Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
File:                     3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa (raw, json)
Hash identifier:          Dz4bWR/QJAHpAzfZKIOGmGHwOc9z9z7gJNfuL2Y8+sQ=
Subject key identifier:   66:BA:4E:84:FC:03:1D:31:66:FE:9E:A4:4F:0C:5C:CF:65:59:89:75
Certificate issuer:       /CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
Certificate serial:       7D00606E0D162E92DE8011F7642C30BB3C9A016D
Authority key identifier: F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa
Signing time:             Fri 03 Apr 2026 20:00:44 +0000
ROA not before:           Fri 03 Apr 2026 19:55:44 +0000
ROA not after:            Fri 02 Apr 2027 20:00:44 +0000
asID:                     264591
IP address blocks:        138.36.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl
                          rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 18:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:00:60:6e:0d:16:2e:92:de:80:11:f7:64:2c:30:bb:3c:9a:01:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF
        Validity
            Not Before: Apr  3 19:55:44 2026 GMT
            Not After : Apr  2 20:00:44 2027 GMT
        Subject: CN=66BA4E84FC031D3166FE9EA44F0C5CCF65598975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:e7:be:42:9d:fd:41:02:4b:f6:a1:cf:da:
                    9b:25:45:69:8c:c9:5b:89:4d:e7:72:9f:24:8e:07:
                    49:0b:fe:ab:72:37:f9:38:71:30:0e:28:30:c6:30:
                    e8:65:36:fd:1f:47:e6:d1:67:3c:19:50:0d:02:1d:
                    ed:9e:3f:03:65:8d:b5:c6:cc:a6:c6:06:8d:8a:32:
                    1b:ca:5d:cd:30:a5:ea:57:d9:48:f8:90:54:dd:5f:
                    cb:6a:dc:c5:bc:80:e3:9e:84:77:32:3d:79:4d:78:
                    a8:92:e6:bb:71:05:36:cd:dc:6c:85:d2:ff:2a:f5:
                    99:bb:55:9c:79:da:a3:d8:22:0a:b6:04:12:64:f9:
                    34:17:ce:c1:b8:03:2d:c0:72:fb:1b:e1:7a:c3:9f:
                    6c:a3:f8:8b:85:e4:68:f0:22:19:df:34:34:47:59:
                    75:bc:ec:f0:ee:f8:b2:a3:38:14:3f:0a:de:00:f7:
                    f4:bd:04:c0:8f:b7:af:95:14:dc:7f:1f:2a:f2:7b:
                    8c:dc:9b:f6:5d:fc:6a:b1:0b:df:b8:03:af:71:80:
                    2d:d9:ac:da:41:18:e4:73:e0:81:df:ad:fa:5e:26:
                    eb:e2:65:b3:d2:8f:b2:9c:37:26:12:d8:62:fb:d4:
                    20:02:f4:8b:01:fd:6f:d4:c1:a9:b2:5f:cd:69:32:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:4E:84:FC:03:1D:31:66:FE:9E:A4:4F:0C:5C:CF:65:59:89:75
            X509v3 Authority Key Identifier:
                keyid:F3:AE:CC:A1:DA:CF:7A:DB:0F:3C:DD:C2:E4:82:6B:18:F3:6A:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3AECCA1DACF7ADB0F3CDDC2E4826B18F36A78CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTXuSJ9rtNYJjufn64ER55hypnszGViCy6hBvaCEauGH/0/3133382e33362e3230302e302f32322d3234203d3e20323634353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:fd:33:56:b6:ff:e0:b6:33:39:67:31:69:bf:e5:3b:e9:
