Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa
File:                     3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa (raw, json)
Hash identifier:          DHu3zqPQTAUNWi6foiNmtmb0kq7cXLHvW2mpLys4nLs=
Subject key identifier:   A5:50:3B:30:0C:1D:16:12:8E:87:FF:B0:FD:15:3C:4E:DE:46:7C:20
Certificate issuer:       /CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
Certificate serial:       2F9E0EB27E071B630E6C1137C643E86B0B24ED2E
Authority key identifier: 5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa
Signing time:             Mon 17 Aug 2026 21:06:59 +0000
ROA not before:           Mon 17 Aug 2026 21:01:59 +0000
ROA not after:            Mon 16 Aug 2027 21:06:59 +0000
asID:                     265467
IP address blocks:        168.196.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl
                          rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 19:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9e:0e:b2:7e:07:1b:63:0e:6c:11:37:c6:43:e8:6b:0b:24:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF3A6CA02D193DDAF65AB631967B12ACCCD8517
        Validity
            Not Before: Aug 17 21:01:59 2026 GMT
            Not After : Aug 16 21:06:59 2027 GMT
        Subject: CN=A5503B300C1D16128E87FFB0FD153C4EDE467C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:15:ec:8a:a3:b4:af:19:e8:ae:6a:e5:42:
                    82:d1:9c:e6:4c:42:0e:55:0d:37:b0:49:62:f0:3d:
                    62:c1:ce:64:ec:ed:53:63:65:a7:d8:11:ca:83:a3:
                    ad:78:71:9a:18:b5:e5:90:4b:c7:f3:28:3d:7f:67:
                    79:18:41:14:9e:4b:40:40:f8:9e:63:5b:0b:54:a9:
                    6b:e0:45:7b:ec:96:98:a6:0d:b9:6a:10:4d:7f:15:
                    2c:8c:d9:2d:67:2c:11:65:f1:97:b2:c8:f0:6b:47:
                    d4:ad:5e:d5:aa:05:02:83:3e:c4:d7:1b:a9:b3:70:
                    92:7f:3d:37:c8:d6:ad:1a:96:47:0f:cb:2e:ea:d8:
                    d6:80:f6:33:e9:0d:47:a2:26:a8:e2:f3:61:e8:20:
                    5c:d7:1c:82:b3:68:4e:df:89:92:3c:b5:b2:40:db:
                    59:21:05:57:ca:84:52:90:a7:61:ab:c1:5c:52:b3:
                    ab:ea:08:6a:43:4e:70:fe:0f:d3:d7:80:26:e1:50:
                    58:4e:9c:d8:39:ef:05:73:29:ea:ef:6b:74:fe:45:
                    a1:77:0f:fb:e2:bc:9a:4b:cf:8e:1e:60:ee:97:aa:
                    b6:2e:2f:44:38:14:da:34:07:4c:1a:16:4f:36:48:
                    e1:27:7e:af:0a:fd:4f:c7:a7:5d:da:cc:c0:fa:d9:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:50:3B:30:0C:1D:16:12:8E:87:FF:B0:FD:15:3C:4E:DE:46:7C:20
            X509v3 Authority Key Identifier:
                keyid:5D:F3:A6:CA:02:D1:93:DD:AF:65:AB:63:19:67:B1:2A:CC:CD:85:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5DF3A6CA02D193DDAF65AB631967B12ACCCD8517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzffoVtC7hUWU4661nFfaa4AdgPEgmKRNE96y1oZHSLe/0/3136382e3139362e3233342e302f32332d3234203d3e20323635343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:c2:83:8b:8d:9f:da:d5:33:90:a6:93:ea:a4:4d:79:8f:
         bc:b0:86:4c:b8:a7:ae:79:1c:ad:7d:2f:c4:32:45:1f:00:e3:
         93:3d:60:2b:da:58:4b:9c:35:08:29:a5:98:78:cd:b8:7f:92:
         6d:f3:01:33:51:cd:e1:97:25:0b:b4:5f:42:42:36:c5:94:3c:
         48:1a:aa:5e:24:ec:0a:6a:9c:a6:24:7a:36:95:27:03:b7:71:
         a1:b6:2f:fb:b4:74:a4:b1:26:5f:d0:c4:6a:a4:7a:b9:56:d9:
         94:cb:71:64:e4:05:01:90:3e:90:c4:91:c8:d8:c0:eb:bd:e7:
         03:66:4b:73:96:1f:0b:ee:4f:11:09:48:38:b8:ab:cc:82:ff:
         30:37:22:29:bc:fa:f6:64:cc:c0:37:21:f0:15:2d:2e:ff:b9:
         49:a5:fb:c3:a3:ba:28:47:87:26:18:f5:3c:8a:f9:94:60:ab:
         d7:45:dd:a4:19:d1:f3:5d:92:cc:0c:23:0a:cc:ad:f9:70:c6:
         44:4b:1f:c0:ce:72:b7:b6:fd:20:1c:8e:f0:45:a1:89:94:da:
         3d:b9:5d:d0:0b:2f:fb:a4:74:b4:93:98:21:bb:5e:d8:21:e6:
         51:ad:32:b3:8b:45:ec:98:f8:c2:b9:61:70:77:71:42:b1:47:
         98:c7:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:58:13 2026 by rpki-client