Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3234203d3e20323636333139.roa
File:                     3137302e3233382e3133302e302f32332d3234203d3e20323636333139.roa (raw, json)
Hash identifier:          uflG3VWldd7fPtyOcuCy4UB4sXfSkzSGBfPSLcbO2A8=
Subject key identifier:   88:FF:C7:09:47:F5:20:00:5E:ED:17:60:B6:9C:41:9F:9D:4F:AA:A6
Certificate issuer:       /CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
Certificate serial:       6E24BDA7466769D0451CA74EF9C7458B75B59604
Authority key identifier: A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3234203d3e20323636333139.roa
Signing time:             Thu 11 Jun 2026 19:11:42 +0000
ROA not before:           Thu 11 Jun 2026 19:06:42 +0000
ROA not after:            Thu 10 Jun 2027 19:11:42 +0000
asID:                     266319
IP address blocks:        170.238.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl
                          rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:24:bd:a7:46:67:69:d0:45:1c:a7:4e:f9:c7:45:8b:75:b5:96:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DD57812FFB0246BB0A6436547056BD2F4AA3CC
        Validity
            Not Before: Jun 11 19:06:42 2026 GMT
            Not After : Jun 10 19:11:42 2027 GMT
        Subject: CN=88FFC70947F520005EED1760B69C419F9D4FAAA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:5f:74:eb:45:a1:05:07:98:15:b3:79:21:
                    ec:a5:c1:03:e5:d0:74:dd:b9:b9:66:32:24:2a:02:
                    ae:f5:cb:15:c4:b8:bb:3f:40:31:f1:dc:46:8c:f0:
                    70:bf:3f:d0:ef:d4:d9:a3:a2:12:a2:8c:b4:2c:96:
                    a7:a9:4d:45:61:49:1d:93:d5:be:28:15:4b:76:c1:
                    fe:de:2e:04:11:d5:fd:ef:14:38:8d:f4:8c:2c:fd:
                    5e:dd:c1:81:72:53:c5:02:01:dd:ee:f5:16:67:3b:
                    3c:6f:dc:bf:4b:c3:f3:19:7d:1d:17:07:f7:43:cc:
                    ce:f8:90:c8:5f:fb:b3:90:7e:46:49:f5:f8:40:70:
                    a2:1e:41:1e:fb:49:90:74:9d:f3:3e:b2:5c:f6:00:
                    ad:c3:06:b1:d9:16:7c:85:52:6d:c9:42:e4:61:c0:
                    88:1b:1b:4b:ba:72:27:7f:22:2a:37:f9:1c:e5:a7:
                    e7:ad:e2:86:15:e2:ea:05:4a:b7:d1:36:71:bf:52:
                    bd:68:57:28:6a:1b:7c:ae:ce:94:d1:c2:74:03:22:
                    32:5e:f2:9b:ef:f1:ce:a9:fb:e7:bb:bb:47:30:18:
                    e3:48:a7:98:0c:6d:4c:2f:0d:5d:8c:cf:6c:74:2b:
                    9a:ed:3a:dd:28:ad:b8:6b:c2:bd:a3:58:4a:8d:cb:
                    3b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:C7:09:47:F5:20:00:5E:ED:17:60:B6:9C:41:9F:9D:4F:AA:A6
            X509v3 Authority Key Identifier:
                keyid:A9:DD:57:81:2F:FB:02:46:BB:0A:64:36:54:70:56:BD:2F:4A:A3:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9DD57812FFB0246BB0A6436547056BD2F4AA3CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/3137302e3233382e3133302e302f32332d3234203d3e20323636333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:9b:65:b3:e2:1d:26:80:93:c9:0b:1d:b7:83:c9:78:58:
         11:3d:3a:ad:79:da:c9:f4:4a:ae:ed:c9:3f:91:b3:55:1b:a4:
         f6:09:6d:a0:11:40:17:bb:9e:81:ff:cd:9e:db:e6:d7:41:fe:
         69:0b:ba:2d:b7:3a:09:08:c1:01:e3:8c:d1:a0:c9:fc:d0:78:
         7b:4e:1d:cb:83:0f:8b:63:95:29:d5:78:5c:33:be:4c:12:fd:
         25:fa:38:13:50:3e:43:09:7e:32:3a:38:0c:30:78:96:b9:c4:
         2e:aa:9a:96:b1:ba:0f:13:7b:7a:d9:40:b6:5e:82:59:26:23:
         f9:55:c6:da:07:f1:bd:67:a4:1c:55:f3:79:be:95:5c:63:18:
         cc:eb:36:ed:9b:3a:3a:99:b3:8c:5b:05:bd:53:b9:97:62:e0:
         07:86:bc:49:e6:c4:44:de:4c:2e:94:ce:dd:bb:b4:fb:88:80:
         50:b8:00:c3:21:32:49:e4:a3:fa:65:65:c3:4a:23:2f:85:68:
         63:79:6b:a8:1d:b8:85:c0:bc:ff:22:9b:4b:c9:53:70:f5:e5:
         c0:e9:21:c3:ba:d5:7a:3c:11:04:b0:29:e3:f6:1d:cc:74:5e:
         0d:e6:78:24:21:91:8f:13:7f:eb:7d:1d:e0:f6:8c:7e:78:68:
         3f:38:2b:ce
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbiS9p0ZnadBFHKdO+cdFi3W1lgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTlERDU3ODEyRkZCMDI0NkJCMEE2NDM2NTQ3MDU2QkQy
RjRBQTNDQzAeFw0yNjA2MTExOTA2NDJaFw0yNzA2MTAxOTExNDJaMDMxMTAvBgNV
BAMTKDg4RkZDNzA5NDdGNTIwMDA1RUVEMTc2MEI2OUM0MTlGOUQ0RkFBQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxC19060WhBQeYFbN5IeylwQPl
0HTdublmMiQqAq71yxXEuLs/QDHx3EaM8HC/P9Dv1NmjohKijLQslqepTUVhSR2T
1b4oFUt2wf7eLgQR1f3vFDiN9Iws/V7dwYFyU8UCAd3u9RZnOzxv3L9Lw/MZfR0X
B/dDzM74kMhf+7OQfkZJ9fhAcKIeQR77SZB0nfM+slz2AK3DBrHZFnyFUm3JQuRh
wIgbG0u6cid/Iio3+Rzlp+et4oYV4uoFSrfRNnG/Ur1oVyhqG3yuzpTRwnQDIjJe
8pvv8c6p++e7u0cwGONIp5gMbUwvDV2Mz2x0K5rtOt0orbhrwr2jWEqNyzujAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiP/HCUf1IABe7RdgtpxBn51PqqYwHwYDVR0j
BBgwFoAUqd1XgS/7Aka7CmQ2VHBWvS9Ko8wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGJKRXFWRjVYb2F0VExlUGNzZ3BKMlpSbmRDNE1RS1RiY1ZLS1kyMnI3
aE0vMC9BOURENTc4MTJGRkIwMjQ2QkIwQTY0MzY1NDcwNTZCRDJGNEFBM0NDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E5REQ1NzgxMkZGQjAyNDZC
QjBBNjQzNjU0NzA1NkJEMkY0QUEzQ0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhiSkVxVkY1WG9hdFRMZVBjc2dwSjJaUm5kQzRNUUtUYmNWS0tZMjJyN2hNLzAv
MzEzNzMwMmUzMjMzMzgyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzNjMzMzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAarugjANBgkqhkiG9w0BAQsFAAOCAQEAKoWb
ZbPiHSaAk8kLHbeDyXhYET06rXnayfRKru3JP5GzVRuk9gltoBFAF7uegf/Nntvm
10H+aQu6Lbc6CQjBAeOM0aDJ/NB4e04dy4MPi2OVKdV4XDO+TBL9Jfo4E1A+Qwl+
Mjo4DDB4lrnELqqalrG6DxN7etlAtl6CWSYj+VXG2gfxvWekHFXzeb6VXGMYzOs2
7Zs6OpmzjFsFvVO5l2LgB4a8SebERN5MLpTO3bu0+4iAULgAwyEySeSj+mVlw0oj
L4VoY3lrqB24hcC8/yKbS8lTcPXlwOkhw7rVejwRBLAp4/YdzHReDeZ4JCGRjxN/
630d4PaMfnhoPzgrzg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:03:18 2026 by rpki-client