Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa
File:                     3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          Kfiy9H6M6WJ6aKRReENpFbLfGlnp8nUpUd9h5Gi0JK0=
Subject key identifier:   3C:13:55:2C:71:93:D3:F9:42:06:01:27:E3:45:9F:0A:77:D4:5F:41
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       508F99092946FCF64AA37E6E5324F5A07A5A6580
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:34:44 +0000
ROA not before:           Thu 27 Aug 2026 02:29:44 +0000
ROA not after:            Thu 26 Aug 2027 02:34:44 +0000
asID:                     270631
IP address blocks:        189.126.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:8f:99:09:29:46:fc:f6:4a:a3:7e:6e:53:24:f5:a0:7a:5a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:29:44 2026 GMT
            Not After : Aug 26 02:34:44 2027 GMT
        Subject: CN=3C13552C7193D3F942060127E3459F0A77D45F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:7a:d3:3a:4d:93:45:0c:12:4f:82:68:69:
                    5b:50:ce:00:73:da:0a:04:14:d1:1b:9a:94:2d:25:
                    0e:00:82:1c:3b:2f:fc:50:2c:1f:76:70:8b:ff:0b:
                    37:69:bc:bf:79:9d:91:9f:80:0c:86:e6:f4:b6:6f:
                    be:71:b7:79:46:d0:bf:54:a9:8c:f3:b9:73:0c:6a:
                    a3:f2:95:d8:c7:d6:94:cb:36:4a:47:0f:34:e3:3e:
                    b6:6e:29:be:54:ed:bf:b2:18:b3:34:a1:d5:85:71:
                    aa:00:90:8f:cc:30:5d:60:52:65:05:cd:44:8f:57:
                    00:dc:ff:2f:34:ce:9a:50:09:e5:00:ff:03:01:ba:
                    84:5e:97:cd:1a:0e:c1:4b:f0:a1:53:ff:d6:f9:4b:
                    c8:28:d5:eb:9b:4a:ac:98:6a:11:91:e3:ff:bd:4d:
                    76:9f:06:bd:1d:11:2b:37:1a:cd:80:5b:08:0f:f9:
                    5b:89:27:aa:c7:c7:31:bc:c4:2c:7b:25:d5:da:04:
                    07:0c:12:9d:24:07:47:47:54:15:2b:cf:7e:5b:99:
                    39:2b:fa:72:d6:93:bc:9f:06:70:55:a8:a0:a6:f1:
                    de:00:da:bd:60:94:b0:fb:be:40:6d:4f:3b:23:9b:
                    ce:d6:8f:a5:37:2b:15:19:dc:0b:92:3e:40:c5:50:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:13:55:2C:71:93:D3:F9:42:06:01:27:E3:45:9F:0A:77:D4:5F:41
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3138392e3132362e3134302e302f32322d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:47:e9:0a:dd:87:e9:08:cc:80:7f:83:42:3c:c6:d6:09:e5:
         f7:76:69:b3:21:1a:af:aa:fc:72:3b:22:c8:57:8d:08:77:6b:
         9d:e4:9b:3b:ad:4b:90:e8:c2:a5:34:48:11:60:a3:94:ce:ac:
         47:5e:52:dd:e4:3f:45:48:40:c8:94:3e:9c:57:12:73:59:3f:
         39:23:c9:c8:36:3c:8d:3f:d7:8f:f2:7a:7d:22:a0:85:42:ac:
         4b:72:bc:f6:c7:f4:c1:86:03:c7:16:49:b6:f6:97:14:34:ba:
         ee:ed:8e:de:17:cb:ce:05:26:ee:21:c4:de:05:65:c2:13:82:
         f6:06:bd:5e:ba:ef:0c:d8:da:76:57:31:37:a6:20:90:89:a4:
         e8:ad:74:e3:c2:08:ee:c4:2a:ab:8d:d7:3a:65:b3:7a:fc:d7:
         ef:ba:ed:fa:e7:06:72:fb:9e:7f:07:b9:7a:06:8f:66:54:69:
         32:4e:99:9d:49:da:2f:dc:6a:d7:a3:fc:7b:01:74:69:1f:17:
         19:3b:7c:1e:71:fd:d9:ba:1b:82:6c:e4:e5:c5:5e:ed:57:17:
         01:17:75:af:a9:4c:8c:9b:2c:12:ec:e9:85:50:f4:1b:2c:f0:
         54:aa:1b:69:4e:20:e7:c1:de:c6:28:b2:db:a5:70:18:98:51:
         ae:68:d4:20
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUUI+ZCSlG/PZKo35uUyT1oHpaZYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBGOTBCMDhBM0U5RjAyRUFDOUUxNjVDMUIwRDNEQ0VC
MzhDQzU2MjAeFw0yNjA4MjcwMjI5NDRaFw0yNzA4MjYwMjM0NDRaMDMxMTAvBgNV
BAMTKDNDMTM1NTJDNzE5M0QzRjk0MjA2MDEyN0UzNDU5RjBBNzdENDVGNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+HrTOk2TRQwST4JoaVtQzgBz
2goEFNEbmpQtJQ4Aghw7L/xQLB92cIv/CzdpvL95nZGfgAyG5vS2b75xt3lG0L9U
qYzzuXMMaqPyldjH1pTLNkpHDzTjPrZuKb5U7b+yGLM0odWFcaoAkI/MMF1gUmUF
zUSPVwDc/y80zppQCeUA/wMBuoRel80aDsFL8KFT/9b5S8go1eubSqyYahGR4/+9
TXafBr0dESs3Gs2AWwgP+VuJJ6rHxzG8xCx7JdXaBAcMEp0kB0dHVBUrz35bmTkr
+nLWk7yfBnBVqKCm8d4A2r1glLD7vkBtTzsjm87Wj6U3KxUZ3AuSPkDFUKFfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPBNVLHGT0/lCBgEn40WfCnfUX0EwHwYDVR0j
BBgwFoAU8PkLCKPp8C6snhZcGw09zrOMxWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1rVUtzTjc5QWJwb1VhV0x1Q2Q3ZTJEWTlyc2hOTjY5TGtIb1h6cFU4
ejEvMC9GMEY5MEIwOEEzRTlGMDJFQUM5RTE2NUMxQjBEM0RDRUIzOENDNTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YwRjkwQjA4QTNFOUYwMkVB
QzlFMTY1QzFCMEQzRENFQjM4Q0M1NjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNa1VLc043OUFicG9VYVdMdUNkN2UyRFk5cnNoTk42OUxrSG9YenBVOHoxLzAv
MzEzODM5MmUzMTMyMzYyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr1+jDANBgkqhkiG9w0BAQsFAAOCAQEAR0fp
Ct2H6QjMgH+DQjzG1gnl93ZpsyEar6r8cjsiyFeNCHdrneSbO61LkOjCpTRIEWCj
lM6sR15S3eQ/RUhAyJQ+nFcSc1k/OSPJyDY8jT/Xj/J6fSKghUKsS3K89sf0wYYD
xxZJtvaXFDS67u2O3hfLzgUm7iHE3gVlwhOC9ga9XrrvDNjadlcxN6YgkImk6K10
48II7sQqq43XOmWzevzX77rt+ucGcvuefwe5egaPZlRpMk6ZnUnaL9xq16P8ewF0
aR8XGTt8HnH92bobgmzk5cVe7VcXARd1r6lMjJssEuzphVD0GyzwVKobaU4g58He
xiiy26VwGJhRrmjUIA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:08:17 2026 by rpki-client