Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39352e302f32342d3234203d3e203237373135.roa
File:                     3138392e33382e39352e302f32342d3234203d3e203237373135.roa (raw, json)
Hash identifier:          y/UbAyIn55r5E1PZr5tXOZWIKHEAiW+TOOZziUkaXjE=
Subject key identifier:   AB:01:E3:88:23:B7:79:5D:DD:BC:1E:86:75:69:EE:D3:86:65:64:22
Certificate issuer:       /CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
Certificate serial:       2A417E429727DFA281CB1420077A933B4803E442
Authority key identifier: 50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39352e302f32342d3234203d3e203237373135.roa
Signing time:             Mon 17 Aug 2026 16:58:10 +0000
ROA not before:           Mon 17 Aug 2026 16:53:10 +0000
ROA not after:            Mon 16 Aug 2027 16:58:10 +0000
asID:                     27715
IP address blocks:        189.38.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl
                          rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 17:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:41:7e:42:97:27:df:a2:81:cb:14:20:07:7a:93:3b:48:03:e4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8
        Validity
            Not Before: Aug 17 16:53:10 2026 GMT
            Not After : Aug 16 16:58:10 2027 GMT
        Subject: CN=AB01E38823B7795DDDBC1E867569EED386656422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:09:dc:88:3f:72:8e:b5:d9:b9:1d:cb:48:
                    fa:80:af:79:f8:60:8e:d9:5f:ab:bf:d1:a2:bd:bb:
                    8e:8c:92:58:56:2e:96:f4:70:3c:a9:d9:8e:f3:47:
                    e8:ce:bb:51:87:9b:2a:20:d1:08:f1:36:0a:0b:fd:
                    8a:53:c7:15:07:c4:b7:df:9d:77:d3:1e:90:7e:3a:
                    6f:08:aa:ff:bc:3c:48:f9:70:bd:a6:e0:45:7d:b8:
                    67:d4:db:2c:8d:46:16:18:52:79:84:30:dc:1c:63:
                    7d:ca:d8:6c:d4:10:57:8a:fb:86:4f:33:92:a6:97:
                    20:70:76:2b:e2:c4:44:72:3a:60:1a:6a:f1:f6:99:
                    7f:f4:db:89:a4:e2:2d:45:9f:75:52:fb:c2:44:57:
                    40:ec:e6:77:bf:09:99:a1:60:f7:f4:f7:83:e6:03:
                    a3:e2:1b:45:dd:ef:b0:9e:1b:7f:97:51:11:6d:80:
                    b6:f0:cf:08:5b:eb:4e:81:e2:c9:d1:22:3f:61:b7:
                    42:aa:32:3d:7e:c2:43:fb:5d:09:1b:bc:89:75:1f:
                    81:d9:d7:c4:1b:42:1b:86:d5:5c:d7:66:5b:ac:68:
                    5b:3f:ad:15:80:d9:16:ff:b6:ac:31:32:1a:83:36:
                    2d:94:3b:28:f7:d2:ee:74:66:17:0a:35:90:95:77:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:01:E3:88:23:B7:79:5D:DD:BC:1E:86:75:69:EE:D3:86:65:64:22
            X509v3 Authority Key Identifier:
                keyid:50:1A:D6:1A:1A:5A:49:B0:8F:9D:8C:FE:99:D2:58:23:55:A9:DC:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/501AD61A1A5A49B08F9D8CFE99D2582355A9DCE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej9y9qCjLhgYGv1Zdh7a6Yz3fTandvTBNrUmyhU1dQ7U/0/3138392e33382e39352e302f32342d3234203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:a9:ef:d3:29:e0:62:39:31:08:30:2b:5e:99:ec:da:9d:8c:
