Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa (raw, json)
Hash identifier:          fm6I0RNZSUyoRZLdY3wrH5htce40MRzK0m288aKAGRk=
Subject key identifier:   1C:37:5B:1B:D8:F2:68:00:1E:FE:33:F3:AC:33:E5:2B:9B:66:A3:85
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       2FE24C9D80AEC0758BB235F1B54B5073DB6142F1
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:26 +0000
ROA not before:           Thu 30 Jul 2026 17:54:26 +0000
ROA not after:            Thu 29 Jul 2027 17:59:26 +0000
asID:                     264025
IP address blocks:        168.197.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 15:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e2:4c:9d:80:ae:c0:75:8b:b2:35:f1:b5:4b:50:73:db:61:42:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:26 2026 GMT
            Not After : Jul 29 17:59:26 2027 GMT
        Subject: CN=1C375B1BD8F268001EFE33F3AC33E52B9B66A385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:82:57:8c:c4:37:18:bd:f6:de:a0:1c:34:
                    11:55:44:b2:95:58:0d:ad:58:5a:c9:9b:11:0d:1c:
                    a2:c9:10:8a:bb:b7:e3:73:62:76:a6:53:be:a7:34:
                    dc:0e:89:e4:32:5f:74:94:6d:32:d4:90:2d:80:45:
                    e5:24:37:ae:89:9b:f9:51:e4:1b:c2:58:37:10:47:
                    5d:5b:f9:05:53:48:66:d9:fe:c0:6f:72:85:26:f5:
                    2b:23:86:b4:67:57:a0:ca:6c:a5:9f:7f:44:c1:b9:
                    41:8b:9f:68:43:95:74:71:9a:54:a7:50:12:cc:26:
                    ee:a8:68:29:fc:ba:ed:c7:ec:29:e9:0f:f2:e5:e5:
                    45:e3:74:35:3f:12:e2:49:73:7c:7b:39:be:e4:43:
                    56:98:3b:33:46:a1:b0:88:17:0f:d7:1c:0b:7a:bd:
                    dd:cb:7c:96:8a:3c:3e:a7:89:69:0d:d8:79:52:7d:
                    56:84:5b:24:b0:29:b3:30:8d:7a:28:c5:46:19:82:
                    64:48:78:15:03:c4:59:5b:94:6f:fc:cd:b1:01:da:
                    0c:46:8e:ef:c6:50:d6:e9:ce:58:e4:ce:de:19:b1:
                    d1:c1:89:35:1a:5b:1d:e3:d3:aa:f6:40:41:d2:06:
                    9c:a9:5c:7a:cc:b1:61:29:8f:8a:b7:00:a6:7a:1a:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:5B:1B:D8:F2:68:00:1E:FE:33:F3:AC:33:E5:2B:9B:66:A3:85
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32322d3232203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:52:c4:aa:60:38:79:d6:9d:b7:c7:4c:93:e6:25:26:37:
         50:97:d9:bf:12:2c:24:20:51:ea:6d:90:00:91:80:86:9f:c5:
         c9:79:bf:20:03:83:45:26:cc:b3:a5:61:81:b4:93:71:45:91:
         cc:f5:75:0f:9f:59:7e:1d:b5:f7:33:b6:64:a2:b4:f0:11:a2:
         f3:65:77:f9:81:15:4c:6c:b4:ca:9c:c9:b6:f7:eb:c0:48:16:
         27:68:f7:89:d6:f2:12:31:71:35:32:66:ef:c3:6a:fb:e4:16:
         97:75:85:ba:2e:20:c3:7b:4e:4e:01:c5:5a:18:69:b2:41:1e:
         49:f7:fb:a5:a3:cd:cf:a5:fd:f9:a5:ed:e5:b5:56:f8:52:bc:
         11:04:e2:28:46:df:08:49:01:b5:17:53:6a:30:02:71:62:d6:
         2e:6d:62:6d:eb:4e:53:76:40:2d:68:5a:96:e4:7d:56:ee:a1:
         e8:d5:2d:03:32:69:09:43:f1:cf:12:95:22:9a:8d:51:b5:15:
         86:34:38:3d:d5:91:d0:14:6d:d7:0a:c2:70:66:c5:6f:a6:0c:
         da:6a:46:9a:9a:c9:b7:d0:16:7f:39:ca:b1:74:07:fb:81:79:
         df:c5:7b:24:81:fd:4d:8f:a1:b3:49:61:3b:b8:93:46:43:5c:
         97:c7:d1:04
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL+JMnYCuwHWLsjXxtUtQc9thQvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFRjRBODg0QUI5RTQwRUQ2QTA5QUUxQzNGNDdEN0M5
MTkzMDU3MjAeFw0yNjA3MzAxNzU0MjZaFw0yNzA3MjkxNzU5MjZaMDMxMTAvBgNV
BAMTKDFDMzc1QjFCRDhGMjY4MDAxRUZFMzNGM0FDMzNFNTJCOUI2NkEzODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGoJXjMQ3GL323qAcNBFVRLKV
WA2tWFrJmxENHKLJEIq7t+NzYnamU76nNNwOieQyX3SUbTLUkC2AReUkN66Jm/lR
5BvCWDcQR11b+QVTSGbZ/sBvcoUm9SsjhrRnV6DKbKWff0TBuUGLn2hDlXRxmlSn
UBLMJu6oaCn8uu3H7CnpD/Ll5UXjdDU/EuJJc3x7Ob7kQ1aYOzNGobCIFw/XHAt6
vd3LfJaKPD6niWkN2HlSfVaEWySwKbMwjXooxUYZgmRIeBUDxFlblG/8zbEB2gxG
ju/GUNbpzljkzt4ZsdHBiTUaWx3j06r2QEHSBpypXHrMsWEpj4q3AKZ6GtA9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUHDdbG9jyaAAe/jPzrDPlK5tmo4UwHwYDVR0j
BBgwFoAUZO9KiEq55A7WoJrhw/R9fJGTBXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC82NEVGNEE4ODRBQjlFNDBFRDZBMDlBRTFDM0Y0N0Q3QzkxOTMwNTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUY0QTg4NEFCOUU0MEVE
NkEwOUFFMUMzRjQ3RDdDOTE5MzA1NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzEzNjM4MmUzMTM5MzcyZTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxTgwDQYJKoZIhvcNAQELBQADggEBAI8VUsSq
YDh51p23x0yT5iUmN1CX2b8SLCQgUeptkACRgIafxcl5vyADg0UmzLOlYYG0k3FF
kcz1dQ+fWX4dtfcztmSitPARovNld/mBFUxstMqcybb368BIFido94nW8hIxcTUy
Zu/DavvkFpd1hbouIMN7Tk4BxVoYabJBHkn3+6Wjzc+l/fml7eW1VvhSvBEE4ihG
3whJAbUXU2owAnFi1i5tYm3rTlN2QC1oWpbkfVbuoejVLQMyaQlD8c8SlSKajVG1
FYY0OD3VkdAUbdcKwnBmxW+mDNpqRpqaybfQFn85yrF0B/uBed/FeySB/U2PobNJ
YTu4k0ZDXJfH0QQ=
-----END CERTIFICATE-----
Generated at Mon Aug 24 01:00:26 2026 by rpki-client