Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
File:                     3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa (raw, json)
Hash identifier:          t4RgE8YuhEJ2IsIUo9FXG+BIoVASI9vCIVbmjhvcpsA=
Subject key identifier:   DF:3A:A8:29:97:E9:D8:BD:4B:44:2D:B4:AE:79:B6:B1:EB:7B:FF:88
Certificate issuer:       /CN=559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6
Certificate serial:       027FA8B47CEBB2E781EC167D4CC5A2A531769D92
Authority key identifier: 55:98:79:FA:4F:16:D6:AA:61:2E:6A:07:AA:92:F4:F1:E9:3D:C5:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa
Signing time:             Fri 28 Aug 2026 14:46:29 +0000
ROA not before:           Fri 28 Aug 2026 14:41:29 +0000
ROA not after:            Fri 27 Aug 2027 14:46:29 +0000
asID:                     53196
IP address blocks:        186.232.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.crl
                          rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7f:a8:b4:7c:eb:b2:e7:81:ec:16:7d:4c:c5:a2:a5:31:76:9d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6
        Validity
            Not Before: Aug 28 14:41:29 2026 GMT
            Not After : Aug 27 14:46:29 2027 GMT
        Subject: CN=DF3AA82997E9D8BD4B442DB4AE79B6B1EB7BFF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6e:6b:b2:62:fe:86:bc:47:94:92:71:4f:32:
                    5f:1f:ef:cc:66:45:a7:b7:5b:88:7e:7c:6d:41:2c:
                    a3:76:33:38:4d:60:10:59:a7:bc:63:6f:76:00:e5:
                    ef:67:4e:16:3a:71:bf:29:f5:4d:71:8d:9f:9e:db:
                    df:ad:c1:e7:aa:5f:04:a3:35:8b:7a:3c:fe:b0:eb:
                    a0:08:5c:87:cc:6e:d1:4a:db:ec:8b:e4:85:60:51:
                    b9:53:b5:80:fe:57:ae:d5:05:98:b4:7f:6c:39:f2:
                    7f:f0:dc:8d:01:a7:ea:45:e8:a8:d4:7d:38:b9:a4:
                    36:0b:8a:f1:60:7b:d4:33:b9:93:bf:a5:83:be:90:
                    c7:cf:9a:5a:0e:92:2d:35:a3:ca:75:21:e0:fa:ca:
                    19:f9:cb:cc:ba:cd:a7:50:00:77:e3:75:0d:f1:d6:
                    21:b9:31:44:df:44:5c:90:e1:2f:a5:df:3b:c6:95:
                    6e:2d:46:35:26:35:04:6f:f0:c8:70:43:19:48:37:
                    0c:df:2b:3d:46:8e:2e:2a:12:85:70:84:d0:26:2e:
                    f4:0c:19:c7:cc:00:e6:89:a9:99:48:e9:36:14:c0:
                    11:fa:9d:6f:bc:f3:81:02:b5:08:31:1f:38:0f:ed:
                    d1:72:aa:94:24:70:05:65:db:df:ff:1b:2e:8b:51:
                    4c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3A:A8:29:97:E9:D8:BD:4B:44:2D:B4:AE:79:B6:B1:EB:7B:FF:88
            X509v3 Authority Key Identifier:
                keyid:55:98:79:FA:4F:16:D6:AA:61:2E:6A:07:AA:92:F4:F1:E9:3D:C5:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/559879FA4F16D6AA612E6A07AA92F4F1E93DC5B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/3138362e3233322e3230382e302f32312d3234203d3e203533313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:3f:01:8f:ab:1e:79:3e:5f:55:12:b4:96:e8:89:af:c0:
         2c:38:00:c8:fb:66:33:f5:7d:ce:86:0f:85:e3:40:94:0e:c9:
         1f:7e:a5:43:91:db:af:22:f6:95:42:01:21:a3:35:62:da:43:
         c2:1d:75:21:73:ba:1a:ee:c3:b7:57:55:0a:29:23:64:7a:dd:
         9b:d8:bd:72:be:56:98:98:69:4b:f4:21:9b:a6:9c:32:1e:1e:
         8a:cb:aa:9c:41:dd:59:ba:8d:4a:5d:3c:7a:af:e1:99:b8:a2:
         8a:68:b0:92:8e:28:90:8e:58:db:24:64:f3:8f:83:b8:8a:d7:
         b5:2e:92:7e:e3:8e:e9:41:5d:98:78:56:e7:b3:8b:bb:d4:1f:
         d4:b9:28:cc:ca:20:3c:01:23:97:d2:22:27:01:b3:80:a7:4d:
         65:e7:7f:2b:74:11:50:0d:81:ee:84:45:61:a8:02:71:73:8b:
         c4:09:d4:e4:31:83:dd:9e:bf:8a:a3:91:dc:c3:77:0b:c5:ad:
         4c:00:ba:f9:5f:35:ad:33:0b:bc:aa:a1:27:db:69:be:29:4f:
         fc:58:28:5c:c2:3f:53:dd:81:65:4c:04:c8:53:d2:e0:e4:e4:
         e2:be:71:f8:be:2f:a5:03:5b:e3:14:81:c9:37:71:d4:e2:a3:
         18:c5:a8:33
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAn+otHzrsueB7BZ9TMWipTF2nZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU5ODc5RkE0RjE2RDZBQTYxMkU2QTA3QUE5MkY0RjFF
OTNEQzVCNjAeFw0yNjA4MjgxNDQxMjlaFw0yNzA4MjcxNDQ2MjlaMDMxMTAvBgNV
BAMTKERGM0FBODI5OTdFOUQ4QkQ0QjQ0MkRCNEFFNzlCNkIxRUI3QkZGODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbmuyYv6GvEeUknFPMl8f78xm
Rae3W4h+fG1BLKN2MzhNYBBZp7xjb3YA5e9nThY6cb8p9U1xjZ+e29+tweeqXwSj
NYt6PP6w66AIXIfMbtFK2+yL5IVgUblTtYD+V67VBZi0f2w58n/w3I0Bp+pF6KjU
fTi5pDYLivFge9QzuZO/pYO+kMfPmloOki01o8p1IeD6yhn5y8y6zadQAHfjdQ3x
1iG5MUTfRFyQ4S+l3zvGlW4tRjUmNQRv8MhwQxlINwzfKz1Gji4qEoVwhNAmLvQM
GcfMAOaJqZlI6TYUwBH6nW+884ECtQgxHzgP7dFyqpQkcAVl29//Gy6LUUwdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU3zqoKZfp2L1LRC20rnm2set7/4gwHwYDVR0j
BBgwFoAUVZh5+k8W1qphLmoHqpL08ek9xbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXczb2ZYQWlQZ29xQnR0WUxidHdtMVVMdlVlbVdSU3VDUmI3cExwenFz
QWQvMC81NTk4NzlGQTRGMTZENkFBNjEyRTZBMDdBQTkyRjRGMUU5M0RDNUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU1OTg3OUZBNEYxNkQ2QUE2
MTJFNkEwN0FBOTJGNEYxRTkzREM1QjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0V3M29mWEFpUGdvcUJ0dFlMYnR3bTFVTHZVZW1XUlN1Q1JiN3BMcHpxc0FkLzAv
MzEzODM2MmUzMjMzMzIyZTMyMzAzODJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzMzMTM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO66NAwDQYJKoZIhvcNAQELBQADggEBAJfpPwGP
qx55Pl9VErSW6ImvwCw4AMj7ZjP1fc6GD4XjQJQOyR9+pUOR268i9pVCASGjNWLa
Q8IddSFzuhruw7dXVQopI2R63ZvYvXK+VpiYaUv0IZumnDIeHorLqpxB3Vm6jUpd
PHqv4Zm4ooposJKOKJCOWNskZPOPg7iK17Uukn7jjulBXZh4Vuezi7vUH9S5KMzK
IDwBI5fSIicBs4CnTWXnfyt0EVANge6ERWGoAnFzi8QJ1OQxg92ev4qjkdzDdwvF
rUwAuvlfNa0zC7yqoSfbab4pT/xYKFzCP1PdgWVMBMhT0uDk5OK+cfi+L6UDW+MU
gck3cdTioxjFqDM=
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:46:06 2026 by rpki-client