Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
File:                     3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa (raw, json)
Hash identifier:          kZidKkDNgLdeal0Oso4SGBiblI0LxQyz4SFe5dmXbug=
Subject key identifier:   0C:DB:E0:CA:1F:0A:AB:3B:64:17:2B:A3:F0:46:DE:77:EE:93:FD:3F
Certificate issuer:       /CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
Certificate serial:       0694E3E102515323D1FE2C4D61F31752C2D4424F
Authority key identifier: 56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa
Signing time:             Mon 08 Jun 2026 12:53:00 +0000
ROA not before:           Mon 08 Jun 2026 12:48:00 +0000
ROA not after:            Mon 07 Jun 2027 12:53:00 +0000
asID:                     262972
IP address blocks:        186.227.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl
                          rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:e3:e1:02:51:53:23:d1:fe:2c:4d:61:f3:17:52:c2:d4:42:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568185320BBBE54F9E4B2EB06A5DB334B1DA6889
        Validity
            Not Before: Jun  8 12:48:00 2026 GMT
            Not After : Jun  7 12:53:00 2027 GMT
        Subject: CN=0CDBE0CA1F0AAB3B64172BA3F046DE77EE93FD3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4a:51:ce:d5:b8:64:17:e7:fc:47:b8:dc:69:
                    31:fd:0a:c7:06:45:6a:52:21:5e:20:9d:87:e4:9f:
                    de:d4:b5:e3:50:34:41:9e:61:45:99:77:86:96:76:
                    3f:f0:ce:93:a3:ec:30:0d:f4:5a:fb:d3:e8:05:dc:
                    91:2f:be:4c:aa:e9:64:b0:7c:ab:7e:e0:a8:16:0f:
                    fd:9d:91:55:b5:87:c0:de:4c:fd:fb:fe:16:fa:3f:
                    d9:ce:f5:87:df:0e:54:1c:4d:16:2a:cc:b0:08:60:
                    99:00:ad:ae:33:0b:ca:88:33:9b:ca:1a:2d:3a:41:
                    95:b5:22:f4:db:9f:d0:e8:06:3c:79:fb:f5:b1:cc:
                    68:cb:88:e7:07:c2:2b:88:2d:e5:b4:49:91:1b:6e:
                    eb:33:d3:43:75:09:be:d1:90:89:37:95:31:c6:e2:
                    c9:63:41:46:86:ba:63:47:46:7c:4a:8b:39:18:ec:
                    27:75:7d:29:25:ec:9b:fe:e8:84:fc:1d:1b:25:8f:
                    7e:e1:29:55:94:58:c4:52:8e:1f:0b:2f:98:27:6b:
                    3f:40:ec:5b:41:60:12:57:e8:38:99:70:b0:83:83:
                    c1:79:31:5e:70:4a:02:f9:80:7a:c1:46:6e:b3:fb:
                    5d:b4:3f:f2:6d:b4:15:11:01:e0:27:59:18:5b:85:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DB:E0:CA:1F:0A:AB:3B:64:17:2B:A3:F0:46:DE:77:EE:93:FD:3F
            X509v3 Authority Key Identifier:
                keyid:56:81:85:32:0B:BB:E5:4F:9E:4B:2E:B0:6A:5D:B3:34:B1:DA:68:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/568185320BBBE54F9E4B2EB06A5DB334B1DA6889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/3138362e3232372e3135322e302f32322d3234203d3e20323632393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:61:ed:cd:34:d0:30:83:c0:e2:f3:69:6e:8a:42:e3:19:
         7a:e4:3a:ab:07:34:5d:84:d8:d9:3f:0a:df:24:99:bc:6d:92:
         b3:f4:b9:a9:24:b5:ee:c9:68:e9:be:37:9a:cd:3d:2c:be:41:
         0f:13:56:24:47:36:00:37:ae:2e:32:b2:08:34:81:73:d3:ad:
         22:44:cd:97:e1:8b:03:5a:56:0b:6d:02:22:e3:e3:bc:44:92:
         e2:f7:27:df:12:dc:59:2c:76:ac:d7:24:a3:d9:6a:cd:1c:ba:
         8d:ba:0d:db:38:a5:4c:5d:b9:c1:c9:d1:3d:96:a0:da:56:e7:
         dd:9c:12:7d:04:bf:91:07:d8:1f:25:b0:89:b9:9d:bb:41:bb:
         af:40:86:28:6f:5e:b7:a8:ba:dc:6e:dd:fe:96:bc:71:f6:80:
         18:18:50:7a:62:bf:47:e6:e5:6e:9a:93:67:c8:de:06:00:57:
         4f:23:a0:0b:0e:08:18:4f:84:93:f0:3c:1d:8a:19:10:83:41:
         9f:d9:14:7f:dd:46:64:f0:93:cb:39:cc:2c:63:4e:fe:61:eb:
         00:00:ed:c7:dc:cc:d1:20:d8:03:4e:0e:1e:d4:5d:df:96:7b:
         22:0f:13:e2:b1:b7:cd:e5:d9:07:e5:81:b9:e9:77:f6:51:b9:
         07:e2:16:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBpTj4QJRUyPR/ixNYfMXUsLUQk8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY4MTg1MzIwQkJCRTU0RjlFNEIyRUIwNkE1REIzMzRC
MURBNjg4OTAeFw0yNjA2MDgxMjQ4MDBaFw0yNzA2MDcxMjUzMDBaMDMxMTAvBgNV
BAMTKDBDREJFMENBMUYwQUFCM0I2NDE3MkJBM0YwNDZERTc3RUU5M0ZEM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSlHO1bhkF+f8R7jcaTH9CscG
RWpSIV4gnYfkn97UteNQNEGeYUWZd4aWdj/wzpOj7DAN9Fr70+gF3JEvvkyq6WSw
fKt+4KgWD/2dkVW1h8DeTP37/hb6P9nO9YffDlQcTRYqzLAIYJkAra4zC8qIM5vK
Gi06QZW1IvTbn9DoBjx5+/WxzGjLiOcHwiuILeW0SZEbbusz00N1Cb7RkIk3lTHG
4sljQUaGumNHRnxKizkY7Cd1fSkl7Jv+6IT8HRslj37hKVWUWMRSjh8LL5gnaz9A
7FtBYBJX6DiZcLCDg8F5MV5wSgL5gHrBRm6z+120P/JttBURAeAnWRhbhYVPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDNvgyh8KqztkFyuj8Ebed+6T/T8wHwYDVR0j
BBgwFoAUVoGFMgu75U+eSy6wal2zNLHaaIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHVUaDZOb3Zub1E5OTV4akVFMVROcGJVcWRmRzdQV2l5allQZU42bmJ1
Rm4vMC81NjgxODUzMjBCQkJFNTRGOUU0QjJFQjA2QTVEQjMzNEIxREE2ODg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2ODE4NTMyMEJCQkU1NEY5
RTRCMkVCMDZBNURCMzM0QjFEQTY4ODkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h1VGg2Tm92bm9ROTk1eGpFRTFUTnBiVXFkZkc3UFdpeWpZUGVONm5idUZuLzAv
MzEzODM2MmUzMjMyMzcyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrjmDANBgkqhkiG9w0BAQsFAAOCAQEAlKph
7c000DCDwOLzaW6KQuMZeuQ6qwc0XYTY2T8K3ySZvG2Ss/S5qSS17slo6b43ms09
LL5BDxNWJEc2ADeuLjKyCDSBc9OtIkTNl+GLA1pWC20CIuPjvESS4vcn3xLcWSx2
rNcko9lqzRy6jboN2zilTF25wcnRPZag2lbn3ZwSfQS/kQfYHyWwibmdu0G7r0CG
KG9et6i63G7d/pa8cfaAGBhQemK/R+blbpqTZ8jeBgBXTyOgCw4IGE+Ek/A8HYoZ
EINBn9kUf91GZPCTyznMLGNO/mHrAADtx9zM0SDYA04OHtRd35Z7Ig8T4rG3zeXZ
B+WBuel39lG5B+IWCA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 11:29:38 2026 by rpki-client