Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/3136382e3139362e3130332e302f32342d3332203d3e20323635343438.roa
File:                     3136382e3139362e3130332e302f32342d3332203d3e20323635343438.roa (raw, json)
Hash identifier:          c63he/R+qhGu2iqvisofNKTAJa+h2b/qGoqjNU845qQ=
Subject key identifier:   D9:B0:87:85:65:67:7A:26:7D:82:8C:72:55:21:30:DC:27:79:E9:4F
Certificate issuer:       /CN=DC2EA92B843FD5C1407018C36A02135C7AE18D3C
Certificate serial:       29F5E924A67C3D473FDDCDE9441C50DB97642431
Authority key identifier: DC:2E:A9:2B:84:3F:D5:C1:40:70:18:C3:6A:02:13:5C:7A:E1:8D:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/3136382e3139362e3130332e302f32342d3332203d3e20323635343438.roa
Signing time:             Mon 17 Aug 2026 20:48:07 +0000
ROA not before:           Mon 17 Aug 2026 20:43:07 +0000
ROA not after:            Mon 16 Aug 2027 20:48:07 +0000
asID:                     265448
IP address blocks:        168.196.103.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.crl
                          rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 07:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f5:e9:24:a6:7c:3d:47:3f:dd:cd:e9:44:1c:50:db:97:64:24:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC2EA92B843FD5C1407018C36A02135C7AE18D3C
        Validity
            Not Before: Aug 17 20:43:07 2026 GMT
            Not After : Aug 16 20:48:07 2027 GMT
        Subject: CN=D9B0878565677A267D828C72552130DC2779E94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:37:d6:5a:4b:be:83:2c:ad:38:f9:9a:50:
                    f8:8a:bc:2a:ed:07:d2:78:87:c4:a5:4f:33:61:3d:
                    a5:09:28:96:65:eb:0f:45:6b:33:45:e6:0d:47:fe:
                    e6:0a:a6:c8:41:90:f8:78:58:8c:be:e4:94:d4:55:
                    4e:50:fc:b0:c6:cc:29:a4:61:9d:d2:c4:99:13:63:
                    45:62:77:c2:55:cb:74:1a:29:fe:75:82:82:70:1e:
                    dc:77:5a:98:d6:da:18:f7:61:44:bf:a6:89:fd:07:
                    ec:bf:7c:0e:46:e2:96:df:14:9a:02:35:08:93:c4:
                    73:64:79:fc:97:8b:c7:ad:33:3f:06:44:c8:cb:18:
                    39:bf:54:5e:ac:9d:48:78:75:ae:b9:31:7a:2e:ba:
                    7d:24:ae:63:37:01:8d:4a:ff:bb:66:7c:e2:8b:eb:
                    97:bc:24:71:ee:c9:5e:fe:75:b3:17:5a:c7:24:09:
                    7e:f4:68:df:89:5b:f4:45:16:e6:67:c7:d9:de:6f:
                    46:bb:ec:c1:ac:73:c5:35:14:fd:35:d2:15:84:f7:
                    cc:39:3b:ce:5c:fe:2a:a9:d5:47:b1:1a:02:59:c0:
                    64:eb:03:1f:4b:dc:98:4d:bf:14:4d:05:20:07:98:
                    65:6f:ab:b5:57:08:83:93:db:73:14:db:8c:44:79:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:87:85:65:67:7A:26:7D:82:8C:72:55:21:30:DC:27:79:E9:4F
            X509v3 Authority Key Identifier:
