Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa
File:                     3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          /Laa0+M4vj0iJMKGbMcLXgysy1r0o1UHa749ulDZ3Yo=
Subject key identifier:   B7:7F:8C:82:75:B6:FF:B1:DC:6B:DB:91:A1:DB:31:20:83:D9:82:EA
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       170808A86F22FC51183D4EB491C69E706281FBDF
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:58 +0000
ROA not before:           Mon 18 May 2026 15:02:58 +0000
ROA not after:            Mon 17 May 2027 15:07:58 +0000
asID:                     262729
IP address blocks:        186.193.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:08:a8:6f:22:fc:51:18:3d:4e:b4:91:c6:9e:70:62:81:fb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:58 2026 GMT
            Not After : May 17 15:07:58 2027 GMT
        Subject: CN=B77F8C8275B6FFB1DC6BDB91A1DB312083D982EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:da:6f:12:5a:f5:19:f2:9c:bd:a9:26:0a:20:
                    bc:6e:c9:a5:e4:b7:b0:57:a4:0b:4a:d8:e4:f4:be:
                    6f:e0:f6:38:84:41:7f:8a:c1:30:dc:b4:77:93:2d:
                    8b:49:75:43:8a:e8:aa:3f:fa:4b:2c:fe:5f:ff:a6:
                    78:b1:db:d9:89:f6:14:2d:56:4b:f8:5d:d8:d4:94:
                    5c:1c:52:51:06:54:74:cf:e8:cb:50:13:2f:26:4d:
                    41:a2:a6:ba:ce:b7:94:49:b9:c9:1b:4d:7b:a1:7e:
                    fe:47:75:df:23:ac:59:1b:84:7f:22:76:40:ed:a4:
                    9d:15:6f:7e:df:9b:9f:b2:84:e2:00:4f:d9:f5:81:
                    9f:eb:18:54:10:48:18:c5:59:61:07:b1:38:54:de:
                    d6:21:69:31:6d:3f:ec:eb:8e:b9:ff:32:2c:8e:cb:
                    63:69:4c:3f:51:7a:2b:09:7b:12:b5:b0:00:08:d5:
                    a0:ad:88:41:82:cc:f8:ee:37:ea:b5:9b:9e:f7:ef:
                    c5:39:de:89:12:53:dd:ed:4d:22:9e:d0:20:c8:dc:
                    b8:bb:12:f6:f2:f1:95:2a:db:99:91:c8:29:14:34:
                    56:0b:e9:54:68:6b:4f:51:e9:91:20:58:02:e2:ec:
                    e6:89:99:7e:5a:c0:4d:4a:72:92:16:2f:9c:6a:c7:
                    1a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7F:8C:82:75:B6:FF:B1:DC:6B:DB:91:A1:DB:31:20:83:D9:82:EA
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3138362e3139332e3135362e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.193.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:af:41:db:84:48:58:2e:08:02:60:9b:0c:7a:d9:77:46:b1:
         94:40:c8:f7:c8:a5:19:b0:4d:e3:00:97:5b:88:ec:a0:b7:9c:
         a3:1a:21:f2:be:cf:9e:89:4a:a1:6e:4d:a4:c6:2b:e9:1d:29:
         91:7d:1c:9a:fb:81:17:83:25:43:40:af:c3:24:e1:ee:65:d8:
         df:44:eb:d3:2d:39:8c:f1:d6:15:52:4f:b4:5d:dd:05:6c:82:
         ea:5e:0d:77:53:65:44:8e:37:1e:12:34:4b:42:f9:51:23:92:
         20:62:14:69:87:b8:7a:41:fc:c1:6c:15:a4:52:c2:73:33:33:
         ab:0e:74:55:f9:7b:c8:1f:db:54:7c:c9:c9:7b:a9:ed:35:70:
         79:b7:98:63:44:1c:a5:40:51:66:88:29:52:3e:c6:20:89:da:
         9c:7d:06:0b:8a:4b:07:ad:2e:ad:e1:c2:de:2d:07:67:50:6c:
         db:bb:13:08:ac:4b:61:65:56:ca:f7:78:31:f2:19:b6:f0:03:
         43:ba:60:96:b1:54:3b:69:45:e3:e7:9a:72:68:2a:f5:5f:62:
         b0:0a:d0:eb:b5:8e:56:2e:d5:e4:fb:7e:d5:bd:0f:d7:16:7d:
         70:a2:45:4f:03:a0:6e:99:5b:c4:8d:b1:d7:a5:a3:0a:ab:69:
         af:74:54:00
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFwgIqG8i/FEYPU60kcaecGKB+98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlEQjFCNThEQ0Q0NkMyRTc0NkQ4RERFQUE3RjQ5ODMz
MUREQjAxNzAeFw0yNjA1MTgxNTAyNThaFw0yNzA1MTcxNTA3NThaMDMxMTAvBgNV
BAMTKEI3N0Y4QzgyNzVCNkZGQjFEQzZCREI5MUExREIzMTIwODNEOTgyRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw2m8SWvUZ8py9qSYKILxuyaXk
t7BXpAtK2OT0vm/g9jiEQX+KwTDctHeTLYtJdUOK6Ko/+kss/l//pnix29mJ9hQt
Vkv4XdjUlFwcUlEGVHTP6MtQEy8mTUGiprrOt5RJuckbTXuhfv5Hdd8jrFkbhH8i
dkDtpJ0Vb37fm5+yhOIAT9n1gZ/rGFQQSBjFWWEHsThU3tYhaTFtP+zrjrn/MiyO
y2NpTD9ReisJexK1sAAI1aCtiEGCzPjuN+q1m57378U53okSU93tTSKe0CDI3Li7
Evby8ZUq25mRyCkUNFYL6VRoa09R6ZEgWALi7OaJmX5awE1KcpIWL5xqxxqxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUt3+MgnW2/7Hca9uRodsxIIPZguowHwYDVR0j
BBgwFoAUudsbWNzUbC50bY3eqn9JgzHdsBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVmUEVVcmNhM21RVW9hNVVMS3pGNVB6WTdZZExVSkdXbTRiRzF0ZUZn
OWsvMC9COURCMUI1OERDRDQ2QzJFNzQ2RDhEREVBQTdGNDk4MzMxRERCMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I5REIxQjU4RENENDZDMkU3
NDZEOERERUFBN0Y0OTgzMzFEREIwMTcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1ZlBFVXJjYTNtUVVvYTVVTEt6RjVQelk3WWRMVUpHV200YkcxdGVGZzlrLzAv
MzEzODM2MmUzMTM5MzMyZTMxMzUzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrBnDANBgkqhkiG9w0BAQsFAAOCAQEAGK9B
24RIWC4IAmCbDHrZd0axlEDI98ilGbBN4wCXW4jsoLecoxoh8r7PnolKoW5NpMYr
6R0pkX0cmvuBF4MlQ0CvwyTh7mXY30Tr0y05jPHWFVJPtF3dBWyC6l4Nd1NlRI43
HhI0S0L5USOSIGIUaYe4ekH8wWwVpFLCczMzqw50Vfl7yB/bVHzJyXup7TVwebeY
Y0QcpUBRZogpUj7GIInanH0GC4pLB60ureHC3i0HZ1Bs27sTCKxLYWVWyvd4MfIZ
tvADQ7pglrFUO2lF4+eacmgq9V9isArQ67WOVi7V5Pt+1b0P1xZ9cKJFTwOgbplb
xI2x16WjCqtpr3RUAA==
-----END CERTIFICATE-----
Generated at Sun May 24 18:01:59 2026 by rpki-client