Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa
File:                     3138362e3232362e39362e302f32302d3234203d3e203532393939.roa (raw, json)
Hash identifier:          GzuQ7ygQ7FD8NiZ53g7ZWdJqmQCmGRZ1xyfq13IBa/c=
Subject key identifier:   46:5D:C6:A7:83:F7:60:9C:32:01:C3:C3:66:47:8F:AD:2D:60:21:CF
Certificate issuer:       /CN=A8F177498F7A2D41479F1C0011E59978A9CDA931
Certificate serial:       26A4A428370B0F38E405111A7B9B0C0CB089D715
Authority key identifier: A8:F1:77:49:8F:7A:2D:41:47:9F:1C:00:11:E5:99:78:A9:CD:A9:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa
Signing time:             Thu 22 Oct 2026 16:25:26 +0000
ROA not before:           Thu 22 Oct 2026 16:20:26 +0000
ROA not after:            Thu 21 Oct 2027 16:25:26 +0000
asID:                     52999
IP address blocks:        186.226.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.crl
                          rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 14:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a4:a4:28:37:0b:0f:38:e4:05:11:1a:7b:9b:0c:0c:b0:89:d7:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F177498F7A2D41479F1C0011E59978A9CDA931
        Validity
            Not Before: Oct 22 16:20:26 2026 GMT
            Not After : Oct 21 16:25:26 2027 GMT
        Subject: CN=465DC6A783F7609C3201C3C366478FAD2D6021CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:85:4a:89:9c:3e:98:6b:7c:09:60:51:71:
                    b2:63:1a:5b:99:96:1d:52:ee:28:5c:be:26:ad:8f:
                    2e:c6:49:a5:c9:1b:06:91:33:2b:b0:d6:f9:f9:4f:
                    bb:b4:30:1f:be:a2:2f:36:76:a9:46:59:2a:71:45:
                    c7:96:82:bf:2d:27:2b:9d:6b:ef:a1:07:61:23:83:
                    dd:a1:16:e9:e8:37:d1:a0:3a:9b:b6:27:2f:37:72:
                    21:55:ed:80:1b:ca:8c:03:fa:9e:d2:60:68:48:0c:
                    7a:c1:f7:c9:2d:ca:88:da:cc:8d:f5:21:6d:42:c7:
                    82:49:32:ac:61:ac:0b:a1:85:90:94:34:fc:fe:87:
                    a7:7c:d1:64:18:02:c4:7b:12:47:cf:16:6e:ac:fb:
                    ba:70:cf:5f:ab:9b:82:60:00:59:42:c0:0b:96:c7:
                    ea:36:2b:5b:03:1c:e9:54:3a:dd:8f:47:f9:60:0f:
                    fe:88:48:db:f7:ab:a4:75:5c:03:18:c9:1c:da:91:
                    ec:7a:d4:40:e8:ae:e8:73:bd:dd:53:04:e8:c6:8d:
                    06:0e:9b:b5:74:f0:9f:f8:28:67:bd:da:a1:dc:96:
                    98:34:82:c8:d3:c3:61:3a:bd:9d:46:e1:f1:88:a3:
                    04:ce:f2:ec:ac:17:f8:4d:90:4c:66:06:88:99:f8:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:5D:C6:A7:83:F7:60:9C:32:01:C3:C3:66:47:8F:AD:2D:60:21:CF
            X509v3 Authority Key Identifier:
                keyid:A8:F1:77:49:8F:7A:2D:41:47:9F:1C:00:11:E5:99:78:A9:CD:A9:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/A8F177498F7A2D41479F1C0011E59978A9CDA931.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F177498F7A2D41479F1C0011E59978A9CDA931.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97ro2hQwEnv6nUtyjSGsAGQotJG2bTAjPUny8FJwJScq/0/3138362e3232362e39362e302f32302d3234203d3e203532393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:a5:62:72:90:21:b7:a4:6d:ef:8d:41:38:a7:db:e5:fe:
         b6:a2:9c:e0:da:b9:96:65:ea:35:5f:2b:12:c4:12:32:b5:b1:
         37:67:9d:79:d0:48:5c:9b:f3:6a:34:91:e8:e7:43:bf:23:9e:
         89:f5:59:86:0d:c3:12:cb:9a:96:b0:49:72:15:3a:66:d3:ad:
         d6:34:51:42:f4:ba:da:47:49:5c:d1:04:a6:64:9b:5c:62:db:
         2b:4d:a4:b6:f9:cf:7d:1a:c6:d1:84:a1:43:8b:97:21:34:a7:
         be:15:03:73:51:69:b1:92:68:f1:b0:00:85:90:f2:dc:4d:a1:
         06:71:9b:9e:a9:d9:44:38:e9:e8:a1:40:e0:e3:8e:24:de:82:
         8a:39:72:98:bd:64:71:e8:d0:d1:5b:7f:d7:55:78:e6:fa:cb:
         24:b7:a6:d5:3b:a6:a8:d2:cd:55:a7:3d:db:a2:6f:69:f3:43:
         33:62:46:37:40:07:69:b9:8a:5c:bf:45:46:48:70:9e:71:ac:
         d1:79:2b:c4:b6:71:5b:14:30:64:d2:a9:7e:ce:7d:ac:bf:89:
         62:c0:03:96:d8:cc:81:1e:42:7e:4e:43:cc:53:28:1a:00:ab:
         fa:a0:06:3a:2c:02:58:44:4d:a5:77:da:af:0a:26:c7:ce:dd:
         db:76:b9:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJqSkKDcLDzjkBREae5sMDLCJ1xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGMTc3NDk4RjdBMkQ0MTQ3OUYxQzAwMTFFNTk5NzhB
OUNEQTkzMTAeFw0yNjEwMjIxNjIwMjZaFw0yNzEwMjExNjI1MjZaMDMxMTAvBgNV
BAMTKDQ2NURDNkE3ODNGNzYwOUMzMjAxQzNDMzY2NDc4RkFEMkQ2MDIxQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuT4VKiZw+mGt8CWBRcbJjGluZ
lh1S7ihcviatjy7GSaXJGwaRMyuw1vn5T7u0MB++oi82dqlGWSpxRceWgr8tJyud
a++hB2Ejg92hFunoN9GgOpu2Jy83ciFV7YAbyowD+p7SYGhIDHrB98ktyojazI31
IW1Cx4JJMqxhrAuhhZCUNPz+h6d80WQYAsR7EkfPFm6s+7pwz1+rm4JgAFlCwAuW
x+o2K1sDHOlUOt2PR/lgD/6ISNv3q6R1XAMYyRzakex61EDoruhzvd1TBOjGjQYO
m7V08J/4KGe92qHclpg0gsjTw2E6vZ1G4fGIowTO8uysF/hNkExmBoiZ+OxlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURl3Gp4P3YJwyAcPDZkePrS1gIc8wHwYDVR0j
BBgwFoAUqPF3SY96LUFHnxwAEeWZeKnNqTEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTdybzJoUXdFbnY2blV0eWpTR3NBR1FvdEpHMmJUQWpQVW55OEZKd0pT
Y3EvMC9BOEYxNzc0OThGN0EyRDQxNDc5RjFDMDAxMUU1OTk3OEE5Q0RBOTMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RjE3NzQ5OEY3QTJENDE0
NzlGMUMwMDExRTU5OTc4QTlDREE5MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk3cm8yaFF3RW52Nm5VdHlqU0dzQUdRb3RKRzJiVEFqUFVueThGSndKU2NxLzAv
MzEzODM2MmUzMjMyMzYyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMy
MzkzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEuuJgMA0GCSqGSIb3DQEBCwUAA4IBAQAf36VicpAh
t6Rt741BOKfb5f62opzg2rmWZeo1XysSxBIytbE3Z5150Ehcm/NqNJHo50O/I56J
9VmGDcMSy5qWsElyFTpm063WNFFC9LraR0lc0QSmZJtcYtsrTaS2+c99GsbRhKFD
i5chNKe+FQNzUWmxkmjxsACFkPLcTaEGcZueqdlEOOnooUDg444k3oKKOXKYvWRx
6NDRW3/XVXjm+sskt6bVO6ao0s1Vpz3bom9p80MzYkY3QAdpuYpcv0VGSHCecazR
eSvEtnFbFDBk0ql+zn2sv4liwAOW2MyBHkJ+TkPMUygaAKv6oAY6LAJYRE2ld9qv
CibHzt3bdrmj
-----END CERTIFICATE-----
Generated at Tue Oct 27 07:14:58 2026 by rpki-client