Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa
File:                     3138372e33332e3232342e302f32302d3234203d3e203533303837.roa (raw, json)
Hash identifier:          RFakt41+7N8/JYz3XXshMxEeGtlXnmBwl7911wQY/RY=
Subject key identifier:   9E:BE:76:94:83:24:C9:D7:75:9C:4A:7C:9C:B2:8E:2F:46:D6:3C:8E
Certificate issuer:       /CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
Certificate serial:       5CB4725A6C9625D2C1ED62F80F5D4474619AD2
Authority key identifier: E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa
Signing time:             Wed 19 Aug 2026 20:30:35 +0000
ROA not before:           Wed 19 Aug 2026 20:25:35 +0000
ROA not after:            Wed 18 Aug 2027 20:30:35 +0000
asID:                     53087
IP address blocks:        187.33.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl
                          rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 02:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b4:72:5a:6c:96:25:d2:c1:ed:62:f8:0f:5d:44:74:61:9a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F
        Validity
            Not Before: Aug 19 20:25:35 2026 GMT
            Not After : Aug 18 20:30:35 2027 GMT
        Subject: CN=9EBE76948324C9D7759C4A7C9CB28E2F46D63C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e9:9a:08:97:45:5b:1d:a2:b4:0f:02:06:36:
                    0d:06:b7:c1:21:08:f2:76:fe:2d:38:11:a8:f3:de:
                    f0:5b:33:68:7a:fe:e8:79:3f:75:25:3f:d3:d2:a5:
                    dc:dd:34:43:bf:50:69:9c:91:1d:30:98:29:58:63:
                    c4:42:26:e8:21:18:71:a5:63:49:65:12:70:4b:c2:
                    f9:de:4a:e7:5d:11:9a:4b:25:fc:f8:6b:ab:28:35:
                    c7:a3:7a:f0:ed:5a:ef:fb:03:79:18:d0:67:7d:75:
                    10:a4:f5:c9:5b:b7:67:dd:56:4c:b3:74:8b:7c:a8:
                    0e:13:cd:33:a2:04:65:c0:0d:a3:73:1b:91:97:25:
                    62:76:4f:1d:6e:a8:82:7a:08:cc:0c:cd:24:1b:af:
                    d3:32:3c:5d:15:3e:ef:ad:c9:56:21:f2:31:68:4e:
                    ba:04:79:da:03:1f:ad:c5:f4:9f:69:69:d4:f4:03:
                    ce:60:63:92:f6:b1:d6:78:2f:99:9e:f4:25:4c:f2:
                    74:da:98:cc:50:b2:2d:94:fc:12:ec:a7:de:ec:dc:
                    89:c1:5d:18:40:f9:53:2a:8d:c9:cf:ab:42:02:82:
                    70:b0:d6:c9:97:c2:35:33:34:f0:b0:a5:a1:4e:ee:
                    89:04:5f:ac:a4:4b:44:55:47:fb:54:95:27:f0:50:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BE:76:94:83:24:C9:D7:75:9C:4A:7C:9C:B2:8E:2F:46:D6:3C:8E
            X509v3 Authority Key Identifier:
                keyid:E5:ED:41:1E:2A:C1:A9:1A:8A:35:D2:B5:D1:47:6B:80:09:DF:6F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5ED411E2AC1A91A8A35D2B5D1476B8009DF6F4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk7kfj6X6wr5vxXzCu8YgRTN6Pwz4UQi7QaQ8NZBri7t/0/3138372e33332e3232342e302f32302d3234203d3e203533303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         82:2b:c1:67:c8:b9:09:16:4e:ad:3c:c8:05:fb:08:85:7a:84:
         53:a5:38:5d:cc:b3:88:69:31:61:af:1a:10:50:86:ea:45:11:
         59:59:a4:32:f6:4c:d6:c2:4f:9d:3b:91:f9:4f:86:0a:48:d2:
         a4:4c:f3:5b:11:a7:53:12:83:43:17:a0:48:b4:33:0b:b0:fe:
         de:70:99:9d:e3:21:86:b0:33:33:38:10:39:17:97:e0:e8:77:
         04:d8:c0:03:22:cb:49:f8:00:c1:37:94:b1:d9:f7:a6:46:5f:
         2f:0a:d1:20:42:71:5f:c9:8d:ea:62:ab:ea:99:60:05:86:34:
         25:44:e0:79:14:d8:91:1c:98:96:c8:1b:74:35:d8:a4:a7:6c:
         50:d8:f4:4c:c1:91:04:ef:df:e1:54:91:6d:4b:af:d4:1e:c6:
         0e:bd:f3:0b:99:fb:18:a3:e9:5d:77:b7:0a:27:22:e2:66:59:
         cc:50:64:69:61:26:d4:f5:30:ac:f0:ba:3d:44:17:54:56:36:
         1f:f2:0f:b6:cf:dc:69:db:af:b0:58:15:69:cd:ea:47:0f:5b:
         f8:1a:c7:32:d4:d1:41:d7:7f:9f:ff:b1:11:30:5d:0d:de:34:
         3a:7f:00:63:69:4e:8d:48:f2:a5:c7:94:68:3a:78:4f:b6:33:
         3a:a1:4a:4b
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgITXLRyWmyWJdLB7WL4D11EdGGa0jANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhFNUVENDExRTJBQzFBOTFBOEEzNUQyQjVEMTQ3NkI4MDA5
REY2RjRGMB4XDTI2MDgxOTIwMjUzNVoXDTI3MDgxODIwMzAzNVowMzExMC8GA1UE
AxMoOUVCRTc2OTQ4MzI0QzlENzc1OUM0QTdDOUNCMjhFMkY0NkQ2M0M4RTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOXpmgiXRVsdorQPAgY2DQa3wSEI
8nb+LTgRqPPe8FszaHr+6Hk/dSU/09Kl3N00Q79QaZyRHTCYKVhjxEIm6CEYcaVj
SWUScEvC+d5K510Rmksl/Phrqyg1x6N68O1a7/sDeRjQZ311EKT1yVu3Z91WTLN0
i3yoDhPNM6IEZcANo3MbkZclYnZPHW6ognoIzAzNJBuv0zI8XRU+763JViHyMWhO
ugR52gMfrcX0n2lp1PQDzmBjkvax1ngvmZ70JUzydNqYzFCyLZT8Euyn3uzcicFd
GED5UyqNyc+rQgKCcLDWyZfCNTM08LCloU7uiQRfrKRLRFVH+1SVJ/BQFJsCAwEA
AaOCAk8wggJLMB0GA1UdDgQWBBSevnaUgyTJ13WcSnycso4vRtY8jjAfBgNVHSME
GDAWgBTl7UEeKsGpGoo10rXRR2uACd9vTzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9GazdrZmo2WDZ3cjV2eFh6Q3U4WWdSVE42UHd6NFVRaTdRYVE4TlpCcmk3
dC8wL0U1RUQ0MTFFMkFDMUE5MUE4QTM1RDJCNUQxNDc2QjgwMDlERjZGNEYuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvRTVFRDQxMUUyQUMxQTkxQThB
MzVEMkI1RDE0NzZCODAwOURGNkY0Ri5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZ
BggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
Rms3a2ZqNlg2d3I1dnhYekN1OFlnUlRONlB3ejRVUWk3UWFROE5aQnJpN3QvMC8z
MTM4MzcyZTMzMzMyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzMz
MDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAS7IeAwDQYJKoZIhvcNAQELBQADggEBAIIrwWfIuQkW
Tq08yAX7CIV6hFOlOF3Ms4hpMWGvGhBQhupFEVlZpDL2TNbCT507kflPhgpI0qRM
81sRp1MSg0MXoEi0Mwuw/t5wmZ3jIYawMzM4EDkXl+DodwTYwAMiy0n4AME3lLHZ
96ZGXy8K0SBCcV/Jjepiq+qZYAWGNCVE4HkU2JEcmJbIG3Q12KSnbFDY9EzBkQTv
3+FUkW1Lr9Qexg698wuZ+xij6V13twonIuJmWcxQZGlhJtT1MKzwuj1EF1RWNh/y
D7bP3Gnbr7BYFWnN6kcPW/gaxzLU0UHXf5//sREwXQ3eNDp/AGNpTo1I8qXHlGg6
eE+2MzqhSks=
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:47:57 2026 by rpki-client