Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa
File:                     3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa (raw, json)
Hash identifier:          FaEbyiQ7YCHFZJ8YC/u9PAh2TbksQLfvco+f70oU0sE=
Subject key identifier:   9C:1E:BB:D5:DF:AF:E8:09:00:CA:3E:2D:41:3C:21:FB:7E:D3:A1:E0
Certificate issuer:       /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial:       461011D085C28488DC992CB52FBAE917F05A755F
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa
Signing time:             Mon 13 Apr 2026 15:01:10 +0000
ROA not before:           Mon 13 Apr 2026 14:56:10 +0000
ROA not after:            Mon 12 Apr 2027 15:01:10 +0000
asID:                     263959
IP address blocks:        170.238.248.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
                          rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:10:11:d0:85:c2:84:88:dc:99:2c:b5:2f:ba:e9:17:f0:5a:75:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
        Validity
            Not Before: Apr 13 14:56:10 2026 GMT
            Not After : Apr 12 15:01:10 2027 GMT
        Subject: CN=9C1EBBD5DFAFE80900CA3E2D413C21FB7ED3A1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:99:5c:54:6e:19:57:0b:54:04:64:ec:28:
                    36:ab:5c:df:88:e6:83:1f:cc:9c:bf:71:9a:49:54:
                    79:63:78:19:95:5d:2c:1f:a8:92:b0:1c:7f:1d:c4:
                    98:07:e0:31:a7:ee:86:bb:ca:92:24:50:d6:6d:ba:
                    f5:10:4c:a6:68:29:c3:68:b5:27:ff:63:e2:66:c6:
                    95:86:76:14:8c:ad:99:8d:47:cb:68:8c:a4:28:45:
                    f6:88:4a:f6:cd:eb:d6:4e:15:18:e5:1b:36:a3:f4:
                    b2:14:d5:21:86:83:e0:15:65:35:0a:00:9d:8d:c7:
                    e1:79:a9:a2:7a:c6:60:a4:2f:a6:73:0d:21:4e:e6:
                    2a:ee:41:0d:30:e8:d7:1c:bc:7c:f6:96:b9:a6:06:
                    eb:c1:cd:bc:c1:09:82:9e:8d:a6:c6:a7:d0:ef:5d:
                    56:aa:32:bb:27:2f:e1:55:15:9e:de:3d:ee:0e:81:
                    af:4e:19:09:5e:83:bf:a1:da:75:12:b1:3a:06:3f:
                    7d:0b:94:cd:7e:ad:7c:d3:ed:c5:23:26:00:84:43:
                    01:6d:92:2e:3c:83:05:bd:1c:0d:cf:d5:98:02:23:
                    b3:56:bd:31:7c:48:e8:41:61:03:3f:ca:ed:7e:3d:
                    61:39:13:aa:36:80:41:b9:e9:e4:6f:08:b1:69:d5:
                    8d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1E:BB:D5:DF:AF:E8:09:00:CA:3E:2D:41:3C:21:FB:7E:D3:A1:E0
            X509v3 Authority Key Identifier:
                keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/3137302e3233382e3234382e302f32322d3332203d3e20323633393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:6c:90:cc:6a:f5:c6:e2:bc:22:3e:55:7c:68:bc:87:a8:c5:
