Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32332d3233203d3e20323634303235.roa
File:                     3136382e3139372e35362e302f32332d3233203d3e20323634303235.roa (raw, json)
Hash identifier:          bfL1FUnJkkQjygTFeRwhbQLr6Iin2naN0Cd970tlfsA=
Subject key identifier:   77:5D:84:7B:D0:39:18:FF:FF:1F:D5:F8:52:A5:35:1E:55:5E:A8:35
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       3CAD72DD1EED89EECEB8ACE6D92A8D5E5905C223
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32332d3233203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:26 +0000
ROA not before:           Thu 30 Jul 2026 17:54:26 +0000
ROA not after:            Thu 29 Jul 2027 17:59:26 +0000
asID:                     264025
IP address blocks:        168.197.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 03:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ad:72:dd:1e:ed:89:ee:ce:b8:ac:e6:d9:2a:8d:5e:59:05:c2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:26 2026 GMT
            Not After : Jul 29 17:59:26 2027 GMT
        Subject: CN=775D847BD03918FFFF1FD5F852A5351E555EA835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:93:ec:1f:ad:a9:8d:60:ec:87:14:ee:da:
                    ea:6b:e6:fd:b2:13:e4:9a:3c:aa:87:67:96:78:56:
                    be:db:54:0c:05:03:3e:3a:dc:45:a6:99:b3:a9:cd:
                    4e:42:a2:6a:ac:09:e1:c4:c0:a4:cd:59:10:9c:8c:
                    88:3d:cf:c9:25:b3:77:c2:73:9c:38:dd:c7:e0:f0:
                    b9:98:3a:66:b4:ba:b9:e1:6f:ab:8d:e5:73:25:14:
                    ee:03:d4:b7:42:73:fa:ba:60:b9:a4:3d:4b:6d:aa:
                    4b:50:91:64:c9:fe:18:4f:73:d2:9a:c8:8a:92:8f:
                    53:0b:b5:56:3f:2b:21:94:a2:06:63:04:73:9a:d4:
                    52:73:32:77:6b:5c:41:37:5e:1b:db:31:e4:c3:96:
                    56:20:47:fb:1a:49:71:a0:b9:3c:c2:aa:df:6a:4f:
                    93:d8:c1:c5:2e:3e:f0:71:30:d6:e5:fb:4f:17:13:
                    af:e1:3b:9c:b1:bd:34:b4:4d:19:a3:a2:b7:db:71:
                    fa:47:39:fb:29:96:19:3f:ab:0f:79:eb:38:a2:93:
                    3c:a6:18:91:3c:94:de:e2:36:56:4b:2f:13:c7:f5:
                    7c:bf:b5:51:24:80:6e:e4:9f:ae:84:7f:f6:ca:be:
                    da:cb:c4:8e:ed:53:ca:33:eb:00:4a:eb:37:a0:9b:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:84:7B:D0:39:18:FF:FF:1F:D5:F8:52:A5:35:1E:55:5E:A8:35
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35362e302f32332d3233203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:23:a4:c8:df:fb:e8:e3:df:c3:84:ec:9a:8e:ee:9b:7a:18:
         86:32:e3:6e:39:fa:f9:8f:f9:01:a4:2d:d7:ab:d4:4e:c8:85:
