Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          bVkFdvkgJ7fJ+Xeet3EkOYNIEcCx0wEIBTctiZAZs5I=
Subject key identifier:   79:88:6E:C2:59:8B:16:99:7D:F6:29:36:E4:00:6A:E8:9C:D5:DD:24
Certificate issuer:       /CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
Certificate serial:       6120DD8D00A30CB35F36EF96DFF0E96BF30E99FF
Authority key identifier: 92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
Signing time:             Mon 30 Mar 2026 18:18:44 +0000
ROA not before:           Mon 30 Mar 2026 18:13:44 +0000
ROA not after:            Mon 29 Mar 2027 18:18:44 +0000
asID:                     265468
IP address blocks:        168.196.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:dd:8d:00:a3:0c:b3:5f:36:ef:96:df:f0:e9:6b:f3:0e:99:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
        Validity
            Not Before: Mar 30 18:13:44 2026 GMT
            Not After : Mar 29 18:18:44 2027 GMT
        Subject: CN=79886EC2598B16997DF62936E4006AE89CD5DD24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:08:49:0e:e1:3a:bd:60:36:e5:c7:4a:14:79:
                    1d:3a:d3:8d:a2:ac:3e:e6:24:b1:09:d7:44:e3:35:
                    1a:10:4a:5f:26:59:60:5a:f3:69:a0:e1:bd:78:52:
                    22:3b:fc:d3:8f:f2:75:2a:b8:0f:49:23:d4:20:d6:
                    37:63:81:1f:43:b7:4c:81:8e:9e:71:9d:54:a1:ff:
                    55:e2:02:36:9f:14:b9:7e:fb:9d:45:2d:04:f4:b2:
                    85:b3:8c:dc:37:13:8a:84:43:8a:57:ce:54:0a:c5:
                    67:67:59:d4:a2:3e:38:83:ff:6c:35:52:43:a8:22:
                    c6:ef:8a:7c:b6:96:cb:59:87:eb:13:9b:dd:a3:f5:
                    11:52:bf:d1:a3:35:0a:3f:46:04:23:47:5b:d9:08:
                    96:22:61:b9:92:0c:e4:59:e3:27:21:be:7a:81:fe:
                    07:70:6e:ed:a1:95:0f:c5:b2:47:78:d1:36:be:d2:
                    67:33:cd:59:5e:5f:e2:02:58:31:fa:07:7a:9d:05:
                    64:78:cd:e8:c2:32:65:6e:03:22:50:6a:31:97:0b:
                    a0:f2:0e:3c:1e:8a:d4:f0:27:b3:f5:16:82:c9:0b:
                    25:b1:38:5f:ff:ee:6c:f3:fc:87:2a:3d:15:3d:b2:
                    9b:02:1b:20:ca:26:f7:b4:57:8e:74:c6:d2:83:81:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:88:6E:C2:59:8B:16:99:7D:F6:29:36:E4:00:6A:E8:9C:D5:DD:24
            X509v3 Authority Key Identifier:
                keyid:92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e7:4b:42:41:f2:fb:a4:6e:6b:c3:33:c8:ba:48:92:4a:49:9b:
         d4:4f:ab:b9:7d:71:0b:66:ed:1b:f2:da:d4:1c:3c:85:9f:8d:
         c7:30:83:c6:7f:71:dc:15:cc:a9:33:cf:97:3a:29:1f:83:69:
         75:3f:98:d5:1e:ee:73:0e:b2:80:20:c8:10:60:04:9a:45:10:
         dc:21:bf:75:80:a7:f0:ce:2e:22:4b:6f:d9:08:da:9a:97:f6:
         33:d7:a8:37:17:1b:5c:13:d3:af:43:f6:c7:c0:83:52:d8:e8:
         e4:0e:59:a3:26:94:e9:ab:49:83:8c:1e:84:92:da:5e:c8:c9:
         d4:79:5f:83:f3:54:af:bc:32:c3:b2:da:d0:4c:cb:bd:d9:45:
         29:ce:94:b5:38:66:8c:bb:99:e1:0c:b3:c5:ba:e0:85:bc:99:
         28:ff:79:db:57:ab:db:af:02:b4:46:8d:74:0f:0c:89:7d:32:
         6b:8b:c6:1a:d2:8b:aa:d6:a0:dc:46:f0:b1:e6:8f:da:32:32:
         71:93:07:58:d7:61:e9:bf:d8:66:ed:f7:a5:e7:e2:5f:c5:81:
         44:f5:71:1e:69:a9:55:86:29:35:1d:9d:d0:bc:2b:10:63:b7:
         69:83:05:1b:a5:14:ec:2b:b3:48:71:a8:1a:2a:73:58:e9:01:
         a7:ab:e1:cd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYSDdjQCjDLNfNu+W3/Dpa/MOmf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI3MTFDNjhBRDM2QTEwNDEwREYyMTlDRjY3QzdGRDFD
ODAwOEM4NTAeFw0yNjAzMzAxODEzNDRaFw0yNzAzMjkxODE4NDRaMDMxMTAvBgNV
BAMTKDc5ODg2RUMyNTk4QjE2OTk3REY2MjkzNkU0MDA2QUU4OUNENUREMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCEkO4Tq9YDblx0oUeR06042i
rD7mJLEJ10TjNRoQSl8mWWBa82mg4b14UiI7/NOP8nUquA9JI9Qg1jdjgR9Dt0yB
jp5xnVSh/1XiAjafFLl++51FLQT0soWzjNw3E4qEQ4pXzlQKxWdnWdSiPjiD/2w1
UkOoIsbviny2lstZh+sTm92j9RFSv9GjNQo/RgQjR1vZCJYiYbmSDORZ4ychvnqB
/gdwbu2hlQ/Fskd40Ta+0mczzVleX+ICWDH6B3qdBWR4zejCMmVuAyJQajGXC6Dy
DjweitTwJ7P1FoLJCyWxOF//7mzz/IcqPRU9spsCGyDKJve0V450xtKDgT9VAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUeYhuwlmLFpl99ik25ABq6JzV3SQwHwYDVR0j
BBgwFoAUknEcaK02oQQQ3yGc9nx/0cgAjIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdN
V0IvMC85MjcxMUM2OEFEMzZBMTA0MTBERjIxOUNGNjdDN0ZEMUM4MDA4Qzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyNzExQzY4QUQzNkExMDQx
MERGMjE5Q0Y2N0M3RkQxQzgwMDhDODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRWVNlb3pxc3BpdW5Dazk0eUpzS05ocFIzYm8xUTVRcGpGVDZ5cXM3TVdCLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEpDANBgkqhkiG9w0BAQsFAAOCAQEA50tC
QfL7pG5rwzPIukiSSkmb1E+ruX1xC2btG/La1Bw8hZ+NxzCDxn9x3BXMqTPPlzop
H4NpdT+Y1R7ucw6ygCDIEGAEmkUQ3CG/dYCn8M4uIktv2Qjampf2M9eoNxcbXBPT
r0P2x8CDUtjo5A5ZoyaU6atJg4wehJLaXsjJ1Hlfg/NUr7wyw7La0EzLvdlFKc6U
tThmjLuZ4QyzxbrghbyZKP9521er268CtEaNdA8MiX0ya4vGGtKLqtag3EbwseaP
2jIycZMHWNdh6b/YZu33pefiX8WBRPVxHmmpVYYpNR2d0LwrEGO3aYMFG6UU7Cuz
SHGoGipzWOkBp6vhzQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:52:29 2026 by rpki-client