Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa
File:                     3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa (raw, json)
Hash identifier:          fj9sL6EguuTMEx+GpWQPCAe7f1KRCJ/8i3Vmm1UwJe0=
Subject key identifier:   87:25:E5:55:BE:18:CA:43:56:89:91:B3:61:2B:B2:50:92:22:E4:B3
Certificate issuer:       /CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
Certificate serial:       5A03F54624020EA854AE983FA61A78E6742855A5
Authority key identifier: 67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa
Signing time:             Fri 21 Aug 2026 20:20:44 +0000
ROA not before:           Fri 21 Aug 2026 20:15:44 +0000
ROA not after:            Fri 20 Aug 2027 20:20:44 +0000
asID:                     264386
IP address blocks:        168.197.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl
                          rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 07:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:03:f5:46:24:02:0e:a8:54:ae:98:3f:a6:1a:78:e6:74:28:55:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67379271F7BEFF1C0ADF4F715F94E2CA2912DDED
        Validity
            Not Before: Aug 21 20:15:44 2026 GMT
            Not After : Aug 20 20:20:44 2027 GMT
        Subject: CN=8725E555BE18CA43568991B3612BB2509222E4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:19:0b:83:e9:1c:0f:0d:e3:49:6e:60:02:
                    5f:37:86:2c:ad:74:47:b1:4c:3e:6c:64:7e:77:72:
                    2a:49:eb:37:08:81:c3:c1:7e:8c:56:bb:9a:79:35:
                    16:2e:a9:47:2a:91:97:bc:a2:9a:c4:44:fb:40:78:
                    de:cd:62:d6:8b:39:db:cd:fe:8a:9c:92:69:95:bc:
                    7a:6e:85:c3:e3:b1:ad:47:e0:b5:f7:b0:c9:6e:90:
                    b2:e0:3f:f1:50:3e:17:40:c5:b2:48:22:b1:81:f6:
                    c2:92:76:f4:15:2b:dc:81:59:65:3a:96:4b:8c:34:
                    c5:0f:20:27:66:6c:1c:6c:73:d7:b2:85:d6:fe:f7:
                    b5:5a:0c:a5:5e:08:81:23:99:06:66:ce:c1:c5:4e:
                    86:df:ba:f3:54:12:39:43:cc:e1:3a:bf:b7:b3:a4:
                    31:5b:75:6a:b9:75:a1:df:7d:bc:35:bc:94:34:d2:
                    fc:66:d5:b1:bb:f2:53:27:19:5d:71:49:16:f9:e7:
                    d2:b7:46:50:92:ea:a1:a8:d3:52:93:f9:8f:0a:c7:
                    7b:c6:bd:d3:83:d8:ad:b1:7c:c3:28:a0:b2:c1:a1:
                    b5:1c:90:d5:ef:4b:7e:62:94:e9:5e:6d:be:f4:13:
                    fe:26:5d:fe:18:f2:a8:15:01:d7:f3:5b:03:26:ca:
                    8f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:25:E5:55:BE:18:CA:43:56:89:91:B3:61:2B:B2:50:92:22:E4:B3
            X509v3 Authority Key Identifier:
