Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          X/w3Gz7TfwT0ma9F/01hToneZHBU8MzoWBdQTa4XA1M=
Subject key identifier:   00:E8:6A:69:E8:1C:06:A8:47:28:05:70:EC:11:73:37:4F:FF:F7:8D
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       4C061D284C9F7EBD5160584F5620EBDD1D6AF06C
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:48 +0000
ROA not before:           Tue 09 Jun 2026 12:25:48 +0000
ROA not after:            Tue 08 Jun 2027 12:30:48 +0000
asID:                     262687
IP address blocks:        187.87.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:06:1d:28:4c:9f:7e:bd:51:60:58:4f:56:20:eb:dd:1d:6a:f0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:48 2026 GMT
            Not After : Jun  8 12:30:48 2027 GMT
        Subject: CN=00E86A69E81C06A847280570EC1173374FFFF78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:15:c2:5c:88:e5:93:1c:c0:ea:c4:40:38:
                    8c:a2:1e:eb:a7:a7:f8:f5:d2:a7:f6:e4:7d:d5:f6:
                    75:84:21:34:ad:34:0b:ab:fb:86:95:7a:06:1c:9e:
                    96:a9:a2:ef:01:89:f2:20:fe:8b:85:c3:99:d1:6a:
                    35:72:9f:8a:21:ad:27:27:c2:2a:22:33:e9:36:16:
                    ce:71:15:04:90:9d:58:f7:ad:f5:8a:b0:15:b9:b4:
                    87:a0:ae:f2:83:05:85:58:9d:6f:f0:f6:de:05:cc:
                    d8:84:82:67:01:72:56:d1:f9:b6:ee:55:05:25:c0:
                    1c:b8:4d:95:da:1e:9a:82:9f:2a:47:f8:5e:a4:ea:
                    d5:86:aa:37:c8:c8:40:97:13:6a:b0:5c:5d:17:28:
                    2e:3e:92:97:9b:67:d0:b4:28:af:30:d0:71:21:18:
                    72:bb:c5:1d:19:e8:e8:dc:43:1b:3e:f3:f8:ec:4c:
                    cf:85:3a:79:2d:f0:77:73:33:cf:8e:5d:99:6c:31:
                    ea:8c:5d:0e:38:55:3a:d0:54:96:38:03:aa:37:c1:
                    85:40:b7:ff:f9:4c:8f:ea:19:39:5b:8b:f8:42:c6:
                    b3:60:7f:26:6c:b0:73:29:11:4f:5b:2c:f2:69:d0:
                    b9:28:2f:2d:10:f8:68:f8:61:28:1c:b4:a9:47:bc:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:6A:69:E8:1C:06:A8:47:28:05:70:EC:11:73:37:4F:FF:F7:8D
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139342e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:88:bd:f8:48:94:95:f9:83:cc:e6:bd:c0:d1:de:0e:d7:41:
         a0:cd:36:11:af:5d:6b:00:a8:0a:ec:08:a3:94:34:5c:b9:fc:
         68:ae:88:4f:5f:f5:ff:28:f4:a7:21:1f:8c:fd:9c:9e:90:5e:
         a3:ce:a0:e5:10:22:b7:c5:f9:f3:43:a9:f2:79:27:6f:a0:d8:
         d0:0f:dd:e4:fd:3d:29:2d:44:59:8c:2b:38:b1:8b:88:a6:ac:
         19:4d:bc:72:9d:0f:fb:42:28:e5:cc:f7:8d:80:c9:1e:f6:67:
         8e:5a:7c:52:21:a8:b0:9a:fa:6a:f5:7e:f9:99:44:08:d1:6f:
         97:77:27:65:14:6f:98:8b:d3:b8:ef:a6:8a:51:f1:76:1b:79:
         26:cd:0a:96:20:df:d6:78:f5:b8:0b:97:31:99:30:e5:56:2b:
         ea:f4:37:60:12:0a:2d:d3:7e:02:ec:b8:7b:b4:7b:da:91:a6:
         cc:2c:b7:b2:d6:11:15:61:cc:d5:b3:cd:ac:04:7c:37:20:ed:
         cb:80:10:f9:7b:5f:97:84:c3:f7:4a:6c:52:18:62:76:e7:40:
         b5:83:04:57:87:df:3a:f5:8b:94:b6:2d:7f:45:05:fd:54:74:
         c8:32:27:5e:86:48:0e:c8:ca:43:5d:92:45:c5:98:89:51:95:
         57:24:34:2a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTAYdKEyffr1RYFhPViDr3R1q8GwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMjUxMjlDN0Q3NkI4RkQ2Q0ZGMjNDQzNDRjg2QTc5
NDk5NDMyOTAeFw0yNjA2MDkxMjI1NDhaFw0yNzA2MDgxMjMwNDhaMDMxMTAvBgNV
BAMTKDAwRTg2QTY5RTgxQzA2QTg0NzI4MDU3MEVDMTE3MzM3NEZGRkY3OEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43BXCXIjlkxzA6sRAOIyiHuun
p/j10qf25H3V9nWEITStNAur+4aVegYcnpapou8BifIg/ouFw5nRajVyn4ohrScn
wioiM+k2Fs5xFQSQnVj3rfWKsBW5tIegrvKDBYVYnW/w9t4FzNiEgmcBclbR+bbu
VQUlwBy4TZXaHpqCnypH+F6k6tWGqjfIyECXE2qwXF0XKC4+kpebZ9C0KK8w0HEh
GHK7xR0Z6OjcQxs+8/jsTM+FOnkt8HdzM8+OXZlsMeqMXQ44VTrQVJY4A6o3wYVA
t//5TI/qGTlbi/hCxrNgfyZssHMpEU9bLPJp0LkoLy0Q+Gj4YSgctKlHvNAVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAOhqaegcBqhHKAVw7BFzN0//940wHwYDVR0j
BBgwFoAULtJRKcfXa4/Wz/I8w8+Gp5SZQykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlmQnZ2dXY0NVAxMWJ4MlZualYzb2d0OWpXQmNyTjMyVjFaU2Z5SG9y
NW8vMC8yRUQyNTEyOUM3RDc2QjhGRDZDRkYyM0NDM0NGODZBNzk0OTk0MzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDI1MTI5QzdENzZCOEZE
NkNGRjIzQ0MzQ0Y4NkE3OTQ5OTQzMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ZkJ2dnV2NDVQMTFieDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAv
MzEzODM3MmUzODM3MmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7V8IwDQYJKoZIhvcNAQELBQADggEBAGiIvfhI
lJX5g8zmvcDR3g7XQaDNNhGvXWsAqArsCKOUNFy5/GiuiE9f9f8o9KchH4z9nJ6Q
XqPOoOUQIrfF+fNDqfJ5J2+g2NAP3eT9PSktRFmMKzixi4imrBlNvHKdD/tCKOXM
942AyR72Z45afFIhqLCa+mr1fvmZRAjRb5d3J2UUb5iL07jvpopR8XYbeSbNCpYg
39Z49bgLlzGZMOVWK+r0N2ASCi3TfgLsuHu0e9qRpswst7LWERVhzNWzzawEfDcg
7cuAEPl7X5eEw/dKbFIYYnbnQLWDBFeH3zr1i5S2LX9FBf1UdMgyJ16GSA7IykNd
kkXFmIlRlVckNCo=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:45 2026 by rpki-client