         04:ff:71:fd:17:5a:86:ed:38:e3:a4:e9:30:72:c1:17:45:98:
         38:66:ed:3d:84:a4:e2:3c:b6:3e:67:aa:99:65:0d:e0:37:b0:
         0b:15:3f:d4:7c:db:50:38:92:e9:59:51:9d:da:2e:a6:da:fe:
         29:70:24:c8:71:5f:e4:3f:49:55:8f:f5:46:71:1f:7b:94:ef:
         c5:ef:4a:77:ff:1b:f2:14:72:66:fb:a1:bb:e1:d7:c4:aa:7b:
         3a:2b:dd:b6:17:60:4c:30:3e:38:1d:d3:40:06:3b:ef:26:e3:
         fb:7b:54:9b:b2:a1:9f:6b:51:ca:47:60:eb:8a:24:03:ab:ae:
         40:14:7b:89:49:04:ab:4d:52:ab:da:59:4e:9a:bf:7d:20:e6:
         43:ae:9a:b8:47:32:9b:53:5b:48:84:58:86:bf:0b:d7:c2:9a:
         8b:ac:69:44:2f:0b:d5:d3:cc:de:73:23:90:f9:c8:d6:c6:dd:
         35:48:2b:42:ac:c8:27:25:05:fa:10:b2:29:ff:11:0c:8f:55:
         7f:9e:d7:ab:e4:9e:cd:40:ff:4e:b5:4a:39:5c:8a:af:4f:d1:
         74:96:b3:c9:7f:ab:2a:da:6d:63:2d:6c:f7:8a:bc:88:ed:40:
         e9:2e:d5:e9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfQBgbg0WLpLegBH3ZCwwuzyaAW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNBRUNDQTFEQUNGN0FEQjBGM0NEREMyRTQ4MjZCMThG
MzZBNzhDRjAeFw0yNjA0MDMxOTU1NDRaFw0yNzA0MDIyMDAwNDRaMDMxMTAvBgNV
BAMTKDY2QkE0RTg0RkMwMzFEMzE2NkZFOUVBNDRGMEM1Q0NGNjU1OTg5NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47+e+Qp39QQJL9qHP2pslRWmM
yVuJTedynySOB0kL/qtyN/k4cTAOKDDGMOhlNv0fR+bRZzwZUA0CHe2ePwNljbXG
zKbGBo2KMhvKXc0wpepX2Uj4kFTdX8tq3MW8gOOehHcyPXlNeKiS5rtxBTbN3GyF
0v8q9Zm7VZx52qPYIgq2BBJk+TQXzsG4Ay3Acvsb4XrDn2yj+IuF5GjwIhnfNDRH
WXW87PDu+LKjOBQ/Ct4A9/S9BMCPt6+VFNx/Hyrye4zcm/Zd/GqxC9+4A69xgC3Z
rNpBGORz4IHfrfpeJuviZbPSj7KcNyYS2GL71CAC9IsB/W/UwamyX81pMg2fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZrpOhPwDHTFm/p6kTwxcz2VZiXUwHwYDVR0j
BBgwFoAU867ModrPetsPPN3C5IJrGPNqeM8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlRYdVNKOXJ0TllKanVmbjY0RVI1NWh5cG5zekdWaUN5NmhCdmFDRWF1
R0gvMC9GM0FFQ0NBMURBQ0Y3QURCMEYzQ0REQzJFNDgyNkIxOEYzNkE3OENGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzQUVDQ0ExREFDRjdBREIw
RjNDRERDMkU0ODI2QjE4RjM2QTc4Q0YuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUWHVTSjlydE5ZSmp1Zm42NEVSNTVoeXBuc3pHVmlDeTZoQnZhQ0VhdUdILzAv
MzEzMzM4MmUzMzM2MmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKJMgwDQYJKoZIhvcNAQELBQADggEBAFcO/TNW
tv/gtjM5ZzFpv+U76QT/cf0XWobtOOOk6TBywRdFmDhm7T2EpOI8tj5nqpllDeA3
sAsVP9R821A4kulZUZ3aLqba/ilwJMhxX+Q/SVWP9UZxH3uU78XvSnf/G/IUcmb7
obvh18Sqezor3bYXYEwwPjgd00AGO+8m4/t7VJuyoZ9rUcpHYOuKJAOrrkAUe4lJ
BKtNUqvaWU6av30g5kOumrhHMptTW0iEWIa/C9fCmousaUQvC9XTzN5zI5D5yNbG
3TVIK0KsyCclBfoQsin/EQyPVX+e16vkns1A/061Sjlciq9P0XSWs8l/qyrabWMt
bPeKvIjtQOku1ek=
-----END CERTIFICATE-----
Generated at Thu Apr 9 20:31:23 2026 by rpki-client