Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/3138392e3131332e3138382e302f32322d3234203d3e20323730333131.roa
File:                     3138392e3131332e3138382e302f32322d3234203d3e20323730333131.roa (raw, json)
Hash identifier:          gSUjxlJ8FMYL/2aPq2nHhjFPFd1l0NjRrQ/8SyWh004=
Subject key identifier:   D2:B5:75:76:19:3E:80:D4:03:5A:83:F3:53:6B:5F:2E:BC:3C:0D:DD
Certificate issuer:       /CN=AD6B61B4FC174FC61236A57C9FE5F3915130A191
Certificate serial:       7E7C1110E7198C8C6F4B1A189AB129E74F548163
Authority key identifier: AD:6B:61:B4:FC:17:4F:C6:12:36:A5:7C:9F:E5:F3:91:51:30:A1:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6B61B4FC174FC61236A57C9FE5F3915130A191.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/3138392e3131332e3138382e302f32322d3234203d3e20323730333131.roa
Signing time:             Thu 29 Jan 2026 13:33:03 +0000
ROA not before:           Thu 29 Jan 2026 13:28:03 +0000
ROA not after:            Thu 28 Jan 2027 13:33:03 +0000
asID:                     270311
IP address blocks:        189.113.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/AD6B61B4FC174FC61236A57C9FE5F3915130A191.crl
                          rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/AD6B61B4FC174FC61236A57C9FE5F3915130A191.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6B61B4FC174FC61236A57C9FE5F3915130A191.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 12:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7c:11:10:e7:19:8c:8c:6f:4b:1a:18:9a:b1:29:e7:4f:54:81:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD6B61B4FC174FC61236A57C9FE5F3915130A191
        Validity
            Not Before: Jan 29 13:28:03 2026 GMT
            Not After : Jan 28 13:33:03 2027 GMT
        Subject: CN=D2B57576193E80D4035A83F3536B5F2EBC3C0DDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d5:2a:26:50:7b:79:a0:96:b3:0e:77:ab:18:
                    0d:be:60:22:ca:80:b0:0a:6b:7e:b6:f4:a7:eb:ab:
                    ed:27:d6:c4:e1:ca:26:ac:3e:ab:b0:f0:0b:af:3f:
                    16:51:c7:4d:b6:79:d1:7b:60:e0:ea:49:7a:7e:ef:
                    99:ef:30:cc:7c:10:6c:c4:c1:55:19:47:b0:be:6a:
                    46:ab:6f:05:f5:ec:34:c0:af:b0:a6:cf:91:4e:62:
                    92:5b:1b:f5:9b:29:dd:9c:be:bc:0e:64:a4:36:2e:
                    59:d9:a5:90:3b:5c:34:c1:10:3b:e7:ee:ca:e9:8c:
                    27:c0:53:06:a6:e1:a8:a7:4a:86:e8:de:2f:f8:57:
                    6d:a1:88:aa:77:f0:48:fa:dc:3c:f1:3c:df:03:39:
                    1b:0e:27:75:a1:e4:7a:3d:7a:6d:43:4b:ae:6d:f5:
                    87:17:eb:99:54:ca:b0:2e:75:28:91:58:e0:8a:ef:
                    bc:0d:67:6f:6f:48:37:25:49:2b:76:e7:ff:90:b3:
                    bf:e9:8b:d0:00:13:6e:99:27:b7:3a:d6:51:36:a7:
                    53:1e:90:8d:d2:a4:dd:d9:9d:f6:b3:cd:52:5b:cb:
                    df:a1:7e:bb:09:08:0a:55:f2:3e:00:ca:72:e4:b3:
                    1d:67:cf:47:82:8d:c9:95:8a:ca:ad:b1:2d:b8:d7:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B5:75:76:19:3E:80:D4:03:5A:83:F3:53:6B:5F:2E:BC:3C:0D:DD
            X509v3 Authority Key Identifier:
                keyid:AD:6B:61:B4:FC:17:4F:C6:12:36:A5:7C:9F:E5:F3:91:51:30:A1:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/AD6B61B4FC174FC61236A57C9FE5F3915130A191.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AD6B61B4FC174FC61236A57C9FE5F3915130A191.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ED7VtKFcmfRDrKhqpZ7TzNXr2YoyRm39f2FdVCpk5osE/0/3138392e3131332e3138382e302f32322d3234203d3e20323730333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.113.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:02:43:f9:47:99:d6:2c:3c:a0:de:df:e5:33:2e:1a:11:
         c6:be:e0:79:71:1c:6a:fb:c0:b8:75:2d:ac:37:bd:b2:7f:39:
         87:52:fb:f7:98:81:7e:fb:bb:bb:6e:4f:df:52:48:cf:52:8a:
         f7:67:02:3b:c6:66:6c:94:d1:9d:2b:f3:67:d2:2f:c1:94:c0:
         bf:10:f0:20:e5:40:78:84:16:ac:b8:d9:1e:da:f1:c1:82:11:
         b4:fa:56:f6:07:9f:7b:1e:70:8d:44:fe:82:c5:64:25:c7:7a:
         5f:72:27:23:44:af:e5:57:32:5d:99:f9:cd:6b:8c:9c:32:06:
         8a:62:64:73:7d:1d:f7:fc:9e:e7:3f:00:9c:c2:aa:0b:cd:3c:
         3f:2a:7c:46:76:0c:91:41:2d:4b:ca:62:6e:e5:e2:7f:83:c0:
         09:ec:15:3a:21:b1:11:3e:35:3c:67:9d:43:19:ab:aa:25:ce:
         ee:82:03:28:3f:32:3f:41:c2:af:dd:45:40:49:66:b1:5a:e4:
         f1:08:60:07:51:3f:25:57:14:31:34:b0:dd:c0:7e:73:90:28:
         23:68:b1:6e:65:bc:ff:b4:1b:f6:47:22:68:d8:8a:dd:7b:7c:
         43:1f:a5:be:22:4e:c2:5f:0e:a3:8f:8b:e6:48:0f:08:c9:c2:
         7a:42:4d:a0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfnwREOcZjIxvSxoYmrEp509UgWMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQ2QjYxQjRGQzE3NEZDNjEyMzZBNTdDOUZFNUYzOTE1
MTMwQTE5MTAeFw0yNjAxMjkxMzI4MDNaFw0yNzAxMjgxMzMzMDNaMDMxMTAvBgNV
BAMTKEQyQjU3NTc2MTkzRTgwRDQwMzVBODNGMzUzNkI1RjJFQkMzQzBEREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn1SomUHt5oJazDnerGA2+YCLK
gLAKa3629Kfrq+0n1sThyiasPquw8AuvPxZRx022edF7YODqSXp+75nvMMx8EGzE
wVUZR7C+akarbwX17DTAr7Cmz5FOYpJbG/WbKd2cvrwOZKQ2LlnZpZA7XDTBEDvn
7srpjCfAUwam4ainSobo3i/4V22hiKp38Ej63DzxPN8DORsOJ3Wh5Ho9em1DS65t
9YcX65lUyrAudSiRWOCK77wNZ29vSDclSSt25/+Qs7/pi9AAE26ZJ7c61lE2p1Me
kI3SpN3ZnfazzVJby9+hfrsJCApV8j4AynLksx1nz0eCjcmVisqtsS2411g5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0rV1dhk+gNQDWoPzU2tfLrw8Dd0wHwYDVR0j
BBgwFoAUrWthtPwXT8YSNqV8n+XzkVEwoZEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUQ3VnRLRmNtZlJEcktocXBaN1R6TlhyMllveVJtMzlmMkZkVkNwazVv
c0UvMC9BRDZCNjFCNEZDMTc0RkM2MTIzNkE1N0M5RkU1RjM5MTUxMzBBMTkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FENkI2MUI0RkMxNzRGQzYx
MjM2QTU3QzlGRTVGMzkxNTEzMEExOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VEN1Z0S0ZjbWZSRHJLaHFwWjdUek5YcjJZb3lSbTM5ZjJGZFZDcGs1b3NFLzAv
MzEzODM5MmUzMTMxMzMyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDMzMzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr1xvDANBgkqhkiG9w0BAQsFAAOCAQEAafMC
Q/lHmdYsPKDe3+UzLhoRxr7geXEcavvAuHUtrDe9sn85h1L795iBfvu7u25P31JI
z1KK92cCO8ZmbJTRnSvzZ9IvwZTAvxDwIOVAeIQWrLjZHtrxwYIRtPpW9gefex5w
jUT+gsVkJcd6X3InI0Sv5VcyXZn5zWuMnDIGimJkc30d9/ye5z8AnMKqC808Pyp8
RnYMkUEtS8pibuXif4PACewVOiGxET41PGedQxmrqiXO7oIDKD8yP0HCr91FQElm
sVrk8QhgB1E/JVcUMTSw3cB+c5AoI2ixbmW8/7Qb9kciaNiK3Xt8Qx+lviJOwl8O
o4+L5kgPCMnCekJNoA==
-----END CERTIFICATE-----
Generated at Mon Feb 23 02:48:01 2026 by rpki-client