Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa
File:                     3138392e38392e36382e302f32332d3234203d3e203238313834.roa (raw, json)
Hash identifier:          j4kYg506EBElUyoQqfX1KjCL79F3wXfASwTxsFIfw4E=
Subject key identifier:   9F:37:32:16:44:2C:E3:F8:C6:B4:36:8B:2C:BE:5B:72:09:41:1C:A1
Certificate issuer:       /CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
Certificate serial:       318BCD0784C7170A8A39C76ABDD46A40E6CF37ED
Authority key identifier: 4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa
Signing time:             Thu 29 Jan 2026 12:08:32 +0000
ROA not before:           Thu 29 Jan 2026 12:03:32 +0000
ROA not after:            Thu 28 Jan 2027 12:08:32 +0000
asID:                     28184
IP address blocks:        189.89.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl
                          rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 13:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8b:cd:07:84:c7:17:0a:8a:39:c7:6a:bd:d4:6a:40:e6:cf:37:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CFC780BA70D9ACD714A4EF26B114778CBF39F40
        Validity
            Not Before: Jan 29 12:03:32 2026 GMT
            Not After : Jan 28 12:08:32 2027 GMT
        Subject: CN=9F373216442CE3F8C6B4368B2CBE5B7209411CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:79:78:4b:0d:02:dd:1d:3e:9b:08:f9:c0:cf:
                    2c:ef:bf:4d:e0:06:0c:ad:b7:0d:cb:23:45:79:6d:
                    3f:f9:a0:e8:18:92:19:83:b5:1b:6b:97:50:10:19:
                    05:45:62:7e:78:cf:05:15:41:86:eb:32:ba:fe:a9:
                    c7:71:7b:ab:56:8e:87:bb:ce:0d:ea:db:4d:e3:48:
                    86:d7:3c:66:ff:85:73:7f:3f:61:92:53:04:47:79:
                    74:d4:63:4b:f0:c6:70:a7:32:b6:e2:6a:8d:14:ac:
                    0a:aa:db:0d:e5:b3:e3:92:dc:fa:1f:96:0a:47:fd:
                    0d:b2:d4:90:a5:70:b5:cf:8a:d4:b1:a8:3c:a6:ec:
                    c7:08:42:e5:25:93:de:92:f5:3d:d8:7b:d8:b0:bd:
                    47:9d:e2:8d:d3:cc:3e:08:af:5c:46:eb:32:6d:db:
                    54:f6:ae:01:90:cd:b3:58:78:ac:b6:3a:99:41:91:
                    48:eb:8b:57:df:63:ca:e9:ca:0e:f7:fe:86:f6:91:
                    5f:b7:86:66:7f:bd:88:d4:a9:91:a1:15:84:59:da:
                    24:6b:59:9a:4e:dd:5a:80:1d:4f:3c:5b:9c:ed:eb:
                    4e:02:e0:de:f9:2c:db:3e:56:df:99:93:2d:10:8d:
                    2b:a6:df:9a:68:22:dd:46:73:9b:fe:c7:4f:a9:a7:
                    85:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:37:32:16:44:2C:E3:F8:C6:B4:36:8B:2C:BE:5B:72:09:41:1C:A1
            X509v3 Authority Key Identifier:
                keyid:4C:FC:78:0B:A7:0D:9A:CD:71:4A:4E:F2:6B:11:47:78:CB:F3:9F:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CFC780BA70D9ACD714A4EF26B114778CBF39F40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3234203d3e203238313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.89.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:bf:26:34:13:d9:29:ec:4a:14:b5:51:5a:1c:a8:dd:4f:07:
         51:23:8b:ba:44:44:5a:93:11:08:d2:10:e7:51:59:15:ec:e5:
         a6:90:e6:64:4b:61:49:0a:73:8c:c9:18:87:e9:89:25:0d:3a:
         53:dc:1c:f8:83:b3:83:1b:45:55:b8:c3:73:ab:03:3a:b9:b2:
         7b:a8:32:99:b1:a3:bf:42:56:8e:d1:64:ee:2d:cd:fd:29:1f:
         e2:e2:4a:5c:53:ff:15:92:b9:30:72:26:c7:7b:57:6f:8e:a2:
         ac:08:06:78:d0:a7:08:ec:eb:60:56:eb:2f:b5:04:0d:d5:2f:
         40:d5:54:d8:f2:17:cd:0d:5b:fb:eb:da:dc:12:7c:16:d5:d9:
         04:d0:5f:d1:81:23:c5:c6:76:78:a0:fc:eb:9b:43:13:6f:23:
         62:db:4a:cc:53:15:af:a3:59:c1:f0:62:1a:f9:7b:aa:d0:2f:
         07:97:d3:a2:54:d1:71:e1:fe:10:a3:7b:b9:53:8b:18:35:87:
         00:3e:15:7a:85:1e:e0:cb:14:cc:34:b9:74:6d:41:a0:63:54:
         0b:12:ab:52:2e:d3:e1:60:80:c6:04:60:d2:48:8f:d2:23:70:
         d5:3e:44:f2:4a:45:a2:53:4a:23:d7:b9:fc:f3:ed:23:c3:e4:
         5b:3d:a1:c0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMYvNB4THFwqKOcdqvdRqQObPN+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENGQzc4MEJBNzBEOUFDRDcxNEE0RUYyNkIxMTQ3NzhD
QkYzOUY0MDAeFw0yNjAxMjkxMjAzMzJaFw0yNzAxMjgxMjA4MzJaMDMxMTAvBgNV
BAMTKDlGMzczMjE2NDQyQ0UzRjhDNkI0MzY4QjJDQkU1QjcyMDk0MTFDQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeXhLDQLdHT6bCPnAzyzvv03g
Bgyttw3LI0V5bT/5oOgYkhmDtRtrl1AQGQVFYn54zwUVQYbrMrr+qcdxe6tWjoe7
zg3q203jSIbXPGb/hXN/P2GSUwRHeXTUY0vwxnCnMrbiao0UrAqq2w3ls+OS3Pof
lgpH/Q2y1JClcLXPitSxqDym7McIQuUlk96S9T3Ye9iwvUed4o3TzD4Ir1xG6zJt
21T2rgGQzbNYeKy2OplBkUjri1ffY8rpyg73/ob2kV+3hmZ/vYjUqZGhFYRZ2iRr
WZpO3VqAHU88W5zt604C4N75LNs+Vt+Zky0QjSum35poIt1Gc5v+x0+pp4UNAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUnzcyFkQs4/jGtDaLLL5bcglBHKEwHwYDVR0j
BBgwFoAUTPx4C6cNms1xSk7yaxFHeMvzn0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUt1Vmg2MnNlaG5Hcm40ZWd3RlZRUFZWa3RqbW9kdFB3NXFwUEtWa1JL
emUvMC80Q0ZDNzgwQkE3MEQ5QUNENzE0QTRFRjI2QjExNDc3OENCRjM5RjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRkM3ODBCQTcwRDlBQ0Q3
MTRBNEVGMjZCMTE0Nzc4Q0JGMzlGNDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FLdVZoNjJzZWhuR3JuNGVnd0ZWUVBWVmt0am1vZHRQdzVxcFBLVmtSS3plLzAv
MzEzODM5MmUzODM5MmUzNjM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzODMx
MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAb1ZRDANBgkqhkiG9w0BAQsFAAOCAQEARL8mNBPZKexK
FLVRWhyo3U8HUSOLukREWpMRCNIQ51FZFezlppDmZEthSQpzjMkYh+mJJQ06U9wc
+IOzgxtFVbjDc6sDOrmye6gymbGjv0JWjtFk7i3N/Skf4uJKXFP/FZK5MHImx3tX
b46irAgGeNCnCOzrYFbrL7UEDdUvQNVU2PIXzQ1b++va3BJ8FtXZBNBf0YEjxcZ2
eKD865tDE28jYttKzFMVr6NZwfBiGvl7qtAvB5fTolTRceH+EKN7uVOLGDWHAD4V
eoUe4MsUzDS5dG1BoGNUCxKrUi7T4WCAxgRg0kiP0iNw1T5E8kpFolNKI9e5/PPt
I8PkWz2hwA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:31:56 2026 by rpki-client