Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
File:                     3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          w0Rkjy1UWZSKJdx2AzSwB/D6Ic7o2OMDfX25bo2mino=
Subject key identifier:   58:8C:FF:92:04:B0:8E:2F:D2:85:2E:BC:71:CF:60:CB:28:FB:F6:54
Certificate issuer:       /CN=A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37
Certificate serial:       390D4964F6C04EFA8B4E7E82B9A40A5BFC16422B
Authority key identifier: A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
Signing time:             Wed 01 Apr 2026 13:09:03 +0000
ROA not before:           Wed 01 Apr 2026 13:04:03 +0000
ROA not after:            Wed 31 Mar 2027 13:09:03 +0000
asID:                     266163
IP address blocks:        186.2.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.crl
                          rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 01:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0d:49:64:f6:c0:4e:fa:8b:4e:7e:82:b9:a4:0a:5b:fc:16:42:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37
        Validity
            Not Before: Apr  1 13:04:03 2026 GMT
            Not After : Mar 31 13:09:03 2027 GMT
        Subject: CN=588CFF9204B08E2FD2852EBC71CF60CB28FBF654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:08:d1:2f:8a:26:e3:fa:83:c2:7e:56:2e:
                    cf:63:2d:e4:8b:2c:14:2c:e0:f6:a4:b2:7d:bd:26:
                    06:c8:13:8a:94:29:ec:5d:4f:27:04:82:b7:f8:ea:
                    91:bd:ff:ee:60:5d:80:49:40:2b:81:23:a5:a9:88:
                    7e:02:ca:73:0e:6a:08:60:4d:ec:a8:7e:2a:db:b8:
                    3c:7e:7b:4d:d5:e2:a2:d9:bf:16:17:b5:0c:ae:b9:
                    81:47:92:40:0b:f0:ec:4d:e0:f8:8d:fa:f6:69:23:
                    9b:4b:06:a0:da:cf:ee:8a:af:0e:05:16:50:c8:32:
                    88:31:c0:1f:da:71:65:a4:44:67:08:ca:6e:2d:11:
                    1e:18:24:36:75:05:e7:92:d0:f4:0f:89:ba:25:24:
                    1c:04:0e:3c:5c:5b:72:24:9a:81:28:b9:ec:4b:58:
                    f1:2a:71:63:2f:2a:17:71:6b:5c:df:ce:ad:37:8c:
                    d2:cd:b6:ce:20:e0:85:72:4d:17:3b:12:77:da:8c:
                    78:d0:06:f8:a1:10:be:a8:5b:5c:15:57:c0:f3:07:
                    b8:4a:0b:da:79:eb:30:e6:bf:e3:ee:07:67:53:fa:
                    66:f6:b0:b3:61:8c:4a:7d:f3:3e:6f:3a:b8:27:32:
                    14:7a:25:4f:ea:e6:58:fc:4c:3d:67:62:d3:08:3b:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8C:FF:92:04:B0:8E:2F:D2:85:2E:BC:71:CF:60:CB:28:FB:F6:54
            X509v3 Authority Key Identifier:
                keyid:A4:2B:F3:C2:93:8E:A7:FF:E9:BE:4C:65:24:A2:9B:05:62:6A:FE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A42BF3C2938EA7FFE9BE4C6524A29B05626AFE37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:d0:00:ba:51:c4:2d:79:db:f2:4d:ab:42:b2:84:67:d0:
         78:4e:df:b2:7d:52:31:e5:10:7b:55:9b:11:b9:bf:c6:5b:55:
         aa:f9:d8:cb:38:5d:00:52:f4:a5:7d:8f:d6:48:96:87:6f:aa:
         d1:f5:35:b2:ab:0d:d5:a7:26:1e:a7:82:f4:e6:60:6f:10:06:
         d1:45:e1:e6:02:7c:cd:a1:70:02:f2:dd:87:8f:4f:ad:1c:b4:
         3c:88:c3:06:96:a2:de:a4:54:c3:de:6f:12:69:51:f7:9d:8c:
         09:ac:bb:8c:e9:32:2c:d4:1b:37:68:cd:65:36:77:dc:98:22:
         72:52:7e:a6:db:bd:71:83:bb:d2:47:e7:39:06:a1:37:05:b0:
         df:a2:4b:58:30:8a:e9:fc:72:aa:3e:d3:70:a7:8b:bb:31:0a:
         3d:b4:05:19:d4:a2:2f:fb:d6:a6:92:2d:3b:d9:7e:95:2c:85:
         7f:59:1a:a3:74:97:73:84:5c:c7:f5:e6:f6:6a:7b:49:fd:f0:
         3c:0e:e7:80:ea:36:f8:12:1b:02:42:90:56:02:be:6a:f5:d8:
         fd:3d:8c:7d:76:56:c6:38:38:f0:4f:1e:1d:8b:f6:e5:a1:61:
         cf:72:e2:f4:87:cf:ea:13:27:41:30:db:7e:22:b7:1d:04:4c:
         d8:e1:73:e7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOQ1JZPbATvqLTn6CuaQKW/wWQiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQyQkYzQzI5MzhFQTdGRkU5QkU0QzY1MjRBMjlCMDU2
MjZBRkUzNzAeFw0yNjA0MDExMzA0MDNaFw0yNzAzMzExMzA5MDNaMDMxMTAvBgNV
BAMTKDU4OENGRjkyMDRCMDhFMkZEMjg1MkVCQzcxQ0Y2MENCMjhGQkY2NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS8wjRL4om4/qDwn5WLs9jLeSL
LBQs4Paksn29JgbIE4qUKexdTycEgrf46pG9/+5gXYBJQCuBI6WpiH4CynMOaghg
TeyofirbuDx+e03V4qLZvxYXtQyuuYFHkkAL8OxN4PiN+vZpI5tLBqDaz+6Krw4F
FlDIMogxwB/acWWkRGcIym4tER4YJDZ1BeeS0PQPibolJBwEDjxcW3IkmoEouexL
WPEqcWMvKhdxa1zfzq03jNLNts4g4IVyTRc7EnfajHjQBvihEL6oW1wVV8DzB7hK
C9p56zDmv+PuB2dT+mb2sLNhjEp98z5vOrgnMhR6JU/q5lj8TD1nYtMIO0iLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWIz/kgSwji/ShS68cc9gyyj79lQwHwYDVR0j
BBgwFoAUpCvzwpOOp//pvkxlJKKbBWJq/jcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC9BNDJCRjNDMjkzOEVBN0ZGRTlCRTRDNjUyNEEyOUIwNTYyNkFGRTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0MkJGM0MyOTM4RUE3RkZF
OUJFNEM2NTI0QTI5QjA1NjI2QUZFMzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAugL7MA0GCSqGSIb3DQEBCwUAA4IBAQCpotAAulHE
LXnb8k2rQrKEZ9B4Tt+yfVIx5RB7VZsRub/GW1Wq+djLOF0AUvSlfY/WSJaHb6rR
9TWyqw3VpyYep4L05mBvEAbRReHmAnzNoXAC8t2Hj0+tHLQ8iMMGlqLepFTD3m8S
aVH3nYwJrLuM6TIs1Bs3aM1lNnfcmCJyUn6m271xg7vSR+c5BqE3BbDfoktYMIrp
/HKqPtNwp4u7MQo9tAUZ1KIv+9amki072X6VLIV/WRqjdJdzhFzH9eb2antJ/fA8
DueA6jb4EhsCQpBWAr5q9dj9PYx9dlbGODjwTx4di/bloWHPcuL0h8/qEydBMNt+
IrcdBEzY4XPn
-----END CERTIFICATE-----
Generated at Thu Apr 9 18:56:43 2026 by rpki-client