Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136362e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          U01ShkCxCUFe73NXKxXI86y3sosF3cETJYX/D+yp5X0=
Subject key identifier:   5D:7C:52:9F:2D:84:D8:67:4A:B9:00:9A:E8:75:86:71:C4:52:78:8F
Certificate issuer:       /CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
Certificate serial:       1A7CBA0A5FAADF936488A7E4428E540C94ED2606
Authority key identifier: 92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32342d3234203d3e20323635343638.roa
Signing time:             Mon 30 Mar 2026 18:18:45 +0000
ROA not before:           Mon 30 Mar 2026 18:13:45 +0000
ROA not after:            Mon 29 Mar 2027 18:18:45 +0000
asID:                     265468
IP address blocks:        168.196.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:ba:0a:5f:aa:df:93:64:88:a7:e4:42:8e:54:0c:94:ed:26:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92711C68AD36A10410DF219CF67C7FD1C8008C85
        Validity
            Not Before: Mar 30 18:13:45 2026 GMT
            Not After : Mar 29 18:18:45 2027 GMT
        Subject: CN=5D7C529F2D84D8674AB9009AE8758671C452788F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:71:dd:04:fd:67:87:c1:15:0a:b9:1f:09:
                    ca:2d:7f:bf:1b:22:de:f7:af:98:8e:6a:03:43:66:
                    35:b0:5c:32:b7:cc:c4:29:c1:ce:55:9b:e7:55:86:
                    a9:af:d0:a1:5c:f6:9d:96:01:a4:ea:dd:3b:e1:f8:
                    aa:b2:7d:71:7c:33:8b:42:84:ca:d9:76:19:55:ed:
                    6a:e2:1b:09:4b:18:1a:ff:e6:eb:54:5f:51:8c:02:
                    b2:a8:91:7a:18:b1:f2:e6:72:e3:72:98:bf:a5:7a:
                    27:ff:6b:5a:4e:e9:45:8b:1d:d8:f6:c0:31:62:bd:
                    73:0d:12:25:7e:c5:49:aa:07:f8:9b:10:49:a2:9c:
                    8b:c5:23:b1:2a:02:3b:56:06:6a:63:ed:8d:d7:75:
                    67:93:86:b5:60:dd:bc:89:25:23:be:6c:ef:2c:f1:
                    9f:97:5d:6b:4a:0a:95:a2:8d:5a:33:9d:32:ae:68:
                    24:0e:d9:a3:a3:56:d8:ba:b6:fb:39:ec:c9:fe:ae:
                    fb:36:67:b3:64:13:8e:46:64:d9:30:e6:ea:61:f8:
                    79:5b:ad:2e:44:3a:c7:bc:b2:60:07:d7:f9:64:d3:
                    0d:7b:31:39:32:b2:f8:33:97:1a:2b:eb:0e:82:92:
                    fd:63:6d:42:c9:c9:76:43:c4:9e:3c:39:10:79:77:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7C:52:9F:2D:84:D8:67:4A:B9:00:9A:E8:75:86:71:C4:52:78:8F
            X509v3 Authority Key Identifier:
                keyid:92:71:1C:68:AD:36:A1:04:10:DF:21:9C:F6:7C:7F:D1:C8:00:8C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/92711C68AD36A10410DF219CF67C7FD1C8008C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92711C68AD36A10410DF219CF67C7FD1C8008C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136362e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:5a:ff:3a:01:c4:a2:e6:72:34:4b:e2:c9:8d:1f:90:a0:
