Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3332203d3e20323635313339.roa
File:                     3134332e3235352e35322e302f32322d3332203d3e20323635313339.roa (raw, json)
Hash identifier:          FI4dCsctjPk2BaCfDDcXqJuk5umz+eg5FeJnwJpcOIQ=
Subject key identifier:   E6:C6:05:A9:0B:B0:AB:AB:62:93:CD:7F:12:B6:F4:56:FD:79:F5:E6
Certificate issuer:       /CN=B26776C56C2E572C6C609EC342C12F55B08688B5
Certificate serial:       291FBE674C6AE5A55F875CE9BABCC038C756A8F9
Authority key identifier: B2:67:76:C5:6C:2E:57:2C:6C:60:9E:C3:42:C1:2F:55:B0:86:88:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B26776C56C2E572C6C609EC342C12F55B08688B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3332203d3e20323635313339.roa
Signing time:             Wed 30 Sep 2026 17:56:36 +0000
ROA not before:           Wed 30 Sep 2026 17:51:36 +0000
ROA not after:            Wed 29 Sep 2027 17:56:36 +0000
asID:                     265139
IP address blocks:        143.255.52.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/B26776C56C2E572C6C609EC342C12F55B08688B5.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/B26776C56C2E572C6C609EC342C12F55B08688B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B26776C56C2E572C6C609EC342C12F55B08688B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 07:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1f:be:67:4c:6a:e5:a5:5f:87:5c:e9:ba:bc:c0:38:c7:56:a8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B26776C56C2E572C6C609EC342C12F55B08688B5
        Validity
            Not Before: Sep 30 17:51:36 2026 GMT
            Not After : Sep 29 17:56:36 2027 GMT
        Subject: CN=E6C605A90BB0ABAB6293CD7F12B6F456FD79F5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:66:d0:75:8c:23:11:2e:b6:8a:7f:5c:a4:a1:
                    74:4e:73:0c:4c:d9:a4:40:ab:68:fc:0b:c3:64:59:
                    64:31:07:6d:ce:ca:52:a7:a3:b9:c9:cc:eb:98:f8:
                    c6:11:44:bd:b9:3c:ef:79:22:52:3d:e7:8d:68:09:
                    11:ac:0e:87:6c:e0:ea:ae:25:10:07:73:d5:34:0d:
                    c4:f5:01:87:d4:f0:b4:fe:6a:eb:ba:4a:26:84:4a:
                    2f:42:0b:40:1b:39:e9:a1:34:8f:5b:98:a5:66:bd:
                    f0:fa:1a:59:3c:bc:b2:c9:04:1c:cd:3f:6b:a2:34:
                    d8:36:e3:c3:d2:83:4e:62:2e:b1:66:15:85:8a:6a:
                    66:7b:30:c7:09:a7:8d:ab:3c:cb:b5:72:7b:e1:1d:
                    b4:91:99:0b:80:69:43:e5:3d:8e:9e:19:7c:8f:65:
                    26:37:c7:24:5e:1f:d8:96:a7:ba:df:5e:e0:cd:e2:
                    9c:8f:d0:60:59:70:e0:bd:2e:64:e4:d9:5a:ef:c6:
                    be:d4:f0:36:7a:7f:d3:ff:17:6d:70:f0:53:fc:55:
                    20:ce:54:90:f5:d6:f3:5d:47:76:f0:3c:12:d2:0d:
                    66:44:f2:16:37:b3:a3:be:e0:a9:83:6b:4b:d8:89:
                    a9:55:de:9d:4e:04:c1:16:06:3a:53:8d:ca:69:62:
                    d9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C6:05:A9:0B:B0:AB:AB:62:93:CD:7F:12:B6:F4:56:FD:79:F5:E6
            X509v3 Authority Key Identifier:
                keyid:B2:67:76:C5:6C:2E:57:2C:6C:60:9E:C3:42:C1:2F:55:B0:86:88:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/B26776C56C2E572C6C609EC342C12F55B08688B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B26776C56C2E572C6C609EC342C12F55B08688B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3332203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:a1:5f:b5:53:88:b0:6d:85:ba:60:c0:0b:4a:fa:a3:ac:
         01:a3:d5:a8:a4:3a:0d:d6:e0:f6:fd:bb:a3:1d:34:9f:ec:4c:
         52:93:b1:80:d0:a8:fb:66:dd:f0:de:d9:0d:96:a0:e3:fc:6d:
         17:6d:a0:66:7d:80:a2:53:b3:b1:fd:b1:96:6d:9d:37:cf:dd:
         e9:04:df:4a:8f:71:82:c0:c7:9d:e7:75:28:1c:92:5f:74:34:
         28:6d:00:d9:2a:f3:c4:2f:75:98:e2:80:44:3a:1e:2a:01:36:
         4d:aa:60:7a:4b:50:2c:e9:cf:a9:71:57:0b:cc:39:52:ad:a0:
         31:85:40:06:55:79:0a:db:86:cb:66:67:f9:b2:3b:23:25:f6:
         73:35:cd:76:34:11:34:ba:44:97:d1:95:c1:dd:3c:20:ec:33:
         e2:c7:59:28:8a:29:c2:d8:77:d1:f9:bb:4f:83:08:dc:ac:7f:
         00:bb:ab:fa:26:25:3d:57:90:e1:cf:11:8d:6e:e2:bb:f8:c0:
         ed:53:89:ee:92:da:d7:9a:19:1e:d7:00:90:94:94:c7:ba:69:
         99:9c:94:1f:58:52:e4:3f:48:14:40:22:0a:ab:77:a6:1c:cb:
         85:b7:cf:4e:1e:4f:a2:da:a0:b3:a3:fe:f7:3f:ae:18:8d:2f:
         df:28:d0:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKR++Z0xq5aVfh1zpurzAOMdWqPkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI2Nzc2QzU2QzJFNTcyQzZDNjA5RUMzNDJDMTJGNTVC
MDg2ODhCNTAeFw0yNjA5MzAxNzUxMzZaFw0yNzA5MjkxNzU2MzZaMDMxMTAvBgNV
BAMTKEU2QzYwNUE5MEJCMEFCQUI2MjkzQ0Q3RjEyQjZGNDU2RkQ3OUY1RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZtB1jCMRLraKf1ykoXROcwxM
2aRAq2j8C8NkWWQxB23OylKno7nJzOuY+MYRRL25PO95IlI9541oCRGsDods4Oqu
JRAHc9U0DcT1AYfU8LT+auu6SiaESi9CC0AbOemhNI9bmKVmvfD6Glk8vLLJBBzN
P2uiNNg248PSg05iLrFmFYWKamZ7MMcJp42rPMu1cnvhHbSRmQuAaUPlPY6eGXyP
ZSY3xyReH9iWp7rfXuDN4pyP0GBZcOC9LmTk2Vrvxr7U8DZ6f9P/F21w8FP8VSDO
VJD11vNdR3bwPBLSDWZE8hY3s6O+4KmDa0vYialV3p1OBMEWBjpTjcppYtmnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5sYFqQuwq6tik81/Erb0Vv159eYwHwYDVR0j
BBgwFoAUsmd2xWwuVyxsYJ7DQsEvVbCGiLUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVlDQ292QU0zaU1WWlRDN2ExWlhIakVnTUVha25KZlE4Z29QMVZUb2pY
b3ovMC9CMjY3NzZDNTZDMkU1NzJDNkM2MDlFQzM0MkMxMkY1NUIwODY4OEI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IyNjc3NkM1NkMyRTU3MkM2
QzYwOUVDMzQyQzEyRjU1QjA4Njg4QjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FZQ0NvdkFNM2lNVlpUQzdhMVpYSGpFZ01FYWtuSmZROGdvUDFWVG9qWG96LzAv
MzEzNDMzMmUzMjM1MzUyZTM1MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzUzMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP/zQwDQYJKoZIhvcNAQELBQADggEBAIBeoV+1
U4iwbYW6YMALSvqjrAGj1aikOg3W4Pb9u6MdNJ/sTFKTsYDQqPtm3fDe2Q2WoOP8
bRdtoGZ9gKJTs7H9sZZtnTfP3ekE30qPcYLAx53ndSgckl90NChtANkq88QvdZji
gEQ6HioBNk2qYHpLUCzpz6lxVwvMOVKtoDGFQAZVeQrbhstmZ/myOyMl9nM1zXY0
ETS6RJfRlcHdPCDsM+LHWSiKKcLYd9H5u0+DCNysfwC7q/omJT1XkOHPEY1u4rv4
wO1Tie6S2teaGR7XAJCUlMe6aZmclB9YUuQ/SBRAIgqrd6Ycy4W3z04eT6LaoLOj
/vc/rhiNL98o0Ew=
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:31:04 2026 by rpki-client