Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          16eKlBO8JepK9+W7uG1sP1XZwMSCEvpqR/3mDQVhrGU=
Subject key identifier:   1E:D4:4B:DD:39:E6:B7:D1:6E:6A:EF:3E:69:19:FD:CA:C9:0F:C5:CA
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       423C557A77A3AEACE48EC89C1DD34C7BD32857B9
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:00 +0000
ROA not before:           Mon 18 May 2026 15:03:00 +0000
ROA not after:            Mon 17 May 2027 15:08:00 +0000
asID:                     262729
IP address blocks:        186.193.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3c:55:7a:77:a3:ae:ac:e4:8e:c8:9c:1d:d3:4c:7b:d3:28:57:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:00 2026 GMT
            Not After : May 17 15:08:00 2027 GMT
        Subject: CN=1ED44BDD39E6B7D16E6AEF3E6919FDCAC90FC5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cb:ab:94:a9:44:f1:fb:5f:6f:c2:56:ba:d3:
                    d2:08:0f:db:9e:c2:ef:5c:0d:82:89:f2:4d:8b:bd:
                    01:52:77:58:ac:c2:17:fe:0b:64:93:38:20:b7:cd:
                    c5:88:b7:62:b1:f4:e5:93:33:08:9a:0d:cb:01:87:
                    40:3e:5f:75:2e:6c:00:1b:7e:4f:24:59:55:ae:79:
                    7b:b3:ec:9d:bc:c3:b4:51:94:f4:13:2f:f7:7b:2e:
                    de:de:fc:94:a6:a7:a7:94:47:e2:f3:6b:f6:06:a1:
                    46:54:f8:80:b1:7a:04:93:f1:fb:5d:96:e3:77:c8:
                    87:64:f1:ce:27:e1:7b:51:b6:79:e7:ae:bf:a0:cd:
                    65:5b:43:af:12:20:76:1a:a7:79:26:26:6e:3e:e2:
                    9f:7f:f3:b2:11:da:86:89:0a:98:3f:35:ad:09:e1:
                    3f:33:39:47:9d:03:b9:b8:39:a0:89:49:cf:81:38:
                    cf:ae:b1:09:37:65:12:5e:f7:e2:bd:fa:47:ab:44:
                    bc:b2:59:1a:a2:6b:5a:ea:94:0a:5d:16:59:55:40:
                    d8:f6:da:e1:d4:b7:64:d3:6a:c8:12:af:83:a5:b9:
                    0f:c5:2e:82:d9:76:42:77:5e:da:55:5b:fc:5b:3a:
                    c0:3c:83:93:0d:b0:50:2c:96:fb:8e:62:cb:9f:fa:
                    a6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D4:4B:DD:39:E6:B7:D1:6E:6A:EF:3E:69:19:FD:CA:C9:0F:C5:CA
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3133362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:52:b3:16:5a:1f:7d:eb:10:6d:78:59:3c:d9:c9:57:db:
         29:d4:8c:31:93:b4:24:ab:62:5c:eb:d9:fc:b9:57:28:c4:5b:
         43:cf:7c:27:ce:f3:01:a2:ef:7c:dd:1a:ba:00:27:80:f2:d2:
         9b:e9:0f:0c:6e:99:0e:14:50:e7:40:5b:fc:f4:d8:6a:85:58:
         fc:d7:13:85:c1:db:87:8f:8a:6a:ff:e8:33:f5:88:e1:ce:bd:
         41:cc:29:82:0f:dd:0a:d3:f7:0c:59:a2:fa:6d:d9:71:d3:b7:
         a5:58:2d:3e:4e:ad:9a:c7:f2:1b:21:43:58:6e:86:37:55:29:
         e1:cb:a6:22:e4:3d:e9:f2:09:d1:6e:68:b6:e8:e9:c9:1c:94:
         57:07:85:b3:73:7f:cf:33:ec:ab:c7:5e:d3:57:4c:77:2d:c0:
         b1:a6:96:b5:03:00:16:dd:4d:e6:ef:1e:fc:92:0d:46:a0:06:
         cb:88:d1:65:26:a0:33:6a:17:98:f4:ec:3e:e2:5d:cc:f7:fd:
         71:38:60:00:f9:68:c1:a8:0a:6e:e1:b8:45:4d:1e:af:a2:f3:
         b7:46:1d:a0:90:7a:11:8d:ce:05:e7:41:ba:06:55:21:b9:02:
         6a:26:50:ca:ad:02:b2:c7:b3:f0:55:4b:6b:09:4b:22:e6:a6:
         68:15:2f:82
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQjxVenejrqzkjsicHdNMe9MoV7kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAzMDBaFw0yNzA1MTcxNTA4MDBaMDMxMTAvBgNV
BAMTKDFFRDQ0QkREMzlFNkI3RDE2RTZBRUYzRTY5MTlGRENBQzkwRkM1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDby6uUqUTx+19vwla609IID9ue
wu9cDYKJ8k2LvQFSd1iswhf+C2STOCC3zcWIt2Kx9OWTMwiaDcsBh0A+X3UubAAb
fk8kWVWueXuz7J28w7RRlPQTL/d7Lt7e/JSmp6eUR+Lza/YGoUZU+ICxegST8ftd
luN3yIdk8c4n4XtRtnnnrr+gzWVbQ68SIHYap3kmJm4+4p9/87IR2oaJCpg/Na0J
4T8zOUedA7m4OaCJSc+BOM+usQk3ZRJe9+K9+kerRLyyWRqia1rqlApdFllVQNj2
2uHUt2TTasgSr4OluQ/FLoLZdkJ3XtpVW/xbOsA8g5MNsFAslvuOYsuf+qa/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHtRL3Tnmt9Fuau8+aRn9yskPxcowHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBiDANBgkqhkiG9w0BAQsFAAOCAQEAlYpS
sxZaH33rEG14WTzZyVfbKdSMMZO0JKtiXOvZ/LlXKMRbQ898J87zAaLvfN0augAn
gPLSm+kPDG6ZDhRQ50Bb/PTYaoVY/NcThcHbh4+Kav/oM/WI4c69Qcwpgg/dCtP3
DFmi+m3ZcdO3pVgtPk6tmsfyGyFDWG6GN1Up4cumIuQ96fIJ0W5otujpyRyUVweF
s3N/zzPsq8de01dMdy3AsaaWtQMAFt1N5u8e/JINRqAGy4jRZSagM2oXmPTsPuJd
zPf9cThgAPlowagKbuG4RU0er6Lzt0YdoJB6EY3OBedBugZVIbkCaiZQyq0Cssez
8FVLawlLIuamaBUvgg==
-----END CERTIFICATE-----
Generated at Sun May 24 18:01:39 2026 by rpki-client