Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136302e302f32302d3234203d3e203533313037.roa
File:                     3138372e3131302e3136302e302f32302d3234203d3e203533313037.roa (raw, json)
Hash identifier:          8yzwndjgARMjtqjwIjA7emjgx4roVuDMHxFZsGI+4uc=
Subject key identifier:   74:C8:CA:6E:2C:F0:FC:56:15:67:C0:CF:79:99:C3:A4:75:53:A0:FF
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       0F19F190D238BB072A9307520AC00CB78792836F
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136302e302f32302d3234203d3e203533313037.roa
Signing time:             Wed 03 Jun 2026 18:54:32 +0000
ROA not before:           Wed 03 Jun 2026 18:49:32 +0000
ROA not after:            Wed 02 Jun 2027 18:54:32 +0000
asID:                     53107
IP address blocks:        187.110.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:19:f1:90:d2:38:bb:07:2a:93:07:52:0a:c0:0c:b7:87:92:83:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  3 18:49:32 2026 GMT
            Not After : Jun  2 18:54:32 2027 GMT
        Subject: CN=74C8CA6E2CF0FC561567C0CF7999C3A47553A0FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:bc:22:79:ab:a3:57:5b:db:1e:d8:63:0a:
                    6d:13:a9:7a:2b:8c:13:bb:2b:76:b4:e3:45:b3:b9:
                    5e:9f:e3:e0:33:28:fa:96:3b:18:53:e6:d1:19:71:
                    2f:8e:cc:6f:6a:c0:b2:81:fe:d3:45:98:6f:ea:9e:
                    63:11:84:e9:6b:2c:4a:83:3d:2b:ca:77:f0:45:95:
                    aa:6d:85:97:52:b7:2f:54:42:19:cf:f6:cd:ce:86:
                    f5:50:47:70:1d:1a:0a:93:01:df:60:54:68:f7:99:
                    75:b6:dd:19:0e:1f:24:af:ae:d2:d2:2e:08:c5:7d:
                    27:70:69:a6:0d:71:d9:e0:9a:42:1e:08:c8:6b:6b:
                    28:e7:b3:67:82:45:61:52:3b:6a:b3:7c:75:c7:1c:
                    cf:f5:52:a1:10:d2:e0:3b:67:73:31:8d:f0:38:b7:
                    db:e3:fd:38:be:94:7c:3e:48:8a:1a:df:0f:5d:08:
                    60:ae:53:55:fc:c6:29:86:b6:f1:26:4d:cc:1c:84:
                    ed:a2:a9:43:03:a0:ec:c3:38:e2:c1:ed:08:fd:fe:
                    17:05:fa:a8:7d:5a:bb:77:c3:3a:94:27:f8:e0:d7:
                    c8:26:3e:de:c6:77:b7:3e:57:89:05:38:47:81:5a:
                    ac:06:06:ce:25:01:de:03:c2:51:07:ed:80:7a:d0:
                    1a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:CA:6E:2C:F0:FC:56:15:67:C0:CF:79:99:C3:A4:75:53:A0:FF
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3138372e3131302e3136302e302f32302d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:d4:7a:15:8f:44:a0:de:30:d3:29:37:00:6a:a5:54:9c:c0:
         02:37:6e:9c:29:70:45:26:33:fe:81:d2:74:f0:32:74:6d:4f:
         8a:d1:2a:a2:79:33:9a:17:45:6a:16:c5:1f:b6:6d:c0:cd:54:
         cc:0a:3a:a5:e0:5e:47:93:b4:93:75:23:10:b5:db:3e:c1:c1:
         cb:80:59:2f:f2:a5:2f:c2:6b:0b:5d:79:8a:48:0b:4c:53:7c:
         73:5d:24:4a:3c:4d:c2:55:3b:07:fc:04:be:a8:da:d1:aa:a0:
         2f:69:cd:33:39:98:4f:62:54:ba:93:72:c5:0b:fa:df:0e:a9:
         a3:7b:60:c6:a1:ac:3d:da:91:11:6c:c1:bd:b7:20:cb:7d:2a:
         59:cc:06:3f:81:3b:39:90:25:24:22:4e:dd:f3:40:11:2e:8a:
         82:ba:54:d4:48:ee:11:f8:d1:b3:db:13:47:9c:ad:0d:81:38:
         bc:2e:9b:6f:ff:70:91:0a:71:71:11:01:ed:2e:65:ee:e2:00:
         ac:44:a7:fc:f0:92:d9:2c:13:95:ca:53:9a:cd:1c:40:2b:97:
         15:68:a4:87:65:39:c6:bd:89:a3:aa:28:d7:3b:e9:1a:be:45:
         37:50:22:10:1e:ed:8b:9d:51:89:4c:85:cb:7e:4e:82:cf:6f:
         69:1b:0a:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDxnxkNI4uwcqkwdSCsAMt4eSg28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUzREI3Q0VCNzRDQjA0QzU5N0JCNTBCMDUwREUwRTc4
NUNGQTFBNTAeFw0yNjA2MDMxODQ5MzJaFw0yNzA2MDIxODU0MzJaMDMxMTAvBgNV
BAMTKDc0QzhDQTZFMkNGMEZDNTYxNTY3QzBDRjc5OTlDM0E0NzU1M0EwRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjrwieaujV1vbHthjCm0TqXor
jBO7K3a040WzuV6f4+AzKPqWOxhT5tEZcS+OzG9qwLKB/tNFmG/qnmMRhOlrLEqD
PSvKd/BFlapthZdSty9UQhnP9s3OhvVQR3AdGgqTAd9gVGj3mXW23RkOHySvrtLS
LgjFfSdwaaYNcdngmkIeCMhrayjns2eCRWFSO2qzfHXHHM/1UqEQ0uA7Z3MxjfA4
t9vj/Ti+lHw+SIoa3w9dCGCuU1X8ximGtvEmTcwchO2iqUMDoOzDOOLB7Qj9/hcF
+qh9Wrt3wzqUJ/jg18gmPt7Gd7c+V4kFOEeBWqwGBs4lAd4DwlEH7YB60BpXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdMjKbizw/FYVZ8DPeZnDpHVToP8wHwYDVR0j
BBgwFoAUHj23zrdMsExZe7ULBQ3g54XPoaUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDZTQ3VQNHNiNjR4c3JzQnU0d29BZXFWM21GNFhrdHdKUlBaRVQ2UDU0
TXUvMC8xRTNEQjdDRUI3NENCMDRDNTk3QkI1MEIwNTBERTBFNzg1Q0ZBMUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFFM0RCN0NFQjc0Q0IwNEM1
OTdCQjUwQjA1MERFMEU3ODVDRkExQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g2U0N1UDRzYjY0eHNyc0J1NHdvQWVxVjNtRjRYa3R3SlJQWkVUNlA1NE11LzAv
MzEzODM3MmUzMTMxMzAyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1
MzMzMTMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAS7bqAwDQYJKoZIhvcNAQELBQADggEBAJTUehWP
RKDeMNMpNwBqpVScwAI3bpwpcEUmM/6B0nTwMnRtT4rRKqJ5M5oXRWoWxR+2bcDN
VMwKOqXgXkeTtJN1IxC12z7BwcuAWS/ypS/CawtdeYpIC0xTfHNdJEo8TcJVOwf8
BL6o2tGqoC9pzTM5mE9iVLqTcsUL+t8OqaN7YMahrD3akRFswb23IMt9KlnMBj+B
OzmQJSQiTt3zQBEuioK6VNRI7hH40bPbE0ecrQ2BOLwum2//cJEKcXERAe0uZe7i
AKxEp/zwktksE5XKU5rNHEArlxVopIdlOca9iaOqKNc76Rq+RTdQIhAe7YudUYlM
hct+ToLPb2kbCnw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:46:39 2026 by rpki-client