Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa
File:                     3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa (raw, json)
Hash identifier:          ThsYLSA687WyQSqJqbMOac8pfsDKvyllClk1RfU/0SE=
Subject key identifier:   9B:F6:05:40:9A:D9:79:35:27:F8:CD:04:99:8F:41:D7:44:3F:6D:07
Certificate issuer:       /CN=BE1D6D180BEE035406917F631FB928059B8B9583
Certificate serial:       4035A161F722F4237C1932942C363BE3E19598B7
Authority key identifier: BE:1D:6D:18:0B:EE:03:54:06:91:7F:63:1F:B9:28:05:9B:8B:95:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE1D6D180BEE035406917F631FB928059B8B9583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa
Signing time:             Thu 20 Aug 2026 14:23:30 +0000
ROA not before:           Thu 20 Aug 2026 14:18:30 +0000
ROA not after:            Thu 19 Aug 2027 14:23:30 +0000
asID:                     266616
IP address blocks:        128.201.44.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/BE1D6D180BEE035406917F631FB928059B8B9583.crl
                          rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/BE1D6D180BEE035406917F631FB928059B8B9583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE1D6D180BEE035406917F631FB928059B8B9583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 17:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:35:a1:61:f7:22:f4:23:7c:19:32:94:2c:36:3b:e3:e1:95:98:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE1D6D180BEE035406917F631FB928059B8B9583
        Validity
            Not Before: Aug 20 14:18:30 2026 GMT
            Not After : Aug 19 14:23:30 2027 GMT
        Subject: CN=9BF605409AD9793527F8CD04998F41D7443F6D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:54:68:d3:82:e5:ca:cf:dc:c4:92:9e:5a:
                    2f:b5:08:74:4d:c0:3a:14:50:3b:1e:d7:68:f7:c0:
                    ec:50:22:2b:2e:71:3e:8a:3c:ef:60:33:b3:6a:4b:
                    0e:ef:c6:e5:52:c5:97:86:14:b8:db:65:4c:2c:96:
                    15:86:b9:e3:4f:74:12:8f:5e:19:c8:6c:7e:4e:09:
                    17:64:48:ac:f1:5d:3a:45:bd:fa:0a:44:7a:47:0a:
                    7a:76:44:1a:c4:e1:04:5f:36:08:19:b3:9f:dc:e8:
                    a3:4f:83:9a:68:90:4f:9b:c4:a2:1b:47:a7:11:ad:
                    05:54:f4:f4:76:bf:60:c8:97:51:a4:20:b4:12:ac:
                    3b:34:47:50:d3:47:27:25:61:48:7c:eb:6d:4b:a0:
                    ed:6d:89:52:6a:6a:36:33:e1:40:11:98:fa:a8:bf:
                    33:29:78:15:e7:7f:a2:e2:e1:23:bb:c3:43:af:27:
                    15:a3:89:ab:23:92:1f:e2:0a:85:5e:2a:55:e1:ef:
                    4c:65:cb:f6:f7:9d:45:ca:7e:7a:e4:29:a9:1c:e9:
                    04:56:0d:51:37:a1:03:7f:1a:e7:25:53:38:b1:0a:
                    19:c1:18:7a:83:74:d7:81:d5:82:43:a6:3f:de:75:
                    5a:0b:85:61:ce:03:c8:0c:3f:34:c8:bd:fb:e6:7b:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F6:05:40:9A:D9:79:35:27:F8:CD:04:99:8F:41:D7:44:3F:6D:07
            X509v3 Authority Key Identifier:
                keyid:BE:1D:6D:18:0B:EE:03:54:06:91:7F:63:1F:B9:28:05:9B:8B:95:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/BE1D6D180BEE035406917F631FB928059B8B9583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE1D6D180BEE035406917F631FB928059B8B9583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GMyKm4idpduJELbYqHu6qgYuvbGHnVWUoUhVo1bBfQL4/0/3132382e3230312e34342e302f32322d3332203d3e20323636363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f7:b5:0b:52:12:af:ba:c4:14:6c:e8:f1:21:b3:eb:4f:43:
         e2:36:f4:e3:5a:84:ac:9c:61:21:ef:7b:f7:3e:64:b6:c2:ba:
         9f:28:0f:58:cf:12:a8:b1:36:af:38:0e:83:e2:3b:07:4d:ea:
         c2:cd:9c:c2:e5:c6:2c:7f:6b:ee:3a:9e:10:de:26:1c:6d:bf:
         68:81:ad:6c:23:d1:0d:30:e8:c4:e8:7c:12:84:4d:d1:28:95:
         7e:3c:06:34:f1:9e:bd:aa:e0:84:54:ba:c2:d6:cb:8a:f0:45:
         ab:75:22:1e:2c:c0:bc:ce:71:95:ff:c4:61:d3:e4:2a:46:72:
         91:68:d8:5a:26:2f:25:2e:14:dd:ec:87:a6:73:1e:2e:ec:08:
         6f:fb:bc:41:70:a6:f7:c2:65:4c:cf:4d:fc:8c:e2:0a:a8:39:
         e2:67:bd:c0:a2:0f:88:36:50:5e:82:9d:5b:7c:d2:0c:63:41:
         f1:14:88:bf:bf:ea:e2:b8:53:78:77:df:be:d5:d1:6f:56:5d:
         28:bb:65:ad:63:d9:ce:bb:94:9c:5f:6f:4d:f2:28:f1:62:71:
         75:48:c9:a1:59:1e:00:ce:a0:7b:ae:c8:44:23:60:87:1b:23:
         d2:d7:4b:5a:fa:9b:bc:9d:41:ec:ce:64:31:e2:7e:2a:c7:70:
         c1:0f:d6:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQDWhYfci9CN8GTKULDY74+GVmLcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkUxRDZEMTgwQkVFMDM1NDA2OTE3RjYzMUZCOTI4MDU5
QjhCOTU4MzAeFw0yNjA4MjAxNDE4MzBaFw0yNzA4MTkxNDIzMzBaMDMxMTAvBgNV
BAMTKDlCRjYwNTQwOUFEOTc5MzUyN0Y4Q0QwNDk5OEY0MUQ3NDQzRjZEMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDColRo04Llys/cxJKeWi+1CHRN
wDoUUDse12j3wOxQIisucT6KPO9gM7NqSw7vxuVSxZeGFLjbZUwslhWGueNPdBKP
XhnIbH5OCRdkSKzxXTpFvfoKRHpHCnp2RBrE4QRfNggZs5/c6KNPg5pokE+bxKIb
R6cRrQVU9PR2v2DIl1GkILQSrDs0R1DTRyclYUh8621LoO1tiVJqajYz4UARmPqo
vzMpeBXnf6Li4SO7w0OvJxWjiasjkh/iCoVeKlXh70xly/b3nUXKfnrkKakc6QRW
DVE3oQN/GuclUzixChnBGHqDdNeB1YJDpj/edVoLhWHOA8gMPzTIvfvme3qfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUm/YFQJrZeTUn+M0EmY9B10Q/bQcwHwYDVR0j
BBgwFoAUvh1tGAvuA1QGkX9jH7koBZuLlYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR015S200aWRwZHVKRUxiWXFIdTZxZ1l1dmJHSG5WV1VvVWhWbzFiQmZR
TDQvMC9CRTFENkQxODBCRUUwMzU0MDY5MTdGNjMxRkI5MjgwNTlCOEI5NTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JFMUQ2RDE4MEJFRTAzNTQw
NjkxN0Y2MzFGQjkyODA1OUI4Qjk1ODMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dNeUttNGlkcGR1SkVMYllxSHU2cWdZdXZiR0huVldVb1VoVm8xYkJmUUw0LzAv
MzEzMjM4MmUzMjMwMzEyZTM0MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzYzNjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKAySwwDQYJKoZIhvcNAQELBQADggEBAHL3tQtS
Eq+6xBRs6PEhs+tPQ+I29ONahKycYSHve/c+ZLbCup8oD1jPEqixNq84DoPiOwdN
6sLNnMLlxix/a+46nhDeJhxtv2iBrWwj0Q0w6MTofBKETdEolX48BjTxnr2q4IRU
usLWy4rwRat1Ih4swLzOcZX/xGHT5CpGcpFo2FomLyUuFN3sh6ZzHi7sCG/7vEFw
pvfCZUzPTfyM4gqoOeJnvcCiD4g2UF6CnVt80gxjQfEUiL+/6uK4U3h3377V0W9W
XSi7Za1j2c67lJxfb03yKPFicXVIyaFZHgDOoHuuyEQjYIcbI9LXS1r6m7ydQezO
ZDHifirHcMEP1gk=
-----END CERTIFICATE-----
Generated at Wed Aug 26 19:56:46 2026 by rpki-client