Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e34382e302f32322d3232203d3e20323632393739.roa
File:                     3138362e3232362e34382e302f32322d3232203d3e20323632393739.roa (raw, json)
Hash identifier:          9F+Ti0jIY1A8go49pXuPsPl2mikdVycECvAaIRhVdJc=
Subject key identifier:   96:EF:18:B4:F7:A6:4F:D9:4C:4F:D3:46:95:F7:BB:80:94:A0:C3:4B
Certificate issuer:       /CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
Certificate serial:       4A563C155DEE0B65A9B93C99BE619D144504F7BB
Authority key identifier: C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e34382e302f32322d3232203d3e20323632393739.roa
Signing time:             Wed 29 Jul 2026 17:34:51 +0000
ROA not before:           Wed 29 Jul 2026 17:29:51 +0000
ROA not after:            Wed 28 Jul 2027 17:34:51 +0000
asID:                     262979
IP address blocks:        186.226.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl
                          rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 19:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:56:3c:15:5d:ee:0b:65:a9:b9:3c:99:be:61:9d:14:45:04:f7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9F90589AA12EE331EB84B23D50CFC9EF4F033D7
        Validity
            Not Before: Jul 29 17:29:51 2026 GMT
            Not After : Jul 28 17:34:51 2027 GMT
        Subject: CN=96EF18B4F7A64FD94C4FD34695F7BB8094A0C34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:2b:f5:de:72:91:3e:ed:e5:1c:b2:a1:21:
                    17:df:2b:51:4b:05:96:86:63:b5:75:8c:56:f0:2a:
                    37:dc:7a:7c:c3:24:b5:cd:b7:52:bd:08:2b:07:2c:
                    34:1a:43:c0:be:5a:f6:d6:38:36:8c:cd:fa:44:36:
                    4c:dd:d4:ab:6a:80:5d:4b:15:2d:89:ac:05:68:23:
                    92:01:43:77:51:4d:c7:42:a6:15:25:e7:56:cc:fe:
                    ca:a8:62:bb:52:1c:ea:94:8c:4e:01:f5:c6:3d:0f:
                    14:a3:86:75:fd:cf:85:70:12:ab:a1:9c:41:a0:43:
                    ae:e6:8e:ba:8b:8d:b7:d4:7e:72:2c:91:06:ab:3e:
                    da:e8:05:be:c2:a8:43:ee:15:9e:c7:54:d3:94:d4:
                    7b:5f:5b:ab:e5:2b:d3:5a:fb:f4:86:32:05:31:48:
                    5e:95:6a:c5:a0:00:1c:24:cd:43:0f:f5:58:9d:13:
                    c1:4b:6f:4e:78:2c:1d:93:d4:3e:80:da:c2:a8:49:
                    2e:82:72:86:18:22:1d:8e:56:03:a0:9d:22:f4:2d:
                    e5:e9:11:fd:db:b4:c8:5c:6d:75:12:f5:ab:61:fb:
                    65:14:70:6a:87:92:db:4a:a2:ce:bc:fe:bc:04:a1:
                    0e:19:00:37:af:31:6b:90:dc:9a:3a:81:53:9f:94:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:EF:18:B4:F7:A6:4F:D9:4C:4F:D3:46:95:F7:BB:80:94:A0:C3:4B
            X509v3 Authority Key Identifier:
                keyid:C9:F9:05:89:AA:12:EE:33:1E:B8:4B:23:D5:0C:FC:9E:F4:F0:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9F90589AA12EE331EB84B23D50CFC9EF4F033D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BVesMG89SrHzK8yysk6MEjThseeGaFEQuTTDNCFjm8H8/0/3138362e3232362e34382e302f32322d3232203d3e20323632393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:b9:46:57:40:36:6c:31:b8:f1:d3:d5:29:0a:1e:b2:a1:ad:
         9f:6f:7a:04:a7:a7:15:d5:40:fe:78:c1:7f:fc:c2:c3:f5:87:
         ea:6f:56:46:79:9f:0d:7c:2f:05:e9:ea:03:10:a9:05:b2:9e:
         d2:7d:c4:b3:db:76:ee:9c:0e:c1:07:9b:53:4d:a9:91:ee:66:
         d4:06:78:0c:c7:62:2d:e1:6c:2b:64:19:36:28:aa:72:f2:45:
         4d:cd:ed:89:b3:c3:19:a9:0c:22:de:8c:0c:ef:93:98:27:61:
         0e:25:5e:d8:ab:ae:f9:65:13:37:be:83:fd:6b:28:81:3b:da:
         63:08:d6:9e:3c:68:63:94:4b:62:40:97:65:a9:f5:36:58:37:
         6b:43:41:9a:d0:4f:f7:41:3a:75:ce:08:19:77:c4:31:0f:a3:
         30:b7:e4:3a:bf:df:38:75:4e:c9:49:96:ae:ea:79:30:c0:e9:
         72:c1:cf:e2:60:d4:f3:1f:75:8c:79:81:bc:1a:3c:51:19:b8:
         1d:85:d8:33:8d:17:ef:06:83:fc:8c:63:0e:00:28:87:c7:9d:
         6c:52:1b:7d:66:d9:e5:82:94:bd:a8:93:b1:5d:1e:b6:c1:37:
         3f:06:9b:78:3b:65:e3:cb:45:4b:75:24:81:c1:15:a3:86:3e:
         52:94:42:54
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSlY8FV3uC2WpuTyZvmGdFEUE97swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlGOTA1ODlBQTEyRUUzMzFFQjg0QjIzRDUwQ0ZDOUVG
NEYwMzNENzAeFw0yNjA3MjkxNzI5NTFaFw0yNzA3MjgxNzM0NTFaMDMxMTAvBgNV
BAMTKDk2RUYxOEI0RjdBNjRGRDk0QzRGRDM0Njk1RjdCQjgwOTRBMEMzNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzCv13nKRPu3lHLKhIRffK1FL
BZaGY7V1jFbwKjfcenzDJLXNt1K9CCsHLDQaQ8C+WvbWODaMzfpENkzd1KtqgF1L
FS2JrAVoI5IBQ3dRTcdCphUl51bM/sqoYrtSHOqUjE4B9cY9DxSjhnX9z4VwEquh
nEGgQ67mjrqLjbfUfnIskQarPtroBb7CqEPuFZ7HVNOU1HtfW6vlK9Na+/SGMgUx
SF6VasWgABwkzUMP9VidE8FLb054LB2T1D6A2sKoSS6CcoYYIh2OVgOgnSL0LeXp
Ef3btMhcbXUS9ath+2UUcGqHkttKos68/rwEoQ4ZADevMWuQ3Jo6gVOflA3bAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlu8YtPemT9lMT9NGlfe7gJSgw0swHwYDVR0j
BBgwFoAUyfkFiaoS7jMeuEsj1Qz8nvTwM9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlZlc01HODlTckh6Szh5eXNrNk1FalRoc2VlR2FGRVF1VFRETkNGam04
SDgvMC9DOUY5MDU4OUFBMTJFRTMzMUVCODRCMjNENTBDRkM5RUY0RjAzM0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M5RjkwNTg5QUExMkVFMzMx
RUI4NEIyM0Q1MENGQzlFRjRGMDMzRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JWZXNNRzg5U3JIeks4eXlzazZNRWpUaHNlZUdhRkVRdVRURE5DRmptOEg4LzAv
MzEzODM2MmUzMjMyMzYyZTM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzOTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK64jAwDQYJKoZIhvcNAQELBQADggEBACi5RldA
NmwxuPHT1SkKHrKhrZ9vegSnpxXVQP54wX/8wsP1h+pvVkZ5nw18LwXp6gMQqQWy
ntJ9xLPbdu6cDsEHm1NNqZHuZtQGeAzHYi3hbCtkGTYoqnLyRU3N7YmzwxmpDCLe
jAzvk5gnYQ4lXtirrvllEze+g/1rKIE72mMI1p48aGOUS2JAl2Wp9TZYN2tDQZrQ
T/dBOnXOCBl3xDEPozC35Dq/3zh1TslJlq7qeTDA6XLBz+Jg1PMfdYx5gbwaPFEZ
uB2F2DONF+8Gg/yMYw4AKIfHnWxSG31m2eWClL2ok7FdHrbBNz8Gm3g7ZePLRUt1
JIHBFaOGPlKUQlQ=
-----END CERTIFICATE-----
Generated at Sun Aug 23 10:57:10 2026 by rpki-client