Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa
File:                     3138372e39342e38302e302f32302d3234203d3e203238333036.roa (raw, json)
Hash identifier:          HZeGHjdMUS650qax5xb182PLooVYDWpM0483IEo5IsY=
Subject key identifier:   B5:EA:BF:02:78:91:8E:4E:75:BF:4E:22:27:E0:C0:0B:8E:63:98:18
Certificate issuer:       /CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
Certificate serial:       61B3ECBA1A60BB21CAE9BDA3124C66976002A2CD
Authority key identifier: BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa
Signing time:             Mon 26 Oct 2026 13:33:26 +0000
ROA not before:           Mon 26 Oct 2026 13:28:26 +0000
ROA not after:            Mon 25 Oct 2027 13:33:26 +0000
asID:                     28306
IP address blocks:        187.94.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl
                          rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 07:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b3:ec:ba:1a:60:bb:21:ca:e9:bd:a3:12:4c:66:97:60:02:a2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC352CC4ECCE325FD37ECE783E4C5420B23C503
        Validity
            Not Before: Oct 26 13:28:26 2026 GMT
            Not After : Oct 25 13:33:26 2027 GMT
        Subject: CN=B5EABF0278918E4E75BF4E2227E0C00B8E639818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:08:ce:0e:32:bc:90:c7:b9:2c:e1:c2:8c:de:
                    2a:08:0b:28:73:46:6a:15:98:c3:11:e4:54:1b:d4:
                    0b:5a:66:ec:76:da:87:ad:d9:f3:c5:7f:19:ea:ea:
                    19:bf:20:f4:7c:8a:96:64:31:28:54:17:85:11:2a:
                    2c:9a:a9:53:20:6f:98:39:77:a6:0d:66:d5:f2:7c:
                    e3:56:20:71:e2:c4:1f:2e:fe:e8:37:10:1a:57:28:
                    8a:05:40:cf:7b:a9:8f:e3:f5:3c:60:cc:5b:48:c4:
                    d9:03:3d:96:53:ca:7f:75:a0:11:e2:6f:cf:b9:6f:
                    eb:d6:51:dd:7b:6d:b1:cb:39:29:f9:c8:ef:1a:b9:
                    ca:ae:14:4a:d4:cc:a6:a7:cb:a1:7a:b1:e2:c5:a9:
                    f1:2c:5b:52:66:d0:5e:f5:00:ce:e3:b8:6f:b2:f6:
                    a0:61:d1:e3:a2:13:9b:91:eb:30:15:37:0f:ec:af:
                    4b:d4:63:a8:a1:d3:0b:12:1f:07:5a:0e:08:7f:f9:
                    99:78:ff:20:a0:ca:5a:95:eb:8c:14:53:f2:b3:0d:
                    e1:65:42:be:19:a8:83:95:82:86:f0:7e:f5:f9:17:
                    ff:45:37:1f:0b:3f:77:5b:b1:4f:2c:4b:92:e8:08:
                    bd:2b:b7:00:e9:56:a1:c4:ac:22:82:31:fc:2d:c9:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EA:BF:02:78:91:8E:4E:75:BF:4E:22:27:E0:C0:0B:8E:63:98:18
            X509v3 Authority Key Identifier:
                keyid:BD:C3:52:CC:4E:CC:E3:25:FD:37:EC:E7:83:E4:C5:42:0B:23:C5:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDC352CC4ECCE325FD37ECE783E4C5420B23C503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/3138372e39342e38302e302f32302d3234203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:c2:8d:83:3e:6e:8d:c1:19:18:7c:89:16:2a:4e:66:02:55:
         ea:91:06:b2:52:45:be:61:8a:04:f7:fc:ec:3f:72:49:07:bd:
         93:66:ec:53:d2:67:f1:58:a7:59:2e:2e:d1:ec:8f:19:e3:60:
         15:d8:c0:80:7a:6f:1b:3d:3a:94:68:33:88:fa:d4:25:35:05:
         32:7f:8f:d3:9e:fa:02:bc:d9:2d:6d:97:0a:73:ce:f7:2a:2b:
         8f:0e:50:59:50:8f:c5:d4:6d:c4:96:e0:95:ea:17:1d:e3:2b:
         d0:1c:1b:dd:95:02:c8:6d:f4:53:39:50:66:fe:09:27:36:46:
         f5:82:de:2a:6f:40:7f:9d:a4:bd:ba:de:5c:c2:90:51:ca:c8:
         6a:da:64:f4:81:ce:69:29:53:45:c5:1d:00:8a:12:46:34:6d:
         ed:7b:9e:a8:45:8c:6b:5d:81:2c:f7:8e:b2:c6:89:44:63:93:
         c5:83:b9:f8:6d:ea:0e:ef:cc:27:38:a3:2f:bb:e5:50:b2:8b:
         87:05:51:ef:f2:62:7e:65:ee:bc:fc:75:aa:9b:fd:8b:1d:00:
         47:21:72:c5:cd:44:9a:07:89:8a:15:36:e9:e8:f5:5a:91:ec:
         34:a6:a2:c3:84:ba:96:29:a7:50:35:de:c8:08:e3:60:a4:f0:
         2c:55:30:85
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUYbPsuhpguyHK6b2jEkxml2ACos0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDMzUyQ0M0RUNDRTMyNUZEMzdFQ0U3ODNFNEM1NDIw
QjIzQzUwMzAeFw0yNjEwMjYxMzI4MjZaFw0yNzEwMjUxMzMzMjZaMDMxMTAvBgNV
BAMTKEI1RUFCRjAyNzg5MThFNEU3NUJGNEUyMjI3RTBDMDBCOEU2Mzk4MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkCM4OMryQx7ks4cKM3ioICyhz
RmoVmMMR5FQb1AtaZux22oet2fPFfxnq6hm/IPR8ipZkMShUF4URKiyaqVMgb5g5
d6YNZtXyfONWIHHixB8u/ug3EBpXKIoFQM97qY/j9TxgzFtIxNkDPZZTyn91oBHi
b8+5b+vWUd17bbHLOSn5yO8aucquFErUzKany6F6seLFqfEsW1Jm0F71AM7juG+y
9qBh0eOiE5uR6zAVNw/sr0vUY6ih0wsSHwdaDgh/+Zl4/yCgylqV64wUU/KzDeFl
Qr4ZqIOVgobwfvX5F/9FNx8LP3dbsU8sS5LoCL0rtwDpVqHErCKCMfwtySfrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUteq/AniRjk51v04iJ+DAC45jmBgwHwYDVR0j
BBgwFoAUvcNSzE7M4yX9N+zng+TFQgsjxQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN1BEMlBudzFaclJFblYzck5rOGF6WmoxWHk2dmZ0ZTFXTE1KOWdCUE5O
dWcvMC9CREMzNTJDQzRFQ0NFMzI1RkQzN0VDRTc4M0U0QzU0MjBCMjNDNTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JEQzM1MkNDNEVDQ0UzMjVG
RDM3RUNFNzgzRTRDNTQyMEIyM0M1MDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdQRDJQbncxWnJSRW5WM3JOazhhelpqMVh5NnZmdGUxV0xNSjlnQlBOTnVnLzAv
MzEzODM3MmUzOTM0MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODMz
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLteUDANBgkqhkiG9w0BAQsFAAOCAQEApsKNgz5ujcEZ
GHyJFipOZgJV6pEGslJFvmGKBPf87D9ySQe9k2bsU9Jn8VinWS4u0eyPGeNgFdjA
gHpvGz06lGgziPrUJTUFMn+P0576ArzZLW2XCnPO9yorjw5QWVCPxdRtxJbgleoX
HeMr0Bwb3ZUCyG30UzlQZv4JJzZG9YLeKm9Af52kvbreXMKQUcrIatpk9IHOaSlT
RcUdAIoSRjRt7XueqEWMa12BLPeOssaJRGOTxYO5+G3qDu/MJzijL7vlULKLhwVR
7/JifmXuvPx1qpv9ix0ARyFyxc1EmgeJihU26ej1WpHsNKaiw4S6limnUDXeyAjj
YKTwLFUwhQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:51:43 2026 by rpki-client