Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/3138312e3139312e3134342e302f32322d3234203d3e20323637343235.roa
File:                     3138312e3139312e3134342e302f32322d3234203d3e20323637343235.roa (raw, json)
Hash identifier:          kJeHUgFtZA/tp7ryqxkaBSbqFfAQaWFNHTjFqb4DNWM=
Subject key identifier:   24:67:10:B9:9B:6C:F9:31:D1:58:6D:41:11:0D:95:AE:41:42:B5:22
Certificate issuer:       /CN=974088B187641C2D7EE020B87DE9146973E67BEE
Certificate serial:       5B5D7FC47941B6533950DF79F61A080615559165
Authority key identifier: 97:40:88:B1:87:64:1C:2D:7E:E0:20:B8:7D:E9:14:69:73:E6:7B:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974088B187641C2D7EE020B87DE9146973E67BEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/3138312e3139312e3134342e302f32322d3234203d3e20323637343235.roa
Signing time:             Fri 19 Jun 2026 13:36:33 +0000
ROA not before:           Fri 19 Jun 2026 13:31:33 +0000
ROA not after:            Fri 18 Jun 2027 13:36:33 +0000
asID:                     267425
IP address blocks:        181.191.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/974088B187641C2D7EE020B87DE9146973E67BEE.crl
                          rsync://rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/974088B187641C2D7EE020B87DE9146973E67BEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974088B187641C2D7EE020B87DE9146973E67BEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 29 Jun 2026 20:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5d:7f:c4:79:41:b6:53:39:50:df:79:f6:1a:08:06:15:55:91:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974088B187641C2D7EE020B87DE9146973E67BEE
        Validity
            Not Before: Jun 19 13:31:33 2026 GMT
            Not After : Jun 18 13:36:33 2027 GMT
        Subject: CN=246710B99B6CF931D1586D41110D95AE4142B522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:62:42:6e:15:76:bf:ce:7a:70:98:fb:55:
                    d3:05:8f:3d:e8:eb:f8:b1:33:04:a7:c6:0c:94:a7:
                    7a:5c:99:21:ed:d8:de:9b:a1:b8:91:2e:72:db:75:
                    a7:31:63:93:e8:d0:d9:f7:9a:70:4b:5d:40:0f:2a:
                    c3:54:61:e3:11:fc:5a:02:bd:9f:30:40:5d:bf:83:
                    3e:60:4d:d0:d1:38:a8:f1:15:98:9d:77:80:b1:21:
                    65:55:f8:fe:21:de:07:61:73:ac:d7:fb:86:2a:02:
                    cd:ea:45:e6:c5:bb:12:4c:c0:5e:ce:b2:17:25:6d:
                    98:6a:7c:9d:be:12:05:94:1c:b6:ec:3e:86:6b:93:
                    95:e3:d9:6f:ab:e0:4d:20:d9:f7:96:49:fa:40:08:
                    37:99:f6:ce:e5:a9:a4:9f:d7:a6:5f:db:08:92:e8:
                    23:af:ff:bf:1b:df:b1:c1:79:f7:91:97:3c:d6:2e:
                    28:61:da:34:41:57:40:49:5e:8b:19:3f:de:08:6b:
                    b3:f3:39:1b:3d:ab:c2:41:0c:8d:a1:86:71:0e:10:
                    b7:bd:33:67:52:8c:b6:40:40:e4:ad:9f:15:69:ae:
                    fc:e3:77:87:51:77:99:2d:da:e8:a0:59:60:0b:90:
                    f0:5a:9d:d9:36:df:fc:40:ca:22:ae:1b:ab:bf:42:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:67:10:B9:9B:6C:F9:31:D1:58:6D:41:11:0D:95:AE:41:42:B5:22
            X509v3 Authority Key Identifier:
                keyid:97:40:88:B1:87:64:1C:2D:7E:E0:20:B8:7D:E9:14:69:73:E6:7B:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/974088B187641C2D7EE020B87DE9146973E67BEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/974088B187641C2D7EE020B87DE9146973E67BEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AdLZvxcK6pP34QgZC8cqSdBXRvbaCaRe8dPniyDGC76a/0/3138312e3139312e3134342e302f32322d3234203d3e20323637343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:a9:e8:a4:a8:15:b1:2e:cd:98:84:d7:9b:87:86:9f:a1:
         d0:2b:83:f2:07:b7:91:75:d0:8a:e7:2d:2f:09:00:a4:a7:f6:
         e9:e8:e9:b4:50:5e:6e:0a:a9:55:05:01:11:94:47:06:ca:25:
         cc:7a:fb:a8:d7:14:da:5b:65:8d:c5:09:30:7e:b5:f4:7e:a8:
         b8:99:aa:4f:87:28:21:67:26:2e:af:92:c0:ea:98:a3:3b:c6:
         32:ee:4d:be:4f:bb:f3:0f:1b:72:93:80:1d:b2:f1:11:4d:8f:
         70:3f:b5:03:a5:98:0f:98:95:14:0f:6e:33:a6:c2:ed:b7:4a:
         1f:6b:66:3c:16:57:70:d7:95:ae:a3:1a:ff:e5:e9:b1:d2:64:
         8e:8e:e0:13:46:01:55:02:4c:7d:05:6a:fe:30:2e:b7:b0:0b:
         b6:19:d4:01:fa:da:9c:69:72:84:87:a2:b1:14:ec:6d:06:b2:
         a8:b0:38:97:1e:e2:79:ae:12:86:9f:c1:2d:c7:14:7c:fe:35:
         14:68:78:cf:26:91:e6:64:34:4c:44:07:2f:3f:91:20:20:97:
         d1:d6:86:22:7f:9b:7f:ce:56:64:19:36:92:c1:21:ba:49:9b:
         9c:5f:2a:77:1b:22:38:d6:fb:e9:5b:10:ee:8b:21:6d:6e:8b:
         c1:f9:b9:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUW11/xHlBtlM5UN959hoIBhVVkWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0MDg4QjE4NzY0MUMyRDdFRTAyMEI4N0RFOTE0Njk3
M0U2N0JFRTAeFw0yNjA2MTkxMzMxMzNaFw0yNzA2MTgxMzM2MzNaMDMxMTAvBgNV
BAMTKDI0NjcxMEI5OUI2Q0Y5MzFEMTU4NkQ0MTExMEQ5NUFFNDE0MkI1MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxrGJCbhV2v856cJj7VdMFjz3o
6/ixMwSnxgyUp3pcmSHt2N6bobiRLnLbdacxY5Po0Nn3mnBLXUAPKsNUYeMR/FoC
vZ8wQF2/gz5gTdDROKjxFZidd4CxIWVV+P4h3gdhc6zX+4YqAs3qRebFuxJMwF7O
shclbZhqfJ2+EgWUHLbsPoZrk5Xj2W+r4E0g2feWSfpACDeZ9s7lqaSf16Zf2wiS
6COv/78b37HBefeRlzzWLihh2jRBV0BJXosZP94Ia7PzORs9q8JBDI2hhnEOELe9
M2dSjLZAQOStnxVprvzjd4dRd5kt2uigWWALkPBandk23/xAyiKuG6u/QrMNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJGcQuZts+THRWG1BEQ2VrkFCtSIwHwYDVR0j
BBgwFoAUl0CIsYdkHC1+4CC4fekUaXPme+4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWRMWnZ4Y0s2cFAzNFFnWkM4Y3FTZEJYUnZiYUNhUmU4ZFBuaXlER0M3
NmEvMC85NzQwODhCMTg3NjQxQzJEN0VFMDIwQjg3REU5MTQ2OTczRTY3QkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NDA4OEIxODc2NDFDMkQ3
RUUwMjBCODdERTkxNDY5NzNFNjdCRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkTFp2eGNLNnBQMzRRZ1pDOGNxU2RCWFJ2YmFDYVJlOGRQbml5REdDNzZhLzAv
MzEzODMxMmUzMTM5MzEyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArW/kDANBgkqhkiG9w0BAQsFAAOCAQEAFYyp
6KSoFbEuzZiE15uHhp+h0CuD8ge3kXXQiuctLwkApKf26ejptFBebgqpVQUBEZRH
BsolzHr7qNcU2ltljcUJMH619H6ouJmqT4coIWcmLq+SwOqYozvGMu5Nvk+78w8b
cpOAHbLxEU2PcD+1A6WYD5iVFA9uM6bC7bdKH2tmPBZXcNeVrqMa/+XpsdJkjo7g
E0YBVQJMfQVq/jAut7ALthnUAfranGlyhIeisRTsbQayqLA4lx7iea4Shp/BLccU
fP41FGh4zyaR5mQ0TEQHLz+RICCX0daGIn+bf85WZBk2ksEhukmbnF8qdxsiONb7
6VsQ7oshbW6Lwfm5/g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:44:22 2026 by rpki-client