Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32332d3233203d3e20323731333839.roa
File:                     3138312e3138392e342e302f32332d3233203d3e20323731333839.roa (raw, json)
Hash identifier:          ywCivXk6sDWc5OKYoz3PL2I4gtQsNojPfAvaKyezqhM=
Subject key identifier:   42:C3:1A:5B:77:27:57:4A:F1:0C:F1:C6:E0:42:5A:C3:D5:2D:1E:0F
Certificate issuer:       /CN=88F92ADC45A9220685E988BDCAB1F73863AC5355
Certificate serial:       2FE9259F8EA4481B342B38BD99433B2AA5C355E2
Authority key identifier: 88:F9:2A:DC:45:A9:22:06:85:E9:88:BD:CA:B1:F7:38:63:AC:53:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32332d3233203d3e20323731333839.roa
Signing time:             Fri 07 Aug 2026 18:27:03 +0000
ROA not before:           Fri 07 Aug 2026 18:22:03 +0000
ROA not after:            Fri 06 Aug 2027 18:27:03 +0000
asID:                     271389
IP address blocks:        181.189.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.crl
                          rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 17:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e9:25:9f:8e:a4:48:1b:34:2b:38:bd:99:43:3b:2a:a5:c3:55:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88F92ADC45A9220685E988BDCAB1F73863AC5355
        Validity
            Not Before: Aug  7 18:22:03 2026 GMT
            Not After : Aug  6 18:27:03 2027 GMT
        Subject: CN=42C31A5B7727574AF10CF1C6E0425AC3D52D1E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:b2:37:fd:6b:63:76:16:3b:4d:aa:17:39:
                    2b:38:a6:8b:cd:6d:76:59:c4:5d:bf:e2:8a:a8:48:
                    07:f4:a0:34:00:69:5c:14:b7:fd:92:8e:fc:33:30:
                    ce:59:67:4a:28:6d:fb:9a:c2:97:61:85:14:b6:ab:
                    54:05:f9:d1:8d:ca:5b:53:15:3d:54:26:2a:58:27:
                    40:c1:ad:2b:73:7b:71:9b:67:f5:3e:a5:78:a0:6e:
                    4f:6f:d7:69:e5:e0:b3:d4:35:ea:52:33:da:68:74:
                    f7:24:1f:87:bc:5b:7f:1b:dc:bd:6f:c0:3c:a4:74:
                    55:b5:98:49:a0:78:d4:e5:11:da:cc:7f:1a:dc:a5:
                    f5:10:46:fe:c6:e4:e7:4e:0f:c9:be:ea:b3:61:b8:
                    1d:7f:fd:b3:c5:cf:8e:9b:a4:06:37:fd:f2:07:28:
                    90:52:a5:cb:4e:eb:f2:d0:47:8b:16:69:a5:d5:cb:
                    a6:7f:d3:f8:0f:34:1a:26:f8:d9:a1:69:b5:68:ca:
                    ab:84:3e:b1:2a:10:65:5e:c0:e9:cc:75:1a:80:24:
                    6b:21:c8:dd:54:e4:30:72:27:b6:3d:be:60:8d:3e:
                    48:a6:bb:31:e7:ab:be:17:d4:bd:9d:11:ab:e4:85:
                    2c:f4:d8:2a:6b:c1:c4:a1:8e:32:0f:6d:55:aa:ca:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C3:1A:5B:77:27:57:4A:F1:0C:F1:C6:E0:42:5A:C3:D5:2D:1E:0F
            X509v3 Authority Key Identifier:
                keyid:88:F9:2A:DC:45:A9:22:06:85:E9:88:BD:CA:B1:F7:38:63:AC:53:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/88F92ADC45A9220685E988BDCAB1F73863AC5355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F92ADC45A9220685E988BDCAB1F73863AC5355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA2ys4UupHxkXyiWpdJfR5TappqRLbDnHEUQDWbJYsvA/0/3138312e3138392e342e302f32332d3233203d3e20323731333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:50:d2:be:4c:7c:1e:58:69:16:40:8b:6c:42:c4:9f:fd:fd:
         40:dd:cc:de:a1:31:8a:14:76:1f:c2:2c:57:3d:b0:8c:4b:70:
         28:bd:a5:dc:74:45:27:dc:9a:75:0a:ea:65:42:d7:f8:f1:29:
         ad:68:fc:89:cc:27:4f:a7:e1:9b:da:e5:2e:42:66:99:7e:d0:
         49:11:c4:3f:96:38:c3:45:30:72:e5:ea:cd:61:13:99:b1:17:
         75:34:8d:62:71:1b:53:78:2f:68:ba:46:5e:e3:fd:c6:cc:3e:
         d4:46:83:a3:4b:cb:d9:f1:66:e2:0d:0f:9a:0f:eb:a0:17:3c:
         03:fe:86:7a:2a:71:e1:cb:fc:b4:0b:07:6b:15:14:d9:8f:47:
         b2:eb:e4:24:87:d6:e0:42:eb:8f:59:7e:92:92:ad:75:ba:16:
         fa:27:97:d2:18:fb:db:34:be:8c:46:60:44:ac:4a:e8:55:e2:
         de:8f:93:31:5f:62:a6:a2:77:f1:98:17:a4:d2:fe:55:b7:c1:
         7e:8c:69:fa:9e:d9:2f:a5:4b:71:01:f5:f7:6a:17:66:77:0f:
         ae:3c:00:84:28:85:1f:52:7f:87:ba:59:7f:cf:d3:d8:f2:f6:
         c9:f1:f0:e3:9f:12:bb:78:74:f0:96:6f:79:1f:d0:f8:80:d8:
         90:02:8b:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL+kln46kSBs0Kzi9mUM7KqXDVeIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhGOTJBREM0NUE5MjIwNjg1RTk4OEJEQ0FCMUY3Mzg2
M0FDNTM1NTAeFw0yNjA4MDcxODIyMDNaFw0yNzA4MDYxODI3MDNaMDMxMTAvBgNV
BAMTKDQyQzMxQTVCNzcyNzU3NEFGMTBDRjFDNkUwNDI1QUMzRDUyRDFFMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ELI3/WtjdhY7TaoXOSs4povN
bXZZxF2/4oqoSAf0oDQAaVwUt/2SjvwzMM5ZZ0oobfuawpdhhRS2q1QF+dGNyltT
FT1UJipYJ0DBrStze3GbZ/U+pXigbk9v12nl4LPUNepSM9podPckH4e8W38b3L1v
wDykdFW1mEmgeNTlEdrMfxrcpfUQRv7G5OdOD8m+6rNhuB1//bPFz46bpAY3/fIH
KJBSpctO6/LQR4sWaaXVy6Z/0/gPNBom+NmhabVoyquEPrEqEGVewOnMdRqAJGsh
yN1U5DByJ7Y9vmCNPkimuzHnq74X1L2dEavkhSz02CprwcShjjIPbVWqyqwRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQsMaW3cnV0rxDPHG4EJaw9UtHg8wHwYDVR0j
BBgwFoAUiPkq3EWpIgaF6Yi9yrH3OGOsU1UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREEyeXM0VXVwSHhrWHlpV3BkSmZSNVRhcHBxUkxiRG5IRVVRRFdiSllz
dkEvMC84OEY5MkFEQzQ1QTkyMjA2ODVFOTg4QkRDQUIxRjczODYzQUM1MzU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4RjkyQURDNDVBOTIyMDY4
NUU5ODhCRENBQjFGNzM4NjNBQzUzNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBMnlzNFV1cEh4a1h5aVdwZEpmUjVUYXBwcVJMYkRuSEVVUURXYkpZc3ZBLzAv
MzEzODMxMmUzMTM4MzkyZTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNzMx
MzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBtb0EMA0GCSqGSIb3DQEBCwUAA4IBAQACUNK+THwe
WGkWQItsQsSf/f1A3czeoTGKFHYfwixXPbCMS3AovaXcdEUn3Jp1CuplQtf48Smt
aPyJzCdPp+Gb2uUuQmaZftBJEcQ/ljjDRTBy5erNYROZsRd1NI1icRtTeC9oukZe
4/3GzD7URoOjS8vZ8WbiDQ+aD+ugFzwD/oZ6KnHhy/y0CwdrFRTZj0ey6+Qkh9bg
QuuPWX6Skq11uhb6J5fSGPvbNL6MRmBErEroVeLej5MxX2KmonfxmBek0v5Vt8F+
jGn6ntkvpUtxAfX3ahdmdw+uPACEKIUfUn+Hull/z9PY8vbJ8fDjnxK7eHTwlm95
H9D4gNiQAovx
-----END CERTIFICATE-----
Generated at Sun Aug 23 09:03:28 2026 by rpki-client