         f0:76:53:bd:54:4e:aa:94:3d:28:50:d4:02:fb:4e:94:59:22:
         5f:ab:e0:a7:19:fa:1f:b1:9d:f0:91:9f:52:d8:6c:6e:f7:1b:
         58:ed:5f:62:e7:aa:5b:a0:79:05:5d:8a:34:8e:db:ca:31:7a:
         3b:6e:c0:9f:42:b1:d7:e8:1b:1e:30:f0:0a:a3:8f:82:e5:eb:
         fd:1b:d6:c5:df:c5:b5:3a:74:64:9d:08:ab:ce:d5:fa:ae:16:
         d7:cc:12:c6:ec:7c:29:22:52:55:d3:07:3a:74:ed:a6:4c:c6:
         76:c9:d7:f4:c0:bb:b4:3e:b9:33:f1:31:ac:17:af:37:84:d1:
         7e:d1:dd:35:f9:9b:4b:1c:ed:0e:44:4d:b5:9c:98:23:c3:a1:
         84:c8:b3:05:85:bb:20:ec:f0:77:ee:62:f1:19:13:0b:4d:d2:
         9f:f3:a8:a4:68:5a:c4:7e:3a:b0:64:80:11:fe:9d:5f:86:ed:
         37:eb:b4:05:1f:7c:94:3a:14:ae:a3:a9:b9:0c:1c:ad:90:63:
         71:17:11:02:16:fc:e3:e4:b9:e7:1b:e6:a5:6c:38:da:e0:97:
         34:c2:0d:fc:59:d9:9b:a5:78:d4:e9:43:b4:49:36:c9:47:51:
         e4:54:01:d0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGny6Cl+q35NkiKfkQo5UDJTtJgYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI3MTFDNjhBRDM2QTEwNDEwREYyMTlDRjY3QzdGRDFD
ODAwOEM4NTAeFw0yNjAzMzAxODEzNDVaFw0yNzAzMjkxODE4NDVaMDMxMTAvBgNV
BAMTKDVEN0M1MjlGMkQ4NEQ4Njc0QUI5MDA5QUU4NzU4NjcxQzQ1Mjc4OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk3HdBP1nh8EVCrkfCcotf78b
It73r5iOagNDZjWwXDK3zMQpwc5Vm+dVhqmv0KFc9p2WAaTq3Tvh+KqyfXF8M4tC
hMrZdhlV7WriGwlLGBr/5utUX1GMArKokXoYsfLmcuNymL+leif/a1pO6UWLHdj2
wDFivXMNEiV+xUmqB/ibEEminIvFI7EqAjtWBmpj7Y3XdWeThrVg3byJJSO+bO8s
8Z+XXWtKCpWijVoznTKuaCQO2aOjVti6tvs57Mn+rvs2Z7NkE45GZNkw5uph+Hlb
rS5EOse8smAH1/lk0w17MTkysvgzlxor6w6Ckv1jbULJyXZDxJ48ORB5d5hNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXXxSny2E2GdKuQCa6HWGccRSeI8wHwYDVR0j
BBgwFoAUknEcaK02oQQQ3yGc9nx/0cgAjIUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdN
V0IvMC85MjcxMUM2OEFEMzZBMTA0MTBERjIxOUNGNjdDN0ZEMUM4MDA4Qzg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkyNzExQzY4QUQzNkExMDQx
MERGMjE5Q0Y2N0M3RkQxQzgwMDhDODUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRWVNlb3pxc3BpdW5Dazk0eUpzS05ocFIzYm8xUTVRcGpGVDZ5cXM3TVdCLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEpjANBgkqhkiG9w0BAQsFAAOCAQEAbWpa
/zoBxKLmcjRL4smNH5Cg8HZTvVROqpQ9KFDUAvtOlFkiX6vgpxn6H7Gd8JGfUths
bvcbWO1fYueqW6B5BV2KNI7byjF6O27An0Kx1+gbHjDwCqOPguXr/RvWxd/FtTp0
ZJ0Iq87V+q4W18wSxux8KSJSVdMHOnTtpkzGdsnX9MC7tD65M/ExrBevN4TRftHd
NfmbSxztDkRNtZyYI8OhhMizBYW7IOzwd+5i8RkTC03Sn/OopGhaxH46sGSAEf6d
X4btN+u0BR98lDoUrqOpuQwcrZBjcRcRAhb84+S55xvmpWw42uCXNMIN/FnZm6V4
1OlDtEk2yUdR5FQB0A==
-----END CERTIFICATE-----
Generated at Thu Apr 9 16:51:01 2026 by rpki-client