Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa
File:                     3138362e3139342e34382e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          tjc/wiC31fWuQfFZsr7OwcPE+Fel14o+ysMmiMn/i4E=
Subject key identifier:   32:27:AC:D8:F8:0B:DB:B6:91:A8:4B:2B:00:0D:7E:9F:63:DB:6E:FF
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       51E63C44E97F0A44D19672E340293C1EF1359037
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 09 Jun 2026 01:56:41 +0000
ROA not before:           Tue 09 Jun 2026 01:51:41 +0000
ROA not after:            Tue 08 Jun 2027 01:56:41 +0000
asID:                     53107
IP address blocks:        186.194.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e6:3c:44:e9:7f:0a:44:d1:96:72:e3:40:29:3c:1e:f1:35:90:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  9 01:51:41 2026 GMT
            Not After : Jun  8 01:56:41 2027 GMT
        Subject: CN=3227ACD8F80BDBB691A84B2B000D7E9F63DB6EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:08:6e:40:b2:a1:44:f8:66:f3:b5:e7:2c:
                    3e:e7:41:a6:4a:22:73:de:97:f1:21:c9:52:25:11:
                    71:88:45:30:49:4f:8e:9d:43:7e:9a:7a:e6:df:69:
                    38:a2:56:de:1e:df:32:63:24:10:32:40:ed:cf:42:
                    ad:43:fe:5d:bf:dc:32:57:7c:e2:fe:f6:ee:c6:f3:
                    9e:d7:64:14:14:9a:bf:70:0d:46:57:13:21:55:2c:
                    0d:fa:54:d2:97:cb:63:0d:1d:9a:42:1a:8a:44:a1:
                    21:84:2f:09:81:8d:39:5d:bd:30:98:dc:23:55:07:
                    4d:fd:10:89:e7:89:a1:59:e1:67:a2:32:ec:fb:64:
                    1e:0c:23:74:42:f5:35:45:c6:0b:7a:31:b9:fd:22:
                    08:24:58:94:b1:73:6f:4e:a7:50:cc:a0:53:ca:1e:
                    db:84:4c:b7:41:68:97:86:66:fc:4f:42:61:30:6c:
                    d3:de:c2:af:b0:8c:ac:50:a7:68:02:62:47:03:85:
                    a0:8a:cb:13:65:8e:49:85:8a:90:6a:42:bf:10:88:
                    b0:25:42:83:a9:8a:0d:bc:e0:c3:15:bc:c4:5b:0a:
                    be:0b:3f:5c:a7:70:c7:4f:7c:e7:9c:87:c6:ea:91:
                    57:74:c6:f3:69:3c:cb:2f:0a:ed:31:d3:74:de:62:
                    e7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:27:AC:D8:F8:0B:DB:B6:91:A8:4B:2B:00:0D:7E:9F:63:DB:6E:FF
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3139342e34382e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:54:b7:9a:fe:fb:1c:bc:c3:66:f5:58:1a:52:34:23:85:eb:
         f5:d7:3b:d5:b3:b2:68:02:33:2e:71:30:b1:4e:76:09:dc:e2:
         f8:f4:2f:c9:70:e7:e3:88:27:2c:d4:8b:8c:38:bb:7e:e0:ed:
         78:ea:c4:aa:b9:64:9e:28:f5:64:30:b1:42:af:8f:4b:91:2b:
         cf:8b:02:b5:c2:da:aa:dd:41:8b:3f:a9:f2:46:63:71:c8:2e:
         5b:d6:6c:d6:d0:05:0f:4f:3b:f7:1b:3b:b6:0c:2f:77:63:42:
         c8:39:75:b0:d7:3c:ee:98:a5:dc:51:2b:da:32:b7:ae:61:9a:
         f6:89:f7:90:bf:f3:9a:79:0d:94:5f:20:4a:9f:d6:ea:4f:3f:
         37:b7:74:20:60:21:09:c6:9f:ca:dc:23:e0:eb:86:fe:09:d6:
         45:63:76:9f:ac:e5:3a:fe:53:50:ff:bf:cd:10:f9:86:73:b4:
         97:d3:e1:fb:ee:c6:99:d5:92:4c:cd:7e:20:d2:66:8c:05:08:
         9b:df:b4:19:f1:be:e3:ed:6b:1b:6d:f3:db:6e:04:ba:71:6b:
         a6:c4:62:9f:23:2e:32:ca:42:29:2f:c8:20:30:ee:f0:de:00:
         11:75:ae:7b:70:9b:43:da:8c:9a:47:5a:25:25:8b:45:8e:b7:
         b9:76:7a:55
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUeY8ROl/CkTRlnLjQCk8HvE1kDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNjA2MDkwMTUxNDFaFw0yNzA2MDgwMTU2NDFaMDMxMTAvBgNV
BAMTKDMyMjdBQ0Q4RjgwQkRCQjY5MUE4NEIyQjAwMEQ3RTlGNjNEQjZFRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC81AhuQLKhRPhm87XnLD7nQaZK
InPel/EhyVIlEXGIRTBJT46dQ36aeubfaTiiVt4e3zJjJBAyQO3PQq1D/l2/3DJX
fOL+9u7G857XZBQUmr9wDUZXEyFVLA36VNKXy2MNHZpCGopEoSGELwmBjTldvTCY
3CNVB039EInniaFZ4WeiMuz7ZB4MI3RC9TVFxgt6Mbn9IggkWJSxc29Op1DMoFPK
HtuETLdBaJeGZvxPQmEwbNPewq+wjKxQp2gCYkcDhaCKyxNljkmFipBqQr8QiLAl
QoOpig284MMVvMRbCr4LP1yncMdPfOech8bqkVd0xvNpPMsvCu0x03TeYudZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMies2PgL27aRqEsrAA1+n2Pbbv8wHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzODM2MmUzMTM5MzQyZTM0MzgyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMz
MzEzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDusIwMA0GCSqGSIb3DQEBCwUAA4IBAQBFVLea/vsc
vMNm9VgaUjQjhev11zvVs7JoAjMucTCxTnYJ3OL49C/JcOfjiCcs1IuMOLt+4O14
6sSquWSeKPVkMLFCr49LkSvPiwK1wtqq3UGLP6nyRmNxyC5b1mzW0AUPTzv3Gzu2
DC93Y0LIOXWw1zzumKXcUSvaMreuYZr2ifeQv/OaeQ2UXyBKn9bqTz83t3QgYCEJ
xp/K3CPg64b+CdZFY3afrOU6/lNQ/7/NEPmGc7SX0+H77saZ1ZJMzX4g0maMBQib
37QZ8b7j7WsbbfPbbgS6cWumxGKfIy4yykIpL8ggMO7w3gARda57cJtD2oyaR1ol
JYtFjre5dnpV
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:16:31 2026 by rpki-client