be:25:f3:87:1a:ac:ba:28:1e:48:6f:74:a3:aa:05:
                    05:45:4e:1b:01:c2:82:18:38:28:ed:d6:8a:e4:93:
                    a4:90:23:02:c9:51:79:be:84:15:56:1d:a0:75:e6:
                    88:f4:f3:04:3c:34:5e:35:f5:c1:03:5f:d5:48:bc:
                    9a:79:3d:ad:0d:cf:22:bd:b4:e6:48:8d:7b:5a:7e:
                    00:cb:31:8c:8c:38:8b:86:35:58:3f:5e:c9:4b:71:
                    01:83:cb:97:e5:33:95:a1:f4:6e:bb:34:41:b7:9e:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:24:E2:C8:15:F1:D9:B6:6F:E0:71:F7:5A:C4:AC:F5:96:E5:C3:1F
            X509v3 Authority Key Identifier:
                keyid:D1:1A:BF:5E:A0:73:36:38:B4:A2:FC:EB:EA:C9:51:7B:56:83:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D11ABF5EA0733638B4A2FCEBEAC9517B5683ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/78bHD9rPb6VumvErzP23FG1U7fHouPTY5yJZXJC1Hp8b/1/3230312e33332e3131322e302f32302d3332203d3e20323633353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:c8:d1:4d:ec:b3:67:cb:77:2a:41:d8:4c:e0:07:21:23:b6:
         74:f4:79:7f:7a:f6:8e:82:ce:17:4d:88:48:f4:16:c6:11:a8:
         3b:83:13:b1:07:8f:07:63:f6:e7:bc:f1:4f:41:49:c5:7e:88:
         e9:26:4a:6e:7d:64:2e:a6:21:11:54:cb:78:e4:0c:5b:10:31:
         c8:0a:43:19:b7:79:7a:9f:2e:3c:3d:7b:e4:68:18:74:1a:79:
         22:7d:7b:81:fd:ac:41:7e:0c:9e:48:19:d8:22:8e:76:95:c6:
         d9:61:8c:f6:46:6d:5d:07:a5:21:0d:27:10:3e:08:ce:e1:69:
         e0:a0:d7:7f:f0:31:bc:8c:46:4e:d9:7b:cc:e1:c7:88:7a:24:
         68:ae:a6:df:95:bd:0b:9e:65:fa:fd:ca:da:d0:c4:ce:00:3f:
         6b:86:13:cd:6d:63:81:e9:08:26:15:16:77:da:31:22:71:04:
         43:d5:b6:99:5d:28:76:fe:4d:dc:99:40:5e:59:52:08:cf:ae:
         78:2b:b3:d9:d4:49:4b:c4:e0:7d:d7:53:a3:bc:11:af:66:29:
         60:19:5a:3d:81:fa:a5:03:fe:62:e3:19:d6:41:de:2a:b8:66:
         df:e6:e1:6f:e9:a7:c3:20:47:fb:1e:17:d7:d9:0b:8e:d7:4c:
         08:55:72:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYoOs3VYqW8IscrWAE4IglNkRSLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDExQUJGNUVBMDczMzYzOEI0QTJGQ0VCRUFDOTUxN0I1
NjgzQUREMDAeFw0yNjAzMzExMTI1NDlaFw0yNzAzMzAxMTMwNDlaMDMxMTAvBgNV
BAMTKDYwMjRFMkM4MTVGMUQ5QjY2RkUwNzFGNzVBQzRBQ0Y1OTZFNUMzMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJR1Gw/VGIIsgyzliyq0BSnTT0
sWCE8D/FWMe0VecSi+nFsrXdO2KOPgwVAxagtkr0xweC/MCTWWuFO3RlapLhoaEN
dRIffMZE6peMQCh1/ZtDbpAT4TL5tsZGTMGEKT1y6I+Y68euEd2qiHJ9c1lA3fpW
27XLHoLWhaVgdcOM0Exqi2ovhwKU1eYCvf2sFcY8gCA8kr4l84carLooHkhvdKOq
BQVFThsBwoIYOCjt1orkk6SQIwLJUXm+hBVWHaB15oj08wQ8NF419cEDX9VIvJp5
Pa0NzyK9tOZIjXtafgDLMYyMOIuGNVg/XslLcQGDy5flM5Wh9G67NEG3nhPjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYCTiyBXx2bZv4HH3WsSs9Zblwx8wHwYDVR0j
BBgwFoAU0Rq/XqBzNji0ovzr6slRe1aDrdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzhiSEQ5clBiNlZ1bXZFcnpQMjNGRzFVN2ZIb3VQVFk1eUpaWEpDMUhw
OGIvMS9EMTFBQkY1RUEwNzMzNjM4QjRBMkZDRUJFQUM5NTE3QjU2ODNBREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxMUFCRjVFQTA3MzM2MzhC
NEEyRkNFQkVBQzk1MTdCNTY4M0FERDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc4YkhEOXJQYjZWdW12RXJ6UDIzRkcxVTdmSG91UFRZNXlKWlhKQzFIcDhiLzEv
MzIzMDMxMmUzMzMzMmUzMTMxMzIyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzMzNTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATJIXAwDQYJKoZIhvcNAQELBQADggEBANjI0U3s
s2fLdypB2EzgByEjtnT0eX969o6CzhdNiEj0FsYRqDuDE7EHjwdj9ue88U9BScV+
iOkmSm59ZC6mIRFUy3jkDFsQMcgKQxm3eXqfLjw9e+RoGHQaeSJ9e4H9rEF+DJ5I
GdgijnaVxtlhjPZGbV0HpSENJxA+CM7haeCg13/wMbyMRk7Ze8zhx4h6JGiupt+V
vQueZfr9ytrQxM4AP2uGE81tY4HpCCYVFnfaMSJxBEPVtpldKHb+TdyZQF5ZUgjP
rngrs9nUSUvE4H3XU6O8Ea9mKWAZWj2B+qUD/mLjGdZB3iq4Zt/m4W/pp8MgR/se
F9fZC47XTAhVclA=
-----END CERTIFICATE-----
Generated at Thu Apr 9 19:15:57 2026 by rpki-client