         11:e8:12:42:94:0c:a9:8b:c6:b2:34:25:0b:3e:36:5f:36:9c:
         46:c8:f1:f9:5b:59:e8:bc:ef:0a:a7:71:ef:82:f2:3f:68:46:
         eb:f5:17:71:4c:4d:af:c5:88:df:ad:85:88:10:d5:6b:fc:ca:
         34:df:72:b3:a1:31:58:18:21:3a:2e:bd:0d:49:9f:26:75:1c:
         cc:de:f1:a0:67:44:ba:00:a6:35:dd:30:d9:cd:5b:87:77:71:
         f9:28:61:f4:30:0e:28:79:61:af:6b:a1:9e:ef:b2:c7:e5:23:
         41:69:36:9d:63:d2:07:8e:8a:b4:90:89:42:bc:7f:fd:30:43:
         f5:32:62:77:95:6e:12:51:d8:9f:aa:3b:bd:91:9e:0c:70:08:
         a0:3d:16:28:15:cd:f9:2d:9d:01:4f:ae:47:7e:fd:0f:73:4b:
         f2:23:4c:a4:e4:e6:30:80:66:25:c3:22:1d:49:34:e1:75:f0:
         7a:83:6b:2d:6d:f4:63:0e:19:ba:41:12:c1:4e:cb:0b:34:99:
         67:66:9b:f5:54:57:65:fa:c2:d0:52:e7:7a:12:1a:14:91:55:
         d9:43:03:c3:1d:6e:27:64:85:7a:b9:12:d8:4f:14:7e:7e:33:
         a9:cc:f7:43
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURhAR0IXChIjcmSy1L7rpF/BadV8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENCNUEyNTE2RjcxM0NGRkU5RDE1MDRFNzlBNEJEM0I5
QUZCMEEwRjAeFw0yNjA0MTMxNDU2MTBaFw0yNzA0MTIxNTAxMTBaMDMxMTAvBgNV
BAMTKDlDMUVCQkQ1REZBRkU4MDkwMENBM0UyRDQxM0MyMUZCN0VEM0ExRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2plcVG4ZVwtUBGTsKDarXN+I
5oMfzJy/cZpJVHljeBmVXSwfqJKwHH8dxJgH4DGn7oa7ypIkUNZtuvUQTKZoKcNo
tSf/Y+JmxpWGdhSMrZmNR8tojKQoRfaISvbN69ZOFRjlGzaj9LIU1SGGg+AVZTUK
AJ2Nx+F5qaJ6xmCkL6ZzDSFO5iruQQ0w6NccvHz2lrmmBuvBzbzBCYKejabGp9Dv
XVaqMrsnL+FVFZ7ePe4Oga9OGQleg7+h2nUSsToGP30LlM1+rXzT7cUjJgCEQwFt
ki48gwW9HA3P1ZgCI7NWvTF8SOhBYQM/yu1+PWE5E6o2gEG56eRvCLFp1Y11AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUnB671d+v6AkAyj4tQTwh+37ToeAwHwYDVR0j
BBgwFoAUjLWiUW9xPP/p0VBOeaS9O5r7Cg8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhGemVkeXJZTExBSG1YQmFmSzdDSzNqcHRNb2ZvN0gxbVNDV1FQUjVN
YUMvMC84Q0I1QTI1MTZGNzEzQ0ZGRTlEMTUwNEU3OUE0QkQzQjlBRkIwQTBGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhDQjVBMjUxNkY3MTNDRkZF
OUQxNTA0RTc5QTRCRDNCOUFGQjBBMEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYRnplZHlyWUxMQUhtWEJhZks3Q0szanB0TW9mbzdIMW1TQ1dRUFI1TWFDLzAv
MzEzNzMwMmUzMjMzMzgyZTMyMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqru+DANBgkqhkiG9w0BAQsFAAOCAQEARWyQ
zGr1xuK8Ij5VfGi8h6jFEegSQpQMqYvGsjQlCz42XzacRsjx+VtZ6LzvCqdx74Ly
P2hG6/UXcUxNr8WI362FiBDVa/zKNN9ys6ExWBghOi69DUmfJnUczN7xoGdEugCm
Nd0w2c1bh3dx+Shh9DAOKHlhr2uhnu+yx+UjQWk2nWPSB46KtJCJQrx//TBD9TJi
d5VuElHYn6o7vZGeDHAIoD0WKBXN+S2dAU+uR379D3NL8iNMpOTmMIBmJcMiHUk0
4XXweoNrLW30Yw4ZukESwU7LCzSZZ2ab9VRXZfrC0FLnehIaFJFV2UMDwx1uJ2SF
erkS2E8Ufn4zqcz3Qw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:21:12 2026 by rpki-client