Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32342d3234203d3e20323730383738.roa
File:                     3138362e3139342e302e302f32342d3234203d3e20323730383738.roa (raw, json)
Hash identifier:          6tdH+lFiXCM6MUJfpMndWXNU8MYtyZH6Quxe7zxnMjw=
Subject key identifier:   74:FB:81:94:6E:BE:03:AA:45:26:A6:9B:29:0C:78:59:0C:70:F3:DF
Certificate issuer:       /CN=5231FD6C4CBC5F5E1F81F181C4D682B126B3C620
Certificate serial:       44FEC85EA242D233A75144CFE69E65A65A0AA171
Authority key identifier: 52:31:FD:6C:4C:BC:5F:5E:1F:81:F1:81:C4:D6:82:B1:26:B3:C6:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32342d3234203d3e20323730383738.roa
Signing time:             Tue 08 Sep 2026 19:39:52 +0000
ROA not before:           Tue 08 Sep 2026 19:34:52 +0000
ROA not after:            Tue 07 Sep 2027 19:39:52 +0000
asID:                     270878
IP address blocks:        186.194.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl
                          rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 09:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:fe:c8:5e:a2:42:d2:33:a7:51:44:cf:e6:9e:65:a6:5a:0a:a1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5231FD6C4CBC5F5E1F81F181C4D682B126B3C620
        Validity
            Not Before: Sep  8 19:34:52 2026 GMT
            Not After : Sep  7 19:39:52 2027 GMT
        Subject: CN=74FB81946EBE03AA4526A69B290C78590C70F3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:52:b4:3a:c1:73:a4:dc:f9:a3:49:0e:bd:
                    9c:2a:60:15:9f:24:80:04:79:3c:cf:b4:9e:6b:83:
                    7a:10:c0:f5:0a:2d:0e:6d:84:0c:36:86:ca:ae:25:
                    1e:4e:a7:f4:d2:75:5c:19:82:d6:2d:fc:31:28:7e:
                    61:16:3a:9e:49:9d:a6:29:43:95:6a:05:1c:aa:0c:
                    f9:eb:90:37:a9:35:9e:e8:73:60:f9:3c:33:02:fb:
                    60:7c:74:73:3d:92:97:e4:f5:11:d7:a4:f3:38:b4:
                    c6:2c:64:eb:fb:4e:43:9a:0b:2a:98:07:c9:bd:89:
                    b9:2c:5e:3f:4f:1b:fd:1f:70:14:20:14:55:ad:e3:
                    82:41:75:92:a0:6e:2b:58:40:bd:25:f9:42:bc:b7:
                    4a:b4:3e:6f:d3:2e:d5:4f:ce:86:a7:2d:94:c0:b9:
                    5a:99:e6:27:32:79:66:b3:9f:55:35:da:73:23:c2:
                    25:1f:c2:32:dc:a1:7e:58:56:4a:0c:81:f0:f8:57:
                    ca:08:b8:db:d9:11:53:10:cc:0f:cb:2a:aa:15:2f:
                    59:af:5c:df:9b:7b:67:a5:e4:97:a0:cf:3c:5d:9c:
                    40:8c:a6:50:6c:c8:56:d1:59:1b:c3:5e:94:1b:07:
                    e3:7a:4c:2e:39:d1:ee:7a:21:1c:b8:db:91:54:03:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FB:81:94:6E:BE:03:AA:45:26:A6:9B:29:0C:78:59:0C:70:F3:DF
            X509v3 Authority Key Identifier:
