Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35312e302f32342d3234203d3e20323632383234.roa
File:                     3138362e3235312e35312e302f32342d3234203d3e20323632383234.roa (raw, json)
Hash identifier:          x6SO5RqO1i9kkDTBhe+t+WEx68sW46nZzfmYhPKmn0k=
Subject key identifier:   E5:88:16:CF:4C:6C:0F:13:AE:14:EA:9D:DA:47:9E:6B:CD:D2:15:54
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       314131B6DF2958957F0990047758F702BF867206
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35312e302f32342d3234203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:57:31 +0000
ROA not before:           Sun 05 Jul 2026 23:52:31 +0000
ROA not after:            Sun 04 Jul 2027 23:57:31 +0000
asID:                     262824
IP address blocks:        186.251.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:41:31:b6:df:29:58:95:7f:09:90:04:77:58:f7:02:bf:86:72:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:52:31 2026 GMT
            Not After : Jul  4 23:57:31 2027 GMT
        Subject: CN=E58816CF4C6C0F13AE14EA9DDA479E6BCDD21554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:01:c8:f1:79:60:d1:8d:6a:b4:eb:a2:38:d9:
                    88:9d:80:16:ff:bd:4e:dd:3d:f0:20:df:d9:aa:7e:
                    a0:87:6c:0f:30:6a:a9:bd:13:24:1d:f8:4c:ee:9e:
                    b2:e9:7d:00:37:e8:a3:7d:09:4c:f5:56:70:90:21:
                    07:75:58:2c:30:fb:d4:0b:3b:e0:d7:d9:02:e3:34:
                    e0:73:9b:c6:3b:b3:0b:6e:f1:c5:be:71:10:c3:d4:
                    62:75:fa:75:eb:c4:39:cf:41:43:95:6e:2e:2a:cd:
                    d4:4a:f6:02:c4:be:60:46:6d:2c:82:5d:8d:58:42:
                    b5:c7:45:a1:4d:63:cc:89:0e:5a:1e:09:48:ed:83:
                    17:14:0d:c8:74:96:77:41:45:0d:02:1e:bd:29:f8:
                    25:f1:11:21:35:1d:cd:88:fd:9e:f8:55:f5:b3:64:
                    a2:f2:6e:0b:c2:b0:29:39:a6:ce:5a:80:a8:fb:42:
                    92:4f:62:4a:3b:d6:7e:87:b9:d8:02:43:b2:84:91:
                    9a:f3:65:f3:ed:df:74:a6:a7:cb:0f:f3:f7:cc:c8:
                    28:4e:cb:c5:0e:1d:3a:60:18:45:3b:20:5b:31:cb:
                    a2:6c:b1:8c:31:f9:25:d4:e9:cd:2d:d0:b6:e3:7c:
                    8e:fb:ad:20:37:f5:2e:d3:81:2d:bf:28:bf:e6:ab:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:16:CF:4C:6C:0F:13:AE:14:EA:9D:DA:47:9E:6B:CD:D2:15:54
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35312e302f32342d3234203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:9b:13:3a:27:54:af:00:55:21:7e:02:dd:48:bc:e4:9f:
         63:12:ad:a6:5e:dd:4c:44:99:6f:c1:27:d3:37:f4:01:1a:a3:
         40:0b:cc:7d:2e:2d:0a:6a:f1:43:49:cd:5e:19:88:2e:70:dc:
         f1:60:8b:62:6b:23:a8:6c:be:3c:0c:c5:40:c0:0f:d3:b1:ca:
         b6:61:20:91:ba:47:3a:b1:12:77:2e:3b:3a:aa:9d:fe:a3:82:
         a0:ec:01:90:4e:52:ba:d4:79:6e:18:d4:1e:13:95:82:1b:32:
         77:ba:f1:75:7f:c9:04:1f:4b:26:c2:c3:fc:f6:43:9f:5f:b7:
         da:bb:13:0d:7e:89:e2:a8:61:a2:c5:03:c8:8c:b4:ab:cd:33:
         0f:3e:b6:44:9b:73:ba:a3:91:11:d4:c6:ca:a2:91:46:7c:90:
         a6:25:52:45:fb:ce:0a:bb:60:c3:07:f6:c1:47:e3:10:2d:ce:
         8f:e8:15:57:9d:5c:a5:95:43:e3:6e:36:da:e4:27:c6:13:17:
         5e:53:aa:be:2e:2d:0b:dd:78:5c:0a:cc:1d:56:ed:43:55:11:
         5a:2c:e1:7f:01:50:f1:3e:76:64:31:96:6b:87:7d:06:23:0e:
         ff:54:6e:1f:e0:d9:49:b8:6a:ff:fb:4f:e9:c0:8f:a5:da:ce:
         5f:41:81:d6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMUExtt8pWJV/CZAEd1j3Ar+GcgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQyMjJFRkYyOEJERUE0QjBBNkNBRTlFOUQwRjAxMDgy
RThFNDdGNzAeFw0yNjA3MDUyMzUyMzFaFw0yNzA3MDQyMzU3MzFaMDMxMTAvBgNV
BAMTKEU1ODgxNkNGNEM2QzBGMTNBRTE0RUE5RERBNDc5RTZCQ0REMjE1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsAcjxeWDRjWq066I42YidgBb/
vU7dPfAg39mqfqCHbA8waqm9EyQd+EzunrLpfQA36KN9CUz1VnCQIQd1WCww+9QL
O+DX2QLjNOBzm8Y7swtu8cW+cRDD1GJ1+nXrxDnPQUOVbi4qzdRK9gLEvmBGbSyC
XY1YQrXHRaFNY8yJDloeCUjtgxcUDch0lndBRQ0CHr0p+CXxESE1Hc2I/Z74VfWz
ZKLybgvCsCk5ps5agKj7QpJPYko71n6HudgCQ7KEkZrzZfPt33Smp8sP8/fMyChO
y8UOHTpgGEU7IFsxy6JssYwx+SXU6c0t0LbjfI77rSA39S7TgS2/KL/mqwRvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5YgWz0xsDxOuFOqd2keea83SFVQwHwYDVR0j
BBgwFoAUhCIu/yi96ksKbK6enQ8BCC6OR/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUdNRjhrcGFGZml1UkE5eEFqTlhHc0FLMW5QWG53Wkp6V1RnRGdOTDdi
TXMvMC84NDIyMkVGRjI4QkRFQTRCMEE2Q0FFOUU5RDBGMDEwODJFOEU0N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjIyRUZGMjhCREVBNEIw
QTZDQUU5RTlEMEYwMTA4MkU4RTQ3RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHTUY4a3BhRmZpdVJBOXhBak5YR3NBSzFuUFhud1pKeldUZ0RnTkw3Yk1zLzAv
MzEzODM2MmUzMjM1MzEyZTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC6+zMwDQYJKoZIhvcNAQELBQADggEBAG3pmxM6
J1SvAFUhfgLdSLzkn2MSraZe3UxEmW/BJ9M39AEao0ALzH0uLQpq8UNJzV4ZiC5w
3PFgi2JrI6hsvjwMxUDAD9OxyrZhIJG6RzqxEncuOzqqnf6jgqDsAZBOUrrUeW4Y
1B4TlYIbMne68XV/yQQfSybCw/z2Q59ft9q7Ew1+ieKoYaLFA8iMtKvNMw8+tkSb
c7qjkRHUxsqikUZ8kKYlUkX7zgq7YMMH9sFH4xAtzo/oFVedXKWVQ+NuNtrkJ8YT
F15Tqr4uLQvdeFwKzB1W7UNVEVos4X8BUPE+dmQxlmuHfQYjDv9Ubh/g2Um4av/7
T+nAj6Xazl9BgdY=
-----END CERTIFICATE-----
Generated at Wed Jul 8 17:04:49 2026 by rpki-client