Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3137382e302f32342d3234203d3e20323632373733.roa
File:                     3136382e3139342e3137382e302f32342d3234203d3e20323632373733.roa (raw, json)
Hash identifier:          tCedc3Kiohk0ZYkD1cekQWN3vOgRSAAKzLheL7uud6Q=
Subject key identifier:   E9:9A:C8:20:D4:3F:0C:73:BF:05:74:C6:4D:C0:49:EA:36:BC:E0:6C
Certificate issuer:       /CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
Certificate serial:       6BA6B2D6F14FB39C31B6E7503539B85C535E2134
Authority key identifier: A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3137382e302f32342d3234203d3e20323632373733.roa
Signing time:             Fri 14 Aug 2026 19:40:43 +0000
ROA not before:           Fri 14 Aug 2026 19:35:43 +0000
ROA not after:            Fri 13 Aug 2027 19:40:43 +0000
asID:                     262773
IP address blocks:        168.194.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl
                          rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 21:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a6:b2:d6:f1:4f:b3:9c:31:b6:e7:50:35:39:b8:5c:53:5e:21:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0B3C533F9F973B7D8F3595EB6B163E954DB266B
        Validity
            Not Before: Aug 14 19:35:43 2026 GMT
            Not After : Aug 13 19:40:43 2027 GMT
        Subject: CN=E99AC820D43F0C73BF0574C64DC049EA36BCE06C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:8b:96:f3:6f:44:c5:b8:0e:80:62:64:c7:
                    10:68:07:0e:3d:6d:20:37:f6:a4:ee:9b:ba:92:e1:
                    d7:11:4d:12:b6:80:97:c1:ad:e8:38:50:20:ab:e2:
                    dd:f6:67:ad:ff:28:70:8c:e8:af:a5:ed:80:11:16:
                    de:10:a5:ce:fe:71:d1:cb:ce:a2:7a:70:68:7c:73:
                    9f:5e:ea:b1:97:d1:7b:47:87:17:15:b9:e6:c4:d0:
                    56:10:14:ea:de:7c:da:dd:94:5f:f9:78:7c:ff:58:
                    e3:05:92:65:fd:8a:97:4c:16:fd:0b:05:8a:82:32:
                    20:c0:83:60:e3:04:a3:01:c3:6f:c4:48:ca:80:52:
                    90:47:b9:6c:bd:0f:a3:4f:98:cc:eb:74:dc:bb:eb:
                    49:3d:c9:5b:0b:89:db:2d:a8:b6:fd:a6:ea:88:2a:
                    a6:59:90:87:aa:e7:85:d0:e4:1f:a1:5d:95:76:1d:
                    10:e7:ae:bf:a9:b9:69:2b:eb:2e:9f:42:76:b9:31:
                    43:c7:5e:ab:68:15:3b:49:19:5b:60:31:8f:0c:b3:
                    08:b2:29:ae:8d:76:25:18:aa:3b:7a:23:2e:9d:cf:
                    97:25:f7:68:75:f7:01:c8:42:4b:1a:cb:b6:49:2d:
                    6e:7c:c9:5f:09:c2:1b:7f:05:54:b3:84:fe:19:f2:
                    d3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9A:C8:20:D4:3F:0C:73:BF:05:74:C6:4D:C0:49:EA:36:BC:E0:6C
            X509v3 Authority Key Identifier:
                keyid:A0:B3:C5:33:F9:F9:73:B7:D8:F3:59:5E:B6:B1:63:E9:54:DB:26:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0B3C533F9F973B7D8F3595EB6B163E954DB266B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3DZEobWV1zGMbrQdvEUR3RZynYd4dJM2rJLkmNnY639/0/3136382e3139342e3137382e302f32342d3234203d3e20323632373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:73:22:99:c8:72:64:b8:39:d6:3e:36:57:9d:bb:69:2c:1c:
         c9:d6:27:a7:d1:4c:ad:60:f3:52:79:c4:1b:c6:87:a2:5d:81:
         d8:51:69:7f:18:08:b0:9b:62:39:3f:51:3f:ff:57:c8:65:20:
         52:0e:12:9d:f6:17:7a:35:27:23:06:ad:de:ec:f1:23:24:cb:
         3b:78:fe:a4:69:2c:60:f1:3b:ea:ac:cd:47:4c:dd:eb:bf:49:
         5d:9f:5e:d9:f7:2d:0e:e6:1f:9a:7d:7c:d6:41:aa:48:e9:29:
         6b:ca:74:1d:fe:ea:50:60:6b:8d:2b:aa:eb:c3:eb:85:01:2e:
         7b:34:bc:ab:17:6d:03:25:2d:e0:2b:d7:6e:2c:ce:53:85:35:
         fe:38:36:0a:5a:b4:06:f8:85:4b:24:6f:cb:18:af:dd:bb:25:
         b0:b6:0f:b8:24:b6:36:74:8f:12:7e:62:a7:4b:2b:6b:57:fe:
         68:73:f2:90:04:20:cb:35:9e:65:88:9e:ec:d1:e1:a7:06:b0:
         09:ec:55:d5:54:5f:a5:cb:42:0c:cb:6c:39:a8:66:57:52:c8:
         2b:03:35:b6:1d:2a:84:7c:88:12:f7:51:83:c1:45:94:75:ac:
         f2:0a:98:51:cc:0a:8f:d6:be:0f:9f:72:a0:b9:46:4e:21:79:
         0e:b1:84:cd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa6ay1vFPs5wxtudQNTm4XFNeITQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTBCM0M1MzNGOUY5NzNCN0Q4RjM1OTVFQjZCMTYzRTk1
NERCMjY2QjAeFw0yNjA4MTQxOTM1NDNaFw0yNzA4MTMxOTQwNDNaMDMxMTAvBgNV
BAMTKEU5OUFDODIwRDQzRjBDNzNCRjA1NzRDNjREQzA0OUVBMzZCQ0UwNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQouW829ExbgOgGJkxxBoBw49
bSA39qTum7qS4dcRTRK2gJfBreg4UCCr4t32Z63/KHCM6K+l7YARFt4Qpc7+cdHL
zqJ6cGh8c59e6rGX0XtHhxcVuebE0FYQFOrefNrdlF/5eHz/WOMFkmX9ipdMFv0L
BYqCMiDAg2DjBKMBw2/ESMqAUpBHuWy9D6NPmMzrdNy760k9yVsLidstqLb9puqI
KqZZkIeq54XQ5B+hXZV2HRDnrr+puWkr6y6fQna5MUPHXqtoFTtJGVtgMY8Mswiy
Ka6NdiUYqjt6Iy6dz5cl92h19wHIQksay7ZJLW58yV8Jwht/BVSzhP4Z8tNNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6ZrIINQ/DHO/BXTGTcBJ6ja84GwwHwYDVR0j
BBgwFoAUoLPFM/n5c7fY81letrFj6VTbJmswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNEWkVvYldWMXpHTWJyUWR2RVVSM1JaeW5ZZDRkSk0yckpMa21Oblk2
MzkvMC9BMEIzQzUzM0Y5Rjk3M0I3RDhGMzU5NUVCNkIxNjNFOTU0REIyNjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwQjNDNTMzRjlGOTczQjdE
OEYzNTk1RUI2QjE2M0U5NTREQjI2NkIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozRFpFb2JXVjF6R01iclFkdkVVUjNSWnluWWQ0ZEpNMnJKTGttTm5ZNjM5LzAv
MzEzNjM4MmUzMTM5MzQyZTMxMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjCsjANBgkqhkiG9w0BAQsFAAOCAQEAFXMi
mchyZLg51j42V527aSwcydYnp9FMrWDzUnnEG8aHol2B2FFpfxgIsJtiOT9RP/9X
yGUgUg4SnfYXejUnIwat3uzxIyTLO3j+pGksYPE76qzNR0zd679JXZ9e2fctDuYf
mn181kGqSOkpa8p0Hf7qUGBrjSuq68PrhQEuezS8qxdtAyUt4CvXbizOU4U1/jg2
Clq0BviFSyRvyxiv3bslsLYPuCS2NnSPEn5ip0sra1f+aHPykAQgyzWeZYie7NHh
pwawCexV1VRfpctCDMtsOahmV1LIKwM1th0qhHyIEvdRg8FFlHWs8gqYUcwKj9a+
D59yoLlGTiF5DrGEzQ==
-----END CERTIFICATE-----
Generated at Tue Aug 25 08:16:52 2026 by rpki-client