Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32332d3233203d3e20323632383234.roa
File:                     3138362e3235312e35322e302f32332d3233203d3e20323632383234.roa (raw, json)
Hash identifier:          peFygQG02JeTF0jRzSJaW8xnH8j37UDVGXkWmedAKlM=
Subject key identifier:   75:8C:40:FC:F3:60:9A:09:BB:3E:5A:55:DD:ED:DD:B2:47:07:B4:80
Certificate issuer:       /CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
Certificate serial:       1F30C418E1DAA248028AC00BDF00585CDC425BFA
Authority key identifier: 84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32332d3233203d3e20323632383234.roa
Signing time:             Sun 05 Jul 2026 23:57:42 +0000
ROA not before:           Sun 05 Jul 2026 23:52:42 +0000
ROA not after:            Sun 04 Jul 2027 23:57:42 +0000
asID:                     262824
IP address blocks:        186.251.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl
                          rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 12:43:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:30:c4:18:e1:da:a2:48:02:8a:c0:0b:df:00:58:5c:dc:42:5b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7
        Validity
            Not Before: Jul  5 23:52:42 2026 GMT
            Not After : Jul  4 23:57:42 2027 GMT
        Subject: CN=758C40FCF3609A09BB3E5A55DDEDDDB24707B480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:0d:c9:68:bf:16:c6:94:fc:0a:98:bc:40:
                    24:20:c2:2e:a5:aa:f8:1d:2a:f2:4f:fc:55:52:ec:
                    04:b0:a5:30:05:b5:28:48:7b:ed:ad:6f:82:39:56:
                    eb:ce:bb:49:40:d1:a0:68:23:12:e6:2b:50:a9:19:
                    09:a2:cd:9d:a5:a9:d9:48:d1:bc:0d:c1:50:f2:0a:
                    8c:e4:8c:a4:01:74:49:fd:db:a6:b2:66:c4:6d:11:
                    81:22:9f:71:38:fc:68:2d:1b:a4:c7:99:7a:8f:fa:
                    4e:66:e2:00:91:eb:33:f2:8a:48:0e:20:67:db:b8:
                    47:f1:f8:c4:d0:43:44:c4:87:e9:a8:68:11:67:e4:
                    39:3a:89:1f:84:cb:c5:6d:c5:9f:09:a9:66:19:39:
                    44:07:52:d7:40:36:91:f0:2f:3b:f6:4e:a9:a2:21:
                    43:47:b3:7e:a0:32:b6:2b:1b:b9:ac:03:65:99:b8:
                    e2:3b:98:1f:3c:a8:72:63:aa:84:f9:5d:8a:62:bd:
                    f1:98:d2:a2:f6:58:17:bb:80:76:47:32:02:c7:14:
                    3a:be:6a:64:4d:f5:99:ee:62:47:3f:a4:48:72:4a:
                    79:4a:7c:01:38:ab:1d:d1:01:7b:a1:0d:e9:d1:ab:
                    99:dc:9c:ec:b9:af:c3:1d:d7:78:47:18:fe:a2:d5:
                    a2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8C:40:FC:F3:60:9A:09:BB:3E:5A:55:DD:ED:DD:B2:47:07:B4:80
            X509v3 Authority Key Identifier:
                keyid:84:22:2E:FF:28:BD:EA:4B:0A:6C:AE:9E:9D:0F:01:08:2E:8E:47:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84222EFF28BDEA4B0A6CAE9E9D0F01082E8E47F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9GMF8kpaFfiuRA9xAjNXGsAK1nPXnwZJzWTgDgNL7bMs/0/3138362e3235312e35322e302f32332d3233203d3e20323632383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:cf:fe:3e:8c:29:a3:93:bf:06:db:ac:a6:b6:f2:3e:0b:54:
         f9:20:6f:15:18:d5:e3:ef:ff:e2:4c:55:28:0f:48:bd:31:9e:
         7a:df:59:b1:b8:6a:6f:d9:0d:95:36:9e:fb:f1:83:e0:ed:9a:
         28:c2:15:7d:06:7f:c2:ce:a2:24:bb:1f:51:73:c5:bf:64:b0:
         12:3c:54:fc:52:3a:12:2c:c6:55:14:09:57:7a:6f:1c:c2:f4:
         09:07:4a:51:5d:28:31:f0:03:76:a1:1e:49:4b:8e:02:1e:1e:
         8e:cd:dd:5c:6a:b6:42:10:b2:80:34:46:f4:a8:07:1e:3a:d0:
         66:41:41:26:d6:8f:09:c8:fb:d1:4e:2a:66:47:1d:b4:c2:3f:
         32:d7:8d:db:a8:e9:20:cd:ad:99:42:29:f0:74:35:f7:e5:2f:
         d2:6c:4e:fe:af:8b:66:5d:54:23:c7:38:36:05:da:42:bb:d0:
         f2:05:a9:ac:7f:1e:dc:b4:45:b6:08:ec:da:1e:bd:0f:f4:4a:
         b1:71:31:da:9f:bc:f2:e9:ec:17:34:d0:7e:b7:89:9f:cf:64:
         ab:5f:c9:11:d9:11:44:fb:d4:38:58:d6:49:ae:f9:7b:e4:b8:
         79:97:36:47:cd:51:d8:6a:72:3d:ba:79:ec:1e:72:5d:97:55:
         f4:b6:67:60
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHzDEGOHaokgCisAL3wBYXNxCW/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQyMjJFRkYyOEJERUE0QjBBNkNBRTlFOUQwRjAxMDgy
RThFNDdGNzAeFw0yNjA3MDUyMzUyNDJaFw0yNzA3MDQyMzU3NDJaMDMxMTAvBgNV
BAMTKDc1OEM0MEZDRjM2MDlBMDlCQjNFNUE1NURERUREREIyNDcwN0I0ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Eg3JaL8WxpT8Cpi8QCQgwi6l
qvgdKvJP/FVS7ASwpTAFtShIe+2tb4I5VuvOu0lA0aBoIxLmK1CpGQmizZ2lqdlI
0bwNwVDyCozkjKQBdEn926ayZsRtEYEin3E4/GgtG6THmXqP+k5m4gCR6zPyikgO
IGfbuEfx+MTQQ0TEh+moaBFn5Dk6iR+Ey8VtxZ8JqWYZOUQHUtdANpHwLzv2Tqmi
IUNHs36gMrYrG7msA2WZuOI7mB88qHJjqoT5XYpivfGY0qL2WBe7gHZHMgLHFDq+
amRN9ZnuYkc/pEhySnlKfAE4qx3RAXuhDenRq5ncnOy5r8Md13hHGP6i1aIlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdYxA/PNgmgm7PlpV3e3dskcHtIAwHwYDVR0j
BBgwFoAUhCIu/yi96ksKbK6enQ8BCC6OR/cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUdNRjhrcGFGZml1UkE5eEFqTlhHc0FLMW5QWG53Wkp6V1RnRGdOTDdi
TXMvMC84NDIyMkVGRjI4QkRFQTRCMEE2Q0FFOUU5RDBGMDEwODJFOEU0N0Y3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MjIyRUZGMjhCREVBNEIw
QTZDQUU5RTlEMEYwMTA4MkU4RTQ3RjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlHTUY4a3BhRmZpdVJBOXhBak5YR3NBSzFuUFhud1pKeldUZ0RnTkw3Yk1zLzAv
MzEzODM2MmUzMjM1MzEyZTM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzODMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG6+zQwDQYJKoZIhvcNAQELBQADggEBACrP/j6M
KaOTvwbbrKa28j4LVPkgbxUY1ePv/+JMVSgPSL0xnnrfWbG4am/ZDZU2nvvxg+Dt
mijCFX0Gf8LOoiS7H1Fzxb9ksBI8VPxSOhIsxlUUCVd6bxzC9AkHSlFdKDHwA3ah
HklLjgIeHo7N3VxqtkIQsoA0RvSoBx460GZBQSbWjwnI+9FOKmZHHbTCPzLXjduo
6SDNrZlCKfB0NfflL9JsTv6vi2ZdVCPHODYF2kK70PIFqax/Hty0RbYI7NoevQ/0
SrFxMdqfvPLp7Bc00H63iZ/PZKtfyRHZEUT71DhY1kmu+XvkuHmXNkfNUdhqcj26
eewecl2XVfS2Z2A=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:56:46 2026 by rpki-client