Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
File:                     3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa (raw, json)
Hash identifier:          y0KBDARLX8lwLpiVoAEvRxX68lKW0VIQ8QZGjDsivSg=
Subject key identifier:   46:D8:7B:91:8E:57:7B:8D:59:4F:FC:2E:30:67:9B:BB:5C:05:C9:7E
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       5BF9C01EC396785D385889405CCEA7193EDD668F
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa
Signing time:             Tue 09 Jun 2026 01:56:42 +0000
ROA not before:           Tue 09 Jun 2026 01:51:42 +0000
ROA not after:            Tue 08 Jun 2027 01:56:42 +0000
asID:                     53107
IP address blocks:        186.209.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f9:c0:1e:c3:96:78:5d:38:58:89:40:5c:ce:a7:19:3e:dd:66:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  9 01:51:42 2026 GMT
            Not After : Jun  8 01:56:42 2027 GMT
        Subject: CN=46D87B918E577B8D594FFC2E30679BBB5C05C97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c4:8d:f8:b3:4b:c9:9a:51:cd:70:ca:a7:00:
                    27:b7:ff:90:dc:d0:ec:a5:fe:c9:ea:ee:71:7a:74:
                    c4:0a:45:59:c7:eb:cf:17:e3:b5:b3:19:92:2f:ee:
                    a3:e8:ec:6b:ab:12:99:60:1d:a6:e5:8e:04:ca:ec:
                    8e:62:ff:3c:13:51:9b:e1:80:24:d6:22:0d:86:8a:
                    ea:4a:62:b7:00:3d:7f:a8:ca:13:2d:e2:ba:9a:e5:
                    34:91:78:bc:07:c8:34:0c:38:3d:a5:a2:fc:d8:e9:
                    f0:74:45:7f:0a:2b:60:bd:1c:7a:a4:86:fb:07:04:
                    31:09:22:fd:b4:64:0d:11:c3:47:0d:d6:a8:c6:8b:
                    04:86:22:8d:e1:ba:ba:fb:57:a2:44:20:67:8c:a1:
                    3d:ad:e4:81:6f:a1:f6:7d:5f:8c:4d:74:77:14:79:
                    1d:7b:e3:93:cc:94:6d:46:e5:01:2a:c8:b4:dd:09:
                    26:11:ff:9e:b4:62:6d:aa:39:51:1b:32:cd:1a:53:
                    21:b8:7f:62:ca:b0:6c:66:c6:f1:06:7f:98:04:a9:
                    55:b3:c8:1d:79:95:d0:c2:50:41:36:11:fa:37:43:
                    75:6e:f9:48:24:01:bb:17:33:3a:0c:20:ad:65:86:
                    b1:de:9e:4e:73:6c:d8:43:a0:ca:26:41:2b:aa:35:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D8:7B:91:8E:57:7B:8D:59:4F:FC:2E:30:67:9B:BB:5C:05:C9:7E
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138362e3230392e3131322e302f32312d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:59:0d:2f:f0:69:4c:61:2a:bf:3f:b0:96:04:09:b1:2d:9d:
         c3:b2:22:c2:5a:d7:22:a5:67:8a:77:fd:da:2b:f1:99:46:8f:
         78:29:42:c5:4f:e8:94:fb:98:7e:d6:32:55:3b:8f:de:09:4c:
         cd:47:d9:79:84:85:d0:bd:ca:5d:dd:37:99:c8:4d:c9:8e:4f:
         75:79:4d:cd:b6:b9:16:73:45:27:3c:18:79:d7:3a:d2:77:64:
         64:3e:a9:1d:06:52:18:3a:98:df:d3:15:1b:64:63:be:ef:7f:
         25:4e:fc:68:4f:37:e5:88:83:91:bb:d0:e1:f3:95:48:51:fb:
         ca:b2:f0:21:5d:61:4f:fc:c4:bb:3a:14:1e:b6:fe:0a:19:48:
         10:39:12:af:6b:cc:e6:aa:3e:90:f6:01:37:3f:a3:61:97:a1:
         71:15:53:c6:ac:36:dc:31:36:11:02:e2:ca:2a:f1:fd:06:a6:
         4b:c0:ce:06:68:b5:a8:11:75:dc:40:ac:12:29:3c:83:8c:97:
         ec:9b:2f:11:bc:2e:b0:55:b5:06:b2:27:f3:dd:b2:d5:33:f2:
         24:cf:6e:0f:65:24:8f:46:12:48:a1:0e:dc:9c:c2:97:8a:b2:
         c8:5c:b9:20:22:60:48:60:98:f9:ba:38:76:21:75:3f:66:ee:
         6d:d4:48:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW/nAHsOWeF04WIlAXM6nGT7dZo8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNjA2MDkwMTUxNDJaFw0yNzA2MDgwMTU2NDJaMDMxMTAvBgNV
BAMTKDQ2RDg3QjkxOEU1NzdCOEQ1OTRGRkMyRTMwNjc5QkJCNUMwNUM5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqxI34s0vJmlHNcMqnACe3/5Dc
0Oyl/snq7nF6dMQKRVnH688X47WzGZIv7qPo7GurEplgHabljgTK7I5i/zwTUZvh
gCTWIg2GiupKYrcAPX+oyhMt4rqa5TSReLwHyDQMOD2lovzY6fB0RX8KK2C9HHqk
hvsHBDEJIv20ZA0Rw0cN1qjGiwSGIo3hurr7V6JEIGeMoT2t5IFvofZ9X4xNdHcU
eR1745PMlG1G5QEqyLTdCSYR/560Ym2qOVEbMs0aUyG4f2LKsGxmxvEGf5gEqVWz
yB15ldDCUEE2Efo3Q3Vu+UgkAbsXMzoMIK1lhrHenk5zbNhDoMomQSuqNciHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURth7kY5Xe41ZT/wuMGebu1wFyX4wHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzODM2MmUzMjMwMzkyZTMxMzEzMjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO60XAwDQYJKoZIhvcNAQELBQADggEBABdZDS/w
aUxhKr8/sJYECbEtncOyIsJa1yKlZ4p3/dor8ZlGj3gpQsVP6JT7mH7WMlU7j94J
TM1H2XmEhdC9yl3dN5nITcmOT3V5Tc22uRZzRSc8GHnXOtJ3ZGQ+qR0GUhg6mN/T
FRtkY77vfyVO/GhPN+WIg5G70OHzlUhR+8qy8CFdYU/8xLs6FB62/goZSBA5Eq9r
zOaqPpD2ATc/o2GXoXEVU8asNtwxNhEC4soq8f0GpkvAzgZotagRddxArBIpPIOM
l+ybLxG8LrBVtQayJ/PdstUz8iTPbg9lJI9GEkihDtycwpeKsshcuSAiYEhgmPm6
OHYhdT9m7m3USIk=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:28:43 2026 by rpki-client