Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3137322e302f32322d3234203d3e20323730363331.roa
File:                     3138312e34312e3137322e302f32322d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          c541y0XVN0fWwovkkBhp85rPSdG4h5ecwquRMjuHmaI=
Subject key identifier:   B9:00:2D:4B:DC:48:3E:78:65:5F:D1:1B:C1:45:6B:8B:79:AD:F1:3B
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       211DB8546A5C0BA9B7E9F3825D1A1E2BDAA35FBA
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3137322e302f32322d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:37 +0000
ROA not before:           Thu 27 Aug 2026 02:16:37 +0000
ROA not after:            Thu 26 Aug 2027 02:21:37 +0000
asID:                     270631
IP address blocks:        181.41.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1d:b8:54:6a:5c:0b:a9:b7:e9:f3:82:5d:1a:1e:2b:da:a3:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:37 2026 GMT
            Not After : Aug 26 02:21:37 2027 GMT
        Subject: CN=B9002D4BDC483E78655FD11BC1456B8B79ADF13B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:61:69:1e:94:b7:05:31:92:6a:c0:f8:d9:
                    61:fa:b2:74:a5:20:80:54:07:13:c7:88:64:9c:6f:
                    fa:af:95:5a:86:c2:f8:02:c9:0c:7c:43:72:ee:1d:
                    9b:71:d8:98:4f:ca:09:03:a5:71:39:e2:73:d9:66:
                    e1:2a:ec:6c:e3:d6:7c:d9:7f:a5:66:1f:4b:37:51:
                    14:f7:e0:85:3d:48:9c:52:f6:9a:36:db:52:32:da:
                    fc:66:e3:6c:41:f2:f5:70:9c:44:8c:8c:e1:0d:3c:
                    9b:f7:a9:06:da:df:26:5c:93:4c:3e:e1:f1:db:43:
                    28:eb:56:1a:94:84:72:29:a7:40:3e:da:8e:d9:6a:
                    9a:d8:b1:65:ad:9f:5c:36:16:63:42:4b:82:63:b4:
                    57:2e:ff:a9:18:64:2d:2f:49:76:4d:4c:ac:2a:4f:
                    dd:4c:62:27:05:59:4b:a8:c6:17:32:af:3a:fb:d2:
                    34:1d:c4:ee:2f:a7:06:98:48:1e:a1:18:78:c0:62:
                    2f:07:58:fc:e6:76:18:56:d0:ea:73:d9:89:77:16:
                    4a:5d:cf:c0:55:3d:e3:ff:79:ea:db:a0:8c:37:d2:
                    88:ea:1f:59:53:10:cf:16:38:e3:4d:e2:b0:f4:54:
                    af:8c:a1:d1:f9:fc:61:8d:76:34:5b:18:ea:e5:c1:
                    6d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:00:2D:4B:DC:48:3E:78:65:5F:D1:1B:C1:45:6B:8B:79:AD:F1:3B
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138312e34312e3137322e302f32322d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:9b:35:f4:5f:55:73:8f:02:c0:0e:29:ba:62:8c:83:db:
         7d:ed:dc:cd:c8:79:f2:e6:ad:0c:59:e0:6c:97:42:57:f3:43:
         09:3b:6e:5f:72:0b:4d:69:53:42:11:b9:dc:0d:6f:b1:c4:6e:
         dd:68:58:da:10:af:dc:51:6e:82:a0:1f:7b:9c:70:ee:dc:92:
         63:54:0a:4f:db:6c:a9:71:24:f1:98:72:c4:73:5d:76:c0:8d:
         ec:87:e7:f2:77:b5:ae:5b:58:5f:94:5b:9c:e7:2d:c2:b3:f8:
         d8:cc:34:24:84:12:6f:64:dd:e1:d4:db:cd:ae:a5:48:50:55:
         a6:66:ff:26:89:b3:85:69:aa:29:87:f7:82:2a:43:6c:bf:8d:
         29:c8:48:90:28:d1:32:8e:c6:0d:1f:63:eb:69:8f:14:f5:ca:
         0c:01:f9:f9:95:7b:a5:be:e1:85:a0:c3:14:f6:0a:88:10:c0:
         ba:69:10:5d:26:76:d2:cc:b0:08:e2:9f:2c:2a:03:58:60:0e:
         63:5a:8d:e1:a5:18:e5:e9:93:66:38:86:76:f8:00:e2:bc:56:
         e1:ae:74:f1:09:c2:6c:87:f1:30:83:3a:33:a3:4c:f2:c7:1b:
         f8:3c:1d:50:e6:8b:8b:9c:c3:fa:27:0c:9d:84:7f:47:10:24:
         c0:4f:af:d5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIR24VGpcC6m36fOCXRoeK9qjX7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGOTBCMDhBM0U5RjAyRUFDOUUxNjVDMUIwRDNEQ0VC
MzhDQzU2MjAeFw0yNjA4MjcwMjE2MzdaFw0yNzA4MjYwMjIxMzdaMDMxMTAvBgNV
BAMTKEI5MDAyRDRCREM0ODNFNzg2NTVGRDExQkMxNDU2QjhCNzlBREYxM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtD2FpHpS3BTGSasD42WH6snSl
IIBUBxPHiGScb/qvlVqGwvgCyQx8Q3LuHZtx2JhPygkDpXE54nPZZuEq7Gzj1nzZ
f6VmH0s3URT34IU9SJxS9po221Iy2vxm42xB8vVwnESMjOENPJv3qQba3yZck0w+
4fHbQyjrVhqUhHIpp0A+2o7ZaprYsWWtn1w2FmNCS4JjtFcu/6kYZC0vSXZNTKwq
T91MYicFWUuoxhcyrzr70jQdxO4vpwaYSB6hGHjAYi8HWPzmdhhW0Opz2Yl3Fkpd
z8BVPeP/eerboIw30ojqH1lTEM8WOONN4rD0VK+ModH5/GGNdjRbGOrlwW2fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuQAtS9xIPnhlX9EbwUVri3mt8TswHwYDVR0j
BBgwFoAU8PkLCKPp8C6snhZcGw09zrOMxWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1rVUtzTjc5QWJwb1VhV0x1Q2Q3ZTJEWTlyc2hOTjY5TGtIb1h6cFU4
ejEvMC9GMEY5MEIwOEEzRTlGMDJFQUM5RTE2NUMxQjBEM0RDRUIzOENDNTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRjkwQjA4QTNFOUYwMkVB
QzlFMTY1QzFCMEQzRENFQjM4Q0M1NjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNa1VLc043OUFicG9VYVdMdUNkN2UyRFk5cnNoTk42OUxrSG9YenBVOHoxLzAv
MzEzODMxMmUzNDMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3
MzAzNjMzMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK1KawwDQYJKoZIhvcNAQELBQADggEBAEmrmzX0
X1VzjwLADim6YoyD233t3M3IefLmrQxZ4GyXQlfzQwk7bl9yC01pU0IRudwNb7HE
bt1oWNoQr9xRboKgH3uccO7ckmNUCk/bbKlxJPGYcsRzXXbAjeyH5/J3ta5bWF+U
W5znLcKz+NjMNCSEEm9k3eHU282upUhQVaZm/yaJs4VpqimH94IqQ2y/jSnISJAo
0TKOxg0fY+tpjxT1ygwB+fmVe6W+4YWgwxT2CogQwLppEF0mdtLMsAjinywqA1hg
DmNajeGlGOXpk2Y4hnb4AOK8VuGudPEJwmyH8TCDOjOjTPLHG/g8HVDmi4ucw/on
DJ2Ef0cQJMBPr9U=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:55:05 2026 by rpki-client