Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130312e302f32342d3234203d3e20323734333530.roa
File:                     3138362e3139362e3130312e302f32342d3234203d3e20323734333530.roa (raw, json)
Hash identifier:          BvmySQwBjt2z/aZf95imNhAV/clD4tYOjZoXYGPfKTc=
Subject key identifier:   67:22:4A:FD:C4:FB:78:CF:F5:7A:5E:4A:0C:60:3E:2C:DC:79:BB:AE
Certificate issuer:       /CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
Certificate serial:       4C5394222BAE5148D8031AC41C5C73034128114C
Authority key identifier: 60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130312e302f32342d3234203d3e20323734333530.roa
Signing time:             Sat 19 Sep 2026 03:37:04 +0000
ROA not before:           Sat 19 Sep 2026 03:32:04 +0000
ROA not after:            Sat 18 Sep 2027 03:37:04 +0000
asID:                     274350
IP address blocks:        186.196.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl
                          rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 12:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:53:94:22:2b:ae:51:48:d8:03:1a:c4:1c:5c:73:03:41:28:11:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601AB4C2CB27698A7EF0684324D416B8646A9B75
        Validity
            Not Before: Sep 19 03:32:04 2026 GMT
            Not After : Sep 18 03:37:04 2027 GMT
        Subject: CN=67224AFDC4FB78CFF57A5E4A0C603E2CDC79BBAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:c0:6c:15:91:72:7c:86:53:ff:b1:72:19:
                    f2:46:85:b1:bd:2d:1f:66:5b:af:54:47:11:e2:68:
                    46:fe:ef:65:db:a5:f6:f0:6e:da:48:f1:d6:20:80:
                    fa:d4:4f:3a:af:59:42:63:4e:ef:a0:5f:33:1b:33:
                    89:c4:98:16:e2:e8:86:6f:19:04:9a:79:39:0b:73:
                    43:5b:58:81:6e:84:2d:a2:5b:90:63:3c:28:6a:2d:
                    81:75:59:f8:a2:85:c5:f7:41:68:68:22:2e:3c:3d:
                    61:13:4a:0f:09:a7:8a:ea:fd:26:d3:84:ec:f4:cc:
                    42:39:70:14:54:dd:df:1e:1a:30:b5:ad:cc:cc:e7:
                    75:39:a9:01:44:29:0a:e0:00:d0:bd:9d:70:ea:7f:
                    5b:55:5d:52:cd:5a:cb:1b:5c:17:f5:82:08:ab:ff:
                    2e:0f:6f:c3:24:b3:f0:87:2a:b3:19:8d:96:0d:e9:
                    1a:c5:46:bd:9e:05:a2:55:e9:02:30:d6:a4:80:9e:
                    82:2a:87:f2:fe:05:01:0f:20:a4:88:9b:25:99:63:
                    83:4d:f7:9c:69:c5:9e:a7:3d:93:b3:62:20:06:32:
                    ff:9d:62:b3:c8:fe:74:c1:77:b2:ff:6c:c1:db:07:
                    11:a0:e7:0d:38:88:74:e8:ce:ec:bd:9f:de:d7:f2:
                    2b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:22:4A:FD:C4:FB:78:CF:F5:7A:5E:4A:0C:60:3E:2C:DC:79:BB:AE
            X509v3 Authority Key Identifier:
