Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/3136382e3232372e3231322e302f32342d3234203d3e20323634383838.roa
File:                     3136382e3232372e3231322e302f32342d3234203d3e20323634383838.roa (raw, json)
Hash identifier:          Xdtts/UnzTulGNdl0Y9N0EJC7i5q6QPeOkG6eJBBKxU=
Subject key identifier:   F8:CB:5E:21:10:4A:03:22:A6:67:84:CE:A0:57:8C:54:C6:74:32:2D
Certificate issuer:       /CN=15CA170FA06D73234B28EE8B5314960D3B7185E4
Certificate serial:       026875369C2586A91A9018DF7A5F11685F71237A
Authority key identifier: 15:CA:17:0F:A0:6D:73:23:4B:28:EE:8B:53:14:96:0D:3B:71:85:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15CA170FA06D73234B28EE8B5314960D3B7185E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/3136382e3232372e3231322e302f32342d3234203d3e20323634383838.roa
Signing time:             Wed 23 Sep 2026 01:15:15 +0000
ROA not before:           Wed 23 Sep 2026 01:10:15 +0000
ROA not after:            Wed 22 Sep 2027 01:15:15 +0000
asID:                     264888
IP address blocks:        168.227.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/15CA170FA06D73234B28EE8B5314960D3B7185E4.crl
                          rsync://rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/15CA170FA06D73234B28EE8B5314960D3B7185E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15CA170FA06D73234B28EE8B5314960D3B7185E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 00:46:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:68:75:36:9c:25:86:a9:1a:90:18:df:7a:5f:11:68:5f:71:23:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15CA170FA06D73234B28EE8B5314960D3B7185E4
        Validity
            Not Before: Sep 23 01:10:15 2026 GMT
            Not After : Sep 22 01:15:15 2027 GMT
        Subject: CN=F8CB5E21104A0322A66784CEA0578C54C674322D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:10:4a:ab:1b:04:7f:c3:71:48:25:34:1f:
                    27:ae:e3:9e:be:e5:14:5e:e4:9d:f0:8c:e3:57:8e:
                    02:d1:d3:88:d1:f0:c0:bf:a6:eb:37:58:65:7a:13:
                    2f:2d:24:0c:38:da:93:f0:c5:ea:43:3c:7f:9e:4b:
                    6f:9d:d0:fc:82:99:da:98:a1:8b:80:7e:8e:df:e5:
                    f9:34:4c:8f:80:a0:34:72:42:9a:67:09:21:45:2f:
                    b0:01:f7:e7:15:01:e9:7b:42:fb:c5:ec:9e:9a:a5:
                    2b:37:57:91:f5:86:44:78:b3:bb:af:6b:3a:5b:54:
                    ea:9a:13:35:a1:2d:16:b7:11:ad:23:03:dd:ac:92:
                    3f:ed:8c:d3:e2:f5:de:0d:ea:37:d8:31:b8:93:6e:
                    56:1a:bd:52:7b:79:d8:48:25:3d:2e:21:91:70:34:
                    b6:1c:a9:36:8b:cc:b0:24:d2:37:6c:1a:1c:4f:cf:
                    e2:f2:3c:9d:1c:74:21:c7:e3:a6:21:35:2a:33:0a:
                    12:cb:62:51:01:6d:a7:d3:da:9a:ef:f9:df:ad:c7:
                    9e:b6:d2:bc:f4:7f:d0:40:6a:12:63:fb:82:78:fc:
                    8d:a1:01:b5:63:bd:dc:02:84:02:81:dc:04:e2:b2:
                    cf:e4:b0:f1:86:29:e5:de:88:d5:10:33:c7:98:52:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CB:5E:21:10:4A:03:22:A6:67:84:CE:A0:57:8C:54:C6:74:32:2D
            X509v3 Authority Key Identifier:
                keyid:15:CA:17:0F:A0:6D:73:23:4B:28:EE:8B:53:14:96:0D:3B:71:85:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/15CA170FA06D73234B28EE8B5314960D3B7185E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15CA170FA06D73234B28EE8B5314960D3B7185E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2TrPiEP4Bpmmw82C1bxE6XsAW9uFtJBHrVmKWLhz6Ea/0/3136382e3232372e3231322e302f32342d3234203d3e20323634383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:aa:fd:da:5a:61:a3:50:1f:f7:a4:3b:42:02:07:68:b7:6a:
         46:e6:32:7c:f4:84:d9:b6:8d:7f:95:44:03:5b:d1:4e:3f:ff:
         aa:b9:89:6f:c0:18:59:47:c2:c8:5b:f9:ed:7e:bc:6a:f1:a6:
         49:35:a2:44:a8:a8:0b:22:43:26:f8:17:17:fb:0a:71:a9:ac:
         58:8c:60:32:30:b7:53:d3:65:e5:41:b9:cf:b9:ff:83:5b:52:
         83:0b:a5:ee:96:7d:5d:7d:04:19:f8:68:8e:1f:33:8c:14:05:
         36:15:1a:79:07:a5:04:2d:0c:cf:9e:cf:61:76:6f:c9:4f:04:
         b9:c1:43:ca:43:91:82:0f:a1:66:bf:00:ba:dc:d7:9c:b8:40:
         26:62:85:d7:cc:16:d2:f3:09:6b:82:25:5f:a4:48:f2:9d:a2:
         17:23:82:22:9b:96:39:f9:3c:82:d0:e2:64:f3:9b:b3:4b:eb:
         41:82:1b:90:4b:5f:c0:aa:53:55:ef:13:72:1f:4d:83:6c:e0:
         15:98:c0:4b:f6:21:32:18:1b:6a:72:81:a4:63:ae:fe:98:d6:
         5f:e5:23:7e:db:84:1f:b3:7d:b0:45:48:1d:d9:b1:49:3c:73:
         e0:eb:20:86:b6:b3:af:d7:b5:53:3d:14:3b:0d:53:95:98:9f:
         27:a5:b3:25
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAmh1NpwlhqkakBjfel8RaF9xI3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVDQTE3MEZBMDZENzMyMzRCMjhFRThCNTMxNDk2MEQz
QjcxODVFNDAeFw0yNjA5MjMwMTEwMTVaFw0yNzA5MjIwMTE1MTVaMDMxMTAvBgNV
BAMTKEY4Q0I1RTIxMTA0QTAzMjJBNjY3ODRDRUEwNTc4QzU0QzY3NDMyMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLaRBKqxsEf8NxSCU0Hyeu456+
5RRe5J3wjONXjgLR04jR8MC/pus3WGV6Ey8tJAw42pPwxepDPH+eS2+d0PyCmdqY
oYuAfo7f5fk0TI+AoDRyQppnCSFFL7AB9+cVAel7QvvF7J6apSs3V5H1hkR4s7uv
azpbVOqaEzWhLRa3Ea0jA92skj/tjNPi9d4N6jfYMbiTblYavVJ7edhIJT0uIZFw
NLYcqTaLzLAk0jdsGhxPz+LyPJ0cdCHH46YhNSozChLLYlEBbafT2prv+d+tx562
0rz0f9BAahJj+4J4/I2hAbVjvdwChAKB3ATiss/ksPGGKeXeiNUQM8eYUuVNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU+MteIRBKAyKmZ4TOoFeMVMZ0Mi0wHwYDVR0j
BBgwFoAUFcoXD6BtcyNLKO6LUxSWDTtxheQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjJUclBpRVA0QnBtbXc4MkMxYnhFNlhzQVc5dUZ0SkJIclZtS1dMaHo2
RWEvMC8xNUNBMTcwRkEwNkQ3MzIzNEIyOEVFOEI1MzE0OTYwRDNCNzE4NUU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE1Q0ExNzBGQTA2RDczMjM0
QjI4RUU4QjUzMTQ5NjBEM0I3MTg1RTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0IyVHJQaUVQNEJwbW13ODJDMWJ4RTZYc0FXOXVGdEpCSHJWbUtXTGh6NkVhLzAv
MzEzNjM4MmUzMjMyMzcyZTMyMzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjj1DANBgkqhkiG9w0BAQsFAAOCAQEAY6r9
2lpho1Af96Q7QgIHaLdqRuYyfPSE2baNf5VEA1vRTj//qrmJb8AYWUfCyFv57X68
avGmSTWiRKioCyJDJvgXF/sKcamsWIxgMjC3U9Nl5UG5z7n/g1tSgwul7pZ9XX0E
Gfhojh8zjBQFNhUaeQelBC0Mz57PYXZvyU8EucFDykORgg+hZr8AutzXnLhAJmKF
18wW0vMJa4IlX6RI8p2iFyOCIpuWOfk8gtDiZPObs0vrQYIbkEtfwKpTVe8Tch9N
g2zgFZjAS/YhMhgbanKBpGOu/pjWX+UjftuEH7N9sEVIHdmxSTxz4Osghrazr9e1
Uz0UOw1TlZifJ6WzJQ==
-----END CERTIFICATE-----
Generated at Wed Oct 14 05:07:07 2026 by rpki-client