Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
File:                     3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa (raw, json)
Hash identifier:          2wYBs+oQIC/65ly/c1X7T+7ZgW2A0tyVDPYqXW0BN1s=
Subject key identifier:   C7:12:87:9D:3B:FE:B7:D8:DB:77:01:DE:A0:ED:31:61:02:FA:AC:E7
Certificate issuer:       /CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
Certificate serial:       435B27C4B60F2244F68EAA8DA3FD9EAB37A81CD0
Authority key identifier: 9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa
Signing time:             Mon 01 Jun 2026 14:03:07 +0000
ROA not before:           Mon 01 Jun 2026 13:58:07 +0000
ROA not after:            Mon 31 May 2027 14:03:07 +0000
asID:                     269712
IP address blocks:        190.112.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl
                          rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5b:27:c4:b6:0f:22:44:f6:8e:aa:8d:a3:fd:9e:ab:37:a8:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B40C2CC13EAB50345EDACFACC15DB43E60B85A2
        Validity
            Not Before: Jun  1 13:58:07 2026 GMT
            Not After : May 31 14:03:07 2027 GMT
        Subject: CN=C712879D3BFEB7D8DB7701DEA0ED316102FAACE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:4d:c3:c7:bf:58:29:0c:8b:33:c1:84:a1:
                    05:7b:a5:74:66:66:cf:f3:a7:c3:f3:b6:d1:85:ea:
                    af:c3:d2:14:1b:17:79:33:39:50:de:b4:cd:74:0d:
                    c3:03:0a:9c:ea:c6:90:d1:4c:48:df:81:c4:b2:33:
                    31:e1:d3:81:b1:d6:d5:43:18:54:4b:b2:02:27:1c:
                    21:af:45:1a:4e:88:25:ad:e7:50:42:d2:a0:35:d5:
                    d4:6e:87:10:c4:21:5c:50:56:5f:dd:06:d0:a4:c7:
                    84:65:4a:70:c0:25:ba:e9:66:bb:55:3f:ad:4a:67:
                    d1:64:48:c1:0e:06:1c:d9:d3:b6:e8:4b:3d:c6:5c:
                    d3:7d:57:d7:4c:c3:0f:7f:ca:c1:01:9a:67:be:6b:
                    89:2a:1d:c7:4d:f7:3a:28:97:e0:6e:a1:b0:3a:7b:
                    a0:ce:62:84:b2:05:6c:10:a0:6b:9f:cb:8c:bd:53:
                    c0:e6:d4:40:20:68:94:e5:45:34:ed:f2:5d:62:96:
                    2f:56:b5:c3:4a:9b:d9:54:17:35:6c:20:dd:fb:55:
                    23:9a:34:ac:38:82:9d:9e:d7:60:ea:d3:ba:e9:10:
                    fa:1c:f2:29:74:5f:eb:4c:12:f4:60:eb:9a:f9:3c:
                    ac:e5:aa:fd:da:4e:83:f7:2b:87:b1:e6:5d:69:64:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:12:87:9D:3B:FE:B7:D8:DB:77:01:DE:A0:ED:31:61:02:FA:AC:E7
            X509v3 Authority Key Identifier:
                keyid:9B:40:C2:CC:13:EA:B5:03:45:ED:AC:FA:CC:15:DB:43:E6:0B:85:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B40C2CC13EAB50345EDACFACC15DB43E60B85A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/0/3139302e3131322e3135362e302f32322d3234203d3e20323639373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:2e:17:cb:a4:86:d5:6b:78:03:3c:34:48:92:c2:cc:ac:
         53:62:cd:f0:e7:d6:e9:3e:39:0c:2e:66:24:a8:81:8c:91:b3:
         72:cb:48:05:7e:c2:13:10:59:88:0c:79:c0:2f:52:d1:78:ef:
         aa:ce:54:bc:64:43:4a:76:3a:22:c7:3f:94:70:01:88:c8:cb:
         3f:4f:1e:ef:cd:8e:9f:bb:c2:da:40:33:a3:56:54:68:a0:ed:
         89:f7:79:b6:e6:5a:f5:0d:2e:ff:fa:08:ff:be:4c:4f:df:0d:
         10:eb:cf:12:01:b4:0d:8e:c9:c9:3f:7e:78:b1:8a:a5:c5:ef:
         8a:39:e4:47:f7:e6:74:82:8b:5d:90:42:bd:e8:e7:fa:c4:a6:
         b8:c9:e2:73:85:b6:10:1e:1d:46:d9:75:15:a2:8f:63:5c:a2:
         2c:d7:0b:82:b7:98:f3:37:82:70:ef:c2:2f:43:24:2c:3a:5e:
         84:23:69:9d:10:2b:28:3a:63:e1:ee:74:01:b3:b7:10:e8:cf:
         fb:bf:db:ea:b3:42:8b:8d:69:6b:1e:5b:d2:d2:b5:04:2e:a7:
         e5:b5:c0:99:aa:53:96:91:fe:9b:d7:83:0b:c7:3d:54:14:24:
         22:ad:40:34:6b:d7:8a:0a:c2:62:aa:17:0e:68:10:9a:6f:c0:
         31:76:da:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ1snxLYPIkT2jqqNo/2eqzeoHNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI0MEMyQ0MxM0VBQjUwMzQ1RURBQ0ZBQ0MxNURCNDNF
NjBCODVBMjAeFw0yNjA2MDExMzU4MDdaFw0yNzA1MzExNDAzMDdaMDMxMTAvBgNV
BAMTKEM3MTI4NzlEM0JGRUI3RDhEQjc3MDFERUEwRUQzMTYxMDJGQUFDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC12E3Dx79YKQyLM8GEoQV7pXRm
Zs/zp8PzttGF6q/D0hQbF3kzOVDetM10DcMDCpzqxpDRTEjfgcSyMzHh04Gx1tVD
GFRLsgInHCGvRRpOiCWt51BC0qA11dRuhxDEIVxQVl/dBtCkx4RlSnDAJbrpZrtV
P61KZ9FkSMEOBhzZ07boSz3GXNN9V9dMww9/ysEBmme+a4kqHcdN9zool+BuobA6
e6DOYoSyBWwQoGufy4y9U8Dm1EAgaJTlRTTt8l1ili9WtcNKm9lUFzVsIN37VSOa
NKw4gp2e12Dq07rpEPoc8il0X+tMEvRg65r5PKzlqv3aToP3K4ex5l1pZCdnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUxxKHnTv+t9jbdwHeoO0xYQL6rOcwHwYDVR0j
BBgwFoAUm0DCzBPqtQNF7az6zBXbQ+YLhaIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnpOejVkQkUya01ZR25BZnhFc05ZTHY3YU1UOG00eXhQNjNZdjgyTGRt
MmcvMC85QjQwQzJDQzEzRUFCNTAzNDVFREFDRkFDQzE1REI0M0U2MEI4NUEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNDBDMkNDMTNFQUI1MDM0
NUVEQUNGQUNDMTVEQjQzRTYwQjg1QTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J6Tno1ZEJFMmtNWUduQWZ4RXNOWUx2N2FNVDhtNHl4UDYzWXY4MkxkbTJnLzAv
MzEzOTMwMmUzMTMxMzIyZTMxMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzOTM3MzEzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5wnDANBgkqhkiG9w0BAQsFAAOCAQEAroQu
F8ukhtVreAM8NEiSwsysU2LN8OfW6T45DC5mJKiBjJGzcstIBX7CExBZiAx5wC9S
0Xjvqs5UvGRDSnY6Isc/lHABiMjLP08e782On7vC2kAzo1ZUaKDtifd5tuZa9Q0u
//oI/75MT98NEOvPEgG0DY7JyT9+eLGKpcXvijnkR/fmdIKLXZBCvejn+sSmuMni
c4W2EB4dRtl1FaKPY1yiLNcLgreY8zeCcO/CL0MkLDpehCNpnRArKDpj4e50AbO3
EOjP+7/b6rNCi41pax5b0tK1BC6n5bXAmapTlpH+m9eDC8c9VBQkIq1ANGvXigrC
YqoXDmgQmm/AMXbaCw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:19:01 2026 by rpki-client