Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
File:                     3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa (raw, json)
Hash identifier:          +7Jjrw9LTrceEbHh8Jj+E2YrvPalObU6+roW77Z/+cs=
Subject key identifier:   5C:2A:BA:BD:78:5D:06:88:C3:C3:14:08:29:99:B6:6B:91:33:4B:E8
Certificate issuer:       /CN=6295613937297D5F10674AC45D3ACAB7545474C7
Certificate serial:       697AB15622C66FCE44BEC275128B6D01E44F622F
Authority key identifier: 62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa
Signing time:             Wed 08 Jul 2026 13:08:51 +0000
ROA not before:           Wed 08 Jul 2026 13:03:51 +0000
ROA not after:            Wed 07 Jul 2027 13:08:51 +0000
asID:                     264891
IP address blocks:        168.227.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl
                          rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 15:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:b1:56:22:c6:6f:ce:44:be:c2:75:12:8b:6d:01:e4:4f:62:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6295613937297D5F10674AC45D3ACAB7545474C7
        Validity
            Not Before: Jul  8 13:03:51 2026 GMT
            Not After : Jul  7 13:08:51 2027 GMT
        Subject: CN=5C2ABABD785D0688C3C314082999B66B91334BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fa:50:60:e3:02:72:7e:3a:e2:07:13:a4:36:
                    ee:c8:a8:e5:8d:f2:ee:e0:db:6d:be:cb:73:f9:c2:
                    fc:af:56:48:b6:5d:12:b2:98:d3:34:c9:73:d3:36:
                    c6:36:1d:05:2f:48:53:70:3b:0d:d1:b6:87:e0:bb:
                    70:fc:11:f5:6b:ca:91:69:5c:a7:3a:87:b1:be:55:
                    a1:b4:9a:22:3c:26:ba:ea:93:90:d6:e8:b1:a8:c5:
                    e8:cb:af:01:11:39:ee:e3:2e:56:10:27:c7:83:bd:
                    ea:f0:5e:eb:71:46:57:4d:c4:e3:d1:57:8a:b0:8a:
                    8f:68:a6:d6:3b:0c:9a:80:7b:c5:11:09:06:9c:da:
                    31:fc:8f:ea:a6:05:7e:8a:56:38:4b:5a:a1:45:1c:
                    33:d1:0f:9b:57:85:6f:08:13:0a:5b:06:8c:92:f5:
                    43:09:f7:29:51:9e:28:8f:b6:df:cd:57:13:72:34:
                    53:b0:1f:70:15:2a:27:29:ca:27:72:b9:c2:39:73:
                    f2:b5:7b:a2:7c:8a:a5:e9:11:ee:a4:3b:54:34:ea:
                    a2:f6:67:f5:23:f1:7a:df:fb:4d:e4:96:75:71:41:
                    26:0e:e8:cb:c4:d4:34:4c:e3:53:3c:e5:dd:9d:d0:
                    8c:6f:66:5a:f5:91:e0:d0:4c:17:dd:e8:1d:83:f3:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2A:BA:BD:78:5D:06:88:C3:C3:14:08:29:99:B6:6B:91:33:4B:E8
            X509v3 Authority Key Identifier:
                keyid:62:95:61:39:37:29:7D:5F:10:67:4A:C4:5D:3A:CA:B7:54:54:74:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/6295613937297D5F10674AC45D3ACAB7545474C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6295613937297D5F10674AC45D3ACAB7545474C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxaaKBkRRPL5ATGrWB1wXGDfTNuBqVCUQZemw8Yqu1M1/0/3136382e3232372e3131352e302f32342d3234203d3e20323634383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:76:d4:6a:24:fb:7d:4e:e4:9f:a1:e3:cd:40:b7:5c:bc:
         60:24:5d:df:48:71:b4:42:61:e8:62:b7:65:06:9f:a3:e7:1f:
         5d:a1:26:5d:f5:72:8f:0f:c9:d4:f3:80:ed:a5:01:3d:97:5d:
         5b:ba:02:94:2e:e4:10:b7:cf:7a:95:c6:b3:7b:13:85:b9:21:
         a1:a1:f4:1e:d4:68:be:de:22:44:41:2d:25:83:87:26:41:cf:
         24:45:e0:39:45:1f:a6:44:79:60:33:ca:01:14:f4:2d:f4:d4:
         98:31:03:51:33:32:9c:65:b5:d0:2d:f9:0a:22:77:b7:4f:33:
         d7:c6:c5:c2:f3:24:dd:df:b8:86:8e:6a:5d:34:f6:20:c0:b3:
         0d:c6:b0:69:e7:5a:f4:ec:87:23:7e:17:a7:4e:87:83:46:d9:
         ad:e1:e3:40:0a:30:21:ab:43:b6:ff:33:06:c2:53:85:14:0e:
         e3:5d:17:b2:0a:2b:ba:7a:88:de:29:ce:19:83:9a:ea:69:52:
         86:08:d9:5d:20:9c:12:83:4f:62:ed:8e:7a:b0:77:38:fb:a0:
         d2:64:10:14:7d:71:09:fb:a9:79:29:18:c4:b5:48:93:bd:c1:
         b8:c5:eb:fb:c2:66:86:e9:39:45:ba:bc:08:b0:4f:dc:1c:6d:
         78:1b:cb:26
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaXqxViLGb85EvsJ1EottAeRPYi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjI5NTYxMzkzNzI5N0Q1RjEwNjc0QUM0NUQzQUNBQjc1
NDU0NzRDNzAeFw0yNjA3MDgxMzAzNTFaFw0yNzA3MDcxMzA4NTFaMDMxMTAvBgNV
BAMTKDVDMkFCQUJENzg1RDA2ODhDM0MzMTQwODI5OTlCNjZCOTEzMzRCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+lBg4wJyfjriBxOkNu7IqOWN
8u7g222+y3P5wvyvVki2XRKymNM0yXPTNsY2HQUvSFNwOw3Rtofgu3D8EfVrypFp
XKc6h7G+VaG0miI8Jrrqk5DW6LGoxejLrwEROe7jLlYQJ8eDverwXutxRldNxOPR
V4qwio9optY7DJqAe8URCQac2jH8j+qmBX6KVjhLWqFFHDPRD5tXhW8IEwpbBoyS
9UMJ9ylRniiPtt/NVxNyNFOwH3AVKicpyidyucI5c/K1e6J8iqXpEe6kO1Q06qL2
Z/Uj8Xrf+03klnVxQSYO6MvE1DRM41M85d2d0IxvZlr1keDQTBfd6B2D86bLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUXCq6vXhdBojDwxQIKZm2a5EzS+gwHwYDVR0j
BBgwFoAUYpVhOTcpfV8QZ0rEXTrKt1RUdMcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnhhYUtCa1JSUEw1QVRHcldCMXdYR0RmVE51QnFWQ1VRWmVtdzhZcXUx
TTEvMC82Mjk1NjEzOTM3Mjk3RDVGMTA2NzRBQzQ1RDNBQ0FCNzU0NTQ3NEM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYyOTU2MTM5MzcyOTdENUYx
MDY3NEFDNDVEM0FDQUI3NTQ1NDc0QzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J4YWFLQmtSUlBMNUFUR3JXQjF3WEdEZlROdUJxVkNVUVplbXc4WXF1MU0xLzAv
MzEzNjM4MmUzMjMyMzcyZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM4MzkzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjjczANBgkqhkiG9w0BAQsFAAOCAQEAajp2
1Gok+31O5J+h481At1y8YCRd30hxtEJh6GK3ZQafo+cfXaEmXfVyjw/J1POA7aUB
PZddW7oClC7kELfPepXGs3sThbkhoaH0HtRovt4iREEtJYOHJkHPJEXgOUUfpkR5
YDPKART0LfTUmDEDUTMynGW10C35CiJ3t08z18bFwvMk3d+4ho5qXTT2IMCzDcaw
aeda9OyHI34Xp06Hg0bZreHjQAowIatDtv8zBsJThRQO410XsgorunqI3inOGYOa
6mlShgjZXSCcEoNPYu2OerB3OPug0mQQFH1xCfupeSkYxLVIk73BuMXr+8Jmhuk5
Rbq8CLBP3BxteBvLJg==
-----END CERTIFICATE-----
Generated at Wed Jul 8 20:15:22 2026 by rpki-client