                keyid:60:1A:B4:C2:CB:27:69:8A:7E:F0:68:43:24:D4:16:B8:64:6A:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/601AB4C2CB27698A7EF0684324D416B8646A9B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/601AB4C2CB27698A7EF0684324D416B8646A9B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H8wT2VpRLy7GQeqDWrYXxhm8rwCCgaacZ6fzCdiiCfG5/0/3138362e3139362e3130312e302f32342d3234203d3e20323734333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.196.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:83:b5:f6:8d:1e:52:da:b6:75:39:57:5b:dc:75:cb:85:2f:
         6f:5f:28:48:e3:ab:3b:bf:c5:16:a0:ac:e3:38:9e:d8:b1:f4:
         45:94:0d:35:ea:97:f9:ec:d9:17:f7:f6:30:c0:67:78:d6:9d:
         39:b9:94:bf:30:9c:cf:d5:c9:d1:61:e0:f7:ad:51:aa:70:0e:
         7e:12:86:4e:8b:04:d5:85:07:d7:9e:e3:9b:55:9a:e4:ea:1a:
         3f:91:31:c6:a6:87:25:b1:db:aa:39:bd:cf:34:62:b5:8a:48:
         42:2d:23:a5:49:e1:13:2e:53:6b:d3:93:91:71:d0:17:fb:35:
         56:d5:2e:23:d4:20:36:1d:2c:a2:a4:f5:1a:cc:70:28:34:d5:
         41:67:3d:5e:65:da:75:0a:b6:a0:09:93:fa:c1:9f:91:bc:ab:
         35:8f:f8:e2:2d:a0:1d:aa:df:86:f7:ce:b3:a5:ca:ee:8d:2e:
         ef:6b:e6:b9:ec:d4:16:e3:1d:8e:30:50:51:2b:13:52:2f:91:
         a3:4f:b8:ea:f7:31:53:73:94:78:7f:7d:6f:e7:50:38:22:23:
         a2:9c:a2:5c:a3:16:54:6f:f5:01:84:7e:ad:c9:83:5d:6d:28:
         48:80:0d:63:22:02:fd:97:e8:0f:d4:a4:1c:d2:91:46:2d:6b:
         05:ee:f4:21
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTFOUIiuuUUjYAxrEHFxzA0EoEUwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAxQUI0QzJDQjI3Njk4QTdFRjA2ODQzMjRENDE2Qjg2
NDZBOUI3NTAeFw0yNjA5MTkwMzMyMDRaFw0yNzA5MTgwMzM3MDRaMDMxMTAvBgNV
BAMTKDY3MjI0QUZEQzRGQjc4Q0ZGNTdBNUU0QTBDNjAzRTJDREM3OUJCQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOY8BsFZFyfIZT/7FyGfJGhbG9
LR9mW69URxHiaEb+72XbpfbwbtpI8dYggPrUTzqvWUJjTu+gXzMbM4nEmBbi6IZv
GQSaeTkLc0NbWIFuhC2iW5BjPChqLYF1WfiihcX3QWhoIi48PWETSg8Jp4rq/SbT
hOz0zEI5cBRU3d8eGjC1rczM53U5qQFEKQrgANC9nXDqf1tVXVLNWssbXBf1ggir
/y4Pb8Mks/CHKrMZjZYN6RrFRr2eBaJV6QIw1qSAnoIqh/L+BQEPIKSImyWZY4NN
95xpxZ6nPZOzYiAGMv+dYrPI/nTBd7L/bMHbBxGg5w04iHTozuy9n97X8isfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZyJK/cT7eM/1el5KDGA+LNx5u64wHwYDVR0j
BBgwFoAUYBq0wssnaYp+8GhDJNQWuGRqm3UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDh3VDJWcFJMeTdHUWVxRFdyWVh4aG04cndDQ2dhYWNaNmZ6Q2RpaUNm
RzUvMC82MDFBQjRDMkNCMjc2OThBN0VGMDY4NDMyNEQ0MTZCODY0NkE5Qjc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYwMUFCNEMyQ0IyNzY5OEE3
RUYwNjg0MzI0RDQxNkI4NjQ2QTlCNzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g4d1QyVnBSTHk3R1FlcURXcllYeGhtOHJ3Q0NnYWFjWjZmekNkaWlDZkc1LzAv
MzEzODM2MmUzMTM5MzYyZTMxMzAzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNDMzMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrEZTANBgkqhkiG9w0BAQsFAAOCAQEAfIO1
9o0eUtq2dTlXW9x1y4Uvb18oSOOrO7/FFqCs4zie2LH0RZQNNeqX+ezZF/f2MMBn
eNadObmUvzCcz9XJ0WHg961RqnAOfhKGTosE1YUH157jm1Wa5OoaP5ExxqaHJbHb
qjm9zzRitYpIQi0jpUnhEy5Ta9OTkXHQF/s1VtUuI9QgNh0soqT1GsxwKDTVQWc9
XmXadQq2oAmT+sGfkbyrNY/44i2gHarfhvfOs6XK7o0u72vmuezUFuMdjjBQUSsT
Ui+Ro0+46vcxU3OUeH99b+dQOCIjopyiXKMWVG/1AYR+rcmDXW0oSIANYyIC/Zfo
D9SkHNKRRi1rBe70IQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 05:21:22 2026 by rpki-client