Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa
File:                     3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa (raw, json)
Hash identifier:          6usHz3+mqcfGTvGn4dRYN3S7uTdqwQG5qEnYsoLEnl4=
Subject key identifier:   14:3F:22:D2:2F:7F:8B:CB:36:DF:E5:ED:D3:68:FD:19:68:9E:41:7C
Certificate issuer:       /CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
Certificate serial:       03BF30AC898C5431A0CE6C25361BD02F48700D3F
Authority key identifier: D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa
Signing time:             Wed 09 Sep 2026 15:15:52 +0000
ROA not before:           Wed 09 Sep 2026 15:10:52 +0000
ROA not after:            Wed 08 Sep 2027 15:15:52 +0000
asID:                     263022
IP address blocks:        186.249.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl
                          rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 06:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:bf:30:ac:89:8c:54:31:a0:ce:6c:25:36:1b:d0:2f:48:70:0d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE7005278F3F9252FA4D5C51715A6B1BF81E7
        Validity
            Not Before: Sep  9 15:10:52 2026 GMT
            Not After : Sep  8 15:15:52 2027 GMT
        Subject: CN=143F22D22F7F8BCB36DFE5EDD368FD19689E417C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:7d:16:9a:1b:60:a8:e6:bc:66:a7:ae:31:
                    7d:f4:05:d8:30:c1:64:84:86:1d:a0:f1:f6:d0:24:
                    47:88:e1:5b:8d:55:ac:58:d8:65:2d:9b:a4:5c:18:
                    e3:83:2e:36:85:e2:bb:9e:8c:f5:e8:83:f4:f8:0e:
                    65:f4:d9:16:5a:ae:aa:59:27:6f:e0:6f:cd:9b:f1:
                    c5:95:94:fe:c7:74:06:13:bd:e9:18:1e:6c:85:39:
                    ff:50:d8:14:47:20:e8:7a:51:46:57:c7:2c:15:a5:
                    33:3b:5c:1a:0f:8d:84:38:cf:8b:5b:4a:be:b3:36:
                    45:53:6d:e9:3b:6b:40:25:c6:ef:a1:83:2d:d5:1a:
                    7a:34:4d:37:94:12:e3:66:3d:49:a5:4a:52:26:40:
                    b5:b6:24:ba:dc:a2:20:b4:be:5c:84:f3:e4:ae:cc:
                    8a:3b:90:b7:31:ab:7c:79:9d:5a:94:b9:eb:9b:29:
                    0e:79:fd:d6:69:e7:4e:09:a5:2e:76:d3:b6:b1:f4:
                    34:71:76:9c:4c:53:7b:e1:e5:f6:8f:b5:70:1d:a4:
                    54:e0:0a:50:a1:19:ba:3e:8c:9e:b9:ff:c2:0a:51:
                    18:3b:1b:64:9d:fa:7d:90:e7:f0:6c:e4:f1:fe:f2:
                    49:d2:10:ea:d3:4e:68:c8:ea:62:92:b7:b9:69:6b:
                    0c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3F:22:D2:2F:7F:8B:CB:36:DF:E5:ED:D3:68:FD:19:68:9E:41:7C
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E7:00:52:78:F3:F9:25:2F:A4:D5:C5:17:15:A6:B1:BF:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D55BE7005278F3F9252FA4D5C51715A6B1BF81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9pt3rKyejMed5xh8P8uxUCosy5iiQrcVFzZFxXT5BqBC/0/3138362e3234392e32302e302f32332d3233203d3e20323633303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:00:33:a8:7f:69:66:dd:68:6b:89:2a:17:7b:01:97:3a:19:
         86:36:9e:c3:f6:25:6b:a0:b8:c7:b4:3d:68:b1:fd:cd:13:eb:
         ef:e3:2b:0e:dd:ce:f2:93:4f:04:6b:cd:e9:e5:fa:3e:a2:61:
         a0:67:03:5b:08:e8:22:6b:a5:5c:dd:1c:86:a2:35:8b:0f:a1:
         2d:6e:64:1f:b8:68:0e:67:8c:ac:e9:31:e3:b8:50:c4:a2:91:
         d2:d2:03:fe:ce:e8:d1:a3:b3:5d:cd:06:41:f1:0f:f0:5b:69:
         f0:7a:eb:69:55:a5:2c:ff:ac:44:f2:cb:2f:fb:64:e9:1b:90:
         a7:12:1c:1b:58:df:81:4c:df:94:8d:f2:e3:a3:30:80:37:0c:
         76:df:93:1e:0a:fd:f3:54:dd:33:af:13:4d:90:32:7f:b4:1b:
         3c:6b:e7:bb:b6:a3:09:ec:4e:81:73:67:b2:3c:67:f0:ff:ef:
         a1:49:b7:b7:ce:8b:55:a7:ab:a9:b7:3a:d2:25:f6:de:a6:67:
         84:74:a6:d3:7f:da:9e:4a:6e:fb:f8:2d:d0:d2:e0:20:cb:db:
         0e:a4:da:61:3f:39:df:f3:48:e9:6d:8e:6c:e4:a9:b5:f7:c7:
         5e:2b:85:91:6d:1d:0c:f3:1d:f8:48:e0:ed:ec:cc:1f:14:2e:
         39:1b:f4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----