Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/3138312e3138392e302e302f32322d3332203d3e20323732353532.roa
File:                     3138312e3138392e302e302f32322d3332203d3e20323732353532.roa (raw, json)
Hash identifier:          y03Glg18STWkvKmJUtguNhq/wXjxw5oRLS04b8fINV0=
Subject key identifier:   38:DF:8A:F6:EA:77:8C:30:58:37:8D:2D:92:EE:B9:90:42:C7:95:5A
Certificate issuer:       /CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
Certificate serial:       2A609149FFE31EE63EAD9BC78524F65E24F9B12E
Authority key identifier: F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/3138312e3138392e302e302f32322d3332203d3e20323732353532.roa
Signing time:             Thu 02 Apr 2026 03:50:17 +0000
ROA not before:           Thu 02 Apr 2026 03:45:17 +0000
ROA not after:            Thu 01 Apr 2027 03:50:17 +0000
asID:                     272552
IP address blocks:        181.189.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl
                          rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 05:48:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:60:91:49:ff:e3:1e:e6:3e:ad:9b:c7:85:24:f6:5e:24:f9:b1:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3C37DB435C3DD0D2919B2525FDF688DCCB533FE
        Validity
            Not Before: Apr  2 03:45:17 2026 GMT
            Not After : Apr  1 03:50:17 2027 GMT
        Subject: CN=38DF8AF6EA778C3058378D2D92EEB99042C7955A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:8b:7d:3e:58:a8:bb:41:9a:eb:58:e1:1f:
                    a4:83:44:e7:58:c0:e0:97:25:49:84:3d:3b:7c:23:
                    60:8b:66:a3:1d:31:a1:ca:b1:f7:55:b4:1e:e7:ff:
                    fe:02:b0:2e:bd:fe:01:60:99:1f:c7:d2:a3:ef:d0:
                    c5:5e:81:e3:b4:92:44:2a:d0:b4:8b:3b:28:34:0f:
                    a9:b1:d7:75:25:86:13:5e:d3:8c:e1:cf:d6:2e:32:
                    3b:ce:b2:0f:98:db:1b:48:9d:29:f6:3f:d9:38:cd:
                    8f:a2:3f:01:f7:98:3f:c6:43:bd:dc:5e:1c:05:4f:
                    c7:e8:12:66:5e:c8:ee:c0:e7:f4:2d:3c:7c:72:6f:
                    9c:cc:a3:e9:c1:ae:14:07:54:67:c6:d5:b9:3c:e5:
                    aa:7b:d1:75:d7:2d:43:83:a0:46:f5:e7:8b:d2:dd:
                    df:0b:6c:04:e9:2f:63:bd:d1:b6:11:cb:55:8e:8b:
                    19:d4:79:57:2d:6f:ef:48:77:aa:a6:6b:01:ed:f2:
                    d8:4e:93:c2:d4:7b:00:c9:ea:98:93:b5:ec:be:a3:
                    73:3b:9b:b0:36:d4:60:15:24:db:03:43:c0:2d:9c:
                    3c:57:af:fb:f2:8f:f2:39:31:ba:4d:b1:23:f5:d3:
                    7f:a3:54:30:bf:e7:e1:2e:34:0c:4b:b4:78:46:ab:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:8A:F6:EA:77:8C:30:58:37:8D:2D:92:EE:B9:90:42:C7:95:5A
            X509v3 Authority Key Identifier:
                keyid:F3:C3:7D:B4:35:C3:DD:0D:29:19:B2:52:5F:DF:68:8D:CC:B5:33:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3C37DB435C3DD0D2919B2525FDF688DCCB533FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfNQq9Vr95vxAJjEkYuKGPFx4LBno59gwuRH2BeHLU8Q/0/3138312e3138392e302e302f32322d3332203d3e20323732353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:7b:d3:49:3c:6f:5a:69:d2:4b:c9:15:69:aa:05:95:73:50:
         f5:11:d0:9a:a9:21:85:70:2e:19:9a:dd:95:83:85:ba:89:3e:
         ed:03:0a:3c:7c:75:00:75:20:ed:e0:ea:9b:7d:3d:b2:fd:6d:
         15:e9:b8:71:49:f3:db:e0:71:07:c0:c6:e2:e5:a0:d0:3c:2a:
         e0:16:7f:1e:2f:85:fa:66:de:c2:2e:0f:3f:48:c4:17:87:df:
         f2:f5:59:df:2d:85:60:11:c5:28:52:2c:2d:e4:40:c3:e8:d6:
         df:fa:be:3b:a1:bd:64:16:57:bf:99:9b:68:f1:81:93:73:c1:
         7f:66:3c:c3:2b:3e:af:7f:f6:2e:70:c5:cc:4b:01:68:0f:c6:
         49:e7:29:95:06:14:52:50:ee:4d:b9:73:e9:14:87:62:f2:e2:
         7b:7a:54:ef:8d:23:60:79:d5:b0:e1:fd:39:d9:6a:e7:43:4b:
         e8:f8:75:df:7c:75:b1:5f:93:db:23:78:a2:81:ae:04:c5:25:
         7d:36:97:dc:15:06:3c:0b:47:57:15:3a:9e:f3:9b:55:54:af:
         c7:01:c3:5e:0a:67:20:7c:ca:a6:b7:8a:77:20:11:22:b0:5c:
         86:aa:36:d7:c2:77:91:d1:c2:cb:52:42:b0:04:c8:cb:3d:1a:
         c9:74:c4:92
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKmCRSf/jHuY+rZvHhST2XiT5sS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNDMzdEQjQzNUMzREQwRDI5MTlCMjUyNUZERjY4OERD
Q0I1MzNGRTAeFw0yNjA0MDIwMzQ1MTdaFw0yNzA0MDEwMzUwMTdaMDMxMTAvBgNV
BAMTKDM4REY4QUY2RUE3NzhDMzA1ODM3OEQyRDkyRUVCOTkwNDJDNzk1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+YYt9Pliou0Ga61jhH6SDROdY
wOCXJUmEPTt8I2CLZqMdMaHKsfdVtB7n//4CsC69/gFgmR/H0qPv0MVegeO0kkQq
0LSLOyg0D6mx13UlhhNe04zhz9YuMjvOsg+Y2xtInSn2P9k4zY+iPwH3mD/GQ73c
XhwFT8foEmZeyO7A5/QtPHxyb5zMo+nBrhQHVGfG1bk85ap70XXXLUODoEb154vS
3d8LbATpL2O90bYRy1WOixnUeVctb+9Id6qmawHt8thOk8LUewDJ6piTtey+o3M7
m7A21GAVJNsDQ8AtnDxXr/vyj/I5MbpNsSP103+jVDC/5+EuNAxLtHhGq+x3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUON+K9up3jDBYN40tku65kELHlVowHwYDVR0j
BBgwFoAU88N9tDXD3Q0pGbJSX99ojcy1M/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZOUXE5VnI5NXZ4QUpqRWtZdUtHUEZ4NExCbm81OWd3dVJIMkJlSExV
OFEvMC9GM0MzN0RCNDM1QzNERDBEMjkxOUIyNTI1RkRGNjg4RENDQjUzM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQzM3REI0MzVDM0REMEQy
OTE5QjI1MjVGREY2ODhEQ0NCNTMzRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmTlFxOVZyOTV2eEFKakVrWXVLR1BGeDRMQm5vNTlnd3VSSDJCZUhMVThRLzAv
MzEzODMxMmUzMTM4MzkyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMy
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCtb0AMA0GCSqGSIb3DQEBCwUAA4IBAQBie9NJPG9a
adJLyRVpqgWVc1D1EdCaqSGFcC4Zmt2Vg4W6iT7tAwo8fHUAdSDt4OqbfT2y/W0V
6bhxSfPb4HEHwMbi5aDQPCrgFn8eL4X6Zt7CLg8/SMQXh9/y9VnfLYVgEcUoUiwt
5EDD6Nbf+r47ob1kFle/mZto8YGTc8F/ZjzDKz6vf/YucMXMSwFoD8ZJ5ymVBhRS
UO5NuXPpFIdi8uJ7elTvjSNgedWw4f052WrnQ0vo+HXffHWxX5PbI3iiga4ExSV9
NpfcFQY8C0dXFTqe85tVVK/HAcNeCmcgfMqmt4p3IBEisFyGqjbXwneR0cLLUkKw
BMjLPRrJdMSS
-----END CERTIFICATE-----
Generated at Thu Apr 9 15:56:16 2026 by rpki-client