Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33352e302f32342d3234203d3e20323634333338.roa
File:                     3133382e3138352e33352e302f32342d3234203d3e20323634333338.roa (raw, json)
Hash identifier:          iVtQp4+nf4tvtMSPoq4xvIeThWKtWJywlkwDReqaibo=
Subject key identifier:   D1:7F:5B:67:82:8C:34:FC:44:B4:56:45:AF:CA:B4:78:34:69:6C:F4
Certificate issuer:       /CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
Certificate serial:       63D4CF1E9F4FD96C4F525FC061BC9A8629C23C31
Authority key identifier: E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33352e302f32342d3234203d3e20323634333338.roa
Signing time:             Tue 18 Aug 2026 12:20:48 +0000
ROA not before:           Tue 18 Aug 2026 12:15:48 +0000
ROA not after:            Tue 17 Aug 2027 12:20:48 +0000
asID:                     264338
IP address blocks:        138.185.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl
                          rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d4:cf:1e:9f:4f:d9:6c:4f:52:5f:c0:61:bc:9a:86:29:c2:3c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8
        Validity
            Not Before: Aug 18 12:15:48 2026 GMT
            Not After : Aug 17 12:20:48 2027 GMT
        Subject: CN=D17F5B67828C34FC44B45645AFCAB47834696CF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:5d:5b:14:47:82:49:83:5f:d5:83:a3:b9:
                    8f:87:29:f8:46:80:3b:81:f4:9c:6f:ad:4e:3a:f3:
                    8f:67:a7:34:1f:76:82:9d:5e:a4:ed:d4:d1:47:d7:
                    41:4f:21:c0:e8:44:bc:80:e5:13:f1:88:2e:c6:65:
                    09:28:33:53:58:8d:d4:a8:02:d6:f3:fa:7c:b8:40:
                    44:0c:00:49:e4:e3:0d:07:1b:bb:d2:db:7b:26:6b:
                    fa:71:2e:18:32:8c:41:26:dd:db:61:52:71:30:d1:
                    67:2e:64:ec:90:78:b4:c6:41:b2:67:26:2b:f8:c8:
                    f1:f2:ca:a9:9a:82:c5:5f:be:9b:2c:e1:f1:f0:f9:
                    25:97:2a:be:70:f3:17:31:1e:be:79:41:8b:2c:14:
                    95:0a:24:02:e0:93:d0:fa:f4:ac:51:f8:8d:c1:d3:
                    84:47:09:da:f8:81:d1:d4:ab:c5:9e:59:80:f6:c3:
                    87:7d:18:63:41:49:2f:e0:3f:b2:20:f5:b4:10:fd:
                    1e:bc:8f:f7:ad:33:a9:94:7c:ac:c8:29:aa:ad:43:
                    52:d5:bb:7c:52:7c:88:57:7f:a7:34:11:9e:64:52:
                    75:64:aa:5c:25:4f:0f:24:35:88:29:b0:47:c7:90:
                    50:32:d0:d6:0b:67:e6:c5:03:61:bf:fe:9c:16:cf:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7F:5B:67:82:8C:34:FC:44:B4:56:45:AF:CA:B4:78:34:69:6C:F4
            X509v3 Authority Key Identifier:
                keyid:E9:7C:28:CB:EF:B8:14:13:F2:76:7E:20:C6:86:6F:8D:F1:CF:B2:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E97C28CBEFB81413F2767E20C6866F8DF1CFB2B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gv2A6YNS4JML86mRAEiKsXR4XfX9g8HDFD2vfAFs3rH/0/3133382e3138352e33352e302f32342d3234203d3e20323634333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:1f:ba:e2:06:f8:1b:ab:64:50:61:bd:24:20:5d:af:3d:
         f0:b8:2a:2e:cf:57:87:de:9c:01:17:d8:27:d4:1c:5b:47:c7:
         61:85:85:b9:30:4a:d4:7c:19:f8:af:f1:aa:e6:0f:b2:b7:b4:
         14:56:7f:ca:82:fe:06:8e:00:3f:e9:fd:71:cf:48:cb:1b:f3:
         87:c6:49:04:b3:de:71:ba:b7:2e:1e:52:67:34:51:b3:d0:77:
         71:2b:44:32:9c:98:d0:92:38:23:74:6e:47:72:88:79:8c:f1:
         22:19:06:7e:47:32:72:45:42:75:c6:52:8b:c3:c6:9d:36:90:
         7c:72:37:c5:87:b3:ff:d0:99:d3:37:0a:0d:26:e6:53:60:7b:
         2e:8a:6a:f5:92:fd:07:05:2c:ce:f2:cc:da:6b:f2:3f:f5:70:
         9c:b3:6a:73:9b:ae:2c:d8:59:bf:92:73:eb:1e:c5:ae:ac:98:
         34:78:d9:4a:8d:a8:56:c1:e1:4f:dc:9f:3e:9b:f3:46:48:19:
         49:0e:9f:fe:fe:c9:0d:c5:2b:b6:20:26:9c:70:43:8c:86:2c:
         be:8a:b9:12:ff:c9:66:28:d7:cc:51:38:88:ef:44:6d:fe:51:
         16:a7:e9:b5:95:b8:58:79:31:be:09:64:61:4d:91:f5:a5:11:
         1b:f1:fb:79
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY9TPHp9P2WxPUl/AYbyahinCPDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTk3QzI4Q0JFRkI4MTQxM0YyNzY3RTIwQzY4NjZGOERG
MUNGQjJCODAeFw0yNjA4MTgxMjE1NDhaFw0yNzA4MTcxMjIwNDhaMDMxMTAvBgNV
BAMTKEQxN0Y1QjY3ODI4QzM0RkM0NEI0NTY0NUFGQ0FCNDc4MzQ2OTZDRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs511bFEeCSYNf1YOjuY+HKfhG
gDuB9JxvrU46849npzQfdoKdXqTt1NFH10FPIcDoRLyA5RPxiC7GZQkoM1NYjdSo
Atbz+ny4QEQMAEnk4w0HG7vS23sma/pxLhgyjEEm3dthUnEw0WcuZOyQeLTGQbJn
Jiv4yPHyyqmagsVfvpss4fHw+SWXKr5w8xcxHr55QYssFJUKJALgk9D69KxR+I3B
04RHCdr4gdHUq8WeWYD2w4d9GGNBSS/gP7Ig9bQQ/R68j/etM6mUfKzIKaqtQ1LV
u3xSfIhXf6c0EZ5kUnVkqlwlTw8kNYgpsEfHkFAy0NYLZ+bFA2G//pwWz/XRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0X9bZ4KMNPxEtFZFr8q0eDRpbPQwHwYDVR0j
BBgwFoAU6Xwoy++4FBPydn4gxoZvjfHPsrgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd2MkE2WU5TNEpNTDg2bVJBRWlLc1hSNFhmWDlnOEhERkQydmZBRnMz
ckgvMC9FOTdDMjhDQkVGQjgxNDEzRjI3NjdFMjBDNjg2NkY4REYxQ0ZCMkI4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U5N0MyOENCRUZCODE0MTNG
Mjc2N0UyMEM2ODY2RjhERjFDRkIyQjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhndjJBNllOUzRKTUw4Nm1SQUVpS3NYUjRYZlg5ZzhIREZEMnZmQUZzM3JILzAv
MzEzMzM4MmUzMTM4MzUyZTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuSMwDQYJKoZIhvcNAQELBQADggEBABppH7ri
Bvgbq2RQYb0kIF2vPfC4Ki7PV4fenAEX2CfUHFtHx2GFhbkwStR8Gfiv8armD7K3
tBRWf8qC/gaOAD/p/XHPSMsb84fGSQSz3nG6ty4eUmc0UbPQd3ErRDKcmNCSOCN0
bkdyiHmM8SIZBn5HMnJFQnXGUovDxp02kHxyN8WHs//QmdM3Cg0m5lNgey6KavWS
/QcFLM7yzNpr8j/1cJyzanObrizYWb+Sc+sexa6smDR42UqNqFbB4U/cnz6b80ZI
GUkOn/7+yQ3FK7YgJpxwQ4yGLL6KuRL/yWYo18xROIjvRG3+URan6bWVuFh5Mb4J
ZGFNkfWlERvx+3k=
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:12:29 2026 by rpki-client