Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
File:                     3230312e3133312e36382e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          oTj7b9bhH6RiSTQ8IwoCGUPpjxzPMpOXUR545PqouwU=
Subject key identifier:   E6:93:8B:C8:C5:14:10:AC:F3:36:C1:9F:99:27:D0:C5:22:DA:B3:14
Certificate issuer:       /CN=0EC8EAC7F1F5A216824B37118697748825F314D9
Certificate serial:       43C195DFFE3DECE17A3D8A031530720009975052
Authority key identifier: 0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa
Signing time:             Mon 23 Feb 2026 15:04:36 +0000
ROA not before:           Mon 23 Feb 2026 14:59:36 +0000
ROA not after:            Mon 22 Feb 2027 15:04:36 +0000
asID:                     61942
IP address blocks:        201.131.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl
                          rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 10:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:95:df:fe:3d:ec:e1:7a:3d:8a:03:15:30:72:00:09:97:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EC8EAC7F1F5A216824B37118697748825F314D9
        Validity
            Not Before: Feb 23 14:59:36 2026 GMT
            Not After : Feb 22 15:04:36 2027 GMT
        Subject: CN=E6938BC8C51410ACF336C19F9927D0C522DAB314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:fe:9e:98:31:6c:25:0b:6b:e5:7d:f3:00:93:
                    db:73:dd:b1:24:00:e9:f8:58:83:b0:4a:50:70:3f:
                    73:3f:b8:88:d4:af:76:2a:ab:7f:fa:3b:03:65:f5:
                    9a:e4:81:fe:5a:23:83:5b:3a:a4:e5:c8:ab:3f:68:
                    9c:75:f8:03:b5:8d:3d:05:8d:bc:0c:48:a7:1c:c5:
                    5d:f0:52:99:2f:e8:a3:52:b4:e2:9d:8d:c3:85:af:
                    de:64:8e:24:82:3f:0d:7c:88:82:e1:05:a2:ec:09:
                    e1:ab:c6:f9:94:2d:33:be:ac:95:4f:de:d3:a6:43:
                    45:cc:bb:e5:43:8f:9d:61:56:d8:c2:e3:ae:50:1d:
                    05:05:49:d2:cc:22:5d:e5:a6:89:4a:64:66:85:e3:
                    18:bf:b0:4e:a7:c9:c3:71:d9:10:57:c3:4b:64:a3:
                    83:5e:07:c7:e6:21:b3:b2:2d:b6:e8:3a:2b:6e:18:
                    fd:a0:3e:7c:95:fa:27:4c:3d:6a:17:f0:0b:cd:41:
                    39:89:e2:71:af:b9:ed:da:b7:5b:27:c2:5e:1e:c3:
                    12:3a:47:89:5d:76:b4:0b:7b:e9:ee:1f:cb:63:0d:
                    ca:ec:c8:1e:ca:b0:34:e9:a1:a3:dd:b6:2b:f2:4d:
                    b2:78:89:0c:c5:f0:a7:bc:34:42:65:9c:30:08:4d:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:93:8B:C8:C5:14:10:AC:F3:36:C1:9F:99:27:D0:C5:22:DA:B3:14
            X509v3 Authority Key Identifier:
                keyid:0E:C8:EA:C7:F1:F5:A2:16:82:4B:37:11:86:97:74:88:25:F3:14:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/0EC8EAC7F1F5A216824B37118697748825F314D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0EC8EAC7F1F5A216824B37118697748825F314D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/0/3230312e3133312e36382e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:1e:72:0a:dc:48:5a:39:88:9f:ea:f3:a7:e0:f3:70:c8:f3:
         36:fe:a6:64:61:98:ec:84:0c:5f:75:21:8b:b0:60:23:a6:2d:
         e8:f2:f9:4e:d7:d8:c7:76:fa:31:1f:7d:67:ab:d4:19:b3:11:
         a3:34:35:74:e5:38:78:3d:49:45:a5:34:7d:e3:fc:82:8e:bb:
         6f:bd:70:cd:46:a4:61:f9:f4:c5:38:c7:e7:b5:7d:24:3f:b2:
         51:07:7e:4c:20:87:c7:64:d2:52:d2:d3:d2:1e:c1:3c:da:5b:
         1a:5e:bf:f6:e2:23:4e:ff:67:db:e1:c2:2a:d6:fa:d8:ba:ff:
         9c:98:25:be:cf:74:15:d1:36:51:18:54:d0:76:1a:bd:a1:52:
         52:1a:f6:53:24:a8:51:3c:12:33:a2:ea:fa:11:2f:90:80:4d:
         90:97:2d:83:c6:e4:e8:a8:03:14:20:c0:67:b8:a8:7d:85:93:
         42:44:e2:2a:bc:8b:8c:33:d8:95:b3:6f:4a:a1:e8:88:22:fe:
         61:c2:36:2a:6b:9d:6c:46:aa:94:8f:31:4f:91:32:34:b9:ce:
         c1:b8:3d:ae:62:b6:f5:36:ec:5a:39:08:23:32:08:28:9f:05:
         e2:cb:3e:28:1b:1a:c8:35:a6:9a:d9:39:d5:cb:52:2e:ff:24:
         b8:ad:25:cb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ8GV3/497OF6PYoDFTByAAmXUFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVDOEVBQzdGMUY1QTIxNjgyNEIzNzExODY5Nzc0ODgy
NUYzMTREOTAeFw0yNjAyMjMxNDU5MzZaFw0yNzAyMjIxNTA0MzZaMDMxMTAvBgNV
BAMTKEU2OTM4QkM4QzUxNDEwQUNGMzM2QzE5Rjk5MjdEMEM1MjJEQUIzMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7/p6YMWwlC2vlffMAk9tz3bEk
AOn4WIOwSlBwP3M/uIjUr3Yqq3/6OwNl9Zrkgf5aI4NbOqTlyKs/aJx1+AO1jT0F
jbwMSKccxV3wUpkv6KNStOKdjcOFr95kjiSCPw18iILhBaLsCeGrxvmULTO+rJVP
3tOmQ0XMu+VDj51hVtjC465QHQUFSdLMIl3lpolKZGaF4xi/sE6nycNx2RBXw0tk
o4NeB8fmIbOyLbboOituGP2gPnyV+idMPWoX8AvNQTmJ4nGvue3at1snwl4ewxI6
R4lddrQLe+nuH8tjDcrsyB7KsDTpoaPdtivyTbJ4iQzF8Ke8NEJlnDAITft3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5pOLyMUUEKzzNsGfmSfQxSLasxQwHwYDVR0j
BBgwFoAUDsjqx/H1ohaCSzcRhpd0iCXzFNkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMC8wRUM4RUFDN0YxRjVBMjE2ODI0QjM3MTE4Njk3NzQ4ODI1RjMxNEQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFQzhFQUM3RjFGNUEyMTY4
MjRCMzcxMTg2OTc3NDg4MjVGMzE0RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzAv
MzIzMDMxMmUzMTMzMzEyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyYNEMA0GCSqGSIb3DQEBCwUAA4IBAQAdHnIK3Eha
OYif6vOn4PNwyPM2/qZkYZjshAxfdSGLsGAjpi3o8vlO19jHdvoxH31nq9QZsxGj
NDV05Th4PUlFpTR94/yCjrtvvXDNRqRh+fTFOMfntX0kP7JRB35MIIfHZNJS0tPS
HsE82lsaXr/24iNO/2fb4cIq1vrYuv+cmCW+z3QV0TZRGFTQdhq9oVJSGvZTJKhR
PBIzour6ES+QgE2Qly2DxuToqAMUIMBnuKh9hZNCROIqvIuMM9iVs29KoeiIIv5h
wjYqa51sRqqUjzFPkTI0uc7BuD2uYrb1NuxaOQgjMggonwXiyz4oGxrINaaa2TnV
y1Iu/yS4rSXL
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:18:03 2026 by rpki-client