Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa
File:                     3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa (raw, json)
Hash identifier:          lHvJUgftgPo7oc6aovEITecST1+XWK224FHAAYyu+bQ=
Subject key identifier:   38:E8:69:C4:7C:5D:3D:5E:D5:A1:DA:4A:BA:25:60:EA:5D:4E:4D:4E
Certificate issuer:       /CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
Certificate serial:       5E418A603CD769EFE635566F6B317155E7DBB8B9
Authority key identifier: 4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa
Signing time:             Wed 07 Oct 2026 05:01:08 +0000
ROA not before:           Wed 07 Oct 2026 04:56:08 +0000
ROA not after:            Wed 06 Oct 2027 05:01:08 +0000
asID:                     270765
IP address blocks:        186.194.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl
                          rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 01:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:41:8a:60:3c:d7:69:ef:e6:35:56:6f:6b:31:71:55:e7:db:b8:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Validity
            Not Before: Oct  7 04:56:08 2026 GMT
            Not After : Oct  6 05:01:08 2027 GMT
        Subject: CN=38E869C47C5D3D5ED5A1DA4ABA2560EA5D4E4D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:38:e7:8f:58:7f:a0:2b:ae:65:96:a6:80:ae:
                    ab:54:ab:84:8e:30:6e:39:48:48:d2:cc:66:60:46:
                    0f:84:ec:dc:32:d1:da:33:b3:b8:6c:cf:42:b5:64:
                    3a:f7:c6:82:c2:3e:53:1e:e8:ac:e3:49:40:9d:f5:
                    09:75:d2:a9:b6:a0:39:a9:55:b2:53:db:60:6c:5a:
                    f3:38:0a:f9:ab:44:36:d8:74:82:77:2f:44:6c:23:
                    3b:4a:32:d9:25:88:e9:80:d0:fc:7b:00:ac:79:ef:
                    f7:8f:f5:39:b2:f9:6a:29:a5:60:1c:28:5e:fc:f5:
                    89:b3:5c:d4:42:43:0b:00:5e:be:0b:72:a2:88:91:
                    3a:6c:90:80:0e:d7:ba:78:f4:43:98:76:df:cb:25:
                    8e:23:2b:8f:ac:41:0e:8f:b8:5b:de:e5:f2:12:61:
                    00:6f:88:2a:f2:2e:95:e4:f9:23:8b:ef:7d:55:8a:
                    c4:21:8c:6c:e6:42:a7:d0:08:1e:67:24:31:50:d0:
                    d5:4e:c6:26:4b:67:dd:76:2b:7e:d2:98:da:1a:f7:
                    78:ef:5c:ae:cf:e3:a0:c5:d1:27:f0:00:cf:93:60:
                    fc:19:99:f4:9e:7e:77:54:f1:c7:46:0d:2d:06:15:
                    20:74:46:da:ed:56:0a:06:f3:8b:66:cf:3e:d4:5a:
                    17:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:69:C4:7C:5D:3D:5E:D5:A1:DA:4A:BA:25:60:EA:5D:4E:4D:4E
            X509v3 Authority Key Identifier:
                keyid:4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/3138362e3139342e3136342e302f32322d3234203d3e20323730373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:72:e6:0f:91:1d:36:c0:64:03:94:d3:e3:71:da:29:a0:e6:
         bc:8a:42:41:71:e9:a0:e7:a3:1e:af:9d:56:12:ed:b5:2e:b6:
         7f:cc:a4:86:2c:0e:5a:4a:2e:65:6c:95:8e:ef:cc:dc:9d:e8:
         66:4f:7a:07:5e:34:6b:9f:95:e2:ef:84:cf:a0:c2:b6:34:d5:
         23:d0:ee:7b:55:f5:70:e5:e5:01:3f:28:c7:e9:0c:c9:03:7c:
         75:87:80:cf:bf:15:bf:f5:76:bd:c7:ce:04:d8:15:3f:f8:b9:
         3b:e4:f2:c9:6e:06:2a:f9:af:55:10:83:cf:43:a7:3a:2c:9b:
         2f:78:f2:31:b2:24:3d:ce:15:f4:c3:02:7c:0d:85:b8:47:52:
         87:8e:1c:05:ea:8f:b0:1b:52:24:ab:89:32:c0:2a:2a:62:60:
         ba:84:fb:cb:93:95:22:5c:52:ed:20:42:e7:64:0a:ff:77:e1:
         73:cc:4c:84:cf:6f:3d:ef:74:67:ee:cf:76:c6:4f:bd:9b:ce:
         e8:37:77:1b:6a:00:61:4b:2a:3a:3d:98:02:0b:8d:6e:a3:d4:
         b6:4c:7c:e5:6c:ef:25:fc:4b:24:85:fc:f2:5b:5d:34:c1:6b:
         89:32:da:94:c5:07:d6:b8:49:aa:35:4b:05:42:e5:76:c3:45:
         44:b0:53:0b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXkGKYDzXae/mNVZvazFxVefbuLkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERBMjdFQjgzNEEyQjgzRjBCMkFDOEMwNERGRkFFOTY4
MzgxOTczQTAeFw0yNjEwMDcwNDU2MDhaFw0yNzEwMDYwNTAxMDhaMDMxMTAvBgNV
BAMTKDM4RTg2OUM0N0M1RDNENUVENUExREE0QUJBMjU2MEVBNUQ0RTRENEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhOOePWH+gK65llqaArqtUq4SO
MG45SEjSzGZgRg+E7Nwy0dozs7hsz0K1ZDr3xoLCPlMe6KzjSUCd9Ql10qm2oDmp
VbJT22BsWvM4CvmrRDbYdIJ3L0RsIztKMtkliOmA0Px7AKx57/eP9Tmy+WoppWAc
KF789YmzXNRCQwsAXr4LcqKIkTpskIAO17p49EOYdt/LJY4jK4+sQQ6PuFve5fIS
YQBviCryLpXk+SOL731VisQhjGzmQqfQCB5nJDFQ0NVOxiZLZ912K37SmNoa93jv
XK7P46DF0SfwAM+TYPwZmfSefndU8cdGDS0GFSB0RtrtVgoG84tmzz7UWhc5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUOOhpxHxdPV7VodpKuiVg6l1OTU4wHwYDVR0j
BBgwFoAUTaJ+uDSiuD8LKsjATf+uloOBlzowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnhrOXZjZ3gxYjRkREh1UlY4TXI1Ykw3UU5UajVva1ZnZVFRUzVSd1lr
R2svMS80REEyN0VCODM0QTJCODNGMEIyQUM4QzA0REZGQUU5NjgzODE5NzNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzREQTI3RUI4MzRBMkI4M0Yw
QjJBQzhDMDRERkZBRTk2ODM4MTk3M0EuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z4azl2Y2d4MWI0ZERIdVJWOE1yNWJMN1FOVGo1b2tWZ2VRUVM1UndZa0drLzEv
MzEzODM2MmUzMTM5MzQyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMDM3MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrCpDANBgkqhkiG9w0BAQsFAAOCAQEAqnLm
D5EdNsBkA5TT43HaKaDmvIpCQXHpoOejHq+dVhLttS62f8ykhiwOWkouZWyVju/M
3J3oZk96B140a5+V4u+Ez6DCtjTVI9Due1X1cOXlAT8ox+kMyQN8dYeAz78Vv/V2
vcfOBNgVP/i5O+TyyW4GKvmvVRCDz0OnOiybL3jyMbIkPc4V9MMCfA2FuEdSh44c
BeqPsBtSJKuJMsAqKmJguoT7y5OVIlxS7SBC52QK/3fhc8xMhM9vPe90Z+7PdsZP
vZvO6Dd3G2oAYUsqOj2YAguNbqPUtkx85WzvJfxLJIX88ltdNMFriTLalMUH1rhJ
qjVLBULldsNFRLBTCw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:24:34 2026 by rpki-client