Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa
File:                     3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa (raw, json)
Hash identifier:          5GlH6XaAnMJW1tX7C0MnGeSbnYNtiuVJOkkniPV41Qo=
Subject key identifier:   27:D2:A9:AB:0B:BC:48:B1:55:D0:C8:BD:76:3D:2D:23:F9:10:78:DF
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       68EFE573917AB9981F531BD82B64E616041CF001
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa
Signing time:             Thu 18 Sep 2025 18:14:04 +0000
ROA not before:           Thu 18 Sep 2025 18:09:04 +0000
ROA not after:            Thu 17 Sep 2026 18:14:04 +0000
asID:                     264948
IP address blocks:        168.232.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ef:e5:73:91:7a:b9:98:1f:53:1b:d8:2b:64:e6:16:04:1c:f0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Sep 18 18:09:04 2025 GMT
            Not After : Sep 17 18:14:04 2026 GMT
        Subject: CN=27D2A9AB0BBC48B155D0C8BD763D2D23F91078DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:42:33:d6:c2:5f:26:7f:09:21:8a:5f:00:
                    3a:6a:96:f1:6c:0b:bd:1e:97:8c:26:17:fd:c7:09:
                    b5:92:8a:eb:1f:f2:8d:c7:54:5a:88:38:46:35:09:
                    ce:e7:49:62:1e:d6:b6:fd:cc:4e:13:b5:27:34:2a:
                    e9:8a:ed:b3:4e:a8:e3:80:b0:69:d5:a2:1f:fc:3a:
                    65:f2:69:22:c5:95:7d:c0:bd:ed:f2:01:45:8f:47:
                    18:1e:ac:70:31:45:e1:a9:7b:03:39:f9:22:e8:51:
                    19:45:74:8d:80:8c:3b:21:15:a4:d6:72:14:8e:41:
                    e6:88:46:9a:a9:d4:d2:da:a1:2b:23:a7:84:37:56:
                    7c:91:54:70:8b:0c:bb:bb:c8:28:b9:d8:45:da:3c:
                    79:92:cc:c2:23:4a:b8:1e:c8:90:57:66:91:26:46:
                    c5:8a:1c:12:1b:c7:6c:13:cb:2e:80:f4:ae:ba:f7:
                    1d:d1:be:f2:53:1e:da:86:17:c9:d5:e4:70:6c:3f:
                    82:ac:be:06:ce:eb:b6:cb:79:4c:ce:a2:c8:4e:8c:
                    3c:5a:13:f4:5e:ac:97:48:cc:79:d0:bd:d6:3a:4c:
                    f9:a9:ea:7c:80:e3:11:25:eb:db:71:5a:3d:76:da:
                    2f:a2:fe:20:b7:ea:e0:5b:db:70:e3:89:58:d9:d8:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:A9:AB:0B:BC:48:B1:55:D0:C8:BD:76:3D:2D:23:F9:10:78:DF
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139362e302f32342d3234203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:85:d1:e9:ff:51:a2:5e:16:f7:fd:53:ab:f3:5a:a3:6b:
         02:03:e7:1d:e5:d3:49:41:cd:05:a7:dd:c8:89:5f:89:ab:d4:
         e5:8c:9a:6f:a0:69:6d:87:02:8d:f0:42:41:b7:4d:4e:9c:da:
         6c:6e:04:13:0c:01:1f:9a:b9:b5:98:c1:77:5a:08:31:c1:d1:
         f9:7a:bd:cd:de:56:31:05:2d:97:16:73:cc:58:18:34:c1:42:
         bd:d9:26:69:aa:d6:9a:b5:56:07:17:df:d7:d3:6d:16:44:25:
         d1:3a:8b:52:23:5c:e1:05:d1:e4:f4:41:43:67:90:f4:59:14:
         7c:8e:ed:51:a4:6b:fa:83:58:42:0c:9e:9f:1f:1a:4a:bb:5d:
         31:c4:db:04:83:bd:12:55:36:e4:85:57:42:79:46:db:ab:09:
         10:a1:8d:da:ec:e7:4a:29:d7:cc:92:04:7f:c0:ca:30:ea:71:
         88:56:6c:4b:51:0a:18:02:98:bc:48:4f:0a:73:ec:51:09:00:
         9f:bd:75:4d:46:8d:a7:b7:23:37:82:02:a0:0e:a1:de:67:1a:
         96:6a:5e:4a:bb:d2:73:cc:8e:f3:c9:18:60:b1:39:f6:0b:b8:
         8e:9c:41:17:8a:23:dd:df:d7:a5:ce:b3:c8:8a:28:38:0c:42:
         3e:c1:e5:85
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaO/lc5F6uZgfUxvYK2TmFgQc8AEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNTA5MTgxODA5MDRaFw0yNjA5MTcxODE0MDRaMDMxMTAvBgNV
BAMTKDI3RDJBOUFCMEJCQzQ4QjE1NUQwQzhCRDc2M0QyRDIzRjkxMDc4REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jEIz1sJfJn8JIYpfADpqlvFs
C70el4wmF/3HCbWSiusf8o3HVFqIOEY1Cc7nSWIe1rb9zE4TtSc0KumK7bNOqOOA
sGnVoh/8OmXyaSLFlX3Ave3yAUWPRxgerHAxReGpewM5+SLoURlFdI2AjDshFaTW
chSOQeaIRpqp1NLaoSsjp4Q3VnyRVHCLDLu7yCi52EXaPHmSzMIjSrgeyJBXZpEm
RsWKHBIbx2wTyy6A9K669x3RvvJTHtqGF8nV5HBsP4KsvgbO67bLeUzOoshOjDxa
E/RerJdIzHnQvdY6TPmp6nyA4xEl69txWj122i+i/iC36uBb23DjiVjZ2HBXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUJ9Kpqwu8SLFV0Mi9dj0tI/kQeN8wHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjoxDANBgkqhkiG9w0BAQsFAAOCAQEAtlGF
0en/UaJeFvf9U6vzWqNrAgPnHeXTSUHNBafdyIlfiavU5Yyab6BpbYcCjfBCQbdN
TpzabG4EEwwBH5q5tZjBd1oIMcHR+Xq9zd5WMQUtlxZzzFgYNMFCvdkmaarWmrVW
Bxff19NtFkQl0TqLUiNc4QXR5PRBQ2eQ9FkUfI7tUaRr+oNYQgyenx8aSrtdMcTb
BIO9ElU25IVXQnlG26sJEKGN2uznSinXzJIEf8DKMOpxiFZsS1EKGAKYvEhPCnPs
UQkAn711TUaNp7cjN4ICoA6h3mcalmpeSrvSc8yO88kYYLE59gu4jpxBF4oj3d/X
pc6zyIooOAxCPsHlhQ==
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:33:54 2025 by rpki-client