Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/3136342e3136332e3138302e302f32322d3332203d3e20323637343332.roa
File:                     3136342e3136332e3138302e302f32322d3332203d3e20323637343332.roa (raw, json)
Hash identifier:          H2p1Oomka5BMUs+B+UrsfIAyH5xfQeE8Gt/Ab/3JDmM=
Subject key identifier:   4D:AE:E8:E6:7F:64:13:A4:90:FC:03:FC:43:98:E0:EE:E7:25:37:DF
Certificate issuer:       /CN=C7763926E8EE176C5602AC42F0A397B1DA33BEE5
Certificate serial:       37CBD3DB2F7F84C3C21EF6A0C8BF4E5167F547CE
Authority key identifier: C7:76:39:26:E8:EE:17:6C:56:02:AC:42:F0:A3:97:B1:DA:33:BE:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/3136342e3136332e3138302e302f32322d3332203d3e20323637343332.roa
Signing time:             Thu 10 Sep 2026 19:28:23 +0000
ROA not before:           Thu 10 Sep 2026 19:23:23 +0000
ROA not after:            Thu 09 Sep 2027 19:28:23 +0000
asID:                     267432
IP address blocks:        164.163.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.crl
                          rsync://rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 15:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:d3:db:2f:7f:84:c3:c2:1e:f6:a0:c8:bf:4e:51:67:f5:47:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7763926E8EE176C5602AC42F0A397B1DA33BEE5
        Validity
            Not Before: Sep 10 19:23:23 2026 GMT
            Not After : Sep  9 19:28:23 2027 GMT
        Subject: CN=4DAEE8E67F6413A490FC03FC4398E0EEE72537DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:0a:73:df:60:74:fe:cb:81:a7:76:5b:58:
                    38:9c:48:28:8e:01:73:fb:3f:7e:e4:70:65:86:fe:
                    34:6d:44:93:f9:4a:70:e8:7d:67:37:62:9b:0e:88:
                    fc:2f:a0:dd:f9:4b:e1:62:cf:14:e5:d6:4d:5a:ef:
                    18:db:03:b9:b6:63:93:5d:f6:30:28:f0:14:d5:3f:
                    4a:64:df:ce:35:48:7e:54:16:ba:e3:fc:2a:cb:0e:
                    b8:18:62:7f:25:b0:c0:c3:a0:fe:04:8e:1d:b4:2f:
                    d0:c0:5f:54:38:6f:fd:07:f9:96:99:26:e0:74:4d:
                    6a:14:a1:d9:ee:8a:51:3a:f7:38:4d:51:b1:7b:4b:
                    19:9e:87:37:88:b1:14:dc:52:85:d0:da:c8:f6:16:
                    4b:94:d6:ca:cf:3a:d8:83:ee:25:9d:18:ee:c2:ef:
                    6f:7b:67:9d:b1:6b:f3:53:20:61:a8:43:ba:95:87:
                    22:98:0f:f8:8e:86:79:29:e7:06:72:a2:19:6d:a8:
                    e8:b4:49:0b:24:16:1a:f8:cc:5c:24:cb:71:1d:50:
                    cb:13:37:10:8c:e9:1a:5e:10:1b:14:fd:7b:29:4e:
                    8d:df:91:3b:96:78:cc:27:43:fd:af:29:fc:4e:d3:
                    ba:65:92:fd:4e:9c:50:6c:d0:7d:1b:18:4e:5c:9f:
                    fb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AE:E8:E6:7F:64:13:A4:90:FC:03:FC:43:98:E0:EE:E7:25:37:DF
            X509v3 Authority Key Identifier:
                keyid:C7:76:39:26:E8:EE:17:6C:56:02:AC:42:F0:A3:97:B1:DA:33:BE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7763926E8EE176C5602AC42F0A397B1DA33BEE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBk8Ejw9WcvoKp1JFk9iqQAse5qQ7HtrSmAceS7vEi9/0/3136342e3136332e3138302e302f32322d3332203d3e20323637343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:97:3c:98:33:1b:f2:db:ac:74:33:16:3f:b2:d6:2d:a4:67:
         af:10:40:6a:aa:fb:3f:e9:70:d3:5a:dd:94:c8:06:9b:4c:1e:
         df:f0:bb:84:75:34:e7:f5:b7:93:63:75:1f:b3:77:10:00:30:
         7a:41:3e:5b:24:dd:23:02:32:d5:9c:cb:d2:76:99:51:dd:fa:
         83:43:ec:5e:88:a7:24:03:02:7a:8c:8b:77:23:62:53:0e:8c:
         3d:d5:10:e2:6f:fe:b0:7d:9d:4d:6d:82:af:7b:69:3f:2e:b8:
         b6:9a:d6:87:e0:3e:b2:be:ef:36:99:6d:e4:53:65:b3:69:bc:
         a4:ed:a5:23:30:29:80:31:0a:53:a6:f8:87:1c:f2:fc:61:1c:
         12:c4:7b:b4:f3:5d:78:41:bd:8f:96:aa:a3:81:fb:97:c6:97:
         22:58:6d:11:76:ab:c4:f7:89:20:28:71:e6:02:89:89:0c:25:
         37:c0:e3:8d:94:39:ff:e1:d8:a2:1e:47:8f:5f:4c:74:ac:04:
         d9:6e:63:4a:e6:2d:6d:65:83:1d:c1:72:a1:9b:21:bb:f2:b4:
         f3:61:72:65:f9:8a:c6:0b:c0:73:7a:e6:86:7e:66:ad:3d:d0:
         80:fc:ba:c0:86:6e:e5:cf:82:91:d3:b9:79:71:0e:58:24:79:
         f9:e4:ad:93
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN8vT2y9/hMPCHvagyL9OUWf1R84wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc3NjM5MjZFOEVFMTc2QzU2MDJBQzQyRjBBMzk3QjFE
QTMzQkVFNTAeFw0yNjA5MTAxOTIzMjNaFw0yNzA5MDkxOTI4MjNaMDMxMTAvBgNV
BAMTKDREQUVFOEU2N0Y2NDEzQTQ5MEZDMDNGQzQzOThFMEVFRTcyNTM3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0gpz32B0/suBp3ZbWDicSCiO
AXP7P37kcGWG/jRtRJP5SnDofWc3YpsOiPwvoN35S+FizxTl1k1a7xjbA7m2Y5Nd
9jAo8BTVP0pk3841SH5UFrrj/CrLDrgYYn8lsMDDoP4Ejh20L9DAX1Q4b/0H+ZaZ
JuB0TWoUodnuilE69zhNUbF7SxmehzeIsRTcUoXQ2sj2FkuU1srPOtiD7iWdGO7C
7297Z52xa/NTIGGoQ7qVhyKYD/iOhnkp5wZyohltqOi0SQskFhr4zFwky3EdUMsT
NxCM6RpeEBsU/XspTo3fkTuWeMwnQ/2vKfxO07plkv1OnFBs0H0bGE5cn/tNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTa7o5n9kE6SQ/AP8Q5jg7uclN98wHwYDVR0j
BBgwFoAUx3Y5JujuF2xWAqxC8KOXsdozvuUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG1CazhFanc5V2N2b0twMUpGazlpcVFBc2U1cVE3SHRyU21BY2VTN3ZF
aTkvMC9DNzc2MzkyNkU4RUUxNzZDNTYwMkFDNDJGMEEzOTdCMURBMzNCRUU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3NzYzOTI2RThFRTE3NkM1
NjAyQUM0MkYwQTM5N0IxREEzM0JFRTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RtQms4RWp3OVdjdm9LcDFKRms5aXFRQXNlNXFRN0h0clNtQWNlUzd2RWk5LzAv
MzEzNjM0MmUzMTM2MzMyZTMxMzgzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNzM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqSjtDANBgkqhkiG9w0BAQsFAAOCAQEAgZc8
mDMb8tusdDMWP7LWLaRnrxBAaqr7P+lw01rdlMgGm0we3/C7hHU05/W3k2N1H7N3
EAAwekE+WyTdIwIy1ZzL0naZUd36g0PsXoinJAMCeoyLdyNiUw6MPdUQ4m/+sH2d
TW2Cr3tpPy64tprWh+A+sr7vNplt5FNls2m8pO2lIzApgDEKU6b4hxzy/GEcEsR7
tPNdeEG9j5aqo4H7l8aXIlhtEXarxPeJIChx5gKJiQwlN8DjjZQ5/+HYoh5Hj19M
dKwE2W5jSuYtbWWDHcFyoZshu/K082FyZfmKxgvAc3rmhn5mrT3QgPy6wIZu5c+C
kdO5eXEOWCR5+eStkw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 23:59:37 2026 by rpki-client