                keyid:52:31:FD:6C:4C:BC:5F:5E:1F:81:F1:81:C4:D6:82:B1:26:B3:C6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5231FD6C4CBC5F5E1F81F181C4D682B126B3C620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQjSA3yBBkv7tg2N3LajaqJEZx8R7oNN9vcr6nXgzsae/0/3138362e3139342e302e302f32342d3234203d3e20323730383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:10:f9:a6:ac:7a:b6:44:92:0b:35:33:e7:43:bd:37:db:0b:
         cc:65:fe:f4:d7:e5:cc:4d:b9:1b:00:13:ef:8a:19:fe:57:0a:
         75:95:aa:f5:4d:cc:e7:1d:70:13:b5:00:6a:f2:46:c8:58:d9:
         31:55:d1:f9:4f:7d:12:f7:46:74:e3:5d:6c:7a:18:64:f4:10:
         15:91:73:1f:4c:6d:bd:2c:21:ed:e8:75:7f:14:1e:1c:4a:6b:
         58:79:ee:dd:23:64:2f:71:21:e3:96:78:fa:5b:29:f0:c6:01:
         eb:8d:0a:78:73:20:41:6c:37:3f:8d:05:0b:93:6e:e6:21:9a:
         be:12:d1:74:42:07:d9:ec:b2:ef:d2:47:90:7d:59:00:4e:a2:
         b1:32:1a:15:45:2d:b5:b1:0c:eb:bc:e9:f3:36:ee:44:f9:fe:
         e4:aa:55:0b:82:6e:c8:f3:01:33:c3:13:f5:19:85:9e:ae:6d:
         37:f8:38:fd:80:f6:11:49:39:d0:1a:3f:4b:03:55:84:79:6e:
         0b:1c:8f:72:30:0e:4e:c2:dc:e0:a0:3a:d4:f1:46:0e:ac:b1:
         58:7a:a6:e3:0c:29:fa:fc:88:8e:a0:b5:91:65:ac:79:e1:d3:
         1c:1d:a4:1e:0c:1c:1d:e8:89:56:89:2d:46:1a:9f:aa:9c:bb:
         4e:0a:18:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURP7IXqJC0jOnUUTP5p5lploKoXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIzMUZENkM0Q0JDNUY1RTFGODFGMTgxQzRENjgyQjEy
NkIzQzYyMDAeFw0yNjA5MDgxOTM0NTJaFw0yNzA5MDcxOTM5NTJaMDMxMTAvBgNV
BAMTKDc0RkI4MTk0NkVCRTAzQUE0NTI2QTY5QjI5MEM3ODU5MEM3MEYzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiPVK0OsFzpNz5o0kOvZwqYBWf
JIAEeTzPtJ5rg3oQwPUKLQ5thAw2hsquJR5Op/TSdVwZgtYt/DEofmEWOp5JnaYp
Q5VqBRyqDPnrkDepNZ7oc2D5PDMC+2B8dHM9kpfk9RHXpPM4tMYsZOv7TkOaCyqY
B8m9ibksXj9PG/0fcBQgFFWt44JBdZKgbitYQL0l+UK8t0q0Pm/TLtVPzoanLZTA
uVqZ5icyeWazn1U12nMjwiUfwjLcoX5YVkoMgfD4V8oIuNvZEVMQzA/LKqoVL1mv
XN+be2el5JegzzxdnECMplBsyFbRWRvDXpQbB+N6TC450e56IRy425FUA4+dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUdPuBlG6+A6pFJqabKQx4WQxw898wHwYDVR0j
BBgwFoAUUjH9bEy8X14fgfGBxNaCsSazxiAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFqU0EzeUJCa3Y3dGcyTjNMYWphcUpFWng4UjdvTk45dmNyNm5YZ3pz
YWUvMC81MjMxRkQ2QzRDQkM1RjVFMUY4MUYxODFDNEQ2ODJCMTI2QjNDNjIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyMzFGRDZDNENCQzVGNUUx
RjgxRjE4MUM0RDY4MkIxMjZCM0M2MjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRalNBM3lCQmt2N3RnMk4zTGFqYXFKRVp4OFI3b05OOXZjcjZuWGd6c2FlLzAv
MzEzODM2MmUzMTM5MzQyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAusIAMA0GCSqGSIb3DQEBCwUAA4IBAQATEPmmrHq2
RJILNTPnQ7032wvMZf701+XMTbkbABPvihn+Vwp1lar1TcznHXATtQBq8kbIWNkx
VdH5T30S90Z0411sehhk9BAVkXMfTG29LCHt6HV/FB4cSmtYee7dI2QvcSHjlnj6
WynwxgHrjQp4cyBBbDc/jQULk27mIZq+EtF0QgfZ7LLv0keQfVkATqKxMhoVRS21
sQzrvOnzNu5E+f7kqlULgm7I8wEzwxP1GYWerm03+Dj9gPYRSTnQGj9LA1WEeW4L
HI9yMA5OwtzgoDrU8UYOrLFYeqbjDCn6/IiOoLWRZax54dMcHaQeDBwd6IlWiS1G
Gp+qnLtOChhN
-----END CERTIFICATE-----