                keyid:67:37:92:71:F7:BE:FF:1C:0A:DF:4F:71:5F:94:E2:CA:29:12:DD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67379271F7BEFF1C0ADF4F715F94E2CA2912DDED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/3136382e3139372e38302e302f32322d3232203d3e20323634333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:84:b9:a6:33:ef:4c:75:eb:59:8d:aa:46:58:19:4f:88:62:
         ce:f5:f4:a4:fc:fb:cd:8a:5e:36:73:bb:da:d5:ee:b7:47:48:
         e5:9c:32:11:0d:b2:8b:56:4b:ad:13:f5:e5:26:a5:7c:fe:27:
         12:6a:ef:52:34:5a:d6:4f:6f:34:f0:1a:41:3d:d8:72:c0:3c:
         7d:c3:a7:da:d5:60:00:8b:06:32:1e:61:54:e8:5e:61:67:b1:
         93:78:e0:01:a1:a2:a6:71:54:f4:61:20:8f:78:7e:90:70:29:
         47:21:04:a2:f8:b2:56:83:0e:d8:ea:83:aa:45:80:2f:ea:eb:
         a2:89:1e:4b:25:16:09:75:49:b1:bb:f3:02:d7:5e:db:00:88:
         e6:b8:f1:06:7f:69:ed:65:b7:8d:95:ac:63:d7:80:f3:08:f1:
         70:ed:7b:ad:86:08:d8:ac:7a:5e:69:f2:e9:53:ae:36:d6:30:
         e2:49:1e:d0:44:5f:52:29:a8:33:af:64:0d:17:50:45:0b:3c:
         9b:70:fa:ba:d2:a7:97:16:25:fc:18:b2:a5:a0:5b:08:3f:d7:
         7b:d9:76:81:08:8c:6e:66:58:8b:34:04:5b:5d:49:fd:a4:c1:
         a1:cd:2c:56:5b:47:49:04:23:ba:2b:48:3a:46:f6:23:a3:86:
         b1:d1:f1:6f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWgP1RiQCDqhUrpg/php45nQoVaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjczNzkyNzFGN0JFRkYxQzBBREY0RjcxNUY5NEUyQ0Ey
OTEyRERFRDAeFw0yNjA4MjEyMDE1NDRaFw0yNzA4MjAyMDIwNDRaMDMxMTAvBgNV
BAMTKDg3MjVFNTU1QkUxOENBNDM1Njg5OTFCMzYxMkJCMjUwOTIyMkU0QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2YhkLg+kcDw3jSW5gAl83hiyt
dEexTD5sZH53cipJ6zcIgcPBfoxWu5p5NRYuqUcqkZe8oprERPtAeN7NYtaLOdvN
/oqckmmVvHpuhcPjsa1H4LX3sMlukLLgP/FQPhdAxbJIIrGB9sKSdvQVK9yBWWU6
lkuMNMUPICdmbBxsc9eyhdb+97VaDKVeCIEjmQZmzsHFTobfuvNUEjlDzOE6v7ez
pDFbdWq5daHffbw1vJQ00vxm1bG78lMnGV1xSRb559K3RlCS6qGo01KT+Y8Kx3vG
vdOD2K2xfMMooLLBobUckNXvS35ilOlebb70E/4mXf4Y8qgVAdfzWwMmyo/zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhyXlVb4YykNWiZGzYSuyUJIi5LMwHwYDVR0j
BBgwFoAUZzeScfe+/xwK309xX5TiyikS3e0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC82NzM3OTI3MUY3QkVGRjFDMEFERjRGNzE1Rjk0RTJDQTI5MTJEREVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY3Mzc5MjcxRjdCRUZGMUMw
QURGNEY3MTVGOTRFMkNBMjkxMkRERUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzEzNjM4MmUzMTM5MzcyZTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoxVAwDQYJKoZIhvcNAQELBQADggEBAIGEuaYz
70x161mNqkZYGU+IYs719KT8+82KXjZzu9rV7rdHSOWcMhENsotWS60T9eUmpXz+
JxJq71I0WtZPbzTwGkE92HLAPH3Dp9rVYACLBjIeYVToXmFnsZN44AGhoqZxVPRh
II94fpBwKUchBKL4slaDDtjqg6pFgC/q66KJHkslFgl1SbG78wLXXtsAiOa48QZ/
ae1lt42VrGPXgPMI8XDte62GCNisel5p8ulTrjbWMOJJHtBEX1IpqDOvZA0XUEUL
PJtw+rrSp5cWJfwYsqWgWwg/13vZdoEIjG5mWIs0BFtdSf2kwaHNLFZbR0kEI7or
SDpG9iOjhrHR8W8=
-----END CERTIFICATE-----
Generated at Sun Aug 23 12:45:32 2026 by rpki-client