Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232362e302f32332d3233203d3e20323633323736.roa
File:                     3136382e39302e3232362e302f32332d3233203d3e20323633323736.roa (raw, json)
Hash identifier:          Vnte3ee76rbAtmRRb1GH01rbolyVKoYYsT+AckyX7L4=
Subject key identifier:   4B:82:16:DB:FE:69:8C:33:26:34:9A:36:B9:BC:E7:02:63:57:2A:40
Certificate issuer:       /CN=B1099D894126AC4CAD9411E4308EE689A767609A
Certificate serial:       0B56EC1CFAC0016A5A2E5459143B80A66E25B355
Authority key identifier: B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232362e302f32332d3233203d3e20323633323736.roa
Signing time:             Fri 10 Jul 2026 14:29:16 +0000
ROA not before:           Fri 10 Jul 2026 14:24:16 +0000
ROA not after:            Fri 09 Jul 2027 14:29:16 +0000
asID:                     263276
IP address blocks:        168.90.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl
                          rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:56:ec:1c:fa:c0:01:6a:5a:2e:54:59:14:3b:80:a6:6e:25:b3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1099D894126AC4CAD9411E4308EE689A767609A
        Validity
            Not Before: Jul 10 14:24:16 2026 GMT
            Not After : Jul  9 14:29:16 2027 GMT
        Subject: CN=4B8216DBFE698C3326349A36B9BCE70263572A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:00:05:db:f8:c9:bb:59:f2:84:87:bc:28:
                    7f:70:e5:28:b5:40:27:40:96:53:3a:23:68:83:cf:
                    3f:1b:b4:6c:8b:64:0f:64:7c:30:74:ea:c8:c9:8e:
                    5e:fc:f6:26:c3:c5:5e:a6:7b:22:a5:97:be:13:de:
                    27:e3:5e:57:0c:a2:7f:62:49:d6:75:73:6f:33:09:
                    54:8d:d0:79:0f:ce:96:bb:9f:e5:0b:2f:31:01:87:
                    73:07:12:53:a7:b0:1c:32:62:81:60:8d:5a:b5:1a:
                    64:01:b2:09:3b:e9:8b:df:e7:58:53:74:3d:93:01:
                    92:47:3a:dd:10:c3:1d:7f:6a:2e:ac:70:9c:d5:1d:
                    93:4c:9f:ed:88:71:dc:19:fb:24:8b:48:bb:22:e1:
                    8a:21:b4:cc:67:f3:4f:05:a0:35:e6:14:18:84:38:
                    a8:de:06:a1:ba:e9:2a:04:79:98:17:3a:19:38:16:
                    81:25:e0:1b:e9:bd:cf:e6:a8:3c:18:cc:93:91:43:
                    30:80:83:7f:8d:c6:fe:12:52:2c:fd:e0:60:f6:67:
                    ab:ff:cd:37:1c:14:56:fe:42:e3:e6:b1:84:5d:d0:
                    c8:62:f2:06:0c:0d:ae:2e:fb:df:a4:46:fa:c4:a9:
                    61:b7:84:78:4d:dc:f5:ee:19:d9:29:ee:e5:d2:fb:
                    8a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:82:16:DB:FE:69:8C:33:26:34:9A:36:B9:BC:E7:02:63:57:2A:40
            X509v3 Authority Key Identifier:
                keyid:B1:09:9D:89:41:26:AC:4C:AD:94:11:E4:30:8E:E6:89:A7:67:60:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/B1099D894126AC4CAD9411E4308EE689A767609A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B1099D894126AC4CAD9411E4308EE689A767609A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/3136382e39302e3232362e302f32332d3233203d3e20323633323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:3f:ad:c3:64:5c:75:ba:46:1a:05:99:a3:b5:9d:63:ea:1f:
         6c:7c:2d:f9:a7:bd:6c:2a:e1:10:25:6b:a3:62:e1:24:46:c2:
         66:79:78:5f:a3:53:64:ae:05:a0:91:a6:17:e3:c9:e9:71:2d:
         72:37:df:77:3d:d9:c1:c6:c2:bb:34:4e:f7:d9:33:d8:2c:4d:
         32:e9:6e:a6:05:fa:8f:cc:48:f5:fc:9d:19:f4:4b:60:8f:34:
         be:b3:95:6c:bf:cb:ab:d3:3f:d2:14:7a:a2:67:38:e6:44:51:
         97:13:f5:46:97:c9:c6:a9:25:7e:a2:69:bb:30:c3:f5:32:09:
         f8:ab:3f:fd:67:58:36:5b:8f:45:ba:9a:cd:8d:fa:30:83:86:
         02:a7:73:65:eb:51:dd:55:40:8d:b8:15:93:67:b7:d4:68:bd:
         ec:9f:6d:d9:07:26:1e:1c:5e:97:89:f6:ab:de:ad:d6:b9:36:
         74:57:77:e6:13:54:61:b1:28:fb:ca:c5:08:07:47:6b:5c:7f:
         6a:95:ad:6d:77:b3:6b:98:9e:d1:8c:fd:e3:5d:68:91:a8:c1:
         fa:d4:bf:d7:e7:c1:da:f9:67:13:c1:f3:a7:e9:89:76:31:a1:
         7c:2b:8b:19:be:64:51:ec:4b:f1:71:f9:b3:b1:b0:77:38:03:
         42:8b:04:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC1bsHPrAAWpaLlRZFDuApm4ls1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjEwOTlEODk0MTI2QUM0Q0FEOTQxMUU0MzA4RUU2ODlB
NzY3NjA5QTAeFw0yNjA3MTAxNDI0MTZaFw0yNzA3MDkxNDI5MTZaMDMxMTAvBgNV
BAMTKDRCODIxNkRCRkU2OThDMzMyNjM0OUEzNkI5QkNFNzAyNjM1NzJBNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+AAAF2/jJu1nyhIe8KH9w5Si1
QCdAllM6I2iDzz8btGyLZA9kfDB06sjJjl789ibDxV6meyKll74T3ifjXlcMon9i
SdZ1c28zCVSN0HkPzpa7n+ULLzEBh3MHElOnsBwyYoFgjVq1GmQBsgk76Yvf51hT
dD2TAZJHOt0Qwx1/ai6scJzVHZNMn+2IcdwZ+ySLSLsi4YohtMxn808FoDXmFBiE
OKjeBqG66SoEeZgXOhk4FoEl4Bvpvc/mqDwYzJORQzCAg3+Nxv4SUiz94GD2Z6v/
zTccFFb+QuPmsYRd0Mhi8gYMDa4u+9+kRvrEqWG3hHhN3PXuGdkp7uXS+4qhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS4IW2/5pjDMmNJo2ubznAmNXKkAwHwYDVR0j
BBgwFoAUsQmdiUEmrEytlBHkMI7miadnYJowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjZBcFdyY2pHV1k0Q215YThydXlNQnFvTm1FYWl1VjYxZmpLbjFjanVz
ZWkvMC9CMTA5OUQ4OTQxMjZBQzRDQUQ5NDExRTQzMDhFRTY4OUE3Njc2MDlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IxMDk5RDg5NDEyNkFDNENB
RDk0MTFFNDMwOEVFNjg5QTc2NzYwOUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI2QXBXcmNqR1dZNENteWE4cnV5TUJxb05tRWFpdVY2MWZqS24xY2p1c2VpLzAv
MzEzNjM4MmUzOTMwMmUzMjMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzMzMjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGoWuIwDQYJKoZIhvcNAQELBQADggEBAHc/rcNk
XHW6RhoFmaO1nWPqH2x8LfmnvWwq4RAla6Ni4SRGwmZ5eF+jU2SuBaCRphfjyelx
LXI333c92cHGwrs0TvfZM9gsTTLpbqYF+o/MSPX8nRn0S2CPNL6zlWy/y6vTP9IU
eqJnOOZEUZcT9UaXycapJX6iabsww/UyCfirP/1nWDZbj0W6ms2N+jCDhgKnc2Xr
Ud1VQI24FZNnt9RoveyfbdkHJh4cXpeJ9qverda5NnRXd+YTVGGxKPvKxQgHR2tc
f2qVrW13s2uYntGM/eNdaJGowfrUv9fnwdr5ZxPB86fpiXYxoXwrixm+ZFHsS/Fx
+bOxsHc4A0KLBAk=
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:29:11 2026 by rpki-client