Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa
File:                     3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa (raw, json)
Hash identifier:          YI0JHHffF11DcfRrE57uJfHpI2u6/8SqXe71dbrQTxM=
Subject key identifier:   50:55:0C:66:A7:5A:4E:5D:FA:34:0C:83:E6:B7:AF:21:84:7E:AD:5C
Certificate issuer:       /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial:       399ADC02E984D4ACBE47C13D7DB6DB27AFEB5D28
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa
Signing time:             Mon 17 Aug 2026 18:33:02 +0000
ROA not before:           Mon 17 Aug 2026 18:28:02 +0000
ROA not after:            Mon 16 Aug 2027 18:33:02 +0000
asID:                     271456
IP address blocks:        181.233.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
                          rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 28 Aug 2026 00:53:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9a:dc:02:e9:84:d4:ac:be:47:c1:3d:7d:b6:db:27:af:eb:5d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
        Validity
            Not Before: Aug 17 18:28:02 2026 GMT
            Not After : Aug 16 18:33:02 2027 GMT
        Subject: CN=50550C66A75A4E5DFA340C83E6B7AF21847EAD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:aa:01:da:3f:17:d5:bf:1c:39:45:e8:eb:
                    b7:3f:54:ca:52:74:f5:cd:9a:24:ac:ca:81:78:66:
                    e3:73:41:a4:9b:f9:0d:62:5a:18:32:27:44:f9:c7:
                    42:28:15:a7:7c:77:26:e2:0d:ba:0b:56:bd:fd:6d:
                    08:4b:54:97:59:96:ab:7f:a8:46:bc:67:01:f7:ce:
                    af:e9:8c:62:94:a8:00:b2:65:1a:fd:74:1d:55:44:
                    ed:03:fc:59:25:95:2d:a2:e4:be:e2:62:03:3f:7d:
                    33:1a:b9:6c:df:cd:ff:a6:c5:33:d0:07:1f:54:ea:
                    4d:df:ed:82:4a:31:fd:ea:c0:d0:7f:f6:33:1f:98:
                    d5:a3:c0:58:c2:a4:61:30:86:a0:44:92:1b:82:98:
                    bf:33:ff:a7:7a:d8:4f:62:b4:59:8a:ce:0c:67:20:
                    7c:6a:c2:a2:60:da:cc:d7:ad:c0:d9:8d:da:13:3b:
                    fd:eb:0a:86:5e:9a:fb:cc:9f:64:07:2f:19:ec:63:
                    76:06:f4:4a:07:1e:0a:77:10:66:8d:5f:c7:77:07:
                    82:85:b4:4d:25:43:26:83:89:c4:8c:8e:1d:52:89:
                    aa:c4:71:cb:5a:a9:d0:08:77:02:6f:e2:3c:a0:f0:
                    48:93:58:10:ce:0f:07:df:19:c4:48:86:77:e2:29:
                    39:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:55:0C:66:A7:5A:4E:5D:FA:34:0C:83:E6:B7:AF:21:84:7E:AD:5C
            X509v3 Authority Key Identifier:
                keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/3138312e3233332e3131322e302f32322d3234203d3e20323731343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:79:ce:a0:d3:07:77:58:f3:e9:fe:d0:43:9d:02:ea:e7:
