Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3233203d3e20323731323339.roa
File:                     3230312e34362e3132302e302f32332d3233203d3e20323731323339.roa (raw, json)
Hash identifier:          MLGRG7Bo3cgSm8JoC+Dbs1VHcS8L9CqbNk+OUQWYk1U=
Subject key identifier:   05:38:6B:54:54:57:97:9B:97:B5:31:88:0A:FF:61:02:84:60:55:8F
Certificate issuer:       /CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
Certificate serial:       62FFC2AA1BB5ECEA8F1F7B28018C84E0BC90C219
Authority key identifier: 3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3233203d3e20323731323339.roa
Signing time:             Fri 10 Apr 2026 12:21:10 +0000
ROA not before:           Fri 10 Apr 2026 12:16:10 +0000
ROA not after:            Fri 09 Apr 2027 12:21:10 +0000
asID:                     271239
IP address blocks:        201.46.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl
                          rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 11:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ff:c2:aa:1b:b5:ec:ea:8f:1f:7b:28:01:8c:84:e0:bc:90:c2:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
        Validity
            Not Before: Apr 10 12:16:10 2026 GMT
            Not After : Apr  9 12:21:10 2027 GMT
        Subject: CN=05386B545457979B97B531880AFF61028460558F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:c0:29:98:09:88:5d:b3:b6:02:17:aa:a0:
                    c8:23:3d:94:8c:ee:67:37:52:63:ae:7e:53:d2:af:
                    b0:d0:90:34:82:83:54:52:b4:5d:57:57:07:9a:17:
                    16:76:48:88:8d:72:53:ff:87:6c:9a:36:aa:6f:fb:
                    91:f6:b3:38:1b:1a:9b:f4:89:11:e8:7e:53:83:cc:
                    51:af:c7:4f:5d:9e:d4:6c:ba:1b:89:94:64:ab:e0:
                    d4:78:f2:1f:ad:5b:28:f8:33:05:61:01:13:b4:1f:
                    68:d8:bb:26:b3:76:19:56:bb:14:1f:e0:52:76:2b:
                    aa:df:82:05:1b:94:45:a7:ab:17:46:b1:30:08:34:
                    e4:f5:c8:98:12:24:42:c0:e0:71:ea:f0:bc:49:b1:
                    f5:ac:83:a7:4e:ba:b6:03:a8:1a:f0:c6:50:a9:46:
                    c0:69:a8:d7:d3:c1:8f:da:5b:92:8a:6b:cc:77:06:
                    4b:39:c3:f9:76:00:38:3b:fc:08:1b:05:66:83:26:
                    a8:9c:ee:e0:5f:2c:8f:1d:04:55:a5:75:f7:89:15:
                    6b:62:93:7c:3d:22:d1:94:c8:66:e5:d8:c4:66:71:
                    9e:1a:a1:c7:05:21:25:96:01:ad:82:e4:28:08:18:
                    26:15:03:a4:4e:1a:c2:9e:ae:33:35:76:df:ad:b0:
                    a6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:38:6B:54:54:57:97:9B:97:B5:31:88:0A:FF:61:02:84:60:55:8F
            X509v3 Authority Key Identifier:
                keyid:3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3233203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:23:62:9d:b7:48:f5:1d:e4:33:f8:17:f3:e4:cc:b0:f3:14:
         35:e6:2a:58:59:b1:62:74:58:6e:8b:4b:19:a4:60:24:e3:3a:
         fc:9f:b7:9d:1e:c1:0f:59:d6:33:1b:41:2a:85:53:3c:f3:ef:
         b7:d4:24:cf:79:06:df:96:9b:a7:4c:5f:31:ec:61:c7:e8:bb:
         47:a7:ed:c9:23:a9:32:fd:e2:2b:93:d8:db:0b:b2:61:e5:ab:
         8e:c2:af:02:7d:0d:63:8e:20:25:30:fb:96:e2:9e:23:05:66:
         ba:68:64:69:56:e3:33:85:09:4d:e3:54:87:37:7d:12:b3:ab:
         18:a1:24:0f:04:2d:48:9c:ff:65:f0:3a:24:55:63:d1:a0:6e:
         4a:2d:28:52:9e:8c:17:3e:91:4b:a5:e9:19:6b:bc:80:05:b2:
         7b:13:5d:bb:93:91:e0:3c:ef:56:cd:cb:53:3e:19:bb:48:2d:
         d7:e1:8f:f4:eb:e3:54:a8:88:fb:2b:32:de:18:b7:d5:ce:89:
         5a:74:4e:75:1c:24:da:2b:50:0f:bc:93:b1:32:a5:ca:f0:58:
         91:8f:9e:8f:63:5a:81:98:28:5f:90:16:df:01:04:3b:51:fb:
         86:19:0a:5a:3e:9a:1c:b8:3e:a3:8e:65:5a:55:9a:7c:7f:6e:
         f1:11:d5:57
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYv/Cqhu17OqPH3soAYyE4LyQwhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0REQkJGOUEwRjc2Nzc3MDAwQzY1ODA4REZDQzU2QTI0
NzU5RTEyQjAeFw0yNjA0MTAxMjE2MTBaFw0yNzA0MDkxMjIxMTBaMDMxMTAvBgNV
BAMTKDA1Mzg2QjU0NTQ1Nzk3OUI5N0I1MzE4ODBBRkY2MTAyODQ2MDU1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg8MApmAmIXbO2AheqoMgjPZSM
7mc3UmOuflPSr7DQkDSCg1RStF1XVweaFxZ2SIiNclP/h2yaNqpv+5H2szgbGpv0
iRHoflODzFGvx09dntRsuhuJlGSr4NR48h+tWyj4MwVhARO0H2jYuyazdhlWuxQf
4FJ2K6rfggUblEWnqxdGsTAINOT1yJgSJELA4HHq8LxJsfWsg6dOurYDqBrwxlCp
RsBpqNfTwY/aW5KKa8x3Bks5w/l2ADg7/AgbBWaDJqic7uBfLI8dBFWldfeJFWti
k3w9ItGUyGbl2MRmcZ4aoccFISWWAa2C5CgIGCYVA6ROGsKerjM1dt+tsKZjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBThrVFRXl5uXtTGICv9hAoRgVY8wHwYDVR0j
BBgwFoAUPdu/mg92d3AAxlgI38xWokdZ4SswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG1BWkJXSlppaGlndW1jVGpoM0pTSGJoNjJXZDllV2t3NHFNMXYyUGVw
QjQvMC8zRERCQkY5QTBGNzY3NzcwMDBDNjU4MDhERkNDNTZBMjQ3NTlFMTJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNEREJCRjlBMEY3Njc3NzAw
MEM2NTgwOERGQ0M1NkEyNDc1OUUxMkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0htQVpCV0paaWhpZ3VtY1RqaDNKU0hiaDYyV2Q5ZVdrdzRxTTF2MlBlcEI0LzAv
MzIzMDMxMmUzNDM2MmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHJLngwDQYJKoZIhvcNAQELBQADggEBAFIjYp23
SPUd5DP4F/PkzLDzFDXmKlhZsWJ0WG6LSxmkYCTjOvyft50ewQ9Z1jMbQSqFUzzz
77fUJM95Bt+Wm6dMXzHsYcfou0en7ckjqTL94iuT2NsLsmHlq47CrwJ9DWOOICUw
+5biniMFZrpoZGlW4zOFCU3jVIc3fRKzqxihJA8ELUic/2XwOiRVY9GgbkotKFKe
jBc+kUul6RlrvIAFsnsTXbuTkeA871bNy1M+GbtILdfhj/Tr41SoiPsrMt4Yt9XO
iVp0TnUcJNorUA+8k7EypcrwWJGPno9jWoGYKF+QFt8BBDtR+4YZClo+mhy4PqOO
ZVpVmnx/bvER1Vc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:17:29 2026 by rpki-client