Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233322e302f32332d3233203d3e20323632393739.roa
File:                     3133382e3138362e3233322e302f32332d3233203d3e20323632393739.roa (raw, json)
Hash identifier:          2M9XaQSiq4YvAJZWtgDSu+WjxsG+dsHyKe44ChaUrnY=
Subject key identifier:   22:24:7E:5A:0A:48:A5:4A:68:A4:AC:D7:48:46:9E:B6:BE:F6:36:A0
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       7565F3529A2AC90A7D43B8F1FE45C136918F4A97
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233322e302f32332d3233203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:35:40 +0000
ROA not before:           Wed 29 Jul 2026 17:30:40 +0000
ROA not after:            Wed 28 Jul 2027 17:35:40 +0000
asID:                     262979
IP address blocks:        138.186.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 11:29:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:65:f3:52:9a:2a:c9:0a:7d:43:b8:f1:fe:45:c1:36:91:8f:4a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:30:40 2026 GMT
            Not After : Jul 28 17:35:40 2027 GMT
        Subject: CN=22247E5A0A48A54A68A4ACD748469EB6BEF636A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:47:f0:51:70:3d:2a:55:a7:ed:3a:30:5f:
                    f9:ff:53:aa:a4:49:6c:f7:93:22:49:29:17:9e:fd:
                    b7:35:d1:7d:c5:ea:41:67:37:2a:b4:ec:7a:89:b7:
                    ea:0d:4e:30:0c:31:2f:c5:a7:78:d4:04:85:3c:1e:
                    38:d2:6b:28:a3:31:3a:83:e6:3f:23:0d:17:1d:30:
                    50:21:0c:2d:ad:4a:d6:d2:bf:fa:8e:a4:14:e3:97:
                    57:42:4d:ee:73:32:2c:e2:e8:d6:d3:cc:1a:52:45:
                    97:96:17:6b:9f:a2:d8:56:9c:72:c1:8e:f7:a9:97:
                    7e:a6:22:ba:c4:a3:fd:46:fc:b5:45:bc:bc:79:30:
                    87:49:01:4f:8a:33:b9:e3:32:a5:38:72:fe:ba:35:
                    4a:6d:fe:73:58:cf:01:67:e3:ee:30:30:91:e0:0e:
                    15:30:16:68:db:ae:83:c6:4d:fd:60:38:36:17:40:
                    a8:87:65:44:79:1d:9a:88:b8:86:90:89:83:c0:ea:
                    3c:06:3e:f3:0c:11:73:d6:80:e1:95:59:a4:12:ee:
                    c3:8e:04:cd:91:29:bf:22:01:b8:f3:69:77:93:cc:
                    07:30:61:34:c4:c7:fc:92:25:ae:20:42:8d:84:7b:
                    05:23:e5:b4:27:01:82:24:2e:10:03:6d:d8:3e:c1:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:24:7E:5A:0A:48:A5:4A:68:A4:AC:D7:48:46:9E:B6:BE:F6:36:A0
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3133382e3138362e3233322e302f32332d3233203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:b4:bb:5f:a2:4a:ff:51:51:14:bf:23:31:a2:3e:1e:04:
         9c:4f:bc:33:66:bc:b7:ba:0a:98:bc:44:eb:c1:04:bc:6d:9d:
         0d:8e:94:d1:b4:7e:06:18:4b:fa:42:11:04:55:b0:ce:54:d0:
         3b:45:e4:0c:76:7a:06:19:b7:d1:51:d4:2a:b4:46:94:83:bb:
         55:ad:45:83:c1:a9:d6:d9:9e:a5:88:d0:79:e2:38:6f:cd:dd:
         2c:39:70:89:c7:7c:e5:58:bc:1d:5a:14:82:0e:d3:58:65:e7:
         3f:28:20:3c:e3:d6:42:40:61:1e:af:43:48:bb:8d:92:6d:eb:
         66:98:5c:0d:32:23:57:c9:cd:c5:37:39:c0:10:e4:0a:6a:e6:
         c8:7e:c9:2c:f1:0f:58:e1:4b:54:7d:ee:08:2d:47:16:d9:af:
         a6:21:20:e0:43:91:35:ee:af:4e:c4:c9:d0:e8:df:5d:4c:58:
         09:9b:03:cc:00:b7:23:8c:74:db:0e:54:19:9a:1e:7c:19:78:
         96:61:41:e7:6c:16:e5:b8:ff:4b:e7:21:97:e6:53:09:60:b2:
         7b:a7:27:2c:eb:d0:b8:2f:b3:f6:92:94:d9:68:95:01:7f:1e:
         d6:79:b0:b3:9b:cf:af:7f:af:17:07:55:ff:4d:77:c3:a4:7f:
         a0:1d:6e:df
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdWXzUpoqyQp9Q7jx/kXBNpGPSpcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlGOTA1ODlBQTEyRUUzMzFFQjg0QjIzRDUwQ0ZDOUVG
NEYwMzNENzAeFw0yNjA3MjkxNzMwNDBaFw0yNzA3MjgxNzM1NDBaMDMxMTAvBgNV
BAMTKDIyMjQ3RTVBMEE0OEE1NEE2OEE0QUNENzQ4NDY5RUI2QkVGNjM2QTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbZ0fwUXA9KlWn7TowX/n/U6qk
SWz3kyJJKRee/bc10X3F6kFnNyq07HqJt+oNTjAMMS/Fp3jUBIU8HjjSayijMTqD
5j8jDRcdMFAhDC2tStbSv/qOpBTjl1dCTe5zMizi6NbTzBpSRZeWF2ufothWnHLB
jvepl36mIrrEo/1G/LVFvLx5MIdJAU+KM7njMqU4cv66NUpt/nNYzwFn4+4wMJHg
DhUwFmjbroPGTf1gODYXQKiHZUR5HZqIuIaQiYPA6jwGPvMMEXPWgOGVWaQS7sOO
BM2RKb8iAbjzaXeTzAcwYTTEx/ySJa4gQo2EewUj5bQnAYIkLhADbdg+wfaNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIiR+WgpIpUpopKzXSEaetr72NqAwHwYDVR0j
BBgwFoAUyfkFiaoS7jMeuEsj1Qz8nvTwM9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMC9DOUY5MDU4OUFBMTJFRTMzMUVCODRCMjNENTBDRkM5RUY0RjAzM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RjkwNTg5QUExMkVFMzMx
RUI4NEIyM0Q1MENGQzlFRjRGMDMzRDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWZXNNRzg5U3JIeks4eXlzazZNRWpUaHNlZUdhRkVRdVRURE5DRmptOEg4LzAv
MzEzMzM4MmUzMTM4MzYyZTMyMzMzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM5MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq66DANBgkqhkiG9w0BAQsFAAOCAQEAO7K0
u1+iSv9RURS/IzGiPh4EnE+8M2a8t7oKmLxE68EEvG2dDY6U0bR+BhhL+kIRBFWw
zlTQO0XkDHZ6Bhm30VHUKrRGlIO7Va1Fg8Gp1tmepYjQeeI4b83dLDlwicd85Vi8
HVoUgg7TWGXnPyggPOPWQkBhHq9DSLuNkm3rZphcDTIjV8nNxTc5wBDkCmrmyH7J
LPEPWOFLVH3uCC1HFtmvpiEg4EORNe6vTsTJ0OjfXUxYCZsDzAC3I4x02w5UGZoe
fBl4lmFB52wW5bj/S+chl+ZTCWCye6cnLOvQuC+z9pKU2WiVAX8e1nmws5vPr3+v
FwdV/013w6R/oB1u3w==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:10:25 2026 by rpki-client