Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
File:                     3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa (raw, json)
Hash identifier:          hHX/li85xPIPqZ7kpr0Rc5CMT1uZd0988A/dsrfh080=
Subject key identifier:   9A:96:24:32:D2:46:3A:52:95:98:6E:38:22:69:82:4D:B2:1C:09:84
Certificate issuer:       /CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
Certificate serial:       276817061D6DDD5925EE80C58B56E1C5AFFEE5F3
Authority key identifier: A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa
Signing time:             Wed 17 Jun 2026 16:53:29 +0000
ROA not before:           Wed 17 Jun 2026 16:48:29 +0000
ROA not after:            Wed 16 Jun 2027 16:53:29 +0000
asID:                     270556
IP address blocks:        190.115.72.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl
                          rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 28 Jun 2026 11:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:68:17:06:1d:6d:dd:59:25:ee:80:c5:8b:56:e1:c5:af:fe:e5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A768E8071BA41175FFBF0F813FD385B6FA5B1681
        Validity
            Not Before: Jun 17 16:48:29 2026 GMT
            Not After : Jun 16 16:53:29 2027 GMT
        Subject: CN=9A962432D2463A5295986E382269824DB21C0984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:f8:20:0e:1d:b3:46:ba:34:72:97:f6:0a:
                    df:25:0c:99:c0:14:11:a9:06:5d:28:ad:40:c0:d1:
                    e6:67:5e:d4:29:af:4d:1b:51:4f:2f:83:e4:1d:45:
                    74:bf:c3:21:e0:0a:59:60:d9:8f:b5:bb:40:f8:12:
                    d7:ef:70:c1:ea:55:3c:d0:23:9c:15:1e:ad:a1:c8:
                    a7:57:49:54:de:e0:db:12:d7:b8:96:ec:dc:a2:f9:
                    27:6b:7c:77:45:9f:bd:87:08:00:8b:bc:7b:f8:26:
                    28:80:ec:eb:70:04:45:87:fc:4e:38:ba:7c:49:18:
                    8c:c6:67:d8:66:f8:ac:82:b6:05:9f:b3:60:c7:b7:
                    be:29:03:3f:d6:44:1d:89:54:5b:80:a4:b4:c8:16:
                    ba:57:4a:ed:92:4d:70:63:7e:06:44:22:b9:d1:72:
                    31:06:dc:6f:80:f9:f7:59:0d:5b:15:bc:dd:34:a3:
                    82:a1:3b:3b:a0:8f:fa:7c:4c:be:a6:de:76:4c:fc:
                    3c:95:69:84:f0:48:8e:63:d5:30:a1:7a:33:32:a2:
                    43:83:56:68:ee:75:ba:44:fb:d0:b1:36:8f:73:c4:
                    0e:bb:44:23:55:51:d5:a6:3f:0f:c1:de:6e:b7:e0:
                    63:4d:50:4b:b1:1e:a9:c6:ac:5c:04:3d:8d:58:f5:
                    98:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:24:32:D2:46:3A:52:95:98:6E:38:22:69:82:4D:B2:1C:09:84
            X509v3 Authority Key Identifier:
                keyid:A7:68:E8:07:1B:A4:11:75:FF:BF:0F:81:3F:D3:85:B6:FA:5B:16:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/A768E8071BA41175FFBF0F813FD385B6FA5B1681.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A768E8071BA41175FFBF0F813FD385B6FA5B1681.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFuHaS36pr8zzUPAbRAdGNJcR7KWbKQ2vkXfwja4umkW/0/3139302e3131352e37322e302f32322d3332203d3e20323730353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:c4:54:81:fe:09:fd:2e:e0:af:70:19:02:14:8c:c2:c6:23:
