Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa
File:                     3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          tOQiAdn9y68MUkaib/3hsY5Qb8OZzr6wbIb6t3ibry4=
Subject key identifier:   06:CB:78:A4:84:09:CF:19:1E:1A:7E:E9:1A:AB:71:3A:BA:86:04:C7
Certificate issuer:       /CN=605F3702CE23BBC04859766117DBC4F04EC8F430
Certificate serial:       338DDEE08E580C408B3E92408029B63F679BFB0A
Authority key identifier: 60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa
Signing time:             Mon 21 Sep 2026 19:48:50 +0000
ROA not before:           Mon 21 Sep 2026 19:43:50 +0000
ROA not after:            Mon 20 Sep 2027 19:48:50 +0000
asID:                     263880
IP address blocks:        138.118.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl
                          rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 13:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8d:de:e0:8e:58:0c:40:8b:3e:92:40:80:29:b6:3f:67:9b:fb:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605F3702CE23BBC04859766117DBC4F04EC8F430
        Validity
            Not Before: Sep 21 19:43:50 2026 GMT
            Not After : Sep 20 19:48:50 2027 GMT
        Subject: CN=06CB78A48409CF191E1A7EE91AAB713ABA8604C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:52:65:bd:54:a4:02:3a:8e:13:1c:20:b2:
                    11:f7:11:77:6b:6c:c6:b0:9d:16:cc:ea:0d:c2:d4:
                    1a:12:a4:e7:0d:44:89:17:ff:c1:62:06:c3:5c:ce:
                    55:07:7e:37:e3:4d:97:49:33:f3:a8:c7:02:69:9f:
                    00:db:a2:d7:62:61:3b:71:df:70:aa:d8:29:27:44:
                    99:57:11:e8:41:95:37:57:20:85:9d:73:88:b5:6a:
                    8f:00:8f:11:04:76:bd:b0:1c:3c:a0:96:67:4c:f9:
                    46:ac:09:9a:54:b9:ca:bf:13:70:91:5f:74:7b:fa:
                    56:cd:68:3a:bf:b5:65:bc:2b:1b:53:fa:e4:83:63:
                    cc:56:06:53:5e:ca:0c:6e:2a:5f:46:e9:15:4a:55:
                    f3:f8:e7:b2:d1:f1:b2:c7:a5:0c:96:a4:42:cc:8f:
                    51:86:44:7f:fb:c8:57:aa:26:8f:7f:a2:d4:fc:9d:
                    d4:53:94:d5:79:dc:14:61:af:0b:a2:d9:fc:f3:95:
                    41:33:61:83:94:e4:12:82:7e:c1:e2:9f:36:09:e4:
                    f1:cf:e5:d3:32:2e:6f:da:c4:7c:8e:6b:6e:8d:89:
                    a5:a7:5e:fe:41:5c:16:d4:dc:e4:ec:f9:d9:73:33:
                    ac:07:6d:63:92:5a:3e:7b:96:b5:64:e8:c5:77:99:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:78:A4:84:09:CF:19:1E:1A:7E:E9:1A:AB:71:3A:BA:86:04:C7
            X509v3 Authority Key Identifier:
                keyid:60:5F:37:02:CE:23:BB:C0:48:59:76:61:17:DB:C4:F0:4E:C8:F4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/605F3702CE23BBC04859766117DBC4F04EC8F430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605F3702CE23BBC04859766117DBC4F04EC8F430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/1/3133382e3131382e3233322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:5a:28:22:30:b6:16:54:6e:a9:8d:a9:e0:3f:75:be:7b:
         4e:0b:21:a9:86:05:18:bc:b8:11:5f:39:dc:39:8b:59:40:a9:
         ca:69:16:53:64:f8:c9:c9:00:97:20:3e:91:f4:b5:bb:9c:57:
         51:66:42:21:56:4e:04:f6:dc:34:55:1d:ab:d9:16:dd:20:4a:
         8b:84:73:36:3c:cd:c5:f2:e3:8e:e7:9a:5f:3a:a7:56:94:10:
         09:d8:4b:bc:c0:ce:b2:f6:9c:71:c6:f8:c4:36:db:85:9b:b9:
         c6:ef:1a:3c:3f:db:7f:5d:dc:e0:0d:6b:fa:0d:94:f2:24:ec:
         1d:27:0a:89:58:89:49:78:06:bf:dc:b1:7a:da:8c:45:3c:c6:
         46:02:45:e3:50:6d:d0:74:59:c3:75:1f:7a:1a:f6:b8:be:27:
         b4:a2:a8:49:e6:c2:7c:04:e3:84:4f:d7:b8:a5:0a:cf:7b:f3:
         4b:d6:54:2b:1d:3f:68:ea:0d:45:4c:df:62:e0:e3:9b:9c:43:
         e5:f1:ae:ab:aa:1a:68:33:1c:e9:83:af:3e:43:a0:1e:30:fb:
         1a:63:38:69:59:b9:35:69:05:9c:ba:bc:7f:c3:f2:9f:6b:90:
         a1:9a:7c:33:d0:07:12:95:56:97:eb:8d:9d:32:4a:6e:1c:5e:
         7a:e6:d8:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUM43e4I5YDECLPpJAgCm2P2eb+wowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1RjM3MDJDRTIzQkJDMDQ4NTk3NjYxMTdEQkM0RjA0
RUM4RjQzMDAeFw0yNjA5MjExOTQzNTBaFw0yNzA5MjAxOTQ4NTBaMDMxMTAvBgNV
BAMTKDA2Q0I3OEE0ODQwOUNGMTkxRTFBN0VFOTFBQUI3MTNBQkE4NjA0QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHu1JlvVSkAjqOExwgshH3EXdr
bMawnRbM6g3C1BoSpOcNRIkX/8FiBsNczlUHfjfjTZdJM/OoxwJpnwDbotdiYTtx
33Cq2CknRJlXEehBlTdXIIWdc4i1ao8AjxEEdr2wHDyglmdM+UasCZpUucq/E3CR
X3R7+lbNaDq/tWW8KxtT+uSDY8xWBlNeygxuKl9G6RVKVfP457LR8bLHpQyWpELM
j1GGRH/7yFeqJo9/otT8ndRTlNV53BRhrwui2fzzlUEzYYOU5BKCfsHinzYJ5PHP
5dMyLm/axHyOa26NiaWnXv5BXBbU3OTs+dlzM6wHbWOSWj57lrVk6MV3mT07AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUBst4pIQJzxkeGn7pGqtxOrqGBMcwHwYDVR0j
BBgwFoAUYF83As4ju8BIWXZhF9vE8E7I9DAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhK
dkovMS82MDVGMzcwMkNFMjNCQkMwNDg1OTc2NjExN0RCQzRGMDRFQzhGNDMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwNUYzNzAyQ0UyM0JCQzA0
ODU5NzY2MTE3REJDNEYwNEVDOEY0MzAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5TERCaUN2OVVoTmRDb0NnYk5OVGRmTll5cG1YNEIzOUJwY2dYUTloSnZKLzEv
MzEzMzM4MmUzMTMxMzgyZTMyMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop26DANBgkqhkiG9w0BAQsFAAOCAQEAGyJa
KCIwthZUbqmNqeA/db57TgshqYYFGLy4EV853DmLWUCpymkWU2T4yckAlyA+kfS1
u5xXUWZCIVZOBPbcNFUdq9kW3SBKi4RzNjzNxfLjjueaXzqnVpQQCdhLvMDOsvac
ccb4xDbbhZu5xu8aPD/bf13c4A1r+g2U8iTsHScKiViJSXgGv9yxetqMRTzGRgJF
41Bt0HRZw3Ufehr2uL4ntKKoSebCfATjhE/XuKUKz3vzS9ZUKx0/aOoNRUzfYuDj
m5xD5fGuq6oaaDMc6YOvPkOgHjD7GmM4aVm5NWkFnLq8f8Pyn2uQoZp8M9AHEpVW
l+uNnTJKbhxeeubYCA==
-----END CERTIFICATE-----