Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
File:                     3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa (raw, json)
Hash identifier:          2y37Q82m92CMn9T4jRv+m37FCT8h7lPKEo9ZNRQnU1Q=
Subject key identifier:   89:26:E0:A3:5B:F5:B4:A4:DE:CD:43:E5:55:E7:AD:19:C0:F2:83:79
Certificate issuer:       /CN=2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA
Certificate serial:       469E9E0723339E82C24EDC516D29CB924CAF22D1
Authority key identifier: 26:23:CD:EC:D0:32:AB:3C:52:CD:46:14:FF:A4:B6:6E:4B:8B:D2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa
Signing time:             Fri 12 Jun 2026 17:39:43 +0000
ROA not before:           Fri 12 Jun 2026 17:34:43 +0000
ROA not after:            Fri 11 Jun 2027 17:39:43 +0000
asID:                     270398
IP address blocks:        189.126.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.crl
                          rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 15:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9e:9e:07:23:33:9e:82:c2:4e:dc:51:6d:29:cb:92:4c:af:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA
        Validity
            Not Before: Jun 12 17:34:43 2026 GMT
            Not After : Jun 11 17:39:43 2027 GMT
        Subject: CN=8926E0A35BF5B4A4DECD43E555E7AD19C0F28379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:ac:a5:6e:27:90:6d:02:c4:18:88:fa:32:
                    cc:d2:fa:3b:3f:b5:a5:31:99:66:ee:89:e5:2f:5d:
                    2b:36:42:c8:e5:36:54:9e:45:6a:a6:e8:4f:c6:66:
                    94:85:30:35:dc:f0:d1:a2:9c:93:7a:63:77:c0:86:
                    8b:9b:0c:3e:9e:01:7c:39:61:b9:0d:57:1e:60:0c:
                    8b:23:2a:69:24:bf:e1:58:9e:d2:6b:f1:a4:c1:e8:
                    91:28:47:29:bf:10:05:1e:9a:86:f4:eb:04:34:83:
                    a1:8b:2e:69:c4:ef:8b:81:2f:59:72:28:bc:ae:ac:
                    88:dd:64:fa:fc:68:9a:cf:86:05:03:da:05:6a:6a:
                    c4:cf:66:e2:0f:77:0d:21:cd:60:c4:4b:e7:4e:ae:
                    4a:41:4a:bc:35:09:3c:9a:fb:90:7c:1c:9b:f5:5a:
                    52:75:5c:20:98:1e:85:2b:f5:0b:24:41:68:b9:b8:
                    20:10:41:b4:9b:5d:da:f1:d9:9a:69:65:2f:a5:ff:
                    ea:aa:6c:e0:b5:f7:3d:7a:b0:b4:6a:07:5a:b7:43:
                    3e:a3:a4:6f:ef:1c:47:cc:73:4c:9f:9a:1c:a2:2c:
                    7e:b4:a9:42:22:6f:df:dc:38:af:e6:a6:cd:25:78:
                    36:09:29:ec:20:b2:5d:9c:c5:30:8e:42:41:f0:27:
                    90:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:26:E0:A3:5B:F5:B4:A4:DE:CD:43:E5:55:E7:AD:19:C0:F2:83:79
            X509v3 Authority Key Identifier:
                keyid:26:23:CD:EC:D0:32:AB:3C:52:CD:46:14:FF:A4:B6:6E:4B:8B:D2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2623CDECD032AB3C52CD4614FFA4B66E4B8BD2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/587tq4qt5v7mJbrEnc7K8vZoBEnQ9bjkDBhtzfNqMess/0/3138392e3132362e31312e302f32342d3234203d3e20323730333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:9b:39:a6:ab:3c:b5:d3:b7:80:cb:c4:43:0b:5b:98:9a:ce:
         62:1f:4d:8b:64:bb:a9:8d:be:9a:6d:c9:05:c2:29:9d:c4:ba:
         c5:db:89:db:af:9a:24:bd:fd:f2:4b:1c:b7:2b:b0:95:2d:e0:
         6c:b0:31:85:8d:60:72:53:0b:de:71:23:a8:cd:4c:aa:18:0e:
         25:bb:aa:1e:26:6c:51:e3:df:02:0c:5e:74:4b:90:75:31:ee:
         4d:7c:27:8c:45:87:cd:95:50:cf:ed:7f:a6:d0:a7:59:41:f5:
         2f:f1:00:e5:a2:2b:58:a1:86:59:ec:63:6f:7f:dc:8a:59:66:
         f7:0d:2a:cf:8d:29:bf:dc:ac:15:57:29:4b:50:1b:35:fc:9e:
         35:99:77:2f:ad:e6:e2:9e:4c:be:67:1e:6a:8f:6d:99:3c:fc:
         91:74:26:e5:cf:e0:ef:65:2c:5a:79:60:d2:81:9d:38:8e:34:
         00:8e:13:80:f3:78:8d:4e:2a:3e:16:29:fc:be:59:35:8b:8e:
         9c:ec:e2:85:e3:df:04:66:49:c6:f4:47:66:23:38:7f:e8:8d:
         ce:07:d2:8e:f4:5d:4a:41:69:88:cd:5c:a5:24:f3:d9:c7:63:
         5a:71:2c:da:8b:89:24:9b:a9:2f:b5:ec:61:47:96:95:e1:e4:
         35:c5:c8:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURp6eByMznoLCTtxRbSnLkkyvItEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYyM0NERUNEMDMyQUIzQzUyQ0Q0NjE0RkZBNEI2NkU0
QjhCRDJBQTAeFw0yNjA2MTIxNzM0NDNaFw0yNzA2MTExNzM5NDNaMDMxMTAvBgNV
BAMTKDg5MjZFMEEzNUJGNUI0QTRERUNENDNFNTU1RTdBRDE5QzBGMjgzNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiq6ylbieQbQLEGIj6MszS+js/
taUxmWbuieUvXSs2QsjlNlSeRWqm6E/GZpSFMDXc8NGinJN6Y3fAhoubDD6eAXw5
YbkNVx5gDIsjKmkkv+FYntJr8aTB6JEoRym/EAUemob06wQ0g6GLLmnE74uBL1ly
KLyurIjdZPr8aJrPhgUD2gVqasTPZuIPdw0hzWDES+dOrkpBSrw1CTya+5B8HJv1
WlJ1XCCYHoUr9QskQWi5uCAQQbSbXdrx2ZppZS+l/+qqbOC19z16sLRqB1q3Qz6j
pG/vHEfMc0yfmhyiLH60qUIib9/cOK/mps0leDYJKewgsl2cxTCOQkHwJ5APAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiSbgo1v1tKTezUPlVeetGcDyg3kwHwYDVR0j
BBgwFoAUJiPN7NAyqzxSzUYU/6S2bkuL0qowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTg3dHE0cXQ1djdtSmJyRW5jN0s4dlpvQkVuUTliamtEQmh0emZOcU1l
c3MvMC8yNjIzQ0RFQ0QwMzJBQjNDNTJDRDQ2MTRGRkE0QjY2RTRCOEJEMkFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI2MjNDREVDRDAzMkFCM0M1
MkNENDYxNEZGQTRCNjZFNEI4QkQyQUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU4N3RxNHF0NXY3bUpickVuYzdLOHZab0JFblE5YmprREJodHpmTnFNZXNzLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzMzM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC9fgswDQYJKoZIhvcNAQELBQADggEBAHCbOaar
PLXTt4DLxEMLW5iazmIfTYtku6mNvpptyQXCKZ3EusXbiduvmiS9/fJLHLcrsJUt
4GywMYWNYHJTC95xI6jNTKoYDiW7qh4mbFHj3wIMXnRLkHUx7k18J4xFh82VUM/t
f6bQp1lB9S/xAOWiK1ihhlnsY29/3IpZZvcNKs+NKb/crBVXKUtQGzX8njWZdy+t
5uKeTL5nHmqPbZk8/JF0JuXP4O9lLFp5YNKBnTiONACOE4DzeI1OKj4WKfy+WTWL
jpzs4oXj3wRmScb0R2YjOH/ojc4H0o70XUpBaYjNXKUk89nHY1pxLNqLiSSbqS+1
7GFHlpXh5DXFyDE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:17:41 2026 by rpki-client