         bb:65:7b:3d:ec:50:22:59:47:af:f2:dd:eb:30:57:c8:f5:e3:
         00:d2:9e:c6:3e:ff:44:2b:5a:e7:b0:cc:a0:ca:c9:b8:35:8c:
         e5:07:d2:fb:61:c2:fa:fa:cf:82:15:12:3e:49:33:e0:15:6b:
         60:fe:8f:55:b9:5d:43:b6:76:55:86:c7:00:a0:5f:29:50:5a:
         76:7f:a9:94:cc:c3:f7:fb:fc:53:7e:82:e5:52:55:9b:63:47:
         d5:87:92:ac:2a:20:01:75:08:f3:d9:b2:11:3e:44:c9:3a:3d:
         51:ee:13:e1:26:ac:5b:63:7a:98:83:a6:6a:15:6c:b5:85:cb:
         1c:51:ad:d4:78:13:51:71:db:01:e3:a6:50:af:71:1e:19:28:
         6c:94:2b:d2:6f:14:0b:de:26:29:83:db:77:5c:c9:8c:12:91:
         24:7f:8f:a1:03:f0:d4:33:9e:7a:7b:5b:e5:20:8d:27:72:a7:
         6e:8d:b1:cf:da:c0:73:1c:d5:9d:5b:8b:85:b9:66:e0:fb:0d:
         0e:51:5b:ba:52:89:28:27:9a:0a:fa:1c:95:1e:b5:4f:e6:e4:
         e5:24:45:71:ae:00:89:52:8d:66:3e:c2:c1:c3:e4:4f:92:5f:
         39:9b:ce:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKkF+Qpcn36KByxQgB3qTO0gD5EIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTAxQUQ2MUExQTVBNDlCMDhGOUQ4Q0ZFOTlEMjU4MjM1
NUE5RENFODAeFw0yNjA4MTcxNjUzMTBaFw0yNzA4MTYxNjU4MTBaMDMxMTAvBgNV
BAMTKEFCMDFFMzg4MjNCNzc5NUREREJDMUU4Njc1NjlFRUQzODY2NTY0MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEqgnciD9yjrXZuR3LSPqAr3n4
YI7ZX6u/0aK9u46MklhWLpb0cDyp2Y7zR+jOu1GHmyog0QjxNgoL/YpTxxUHxLff
nXfTHpB+Om8Iqv+8PEj5cL2m4EV9uGfU2yyNRhYYUnmEMNwcY33K2GzUEFeK+4ZP
M5KmlyBwdivixERyOmAaavH2mX/024mk4i1Fn3VS+8JEV0Ds5ne/CZmhYPf094Pm
A6PiG0Xd77CeG3+XURFtgLbwzwhb606B4snRIj9ht0KqMj1+wkP7XQkbvIl1H4HZ
18QbQhuG1VzXZlusaFs/rRWA2Rb/tqwxMhqDNi2UOyj30u50ZhcKNZCVd/73AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqwHjiCO3eV3dvB6GdWnu04ZlZCIwHwYDVR0j
BBgwFoAUUBrWGhpaSbCPnYz+mdJYI1Wp3OgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWo5eTlxQ2pMaGdZR3YxWmRoN2E2WXozZlRhbmR2VEJOclVteWhVMWRR
N1UvMC81MDFBRDYxQTFBNUE0OUIwOEY5RDhDRkU5OUQyNTgyMzU1QTlEQ0U4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwMUFENjFBMUE1QTQ5QjA4
RjlEOENGRTk5RDI1ODIzNTVBOURDRTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VqOXk5cUNqTGhnWUd2MVpkaDdhNll6M2ZUYW5kdlRCTnJVbXloVTFkUTdVLzAv
MzEzODM5MmUzMzM4MmUzOTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM3
MzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAL0mXzANBgkqhkiG9w0BAQsFAAOCAQEAv6nv0yngYjkx
CDArXpns2p2Mu2V7PexQIllHr/Ld6zBXyPXjANKexj7/RCta57DMoMrJuDWM5QfS
+2HC+vrPghUSPkkz4BVrYP6PVbldQ7Z2VYbHAKBfKVBadn+plMzD9/v8U36C5VJV
m2NH1YeSrCogAXUI89myET5EyTo9Ue4T4SasW2N6mIOmahVstYXLHFGt1HgTUXHb
AeOmUK9xHhkobJQr0m8UC94mKYPbd1zJjBKRJH+PoQPw1DOeentb5SCNJ3Knbo2x
z9rAcxzVnVuLhblm4PsNDlFbulKJKCeaCvoclR61T+bk5SRFca4AiVKNZj7CwcPk
T5JfOZvO4w==
-----END CERTIFICATE-----
Generated at Sun Aug 23 18:17:32 2026 by rpki-client