Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/3133382e35392e3231322e302f32342d3234203d3e20323634313130.roa
File:                     3133382e35392e3231322e302f32342d3234203d3e20323634313130.roa (raw, json)
Hash identifier:          9KLNAxpKRpiHa3xLrfryATQ6/Ly5ek2XGFCt4mu+g5E=
Subject key identifier:   9B:72:E5:6F:39:67:96:95:43:8C:50:3B:73:79:26:78:6C:37:5A:72
Certificate issuer:       /CN=EF896F5F1EB172B0933870874D215CFDA12B0187
Certificate serial:       3418D9D448943DEC550D15FC2FFD64DF01538931
Authority key identifier: EF:89:6F:5F:1E:B1:72:B0:93:38:70:87:4D:21:5C:FD:A1:2B:01:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF896F5F1EB172B0933870874D215CFDA12B0187.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/3133382e35392e3231322e302f32342d3234203d3e20323634313130.roa
Signing time:             Mon 14 Sep 2026 14:11:45 +0000
ROA not before:           Mon 14 Sep 2026 14:06:45 +0000
ROA not after:            Mon 13 Sep 2027 14:11:45 +0000
asID:                     264110
IP address blocks:        138.59.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/EF896F5F1EB172B0933870874D215CFDA12B0187.crl
                          rsync://rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/EF896F5F1EB172B0933870874D215CFDA12B0187.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF896F5F1EB172B0933870874D215CFDA12B0187.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 Oct 2026 00:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:18:d9:d4:48:94:3d:ec:55:0d:15:fc:2f:fd:64:df:01:53:89:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF896F5F1EB172B0933870874D215CFDA12B0187
        Validity
            Not Before: Sep 14 14:06:45 2026 GMT
            Not After : Sep 13 14:11:45 2027 GMT
        Subject: CN=9B72E56F39679695438C503B737926786C375A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:44:e9:39:71:75:73:6c:e3:3d:5a:5c:36:
                    c5:4f:d2:5a:f3:e5:1c:04:bc:50:8d:ef:58:f0:2d:
                    25:73:8d:a7:de:6f:10:ce:8b:d4:c0:66:8c:33:1f:
                    f3:56:ed:74:8d:f7:4f:8d:6b:03:43:be:9e:b0:f4:
                    cc:c1:3a:5d:d3:57:d1:af:e7:20:75:c8:d9:99:6a:
                    1a:3a:53:6a:4e:7f:4a:77:cb:40:6d:9d:9d:1d:43:
                    8e:79:fe:12:ff:f4:5e:a5:9a:67:93:1d:0f:7a:63:
                    c2:f5:0c:6e:39:fa:37:e3:2c:3a:f0:63:d3:cb:90:
                    b6:46:bb:08:02:26:b2:00:68:f1:6d:a4:aa:e9:0a:
                    89:27:ff:28:9e:10:09:1f:6f:68:29:53:56:e1:55:
                    e5:2e:92:de:21:82:f8:da:cb:f5:26:d5:5b:10:c2:
                    32:f7:15:df:c8:12:c1:77:1d:56:62:b1:39:c0:80:
                    20:63:8c:4c:e1:87:c3:66:55:87:77:5c:4b:d9:a6:
                    92:5b:20:04:46:f7:bb:ae:d6:af:8a:7a:09:54:e8:
                    68:ae:a6:5c:68:de:78:db:e5:28:49:12:c1:1d:3b:
                    7e:10:35:58:4c:d7:8d:c7:4a:82:40:7e:b3:27:c5:
                    86:10:55:8e:35:5e:ac:6c:00:78:4c:ea:77:cf:f7:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:72:E5:6F:39:67:96:95:43:8C:50:3B:73:79:26:78:6C:37:5A:72
            X509v3 Authority Key Identifier:
                keyid:EF:89:6F:5F:1E:B1:72:B0:93:38:70:87:4D:21:5C:FD:A1:2B:01:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/EF896F5F1EB172B0933870874D215CFDA12B0187.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF896F5F1EB172B0933870874D215CFDA12B0187.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPKnHXngu8DVXazaePPfXTDWcjn6cZ4BSrJcCd9MTL2A/0/3133382e35392e3231322e302f32342d3234203d3e20323634313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:09:06:a4:6e:65:68:1c:97:45:23:31:c7:c8:28:e6:f4:81:
         4b:22:37:4e:b3:24:cf:66:d7:7c:11:49:ca:3f:2e:bf:8c:9f:
         e5:26:00:0a:9f:ac:2e:f4:11:3d:60:e1:1b:20:e1:33:9c:45:
         31:fc:cc:74:e2:f2:1e:3e:5a:aa:9a:5a:c2:73:94:76:ff:6d:
         0e:34:98:aa:42:2b:5c:ff:f9:36:62:49:e5:9d:2c:a7:e5:1a:
         7c:32:be:39:d8:97:94:11:89:46:d2:cc:a6:a7:c5:31:8b:c7:
         ed:ca:f5:89:dd:29:6d:dd:f4:b9:26:a9:94:2b:37:e5:f2:5b:
         9e:5b:98:8f:55:ed:e4:1d:6d:75:62:db:2c:15:60:72:62:e2:
         50:a8:54:3e:a2:bd:64:60:64:3c:41:11:1d:11:90:35:06:b0:
         f6:5d:ea:12:9b:90:2e:c8:92:65:42:4b:f8:a5:e8:4b:cf:6b:
         c0:78:29:4c:3d:1c:4f:01:58:84:c0:de:38:84:6b:47:71:7e:
         4a:01:d6:2b:2c:f3:f7:c2:4a:5b:1b:66:59:f6:34:f1:50:53:
         44:f4:ed:bf:4b:8c:5c:6e:4d:4a:72:6f:05:91:54:af:33:61:
         07:89:8e:45:c8:20:be:ae:01:fc:3e:c7:24:f1:5a:e0:12:88:
         05:8b:50:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNBjZ1EiUPexVDRX8L/1k3wFTiTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY4OTZGNUYxRUIxNzJCMDkzMzg3MDg3NEQyMTVDRkRB
MTJCMDE4NzAeFw0yNjA5MTQxNDA2NDVaFw0yNzA5MTMxNDExNDVaMDMxMTAvBgNV
BAMTKDlCNzJFNTZGMzk2Nzk2OTU0MzhDNTAzQjczNzkyNjc4NkMzNzVBNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/n0TpOXF1c2zjPVpcNsVP0lrz
5RwEvFCN71jwLSVzjafebxDOi9TAZowzH/NW7XSN90+NawNDvp6w9MzBOl3TV9Gv
5yB1yNmZaho6U2pOf0p3y0BtnZ0dQ455/hL/9F6lmmeTHQ96Y8L1DG45+jfjLDrw
Y9PLkLZGuwgCJrIAaPFtpKrpCokn/yieEAkfb2gpU1bhVeUukt4hgvjay/Um1VsQ
wjL3Fd/IEsF3HVZisTnAgCBjjEzhh8NmVYd3XEvZppJbIARG97uu1q+KeglU6Giu
plxo3njb5ShJEsEdO34QNVhM143HSoJAfrMnxYYQVY41XqxsAHhM6nfP91rVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm3LlbzlnlpVDjFA7c3kmeGw3WnIwHwYDVR0j
BBgwFoAU74lvXx6xcrCTOHCHTSFc/aErAYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVBLbkhYbmd1OERWWGF6YWVQUGZYVERXY2puNmNaNEJTckpjQ2Q5TVRM
MkEvMC9FRjg5NkY1RjFFQjE3MkIwOTMzODcwODc0RDIxNUNGREExMkIwMTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VGODk2RjVGMUVCMTcyQjA5
MzM4NzA4NzREMjE1Q0ZEQTEyQjAxODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VQS25IWG5ndThEVlhhemFlUFBmWFREV2NqbjZjWjRCU3JKY0NkOU1UTDJBLzAv
MzEzMzM4MmUzNTM5MmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKO9QwDQYJKoZIhvcNAQELBQADggEBAIcJBqRu
ZWgcl0UjMcfIKOb0gUsiN06zJM9m13wRSco/Lr+Mn+UmAAqfrC70ET1g4Rsg4TOc
RTH8zHTi8h4+WqqaWsJzlHb/bQ40mKpCK1z/+TZiSeWdLKflGnwyvjnYl5QRiUbS
zKanxTGLx+3K9YndKW3d9LkmqZQrN+XyW55bmI9V7eQdbXVi2ywVYHJi4lCoVD6i
vWRgZDxBER0RkDUGsPZd6hKbkC7IkmVCS/il6EvPa8B4KUw9HE8BWITA3jiEa0dx
fkoB1iss8/fCSlsbZln2NPFQU0T07b9LjFxuTUpybwWRVK8zYQeJjkXIIL6uAfw+
xyTxWuASiAWLUBs=
-----END CERTIFICATE-----
Generated at Mon Oct 12 00:29:44 2026 by rpki-client