Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa (raw, json)
Hash identifier:          uzxwtdqeiHaOKtcZ1+WryFBkaWc5KzYL8tTZZLBRHq8=
Subject key identifier:   AE:0A:D8:04:04:2D:04:85:93:97:A9:7F:20:F5:CA:C3:B1:36:0E:4A
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       14E689571AEEB42D9520ADEB62C122B02CF111D2
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa
Signing time:             Thu 20 Aug 2026 19:05:14 +0000
ROA not before:           Thu 20 Aug 2026 19:00:14 +0000
ROA not after:            Thu 19 Aug 2027 19:05:14 +0000
asID:                     264948
IP address blocks:        168.232.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e6:89:57:1a:ee:b4:2d:95:20:ad:eb:62:c1:22:b0:2c:f1:11:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Aug 20 19:00:14 2026 GMT
            Not After : Aug 19 19:05:14 2027 GMT
        Subject: CN=AE0AD804042D04859397A97F20F5CAC3B1360E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bd:77:82:df:a1:1e:58:0b:42:33:d9:ad:5e:
                    2c:81:82:9d:56:15:f3:61:26:f2:8f:bf:1f:e8:f4:
                    2c:e3:0f:10:2c:8a:bc:be:30:ae:42:b7:04:f3:f9:
                    d9:b3:08:95:be:27:44:a7:e7:d7:fd:20:af:db:b1:
                    0e:99:c9:6f:9c:ed:13:db:20:ea:a5:69:20:88:1b:
                    55:39:60:44:4d:cc:dc:50:01:23:0d:1b:95:80:67:
                    85:76:6e:3a:eb:a1:92:53:68:12:76:8d:72:fc:1d:
                    5f:47:b0:aa:b5:1c:f5:bb:90:ec:e6:be:a9:10:8b:
                    65:f5:d8:51:37:be:20:b1:22:7f:0b:16:6b:10:60:
                    93:54:4d:b0:d4:97:91:32:ab:43:64:9b:af:8b:c6:
                    83:b0:8e:29:d2:07:ba:0a:fa:19:e0:77:be:48:7a:
                    45:2f:0e:a9:39:64:db:37:2d:81:ce:d2:ec:77:cb:
                    27:19:6a:97:7f:ce:c1:96:d0:bb:32:85:d7:07:47:
                    e2:81:81:9d:b2:75:37:07:f0:7f:95:db:4b:30:40:
                    d3:51:16:c1:aa:c2:cb:c8:71:1c:f7:d4:dc:df:44:
                    02:3c:ea:25:37:a5:a8:2b:1d:a0:bf:d1:fd:4f:e0:
                    eb:72:12:96:ff:9c:71:b5:80:68:3f:b8:b1:04:8f:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0A:D8:04:04:2D:04:85:93:97:A9:7F:20:F5:CA:C3:B1:36:0E:4A
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32332d3233203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:09:75:ec:48:fb:f8:ef:e2:20:37:90:99:9e:26:60:ec:68:
         9e:84:ab:4a:09:b8:4e:13:d9:9d:89:8a:38:51:b0:3b:0a:25:
         1c:91:26:ed:ce:8f:90:c2:e8:a8:8c:e0:7e:69:76:2f:3d:16:
         c4:1c:0e:4a:33:52:c2:a1:52:c5:b1:49:e5:88:81:0b:3d:4e:
         bb:45:1e:cf:19:75:0e:94:28:e5:34:90:7a:96:4b:07:55:f2:
         ff:00:2b:0a:e8:b6:d0:bd:9c:81:19:38:95:1e:3b:1d:59:c8:
         cd:46:e6:d8:24:aa:ec:79:0c:8d:bb:6a:0a:bd:12:e1:43:5d:
         27:5b:e5:91:f5:4a:59:50:7c:16:08:f0:77:bc:89:ee:e4:8b:
         c3:2d:ce:07:e2:27:85:18:13:d2:43:d4:bc:59:ac:8b:9b:36:
         85:10:81:54:f3:db:35:37:8b:e0:b6:28:87:07:04:34:3b:08:
         b5:76:29:1c:74:a9:f8:6e:1f:6e:ad:1a:12:48:78:aa:cb:60:
         f9:02:ed:b0:c8:c1:19:fc:b3:4c:fa:1b:a9:7a:8c:6c:61:62:
         36:94:c0:99:08:25:38:fc:76:20:0e:9b:6c:d2:27:e2:2f:17:
         2a:06:46:5d:c5:89:d7:d3:10:b6:45:fc:7d:a2:d0:0f:01:40:
         cb:73:18:55
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFOaJVxrutC2VIK3rYsEisCzxEdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNjA4MjAxOTAwMTRaFw0yNzA4MTkxOTA1MTRaMDMxMTAvBgNV
BAMTKEFFMEFEODA0MDQyRDA0ODU5Mzk3QTk3RjIwRjVDQUMzQjEzNjBFNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vXeC36EeWAtCM9mtXiyBgp1W
FfNhJvKPvx/o9CzjDxAsiry+MK5CtwTz+dmzCJW+J0Sn59f9IK/bsQ6ZyW+c7RPb
IOqlaSCIG1U5YERNzNxQASMNG5WAZ4V2bjrroZJTaBJ2jXL8HV9HsKq1HPW7kOzm
vqkQi2X12FE3viCxIn8LFmsQYJNUTbDUl5Eyq0Nkm6+LxoOwjinSB7oK+hngd75I
ekUvDqk5ZNs3LYHO0ux3yycZapd/zsGW0LsyhdcHR+KBgZ2ydTcH8H+V20swQNNR
FsGqwsvIcRz31NzfRAI86iU3pagrHaC/0f1P4OtyEpb/nHG1gGg/uLEEj5MlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrgrYBAQtBIWTl6l/IPXKw7E2DkowHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajoxDANBgkqhkiG9w0BAQsFAAOCAQEAOgl1
7Ej7+O/iIDeQmZ4mYOxonoSrSgm4ThPZnYmKOFGwOwolHJEm7c6PkMLoqIzgfml2
Lz0WxBwOSjNSwqFSxbFJ5YiBCz1Ou0Uezxl1DpQo5TSQepZLB1Xy/wArCui20L2c
gRk4lR47HVnIzUbm2CSq7HkMjbtqCr0S4UNdJ1vlkfVKWVB8Fgjwd7yJ7uSLwy3O
B+InhRgT0kPUvFmsi5s2hRCBVPPbNTeL4LYohwcENDsItXYpHHSp+G4fbq0aEkh4
qstg+QLtsMjBGfyzTPobqXqMbGFiNpTAmQglOPx2IA6bbNIn4i8XKgZGXcWJ19MQ
tkX8faLQDwFAy3MYVQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 03:16:43 2026 by rpki-client