                keyid:DC:2E:A9:2B:84:3F:D5:C1:40:70:18:C3:6A:02:13:5C:7A:E1:8D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DC2EA92B843FD5C1407018C36A02135C7AE18D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2SFK7hxmt1Z3Up1kKSiDqbsk6G5AxSKrAGY6L7Tmps1/0/3136382e3139362e3130332e302f32342d3332203d3e20323635343438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8c:20:cf:36:f9:d8:f2:81:d3:c0:66:4f:19:a3:92:04:85:
         6e:93:be:dc:2d:f9:89:1c:e4:99:94:bf:b8:f7:73:52:86:fa:
         a7:01:e8:40:cd:35:e4:71:1c:86:c4:c9:b9:77:bb:16:80:6f:
         6a:a1:ca:59:ad:df:a0:05:f0:fb:ce:c5:1c:19:59:ec:56:61:
         4c:18:15:c5:a0:d0:6a:b9:62:6d:e9:14:19:7f:4a:5c:fd:3e:
         3f:8d:cc:ba:71:bc:82:67:79:ad:35:4e:ee:1e:cf:76:ca:71:
         8f:ad:9f:55:c6:03:da:b4:1a:79:eb:32:69:0b:2e:e6:4a:34:
         45:6b:d8:28:28:66:50:29:c0:51:92:b0:73:7e:ff:b2:53:b1:
         62:4c:45:0b:ed:69:31:e2:d7:f4:9d:5c:c3:4e:97:b4:f7:58:
         88:7f:10:2b:81:4c:3b:61:a5:cc:aa:9c:b0:28:1d:fb:aa:00:
         9c:24:e4:33:36:a0:d2:59:d7:68:f6:65:a3:ef:99:e2:fa:c4:
         25:86:e8:a8:e0:31:42:ec:fe:84:30:36:6c:ce:d6:38:8c:4d:
         cf:21:e7:e6:fe:5e:c4:6e:84:49:17:92:1d:75:d4:87:a8:d6:
         6d:f8:08:e3:4a:c2:93:1b:38:eb:74:e6:cd:11:d9:55:e8:f6:
         7d:76:93:18
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUKfXpJKZ8PUc/3c3pRBxQ25dkJDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMyRUE5MkI4NDNGRDVDMTQwNzAxOEMzNkEwMjEzNUM3
QUUxOEQzQzAeFw0yNjA4MTcyMDQzMDdaFw0yNzA4MTYyMDQ4MDdaMDMxMTAvBgNV
BAMTKEQ5QjA4Nzg1NjU2NzdBMjY3RDgyOEM3MjU1MjEzMERDMjc3OUU5NEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ZDfWWku+gyytOPmaUPiKvCrt
B9J4h8SlTzNhPaUJKJZl6w9FazNF5g1H/uYKpshBkPh4WIy+5JTUVU5Q/LDGzCmk
YZ3SxJkTY0Vid8JVy3QaKf51goJwHtx3WpjW2hj3YUS/pon9B+y/fA5G4pbfFJoC
NQiTxHNkefyXi8etMz8GRMjLGDm/VF6snUh4da65MXouun0krmM3AY1K/7tmfOKL
65e8JHHuyV7+dbMXWsckCX70aN+JW/RFFuZnx9neb0a77MGsc8U1FP010hWE98w5
O85c/iqp1UexGgJZwGTrAx9L3JhNvxRNBSAHmGVvq7VXCIOT23MU24xEedX1AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2bCHhWVneiZ9goxyVSEw3Cd56U8wHwYDVR0j
BBgwFoAU3C6pK4Q/1cFAcBjDagITXHrhjTwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzJTRks3aHhtdDFaM1VwMWtLU2lEcWJzazZHNUF4U0tyQUdZNkw3VG1w
czEvMC9EQzJFQTkyQjg0M0ZENUMxNDA3MDE4QzM2QTAyMTM1QzdBRTE4RDNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RDMkVBOTJCODQzRkQ1QzE0
MDcwMThDMzZBMDIxMzVDN0FFMThEM0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0cyU0ZLN2h4bXQxWjNVcDFrS1NpRHFic2s2RzVBeFNLckFHWTZMN1RtcHMxLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzAzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzNTM0MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEZzANBgkqhkiG9w0BAQsFAAOCAQEAnowg
zzb52PKB08BmTxmjkgSFbpO+3C35iRzkmZS/uPdzUob6pwHoQM015HEchsTJuXe7
FoBvaqHKWa3foAXw+87FHBlZ7FZhTBgVxaDQarlibekUGX9KXP0+P43MunG8gmd5
rTVO7h7Pdspxj62fVcYD2rQaeesyaQsu5ko0RWvYKChmUCnAUZKwc37/slOxYkxF
C+1pMeLX9J1cw06XtPdYiH8QK4FMO2GlzKqcsCgd+6oAnCTkMzag0lnXaPZlo++Z
4vrEJYboqOAxQuz+hDA2bM7WOIxNzyHn5v5exG6ESReSHXXUh6jWbfgI40rCkxs4
63TmzRHZVej2fXaTGA==
-----END CERTIFICATE-----
Generated at Mon Aug 24 08:02:48 2026 by rpki-client