Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
File:                     3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa (raw, json)
Hash identifier:          Yk1paAuz+gUXZLtmK74D8UDKNOWMOhTjnTS55CCAJHY=
Subject key identifier:   E7:CA:D2:47:D9:2F:CD:B0:B0:72:09:52:06:21:0C:7E:BD:72:AE:81
Certificate issuer:       /CN=5279C74540A375ED58505424645F77B2DD6FB06D
Certificate serial:       5622C4DB62EE2517AD343A171AF374F544058AE3
Authority key identifier: 52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa
Signing time:             Tue 19 May 2026 20:02:47 +0000
ROA not before:           Tue 19 May 2026 19:57:47 +0000
ROA not after:            Tue 18 May 2027 20:02:47 +0000
asID:                     270548
IP address blocks:        190.115.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl
                          rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:22:c4:db:62:ee:25:17:ad:34:3a:17:1a:f3:74:f5:44:05:8a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5279C74540A375ED58505424645F77B2DD6FB06D
        Validity
            Not Before: May 19 19:57:47 2026 GMT
            Not After : May 18 20:02:47 2027 GMT
        Subject: CN=E7CAD247D92FCDB0B072095206210C7EBD72AE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ef:74:5d:8d:73:1d:91:5a:7c:8e:1f:ba:35:
                    c2:63:2b:e7:3c:a9:27:22:2f:3c:be:15:58:fc:de:
                    04:f1:b2:d2:e3:d2:a2:59:d5:d9:dc:36:22:8c:e6:
                    80:cb:0f:59:38:77:f7:3c:b9:87:c5:e7:69:20:30:
                    c4:2e:7e:01:aa:68:c7:31:c1:04:b2:3b:35:85:4e:
                    9f:4e:8c:62:f2:74:24:7a:49:ae:e7:24:00:61:e5:
                    10:40:e5:79:9c:bd:c8:92:96:db:80:f6:8c:5d:b0:
                    96:c2:72:e5:7c:28:3c:4b:f9:5f:ec:ab:17:a8:8a:
                    4f:6b:78:db:74:a0:9a:0e:f9:fe:7a:d6:eb:16:f9:
                    cf:03:46:2a:f6:ba:22:59:00:f1:1b:53:60:a8:53:
                    c5:01:15:33:56:fa:2a:a0:89:9a:3f:1b:40:54:0f:
                    26:41:7a:3a:67:8b:28:97:1f:e6:34:c3:00:45:8f:
                    e5:d3:8b:e2:89:e2:93:a3:ab:b0:68:4e:fb:a6:ab:
                    d4:8b:7e:df:12:93:c6:56:c2:32:b7:e7:89:6f:3e:
                    b3:37:4b:60:c3:ad:69:c3:7e:6c:7e:b5:d8:bc:3d:
                    e3:f5:d4:3b:e0:ef:80:a8:a7:ce:e2:03:1f:f3:93:
                    d4:49:ef:f3:14:11:0c:a1:a2:ab:1c:71:06:91:8c:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:D2:47:D9:2F:CD:B0:B0:72:09:52:06:21:0C:7E:BD:72:AE:81
            X509v3 Authority Key Identifier:
                keyid:52:79:C7:45:40:A3:75:ED:58:50:54:24:64:5F:77:B2:DD:6F:B0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/5279C74540A375ED58505424645F77B2DD6FB06D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5279C74540A375ED58505424645F77B2DD6FB06D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GV8BbBAxRbBjDwz143CkR78mjxLuMWvktHFxiJo7wK9n/0/3139302e3131352e36382e302f32322d3234203d3e20323730353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:25:32:e5:be:e2:a3:74:31:f0:76:a4:d6:a7:3d:7b:73:f3:
         e2:4f:49:64:c3:ca:82:0a:2e:e0:41:17:e9:db:5b:84:63:9e:
         c0:1c:2c:d8:34:92:1b:2c:54:09:55:bf:7a:20:4d:60:ee:23:
         73:27:79:08:bf:1d:91:65:59:db:a4:7f:93:f1:e7:87:c1:c7:
         39:57:7f:53:0d:a9:34:60:e6:f1:a7:e5:04:7f:25:1b:33:48:
         3e:52:33:d7:fb:23:30:9f:71:7d:01:7b:4b:6e:f4:14:85:8d:
         5c:f4:a6:ec:cd:28:4b:f9:89:1e:44:d0:75:31:3b:91:12:04:
         42:eb:e5:a1:d6:c1:76:d3:20:8d:56:8d:0f:3a:3e:40:8b:3b:
         f2:04:5b:57:86:f2:cd:05:98:6f:e6:0c:da:29:0d:46:f9:dd:
         ba:93:3c:d2:53:5b:db:aa:eb:f6:7c:5a:3e:7d:f7:b4:59:3d:
         23:97:9c:11:bc:84:69:45:b9:09:03:97:3d:ed:ff:8b:15:04:
         a7:1e:f0:96:26:2e:9b:55:28:ea:a5:93:30:ef:36:39:c2:0a:
         bd:23:8b:53:9e:40:a8:70:19:51:b1:2e:88:2b:48:dd:09:d7:
         09:01:ae:71:8e:22:4e:a7:70:17:cd:48:5c:8b:46:2e:18:fd:
         bb:00:3d:96
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUViLE22LuJRetNDoXGvN09UQFiuMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTI3OUM3NDU0MEEzNzVFRDU4NTA1NDI0NjQ1Rjc3QjJE
RDZGQjA2RDAeFw0yNjA1MTkxOTU3NDdaFw0yNzA1MTgyMDAyNDdaMDMxMTAvBgNV
BAMTKEU3Q0FEMjQ3RDkyRkNEQjBCMDcyMDk1MjA2MjEwQzdFQkQ3MkFFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD273RdjXMdkVp8jh+6NcJjK+c8
qSciLzy+FVj83gTxstLj0qJZ1dncNiKM5oDLD1k4d/c8uYfF52kgMMQufgGqaMcx
wQSyOzWFTp9OjGLydCR6Sa7nJABh5RBA5XmcvciSltuA9oxdsJbCcuV8KDxL+V/s
qxeoik9reNt0oJoO+f561usW+c8DRir2uiJZAPEbU2CoU8UBFTNW+iqgiZo/G0BU
DyZBejpniyiXH+Y0wwBFj+XTi+KJ4pOjq7BoTvumq9SLft8Sk8ZWwjK354lvPrM3
S2DDrWnDfmx+tdi8PeP11Dvg74Cop87iAx/zk9RJ7/MUEQyhoqsccQaRjC19AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU58rSR9kvzbCwcglSBiEMfr1yroEwHwYDVR0j
BBgwFoAUUnnHRUCjde1YUFQkZF93st1vsG0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1Y4QmJCQXhSYkJqRHd6MTQzQ2tSNzhtanhMdU1Xdmt0SEZ4aUpvN3dL
OW4vMC81Mjc5Qzc0NTQwQTM3NUVENTg1MDU0MjQ2NDVGNzdCMkRENkZCMDZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyNzlDNzQ1NDBBMzc1RUQ1
ODUwNTQyNDY0NUY3N0IyREQ2RkIwNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dWOEJiQkF4UmJCakR3ejE0M0NrUjc4bWp4THVNV3ZrdEhGeGlKbzd3SzluLzAv
MzEzOTMwMmUzMTMxMzUyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK+c0QwDQYJKoZIhvcNAQELBQADggEBABklMuW+
4qN0MfB2pNanPXtz8+JPSWTDyoIKLuBBF+nbW4RjnsAcLNg0khssVAlVv3ogTWDu
I3MneQi/HZFlWdukf5Px54fBxzlXf1MNqTRg5vGn5QR/JRszSD5SM9f7IzCfcX0B
e0tu9BSFjVz0puzNKEv5iR5E0HUxO5ESBELr5aHWwXbTII1WjQ86PkCLO/IEW1eG
8s0FmG/mDNopDUb53bqTPNJTW9uq6/Z8Wj5997RZPSOXnBG8hGlFuQkDlz3t/4sV
BKce8JYmLptVKOqlkzDvNjnCCr0ji1OeQKhwGVGxLogrSN0J1wkBrnGOIk6ncBfN
SFyLRi4Y/bsAPZY=
-----END CERTIFICATE-----
Generated at Sun May 24 16:37:34 2026 by rpki-client