Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
File:                     3133382e39392e38382e302f32322d3234203d3e20323730383134.roa (raw, json)
Hash identifier:          9u5n9qOutBb9byYzWK0P5JyZ7au4hyoUB6khcOxvXBY=
Subject key identifier:   B9:61:7F:A2:11:FB:DC:26:E7:C5:2D:B6:A0:BB:FC:82:B5:51:8A:4F
Certificate issuer:       /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial:       2615B649ADB29CDF6B9A7A988A05C75E4BEE441B
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa
Signing time:             Mon 28 Sep 2026 17:49:56 +0000
ROA not before:           Mon 28 Sep 2026 17:44:56 +0000
ROA not after:            Mon 27 Sep 2027 17:49:56 +0000
asID:                     270814
IP address blocks:        138.99.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
                          rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 08:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:15:b6:49:ad:b2:9c:df:6b:9a:7a:98:8a:05:c7:5e:4b:ee:44:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
        Validity
            Not Before: Sep 28 17:44:56 2026 GMT
            Not After : Sep 27 17:49:56 2027 GMT
        Subject: CN=B9617FA211FBDC26E7C52DB6A0BBFC82B5518A4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:4e:72:79:11:d9:64:27:62:ae:be:ec:5b:
                    48:a6:da:8f:b9:79:05:cf:20:4e:6e:37:6b:16:b3:
                    ea:47:8e:04:c4:45:ef:bd:ea:69:cf:b1:d2:a2:e0:
                    fd:d6:5e:95:73:aa:e7:55:2c:c1:99:17:a0:ab:fe:
                    f4:0d:4b:52:cb:2f:26:52:33:5f:a2:e1:53:cb:2d:
                    27:cc:ca:19:55:e5:a8:ea:67:36:34:cd:05:da:21:
                    43:28:4f:e0:28:28:26:f2:89:61:d1:cf:55:f1:cb:
                    c7:27:28:61:d1:47:7c:35:76:4b:4e:ff:68:83:7d:
                    57:7e:05:5e:ce:08:1e:37:78:f9:20:50:41:ae:35:
                    ab:87:db:a1:51:11:d2:95:38:ab:42:70:46:fd:82:
                    0e:2f:18:d2:be:4f:9a:63:a2:18:a2:6a:a5:cf:f2:
                    73:3a:3c:b1:a6:25:b8:9e:6d:b8:6b:f3:2f:0c:9d:
                    10:d2:f4:a8:19:76:23:19:43:51:4a:18:d3:05:cc:
                    7b:8e:b9:90:88:69:9f:04:6b:5e:ae:70:41:d0:29:
                    11:7b:8d:63:5a:de:09:e4:d0:01:1a:3a:0b:b0:3c:
                    63:9c:86:a3:9f:8e:e1:f1:e2:48:d7:39:52:72:8a:
                    3d:d6:2d:d8:11:7c:b9:f8:d7:a8:0b:e3:8d:f8:c2:
                    82:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:61:7F:A2:11:FB:DC:26:E7:C5:2D:B6:A0:BB:FC:82:B5:51:8A:4F
            X509v3 Authority Key Identifier:
                keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/3133382e39392e38382e302f32322d3234203d3e20323730383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:e0:ea:c6:cf:c6:9f:59:7c:8f:76:5e:60:5d:ef:74:7b:18:
         b9:02:5f:c4:77:d9:32:42:a1:0b:92:fb:ae:22:36:61:94:64:
         47:dd:13:5a:b9:5b:1f:92:eb:94:fc:08:b4:ac:f7:17:b7:ec:
         2c:f1:dd:c3:bf:71:32:0b:7a:de:50:8f:31:bc:5c:51:94:a7:
         d2:14:7e:c7:d1:ee:20:fb:fc:d6:e3:c5:7d:8c:fa:c9:e8:24:
         ff:3e:de:af:ab:66:ec:44:bf:83:1e:3a:19:ce:10:41:ac:e1:
         a2:16:11:b2:50:f1:af:87:e9:3a:8d:e0:55:94:44:10:63:87:
         94:ab:73:f2:ee:4a:b6:9f:cd:47:b6:17:67:66:9f:6e:3b:4b:
         49:a8:01:40:27:41:cb:7d:dd:90:57:0e:c8:d4:91:6e:8e:10:
         4b:80:87:b5:fc:40:d0:6d:ca:20:49:47:9c:12:c5:3c:47:47:
         f7:e7:5a:b3:11:2d:c6:d9:8b:43:f6:e2:84:4c:be:8b:ad:f9:
         5b:4f:1a:23:ee:39:37:d0:3b:92:3b:74:f6:88:43:de:d3:06:
         f5:3d:b0:23:02:d5:08:56:5b:72:c1:a1:bc:41:7c:00:2f:0b:
         14:a5:00:a6:02:80:8f:f4:fe:bf:ab:c4:35:9c:26:29:70:04:
         2a:31:51:b4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJhW2Sa2ynN9rmnqYigXHXkvuRBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUZGNEQ4NEY1RUExODczOEIzOTgzODJCQjg2NjQ4NDAy
MjUwMDhGOTAeFw0yNjA5MjgxNzQ0NTZaFw0yNzA5MjcxNzQ5NTZaMDMxMTAvBgNV
BAMTKEI5NjE3RkEyMTFGQkRDMjZFN0M1MkRCNkEwQkJGQzgyQjU1MThBNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoy05yeRHZZCdirr7sW0im2o+5
eQXPIE5uN2sWs+pHjgTERe+96mnPsdKi4P3WXpVzqudVLMGZF6Cr/vQNS1LLLyZS
M1+i4VPLLSfMyhlV5ajqZzY0zQXaIUMoT+AoKCbyiWHRz1Xxy8cnKGHRR3w1dktO
/2iDfVd+BV7OCB43ePkgUEGuNauH26FREdKVOKtCcEb9gg4vGNK+T5pjohiiaqXP
8nM6PLGmJbiebbhr8y8MnRDS9KgZdiMZQ1FKGNMFzHuOuZCIaZ8Ea16ucEHQKRF7
jWNa3gnk0AEaOguwPGOchqOfjuHx4kjXOVJyij3WLdgRfLn416gL4434woJTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUuWF/ohH73CbnxS22oLv8grVRik8wHwYDVR0j
BBgwFoAUH/TYT16hhzizmDgruGZIQCJQCPkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRGdERucFlKa0NKc2R0U3FqWW9oM1JGd29DTDlQQVdDZEpLU3VteHhK
UWkvMC8xRkY0RDg0RjVFQTE4NzM4QjM5ODM4MkJCODY2NDg0MDIyNTAwOEY5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGRjREODRGNUVBMTg3MzhC
Mzk4MzgyQkI4NjY0ODQwMjI1MDA4RjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0RnREbnBZSmtDSnNkdFNxallvaDNSRndvQ0w5UEFXQ2RKS1N1bXh4SlFpLzAv
MzEzMzM4MmUzOTM5MmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimNYMA0GCSqGSIb3DQEBCwUAA4IBAQAe4OrGz8af
WXyPdl5gXe90exi5Al/Ed9kyQqELkvuuIjZhlGRH3RNauVsfkuuU/Ai0rPcXt+ws
8d3Dv3EyC3reUI8xvFxRlKfSFH7H0e4g+/zW48V9jPrJ6CT/Pt6vq2bsRL+DHjoZ
zhBBrOGiFhGyUPGvh+k6jeBVlEQQY4eUq3Py7kq2n81HthdnZp9uO0tJqAFAJ0HL
fd2QVw7I1JFujhBLgIe1/EDQbcogSUecEsU8R0f351qzES3G2YtD9uKETL6Lrflb
Txoj7jk30DuSO3T2iEPe0wb1PbAjAtUIVltywaG8QXwALwsUpQCmAoCP9P6/q8Q1
nCYpcAQqMVG0
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:00:36 2026 by rpki-client