Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa
File:                     3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa (raw, json)
Hash identifier:          XBuLwBJekcm2khHTyxJieVKNEscuzXli11C3/4k6EMo=
Subject key identifier:   32:F9:38:DD:D2:21:07:42:1F:81:0E:E6:92:74:54:4E:69:3F:95:BD
Certificate issuer:       /CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
Certificate serial:       6F896EFBF197033F632D7066C01CA3FE03FBB13E
Authority key identifier: 0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa
Signing time:             Mon 26 Oct 2026 02:38:25 +0000
ROA not before:           Mon 26 Oct 2026 02:33:25 +0000
ROA not after:            Mon 25 Oct 2027 02:38:25 +0000
asID:                     28647
IP address blocks:        189.113.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 10:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:89:6e:fb:f1:97:03:3f:63:2d:70:66:c0:1c:a3:fe:03:fb:b1:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2F450FC8F6BFEB270C333AA761639181680DAF
        Validity
            Not Before: Oct 26 02:33:25 2026 GMT
            Not After : Oct 25 02:38:25 2027 GMT
        Subject: CN=32F938DDD22107421F810EE69274544E693F95BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:2a:ad:f0:6b:4c:c8:8d:db:9e:b9:8f:72:
                    b4:c6:0c:5b:cf:d9:55:fb:be:8d:1c:fb:38:b5:10:
                    65:2a:2f:d3:83:d1:19:42:2f:84:d4:ba:b3:e1:2f:
                    b5:ae:91:95:d3:5b:10:3a:d7:75:34:13:71:28:5f:
                    5e:bc:99:2e:c0:c1:7d:93:95:32:92:6c:7c:bc:1a:
                    d6:27:25:8c:e7:5a:f2:a5:77:6e:24:0b:d1:22:34:
                    ee:5f:29:bf:9b:ad:1e:98:d2:e3:80:97:de:87:6b:
                    a9:4c:5f:db:57:8e:e4:55:69:0f:17:06:4c:0b:6c:
                    2b:1b:d8:36:24:50:e7:7a:b3:04:6e:4f:2b:4d:cd:
                    cd:1c:a4:ad:35:55:22:a7:d6:e9:b5:6e:48:cf:82:
                    f8:a5:df:8f:f4:61:57:a5:46:4d:36:74:28:b3:e3:
                    e5:2c:5c:1d:71:cc:1f:71:36:fc:c9:87:91:7a:19:
                    e2:4b:6e:51:5d:5f:69:90:55:e4:32:ed:02:bd:cd:
                    8e:af:09:d4:0f:a7:8f:0a:ba:dd:2e:b8:5c:b1:82:
                    a8:a2:3a:0f:69:b7:db:17:f0:2f:92:2d:57:2b:be:
                    d7:12:88:bd:8d:1b:f2:74:5f:94:69:c1:16:38:3c:
                    bf:50:b8:c3:40:05:a4:b2:ca:8c:23:ba:af:c1:bb:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:38:DD:D2:21:07:42:1F:81:0E:E6:92:74:54:4E:69:3F:95:BD
            X509v3 Authority Key Identifier:
                keyid:0A:2F:45:0F:C8:F6:BF:EB:27:0C:33:3A:A7:61:63:91:81:68:0D:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/0A2F450FC8F6BFEB270C333AA761639181680DAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2F450FC8F6BFEB270C333AA761639181680DAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/0/3138392e3131332e3139322e302f32302d3234203d3e203238363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:e7:34:44:be:c4:c6:6d:e1:ea:89:95:a4:1d:d1:21:d3:
         a3:eb:a6:ea:28:4f:df:48:8f:0d:47:b0:2f:ef:36:60:5d:f0:
         15:52:aa:27:62:0c:79:37:03:c0:8d:44:92:32:08:71:18:d8:
         5a:de:db:f7:e8:6e:52:5c:cb:4b:9a:03:15:0f:95:65:65:6d:
         8f:07:84:52:0e:f1:d2:74:5c:e6:98:06:e1:18:21:59:dd:39:
         41:fe:6b:e2:95:d7:78:66:cc:c4:88:6f:b5:cd:b8:c0:77:53:
         9d:9f:29:c7:4c:36:25:7c:ba:a2:24:00:14:29:e5:8e:cd:92:
         7b:6c:80:db:4a:04:ad:0d:8c:6f:6f:13:b4:40:e3:8b:37:f7:
         44:a7:58:99:fa:d0:1b:bf:71:2b:38:c7:2c:a5:96:cb:ee:5d:
         a8:58:48:42:ab:bb:25:a7:06:a5:a8:9c:b4:ae:8e:d2:ac:1a:
         b6:d0:77:63:cc:ae:6e:2c:77:9d:12:c3:ea:bd:bd:62:c8:af:
         1d:c6:da:05:86:7a:2f:fd:fd:67:4b:ca:68:5b:ac:82:85:1e:
         68:13:a3:b2:60:8c:37:df:19:f0:5e:37:8d:9a:26:f5:43:ca:
         81:0a:0a:b8:62:87:4c:13:83:6b:11:d1:5d:d8:89:d9:80:60:
         6c:2b:f3:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb4lu+/GXAz9jLXBmwByj/gP7sT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEEyRjQ1MEZDOEY2QkZFQjI3MEMzMzNBQTc2MTYzOTE4
MTY4MERBRjAeFw0yNjEwMjYwMjMzMjVaFw0yNzEwMjUwMjM4MjVaMDMxMTAvBgNV
BAMTKDMyRjkzOERERDIyMTA3NDIxRjgxMEVFNjkyNzQ1NDRFNjkzRjk1QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa4yqt8GtMyI3bnrmPcrTGDFvP
2VX7vo0c+zi1EGUqL9OD0RlCL4TUurPhL7WukZXTWxA613U0E3EoX168mS7AwX2T
lTKSbHy8GtYnJYznWvKld24kC9EiNO5fKb+brR6Y0uOAl96Ha6lMX9tXjuRVaQ8X
BkwLbCsb2DYkUOd6swRuTytNzc0cpK01VSKn1um1bkjPgvil34/0YVelRk02dCiz
4+UsXB1xzB9xNvzJh5F6GeJLblFdX2mQVeQy7QK9zY6vCdQPp48Kut0uuFyxgqii
Og9pt9sX8C+SLVcrvtcSiL2NG/J0X5RpwRY4PL9QuMNABaSyyowjuq/Bu/CXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMvk43dIhB0IfgQ7mknRUTmk/lb0wHwYDVR0j
BBgwFoAUCi9FD8j2v+snDDM6p2FjkYFoDa8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWk1dVl4UzY3MTdONTdWZUZ4aFk3V0hSd1M1TmhmTDZMTDh0eTRNVFpw
NUovMC8wQTJGNDUwRkM4RjZCRkVCMjcwQzMzM0FBNzYxNjM5MTgxNjgwREFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBBMkY0NTBGQzhGNkJGRUIy
NzBDMzMzQUE3NjE2MzkxODE2ODBEQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FpNXVZeFM2NzE3TjU3VmVGeGhZN1dIUndTNU5oZkw2TEw4dHk0TVRacDVKLzAv
MzEzODM5MmUzMTMxMzMyZTMxMzkzMjJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMy
MzgzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS9ccAwDQYJKoZIhvcNAQELBQADggEBAFaL5zRE
vsTGbeHqiZWkHdEh06PrpuooT99Ijw1HsC/vNmBd8BVSqidiDHk3A8CNRJIyCHEY
2Fre2/foblJcy0uaAxUPlWVlbY8HhFIO8dJ0XOaYBuEYIVndOUH+a+KV13hmzMSI
b7XNuMB3U52fKcdMNiV8uqIkABQp5Y7NkntsgNtKBK0NjG9vE7RA44s390SnWJn6
0Bu/cSs4xyyllsvuXahYSEKruyWnBqWonLSujtKsGrbQd2PMrm4sd50Sw+q9vWLI
rx3G2gWGei/9/WdLymhbrIKFHmgTo7JgjDffGfBeN42aJvVDyoEKCrhih0wTg2sR
0V3YidmAYGwr89U=
-----END CERTIFICATE-----
Generated at Wed Oct 28 15:23:20 2026 by rpki-client