Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa
File:                     3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa (raw, json)
Hash identifier:          HGtFtF+kPvWSrx2rB2mM7a1gC5KPgd9rQ5s2yjq+nGg=
Subject key identifier:   D8:78:89:D3:7B:BB:F6:F6:96:71:E4:10:70:56:F7:FD:76:26:80:D3
Certificate issuer:       /CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
Certificate serial:       3E164EA815D7098A37971574D025146C9FE21EA8
Authority key identifier: 2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa
Signing time:             Thu 20 Aug 2026 19:05:15 +0000
ROA not before:           Thu 20 Aug 2026 19:00:15 +0000
ROA not after:            Thu 19 Aug 2027 19:05:15 +0000
asID:                     264948
IP address blocks:        168.232.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl
                          rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 14:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:16:4e:a8:15:d7:09:8a:37:97:15:74:d0:25:14:6c:9f:e2:1e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F9F8427BB2212C28E037F5F38698A3912DB7D20
        Validity
            Not Before: Aug 20 19:00:15 2026 GMT
            Not After : Aug 19 19:05:15 2027 GMT
        Subject: CN=D87889D37BBBF6F69671E4107056F7FD762680D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c4:fe:38:31:83:db:ba:46:76:80:2a:a3:d6:
                    1a:00:e8:26:6c:bb:f4:8e:09:de:49:b6:66:29:bf:
                    dc:c2:c7:12:7b:56:4f:8f:0a:9b:68:78:78:fa:b0:
                    63:c1:de:59:c6:c0:27:4f:47:ec:ae:2c:8a:f8:57:
                    00:8f:56:a9:17:e7:7c:cf:d2:85:14:ff:23:1d:87:
                    a1:43:a0:be:f6:35:8a:9e:49:83:9f:4b:c0:55:5d:
                    0c:6d:d8:36:f2:16:03:9f:e7:b8:21:d7:41:c4:c9:
                    50:ab:2d:5f:e0:44:db:61:ff:ea:73:96:5b:da:16:
                    e4:85:f5:14:46:87:5c:58:0c:22:fc:23:63:86:b7:
                    5a:ce:30:7f:8c:7b:d4:c2:fc:3a:57:57:99:10:a2:
                    44:3a:76:6b:87:3c:b8:f3:64:30:e5:e2:e1:50:ab:
                    6e:ad:22:e5:0d:5d:f3:29:4e:23:d3:5d:3f:97:0d:
                    11:99:7d:e5:14:ce:38:be:92:2e:39:53:19:7b:c8:
                    18:5a:5c:55:dc:10:e3:25:25:a7:4d:bf:a9:51:84:
                    55:10:e0:40:f5:15:7c:a5:58:0a:0b:88:d1:ed:15:
                    6a:25:7b:4e:83:4c:e3:2f:4f:c7:05:c2:be:05:af:
                    cf:c5:a5:9d:3f:f9:e5:ad:ee:a8:95:78:a3:99:89:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:78:89:D3:7B:BB:F6:F6:96:71:E4:10:70:56:F7:FD:76:26:80:D3
            X509v3 Authority Key Identifier:
                keyid:2F:9F:84:27:BB:22:12:C2:8E:03:7F:5F:38:69:8A:39:12:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/2F9F8427BB2212C28E037F5F38698A3912DB7D20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F9F8427BB2212C28E037F5F38698A3912DB7D20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ABenM6BHaU2mxnjxwaHapbNMfRaYrNKuMjDtRivn4jcX/0/3136382e3233322e3139382e302f32332d3233203d3e20323634393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:a1:da:5e:81:1e:21:56:29:52:e6:fd:22:f2:52:5c:4b:
         25:0e:6f:e1:87:61:1b:a7:ab:d3:36:7f:e3:45:c3:f7:34:4f:
         43:d3:a2:e3:25:bd:64:54:be:0f:1f:81:3a:b6:6c:0b:2d:bd:
         27:9b:83:8a:ce:b3:c9:8d:ac:85:f5:41:91:eb:f2:e5:a0:54:
         9a:5c:bd:a6:94:6b:2e:d6:f5:b9:df:55:a0:57:5c:b5:3e:b4:
         0c:d3:3d:9e:bc:ba:27:2e:2c:39:04:30:51:d4:3b:ec:d5:b3:
         fd:17:88:7a:c3:67:d4:45:6d:71:fb:0d:a4:96:11:0a:3b:cf:
         59:5d:a5:4b:8e:05:6b:5c:52:36:1b:e4:2f:f5:e1:71:8f:c8:
         b4:53:55:9c:72:b4:76:50:64:b7:63:ed:7a:2f:14:64:66:d8:
         b9:41:4a:9d:ee:72:bf:ef:43:66:87:d2:03:5d:d0:3f:94:bc:
         91:0e:d5:da:18:9e:00:1a:24:c0:bb:89:18:59:35:ff:5b:99:
         f2:96:64:1e:ae:ad:21:42:b6:08:1b:ea:7d:a3:3b:0c:3a:03:
         f5:22:83:9f:e0:7e:61:f9:5d:af:55:b6:8c:19:c4:95:24:f3:
         0b:29:fb:e3:39:52:08:48:8f:57:bf:ee:36:38:2e:c1:cd:56:
         81:78:92:61
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPhZOqBXXCYo3lxV00CUUbJ/iHqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY5Rjg0MjdCQjIyMTJDMjhFMDM3RjVGMzg2OThBMzkx
MkRCN0QyMDAeFw0yNjA4MjAxOTAwMTVaFw0yNzA4MTkxOTA1MTVaMDMxMTAvBgNV
BAMTKEQ4Nzg4OUQzN0JCQkY2RjY5NjcxRTQxMDcwNTZGN0ZENzYyNjgwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWxP44MYPbukZ2gCqj1hoA6CZs
u/SOCd5JtmYpv9zCxxJ7Vk+PCptoeHj6sGPB3lnGwCdPR+yuLIr4VwCPVqkX53zP
0oUU/yMdh6FDoL72NYqeSYOfS8BVXQxt2DbyFgOf57gh10HEyVCrLV/gRNth/+pz
llvaFuSF9RRGh1xYDCL8I2OGt1rOMH+Me9TC/DpXV5kQokQ6dmuHPLjzZDDl4uFQ
q26tIuUNXfMpTiPTXT+XDRGZfeUUzji+ki45Uxl7yBhaXFXcEOMlJadNv6lRhFUQ
4ED1FXylWAoLiNHtFWole06DTOMvT8cFwr4Fr8/FpZ0/+eWt7qiVeKOZicVHAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2HiJ03u79vaWceQQcFb3/XYmgNMwHwYDVR0j
BBgwFoAUL5+EJ7siEsKOA39fOGmKORLbfSAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUJlbk02QkhhVTJteG5qeHdhSGFwYk5NZlJhWXJOS3VNakR0Uml2bjRq
Y1gvMC8yRjlGODQyN0JCMjIxMkMyOEUwMzdGNUYzODY5OEEzOTEyREI3RDIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGOUY4NDI3QkIyMjEyQzI4
RTAzN0Y1RjM4Njk4QTM5MTJEQjdEMjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FCZW5NNkJIYVUybXhuanh3YUhhcGJOTWZSYVlyTkt1TWpEdFJpdm40amNYLzAv
MzEzNjM4MmUzMjMzMzIyZTMxMzkzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAajoxjANBgkqhkiG9w0BAQsFAAOCAQEAp92h
2l6BHiFWKVLm/SLyUlxLJQ5v4YdhG6er0zZ/40XD9zRPQ9Oi4yW9ZFS+Dx+BOrZs
Cy29J5uDis6zyY2shfVBkevy5aBUmly9ppRrLtb1ud9VoFdctT60DNM9nry6Jy4s
OQQwUdQ77NWz/ReIesNn1EVtcfsNpJYRCjvPWV2lS44Fa1xSNhvkL/XhcY/ItFNV
nHK0dlBkt2Ptei8UZGbYuUFKne5yv+9DZofSA13QP5S8kQ7V2hieABokwLuJGFk1
/1uZ8pZkHq6tIUK2CBvqfaM7DDoD9SKDn+B+Yfldr1W2jBnElSTzCyn74zlSCEiP
V7/uNjguwc1WgXiSYQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 02:24:48 2026 by rpki-client