         87:ff:cb:e5:56:7a:93:2a:10:95:c4:18:14:d0:25:fe:18:fe:
         66:cd:dd:21:7f:23:29:90:fa:3d:c7:8a:40:c2:90:9a:01:0e:
         d5:8d:79:c3:ec:fb:ee:98:27:46:c6:70:d1:22:c2:1c:e9:23:
         40:09:52:a5:c4:5a:f8:ce:63:6d:0f:6d:5a:d4:38:c0:4e:0c:
         44:63:15:1d:99:2f:c5:a7:7f:21:95:73:0f:c7:29:25:0b:45:
         0a:ff:ff:ee:56:ef:e5:e4:6f:ae:b9:af:3c:55:6e:b1:7d:5f:
         53:c6:c3:ba:de:09:c5:70:a5:41:39:5d:2e:d0:bf:7d:26:0b:
         aa:34:0e:06:f2:0a:e9:88:13:d6:23:05:22:d0:9e:18:e8:e0:
         f4:84:11:83:91:4d:d0:e7:1a:95:75:93:6f:00:09:6f:88:ff:
         c8:c3:33:cb:f6:9b:b6:5a:04:54:a3:77:f1:44:d4:49:1f:84:
         eb:b0:da:e4:43:af:49:db:1c:d3:9c:9a:8f:4d:77:b8:7f:fe:
         07:0a:47:36:7c:d3:5d:02:43:71:c1:74:ec:36:c3:88:92:9f:
         9c:b3:33:c4:0a:36:b7:a2:d3:5f:d3:0e:06:66:22:3e:72:7a:
         7f:db:87:0f
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOZrcAumE1Ky+R8E9fbbbJ6/rXSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkI3MDFBMDkwMDg4MEU1MEYxM0U2NzQ5QzI4ODk5ODg4
MTFFQzhDMTAeFw0yNjA4MTcxODI4MDJaFw0yNzA4MTYxODMzMDJaMDMxMTAvBgNV
BAMTKDUwNTUwQzY2QTc1QTRFNURGQTM0MEM4M0U2QjdBRjIxODQ3RUFENUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNi6oB2j8X1b8cOUXo67c/VMpS
dPXNmiSsyoF4ZuNzQaSb+Q1iWhgyJ0T5x0IoFad8dybiDboLVr39bQhLVJdZlqt/
qEa8ZwH3zq/pjGKUqACyZRr9dB1VRO0D/FkllS2i5L7iYgM/fTMauWzfzf+mxTPQ
Bx9U6k3f7YJKMf3qwNB/9jMfmNWjwFjCpGEwhqBEkhuCmL8z/6d62E9itFmKzgxn
IHxqwqJg2szXrcDZjdoTO/3rCoZemvvMn2QHLxnsY3YG9EoHHgp3EGaNX8d3B4KF
tE0lQyaDicSMjh1SiarEcctaqdAIdwJv4jyg8EiTWBDODwffGcRIhnfiKTnBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUFUMZqdaTl36NAyD5revIYR+rVwwHwYDVR0j
BBgwFoAUK3AaCQCIDlDxPmdJwoiZiIEeyMEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkQ5Sjk0S1Y5WEEzZ1J4WGt6ZER1aldFQm9uWTJaTmRmeTF3d2FWVEta
OEsvMS8yQjcwMUEwOTAwODgwRTUwRjEzRTY3NDlDMjg4OTk4ODgxMUVDOEMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCNzAxQTA5MDA4ODBFNTBG
MTNFNjc0OUMyODg5OTg4ODExRUM4QzEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZEOUo5NEtWOVhBM2dSeFhremREdWpXRUJvblkyWk5kZnkxd3dhVlRLWjhLLzEv
MzEzODMxMmUzMjMzMzMyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTM0MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArXpcDANBgkqhkiG9w0BAQsFAAOCAQEAfVt5
zqDTB3dY8+n+0EOdAurnh//L5VZ6kyoQlcQYFNAl/hj+Zs3dIX8jKZD6PceKQMKQ
mgEO1Y15w+z77pgnRsZw0SLCHOkjQAlSpcRa+M5jbQ9tWtQ4wE4MRGMVHZkvxad/
IZVzD8cpJQtFCv//7lbv5eRvrrmvPFVusX1fU8bDut4JxXClQTldLtC/fSYLqjQO
BvIK6YgT1iMFItCeGOjg9IQRg5FN0OcalXWTbwAJb4j/yMMzy/abtloEVKN38UTU
SR+E67Da5EOvSdsc05yaj013uH/+BwpHNnzTXQJDccF07DbDiJKfnLMzxAo2t6LT
X9MOBmYiPnJ6f9uHDw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:58:23 2026 by rpki-client