         54:4e:eb:84:9a:4b:5d:aa:41:45:a4:c3:66:bc:0b:ec:65:bf:
         c6:8d:0a:c6:f3:6f:90:7b:50:3a:ff:b2:a0:0e:65:76:a0:31:
         00:f0:51:65:25:78:4d:22:b6:90:a7:fd:09:06:a6:f8:ec:b1:
         09:f7:d8:6a:16:2b:2f:07:50:30:1c:8b:e6:5d:11:2f:83:f5:
         d8:32:49:50:5a:6b:26:79:1f:05:9e:e5:65:a6:b6:a6:81:33:
         d6:33:1e:86:47:2b:43:1d:71:cb:59:54:87:a1:bd:60:9f:1b:
         1e:ff:68:f7:a4:22:fb:4a:0a:59:ca:a4:ef:ba:03:00:30:1a:
         aa:9c:b8:2b:c7:1c:6d:02:9a:d4:72:45:b7:c8:28:17:e2:c7:
         21:ad:19:17:fb:a3:7e:b1:fb:52:45:22:e5:73:9c:c7:c8:50:
         20:6e:92:9c:da:2e:71:4d:d4:c9:31:b2:d1:49:c8:1b:4c:05:
         6d:a3:f5:9a:db:7c:79:03:50:84:a8:3c:97:5a:36:a1:b0:66:
         15:77:ab:fc:fd:90:79:9d:d4:3e:80:6d:5f:2e:cf:23:6a:24:
         f8:b2:79:90
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPK1y3R7tie7OuKzm2SqNXlkFwiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjRFRjRBODg0QUI5RTQwRUQ2QTA5QUUxQzNGNDdEN0M5
MTkzMDU3MjAeFw0yNjA3MzAxNzU0MjZaFw0yNzA3MjkxNzU5MjZaMDMxMTAvBgNV
BAMTKDc3NUQ4NDdCRDAzOTE4RkZGRjFGRDVGODUyQTUzNTFFNTU1RUE4MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCutZPsH62pjWDshxTu2upr5v2y
E+SaPKqHZ5Z4Vr7bVAwFAz463EWmmbOpzU5ComqsCeHEwKTNWRCcjIg9z8kls3fC
c5w43cfg8LmYOma0urnhb6uN5XMlFO4D1LdCc/q6YLmkPUttqktQkWTJ/hhPc9Ka
yIqSj1MLtVY/KyGUogZjBHOa1FJzMndrXEE3XhvbMeTDllYgR/saSXGguTzCqt9q
T5PYwcUuPvBxMNbl+08XE6/hO5yxvTS0TRmjorfbcfpHOfsplhk/qw956ziikzym
GJE8lN7iNlZLLxPH9Xy/tVEkgG7kn66Ef/bKvtrLxI7tU8oz6wBK6zegmwvXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd12Ee9A5GP//H9X4UqU1HlVeqDUwHwYDVR0j
BBgwFoAUZO9KiEq55A7WoJrhw/R9fJGTBXIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtLbXBMcjFkWUIyZGFnNTR4a1VNcjNueHZDZ3pSNVJETkNDVWp3QVdW
b3gvMC82NEVGNEE4ODRBQjlFNDBFRDZBMDlBRTFDM0Y0N0Q3QzkxOTMwNTcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY0RUY0QTg4NEFCOUU0MEVE
NkEwOUFFMUMzRjQ3RDdDOTE5MzA1NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrS21wTHIxZFlCMmRhZzU0eGtVTXIzbnh2Q2d6UjVSRE5DQ1Vqd0FXVm94LzAv
MzEzNjM4MmUzMTM5MzcyZTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoxTgwDQYJKoZIhvcNAQELBQADggEBAAcjpMjf
++jj38OE7JqO7pt6GIYy4245+vmP+QGkLder1E7IhVRO64SaS12qQUWkw2a8C+xl
v8aNCsbzb5B7UDr/sqAOZXagMQDwUWUleE0itpCn/QkGpvjssQn32GoWKy8HUDAc
i+ZdES+D9dgySVBaayZ5HwWe5WWmtqaBM9YzHoZHK0MdcctZVIehvWCfGx7/aPek
IvtKClnKpO+6AwAwGqqcuCvHHG0CmtRyRbfIKBfixyGtGRf7o36x+1JFIuVznMfI
UCBukpzaLnFN1MkxstFJyBtMBW2j9ZrbfHkDUISoPJdaNqGwZhV3q/z9kHmd1D6A
bV8uzyNqJPiyeZA=
-----END CERTIFICATE-----
Generated at Tue Aug 25 07:48:18 2026 by rpki-client