Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
File:                     3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa (raw, json)
Hash identifier:          vGauzru6roJ+z8dbDROzkcR7IarN98fkziRfq/9wD9k=
Subject key identifier:   72:DE:35:53:7C:E9:B1:00:DA:BB:DD:1D:ED:D6:E9:FC:0A:A4:E4:B5
Certificate issuer:       /CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
Certificate serial:       5713F01ADF48E553B88ECACEBF496EC953BCA271
Authority key identifier: 2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa
Signing time:             Tue 09 Jun 2026 12:30:47 +0000
ROA not before:           Tue 09 Jun 2026 12:25:47 +0000
ROA not after:            Tue 08 Jun 2027 12:30:47 +0000
asID:                     262687
IP address blocks:        187.87.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl
                          rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:f0:1a:df:48:e5:53:b8:8e:ca:ce:bf:49:6e:c9:53:bc:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED25129C7D76B8FD6CFF23CC3CF86A794994329
        Validity
            Not Before: Jun  9 12:25:47 2026 GMT
            Not After : Jun  8 12:30:47 2027 GMT
        Subject: CN=72DE35537CE9B100DABBDD1DEDD6E9FC0AA4E4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:b6:5e:58:40:3d:af:99:b6:a0:92:6b:34:
                    a6:f7:1e:a1:64:e6:b3:09:cd:43:66:83:1d:4d:d0:
                    34:65:dd:00:9e:10:2c:ee:87:fd:d2:78:2d:bc:f6:
                    e2:ef:55:e6:27:b4:ad:8c:5d:7e:ba:ad:9d:59:4d:
                    79:8e:94:aa:b3:d5:66:bc:b1:14:e6:55:fd:36:07:
                    b5:8c:39:49:31:7a:b7:ee:8a:1e:a2:89:94:40:fd:
                    db:cd:22:db:ed:d5:58:b8:c9:26:27:69:56:5d:80:
                    37:b1:35:f1:29:46:9d:6f:92:c7:22:fd:c2:01:45:
                    f6:96:8c:ce:95:f7:c1:ff:50:81:a2:16:30:30:6e:
                    00:52:e6:f5:73:91:1a:d2:84:ef:08:0e:7c:24:a9:
                    24:3b:14:24:20:07:ad:56:00:1a:f7:52:b0:7b:e9:
                    1e:77:76:1b:37:6d:cd:9b:ab:60:40:bd:0f:1d:a9:
                    49:0b:63:15:bf:7f:dc:79:41:9e:68:e8:27:d8:8b:
                    08:c1:15:dd:19:43:7f:a5:9f:ba:3f:c6:0d:f0:82:
                    6a:75:a4:eb:b5:0b:b2:30:b6:b4:15:df:b6:8d:83:
                    16:e3:bb:a1:a4:e3:58:99:ce:77:53:8d:04:5b:6b:
                    89:94:5d:4a:73:4c:f4:42:67:5a:a6:34:3f:e0:6f:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:35:53:7C:E9:B1:00:DA:BB:DD:1D:ED:D6:E9:FC:0A:A4:E4:B5
            X509v3 Authority Key Identifier:
                keyid:2E:D2:51:29:C7:D7:6B:8F:D6:CF:F2:3C:C3:CF:86:A7:94:99:43:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED25129C7D76B8FD6CFF23CC3CF86A794994329.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/3138372e38372e3139352e302f32342d3234203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.87.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:34:57:de:2f:a2:c9:9d:d4:86:2d:5f:1f:1e:1d:9c:21:
         59:0e:6d:71:f2:97:a2:c5:b3:2b:ac:18:5d:ff:5d:71:f0:5e:
         fe:42:bb:21:9a:f4:5a:cf:37:52:67:ba:c3:22:e0:2a:13:66:
         cd:b9:ff:83:9d:21:1a:1d:c7:14:e6:a6:af:3e:eb:99:ed:e9:
         28:57:37:ab:7b:94:79:bd:ab:88:2c:81:ef:12:57:c8:7d:a9:
         55:a5:54:3e:69:59:35:3e:fd:28:0b:df:8e:36:7e:7f:3e:5a:
         cf:bd:f5:91:fe:d6:1a:45:49:67:5b:40:96:dd:37:b6:be:27:
         74:f4:3e:46:54:17:5c:47:d2:24:47:3d:1c:d6:4a:0b:5e:75:
         44:89:8d:33:6a:02:c2:72:e5:67:1d:6d:35:5f:1c:3f:9a:8e:
         c1:0d:c6:fb:a3:f8:cc:22:b4:95:94:f4:58:7c:f4:e6:03:ee:
         05:52:35:3b:97:80:d5:8a:0c:ca:b7:96:f2:ff:d8:c6:b6:46:
         18:3b:87:15:4a:c4:e5:8a:0c:b3:06:db:73:f6:73:1e:df:0a:
         1f:c3:35:bd:3c:dd:9e:25:90:cc:33:86:60:34:b1:aa:1c:fb:
         23:1e:4f:33:2c:95:b3:7e:7b:04:5c:bb:91:dc:b7:47:7a:c2:
         d4:1a:0a:59
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVxPwGt9I5VO4jsrOv0luyVO8onEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVEMjUxMjlDN0Q3NkI4RkQ2Q0ZGMjNDQzNDRjg2QTc5
NDk5NDMyOTAeFw0yNjA2MDkxMjI1NDdaFw0yNzA2MDgxMjMwNDdaMDMxMTAvBgNV
BAMTKDcyREUzNTUzN0NFOUIxMDBEQUJCREQxREVERDZFOUZDMEFBNEU0QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7x7ZeWEA9r5m2oJJrNKb3HqFk
5rMJzUNmgx1N0DRl3QCeECzuh/3SeC289uLvVeYntK2MXX66rZ1ZTXmOlKqz1Wa8
sRTmVf02B7WMOUkxerfuih6iiZRA/dvNItvt1Vi4ySYnaVZdgDexNfEpRp1vksci
/cIBRfaWjM6V98H/UIGiFjAwbgBS5vVzkRrShO8IDnwkqSQ7FCQgB61WABr3UrB7
6R53dhs3bc2bq2BAvQ8dqUkLYxW/f9x5QZ5o6CfYiwjBFd0ZQ3+ln7o/xg3wgmp1
pOu1C7IwtrQV37aNgxbju6Gk41iZzndTjQRba4mUXUpzTPRCZ1qmND/gb8SLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUct41U3zpsQDau90d7dbp/Aqk5LUwHwYDVR0j
BBgwFoAULtJRKcfXa4/Wz/I8w8+Gp5SZQykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlmQnZ2dXY0NVAxMWJ4MlZualYzb2d0OWpXQmNyTjMyVjFaU2Z5SG9y
NW8vMC8yRUQyNTEyOUM3RDc2QjhGRDZDRkYyM0NDM0NGODZBNzk0OTk0MzI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJFRDI1MTI5QzdENzZCOEZE
NkNGRjIzQ0MzQ0Y4NkE3OTQ5OTQzMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ZkJ2dnV2NDVQMTFieDJWbmpWM29ndDlqV0Jjck4zMlYxWlNmeUhvcjVvLzAv
MzEzODM3MmUzODM3MmUzMTM5MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7V8MwDQYJKoZIhvcNAQELBQADggEBADHpNFfe
L6LJndSGLV8fHh2cIVkObXHyl6LFsyusGF3/XXHwXv5CuyGa9FrPN1JnusMi4CoT
Zs25/4OdIRodxxTmpq8+65nt6ShXN6t7lHm9q4gsge8SV8h9qVWlVD5pWTU+/SgL
3442fn8+Ws+99ZH+1hpFSWdbQJbdN7a+J3T0PkZUF1xH0iRHPRzWSgtedUSJjTNq
AsJy5WcdbTVfHD+ajsENxvuj+MwitJWU9Fh89OYD7gVSNTuXgNWKDMq3lvL/2Ma2
Rhg7hxVKxOWKDLMG23P2cx7fCh/DNb083Z4lkMwzhmA0saoc+yMeTzMslbN+ewRc
u5Hct0d6wtQaClk=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:06:45 2026 by rpki-client