Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa
File:                     3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa (raw, json)
Hash identifier:          8bxv/kUbd/hTbeEGwQQ7w3IvTFo6XztuLMsR3UBBbho=
Subject key identifier:   4B:AE:38:25:CD:FC:CC:7D:FB:65:85:D4:55:30:0E:A5:B5:77:07:C9
Certificate issuer:       /CN=BA0000290CCA847B173A7D196F03889806E7091A
Certificate serial:       7095D1C831E5F6FDF0B1CA5E01A44BE07773B924
Authority key identifier: BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa
Signing time:             Mon 18 May 2026 21:01:44 +0000
ROA not before:           Mon 18 May 2026 20:56:44 +0000
ROA not after:            Mon 17 May 2027 21:01:44 +0000
asID:                     262758
IP address blocks:        186.224.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl
                          rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:95:d1:c8:31:e5:f6:fd:f0:b1:ca:5e:01:a4:4b:e0:77:73:b9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Validity
            Not Before: May 18 20:56:44 2026 GMT
            Not After : May 17 21:01:44 2027 GMT
        Subject: CN=4BAE3825CDFCCC7DFB6585D455300EA5B57707C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:53:3a:45:12:e0:e6:f5:8a:89:93:fb:45:
                    6b:54:56:83:ea:33:67:fc:4f:95:1e:e6:1d:c0:85:
                    7c:6f:28:d4:fe:48:17:a6:ac:ef:35:85:4e:f3:0c:
                    2d:0d:03:65:e9:46:fb:51:e5:bb:97:df:47:89:ea:
                    c6:a0:9f:bb:0e:ef:0e:a1:aa:b8:70:2a:db:a0:1a:
                    9d:77:95:49:b6:c0:6e:f7:c2:65:46:b4:0f:20:63:
                    94:82:16:71:44:cb:86:a1:cf:80:f9:e1:b9:1b:37:
                    ed:f3:f1:6b:c0:f7:97:38:3e:97:67:ea:24:07:5a:
                    1b:d3:1a:93:40:d1:8f:3a:03:ee:af:9e:a0:be:12:
                    7d:e5:e6:51:fa:e9:ca:6d:a0:9f:0a:20:a4:3f:b6:
                    e2:6d:44:94:67:11:bb:98:2f:50:8f:9c:71:c6:32:
                    5a:dd:46:19:8e:fb:ec:2f:dd:2b:6c:3e:ac:34:ce:
                    10:4a:54:1c:75:ae:ac:42:16:5e:c0:71:ed:cb:ab:
                    49:fd:d6:82:de:00:9b:bb:ea:74:68:6a:1e:15:af:
                    0b:36:72:2b:ea:b0:10:c4:59:87:c0:8f:38:6f:41:
                    6a:37:30:a7:d9:6d:0a:93:b4:89:fd:55:50:06:51:
                    70:4c:a8:f4:d6:ee:56:06:c2:89:fb:6b:77:af:f6:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AE:38:25:CD:FC:CC:7D:FB:65:85:D4:55:30:0E:A5:B5:77:07:C9
            X509v3 Authority Key Identifier:
                keyid:BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/3138362e3232342e3234302e302f32302d3234203d3e20323632373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:50:8a:3d:bf:4b:8c:f9:e7:ec:35:20:29:9b:5d:42:ee:
         26:60:e6:2c:43:40:aa:42:a0:10:6b:14:9e:44:5f:33:de:3d:
         59:7d:32:7d:f1:3c:be:de:ac:33:33:fb:28:58:42:48:29:f3:
         9e:28:3d:09:cd:d3:db:e4:ac:de:8b:cb:ce:76:f5:cf:90:84:
         8a:6c:62:9c:e4:69:11:07:ed:f2:f4:a2:86:d9:2c:4f:99:3e:
         a9:a8:ce:58:fb:d5:73:bc:45:ed:43:f5:4b:6c:b8:93:71:58:
         47:6b:e8:24:bc:b7:07:81:30:f8:e8:8f:d2:39:2b:5e:e1:f4:
         1f:e3:98:b1:a5:e2:c0:6b:b3:88:dd:10:7e:6a:98:a0:6e:88:
         db:fa:d9:da:4d:48:d2:d1:7f:c3:25:7d:27:76:86:43:b6:d1:
         c4:ea:61:0d:7c:43:f7:9a:bd:12:e8:9c:d4:f7:8a:e1:d9:f7:
         8d:91:f7:7f:b4:3f:7b:9d:b2:37:b6:f9:0d:86:a2:f3:af:ff:
         e4:89:46:50:3c:84:d3:48:a4:ce:45:01:23:a6:42:00:90:5a:
         b5:58:9b:42:98:12:c0:30:05:91:59:6a:01:1b:5c:0c:16:f9:
         02:15:78:2c:64:6e:95:8f:26:5b:9e:56:7e:7a:65:da:a9:57:
         54:97:a8:23
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUcJXRyDHl9v3wscpeAaRL4HdzuSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgw
NkU3MDkxQTAeFw0yNjA1MTgyMDU2NDRaFw0yNzA1MTcyMTAxNDRaMDMxMTAvBgNV
BAMTKDRCQUUzODI1Q0RGQ0NDN0RGQjY1ODVENDU1MzAwRUE1QjU3NzA3QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAFM6RRLg5vWKiZP7RWtUVoPq
M2f8T5Ue5h3AhXxvKNT+SBemrO81hU7zDC0NA2XpRvtR5buX30eJ6sagn7sO7w6h
qrhwKtugGp13lUm2wG73wmVGtA8gY5SCFnFEy4ahz4D54bkbN+3z8WvA95c4Ppdn
6iQHWhvTGpNA0Y86A+6vnqC+En3l5lH66cptoJ8KIKQ/tuJtRJRnEbuYL1CPnHHG
MlrdRhmO++wv3StsPqw0zhBKVBx1rqxCFl7Ace3Lq0n91oLeAJu76nRoah4Vrws2
civqsBDEWYfAjzhvQWo3MKfZbQqTtIn9VVAGUXBMqPTW7lYGwon7a3ev9ngLAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUS644Jc38zH37ZYXUVTAOpbV3B8kwHwYDVR0j
BBgwFoAUugAAKQzKhHsXOn0ZbwOImAbnCRowDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby92TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2
LzAvQkEwMDAwMjkwQ0NBODQ3QjE3M0E3RDE5NkYwMzg4OTgwNkU3MDkxQS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CQTAwMDAyOTBDQ0E4NDdCMTcz
QTdEMTk2RjAzODg5ODA2RTcwOTFBLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby92
TEg4S0R1YU5TeEhVdnpjc2txeWp5RXByaXBFRGVHdVZlUmJHUFJkR3A2LzAvMzEz
ODM2MmUzMjMyMzQyZTMyMzQzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzYz
MjM3MzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBLrg8DANBgkqhkiG9w0BAQsFAAOCAQEAq2VQij2/
S4z55+w1ICmbXULuJmDmLENAqkKgEGsUnkRfM949WX0yffE8vt6sMzP7KFhCSCnz
nig9Cc3T2+Ss3ovLznb1z5CEimxinORpEQft8vSihtksT5k+qajOWPvVc7xF7UP1
S2y4k3FYR2voJLy3B4Ew+OiP0jkrXuH0H+OYsaXiwGuziN0QfmqYoG6I2/rZ2k1I
0tF/wyV9J3aGQ7bRxOphDXxD95q9Euic1PeK4dn3jZH3f7Q/e52yN7b5DYai86//
5IlGUDyE00ikzkUBI6ZCAJBatVibQpgSwDAFkVlqARtcDBb5AhV4LGRulY8mW55W
fnpl2qlXVJeoIw==
-----END CERTIFICATE-----
Generated at Sun May 24 13:33:07 2026 by rpki-client