         8e:99:97:bd:4a:86:0d:06:de:e8:d7:02:d8:f6:f7:d2:30:04:
         0f:fc:17:53:41:50:25:bd:12:c8:dd:9c:47:4c:e7:49:7a:e1:
         d1:34:64:60:ee:95:4c:94:fc:34:24:d8:11:ff:bc:f6:5b:48:
         1b:6f:1c:78:ab:d3:50:a5:bc:41:d6:4c:7d:6b:05:6a:99:f6:
         f6:15:7d:64:bc:75:b1:6d:53:74:9e:65:1b:da:7d:e2:39:a8:
         2f:4e:eb:72:7d:5f:9d:83:70:2e:dc:86:cf:b6:ad:34:d7:50:
         1b:46:f0:9b:6c:21:47:da:c8:71:57:ec:9e:d4:41:ce:cc:26:
         19:b5:b9:dd:0b:ec:2c:32:b3:73:fc:df:1d:14:3f:5e:15:7e:
         1f:ac:91:7b:65:1e:50:d4:de:c2:c6:f0:ae:60:e9:54:21:ce:
         dc:59:d6:1e:6d:c8:69:a7:c0:5b:e3:89:a5:a4:77:8a:bf:1d:
         6d:9d:56:4c:b5:b4:7c:85:72:49:e8:dc:98:ca:c2:6e:2f:c7:
         f6:8e:df:56:ff:a4:57:03:2b:4b:83:fc:69:c6:7e:69:03:90:
         d6:71:9d:35:2d:ab:e6:0b:e8:85:33:d2:a3:34:79:53:a3:94:
         9d:e7:1b:4c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ2gXBh1t3Vkl7oDFi1bhxa/+5fMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc2OEU4MDcxQkE0MTE3NUZGQkYwRjgxM0ZEMzg1QjZG
QTVCMTY4MTAeFw0yNjA2MTcxNjQ4MjlaFw0yNzA2MTYxNjUzMjlaMDMxMTAvBgNV
BAMTKDlBOTYyNDMyRDI0NjNBNTI5NTk4NkUzODIyNjk4MjREQjIxQzA5ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQQvggDh2zRro0cpf2Ct8lDJnA
FBGpBl0orUDA0eZnXtQpr00bUU8vg+QdRXS/wyHgCllg2Y+1u0D4EtfvcMHqVTzQ
I5wVHq2hyKdXSVTe4NsS17iW7Nyi+SdrfHdFn72HCACLvHv4JiiA7OtwBEWH/E44
unxJGIzGZ9hm+KyCtgWfs2DHt74pAz/WRB2JVFuApLTIFrpXSu2STXBjfgZEIrnR
cjEG3G+A+fdZDVsVvN00o4KhOzugj/p8TL6m3nZM/DyVaYTwSI5j1TChejMyokOD
VmjudbpE+9CxNo9zxA67RCNVUdWmPw/B3m634GNNUEuxHqnGrFwEPY1Y9ZhfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmpYkMtJGOlKVmG44ImmCTbIcCYQwHwYDVR0j
BBgwFoAUp2joBxukEXX/vw+BP9OFtvpbFoEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREZ1SGFTMzZwcjh6elVQQWJSQWRHTkpjUjdLV2JLUTJ2a1hmd2phNHVt
a1cvMC9BNzY4RTgwNzFCQTQxMTc1RkZCRjBGODEzRkQzODVCNkZBNUIxNjgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3NjhFODA3MUJBNDExNzVG
RkJGMEY4MTNGRDM4NUI2RkE1QjE2ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RGdUhhUzM2cHI4enpVUEFiUkFkR05KY1I3S1diS1EydmtYZndqYTR1bWtXLzAv
MzEzOTMwMmUzMTMxMzUyZTM3MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzNTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+c0gwDQYJKoZIhvcNAQELBQADggEBACjEVIH+
Cf0u4K9wGQIUjMLGI46Zl71Khg0G3ujXAtj299IwBA/8F1NBUCW9EsjdnEdM50l6
4dE0ZGDulUyU/DQk2BH/vPZbSBtvHHir01ClvEHWTH1rBWqZ9vYVfWS8dbFtU3Se
ZRvafeI5qC9O63J9X52DcC7chs+2rTTXUBtG8JtsIUfayHFX7J7UQc7MJhm1ud0L
7Cwys3P83x0UP14Vfh+skXtlHlDU3sLG8K5g6VQhztxZ1h5tyGmnwFvjiaWkd4q/
HW2dVky1tHyFckno3JjKwm4vx/aO31b/pFcDK0uD/GnGfmkDkNZxnTUtq+YL6IUz
0qM0eVOjlJ3nG0w=
-----END CERTIFICATE-----
Generated at Sat Jun 27 13:13:32 2026 by rpki-client