Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264493.roa
File:                     AS264493.roa (raw, json)
Hash identifier:          qsM9SgekTwM4FtA+cguYwmR8QKGvUPZL+X4EFF5fDow=
Subject key identifier:   A1:55:12:26:6C:F2:BA:D5:02:D3:37:24:67:AC:E5:FA:58:F2:F5:92
Certificate issuer:       /CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
Certificate serial:       68B9F4ECB3A7A95AB204CFDEB7AA6076AF0636F5
Authority key identifier: BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264493.roa
Signing time:             Thu 03 Sep 2026 21:29:12 +0000
ROA not before:           Thu 03 Sep 2026 21:24:12 +0000
ROA not after:            Thu 02 Sep 2027 21:29:12 +0000
asID:                     264493
IP address blocks:        131.255.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 Oct 2026 10:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b9:f4:ec:b3:a7:a9:5a:b2:04:cf:de:b7:aa:60:76:af:06:36:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618
        Validity
            Not Before: Sep  3 21:24:12 2026 GMT
            Not After : Sep  2 21:29:12 2027 GMT
        Subject: CN=A15512266CF2BAD502D3372467ACE5FA58F2F592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9c:75:7b:42:74:a7:67:dc:92:46:29:08:65:
                    f6:00:11:88:e7:d2:c9:32:fd:cc:d2:aa:6e:13:0a:
                    3a:97:21:ab:b6:29:29:df:56:0d:fe:4d:8d:a0:d5:
                    6d:eb:1d:b2:20:64:2b:a1:c5:55:be:bc:f6:a9:52:
                    49:71:ab:2d:35:f9:54:6f:84:3a:3f:e4:db:04:c1:
                    58:0e:ea:00:6e:64:12:3e:63:d9:39:fb:79:25:b4:
                    fc:46:74:63:19:2b:5a:0e:47:c6:33:96:9d:a3:15:
                    1d:1c:1f:d4:59:f6:c4:e2:ca:62:be:0e:a8:0c:ac:
                    1b:51:e2:3c:a4:45:27:52:3b:78:43:d1:ee:c4:0d:
                    1a:99:3a:2d:ea:a3:d1:ca:58:f0:7e:c0:66:51:8f:
                    52:b1:7c:67:f2:61:a4:7b:a3:7c:e6:8c:1c:92:9a:
                    be:3c:43:49:b3:f4:b3:67:7a:56:70:21:8e:84:7e:
                    57:6b:40:52:29:e4:2d:4e:ff:b1:8c:cd:61:27:ac:
                    c9:7a:23:b3:01:13:63:66:40:30:36:fa:4e:1f:2d:
                    80:98:09:12:bc:3f:a6:8d:bc:53:35:14:f9:6c:c6:
                    6b:7c:83:f0:fb:22:5b:0d:55:58:c7:68:0b:31:2f:
                    96:a0:b2:be:13:65:1a:36:61:2a:56:1d:62:71:5d:
                    8b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:55:12:26:6C:F2:BA:D5:02:D3:37:24:67:AC:E5:FA:58:F2:F5:92
            X509v3 Authority Key Identifier:
                keyid:BA:D7:CB:FD:3F:5D:A9:45:D2:1E:66:A8:4C:DD:E4:E6:D3:AC:26:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAD7CBFD3F5DA945D21E66A84CDDE4E6D3AC2618.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:a7:39:c4:2a:ed:bc:c9:c6:c0:32:49:69:9e:03:53:79:e2:
         e2:09:82:12:a0:80:c5:85:5a:96:d1:7e:71:b5:b0:11:63:59:
         38:c9:a9:eb:0d:77:c6:2e:d0:0e:0a:07:08:c5:d0:0a:7f:ef:
         7f:a8:21:e5:2c:d2:29:bd:4e:8d:b9:b1:f1:49:81:23:c5:0c:
         fd:bf:f5:7e:bf:fe:61:b2:fd:d8:0d:e7:8a:ea:82:40:e6:e0:
         47:2e:aa:d0:ea:79:74:e1:b6:f5:e3:35:b2:7c:d1:a9:d4:0f:
         04:7b:6c:3d:d3:f8:51:57:b7:90:47:94:32:94:f6:c0:4f:67:
         41:b6:85:c4:15:89:45:b5:dd:6f:c5:0f:c3:fc:1e:5f:16:04:
         ab:b3:09:22:f4:68:0e:0f:44:1d:e2:3d:62:f1:c0:97:5c:43:
         a7:57:26:6a:21:5c:a7:d5:85:0c:56:7a:85:ad:c9:65:c1:34:
         0d:65:e1:f6:9c:3e:f3:c7:0b:91:7f:d7:29:1a:34:f2:34:f9:
         3f:a1:69:0e:c1:05:93:d8:f4:54:5f:a8:30:cd:69:cc:8f:4b:
         10:25:be:e5:c5:0c:82:79:72:80:68:1b:59:31:53:62:74:e2:
         0f:52:7c:55:e2:d3:69:e0:73:64:5f:e1:a1:e9:63:15:0a:67:
         aa:e5:6e:ee
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgIUaLn07LOnqVqyBM/et6pgdq8GNvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFEN0NCRkQzRjVEQTk0NUQyMUU2NkE4NENEREU0RTZE
M0FDMjYxODAeFw0yNjA5MDMyMTI0MTJaFw0yNzA5MDIyMTI5MTJaMDMxMTAvBgNV
BAMTKEExNTUxMjI2NkNGMkJBRDUwMkQzMzcyNDY3QUNFNUZBNThGMkY1OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnHV7QnSnZ9ySRikIZfYAEYjn
0sky/czSqm4TCjqXIau2KSnfVg3+TY2g1W3rHbIgZCuhxVW+vPapUklxqy01+VRv
hDo/5NsEwVgO6gBuZBI+Y9k5+3kltPxGdGMZK1oOR8Yzlp2jFR0cH9RZ9sTiymK+
DqgMrBtR4jykRSdSO3hD0e7EDRqZOi3qo9HKWPB+wGZRj1KxfGfyYaR7o3zmjByS
mr48Q0mz9LNnelZwIY6EfldrQFIp5C1O/7GMzWEnrMl6I7MBE2NmQDA2+k4fLYCY
CRK8P6aNvFM1FPlsxmt8g/D7IlsNVVjHaAsxL5agsr4TZRo2YSpWHWJxXYv1AgMB
AAGjggIcMIICGDAdBgNVHQ4EFgQUoVUSJmzyutUC0zckZ6zl+ljy9ZIwHwYDVR0j
BBgwFoAUutfL/T9dqUXSHmaoTN3k5tOsJhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRHQVBKUDY1ZWZlQ1RVYTg0aHc1UkdSYlpHUFcycVJ5VHZnYWhnanhF
ZUIvMC9CQUQ3Q0JGRDNGNURBOTQ1RDIxRTY2QTg0Q0RERTRFNkQzQUMyNjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JBRDdDQkZEM0Y1REE5NDVE
MjFFNjZBODRDRERFNEU2RDNBQzI2MTguY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yZEdB
UEpQNjVlZmVDVFVhODRodzVSR1JiWkdQVzJxUnlUdmdhaGdqeEVlQi8wL0FTMjY0
NDkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCg/+cMA0GCSqGSIb3DQEBCwUAA4IBAQBZpznEKu28ycbA
MklpngNTeeLiCYISoIDFhVqW0X5xtbARY1k4yanrDXfGLtAOCgcIxdAKf+9/qCHl
LNIpvU6NubHxSYEjxQz9v/V+v/5hsv3YDeeK6oJA5uBHLqrQ6nl04bb14zWyfNGp
1A8Ee2w90/hRV7eQR5QylPbAT2dBtoXEFYlFtd1vxQ/D/B5fFgSrswki9GgOD0Qd
4j1i8cCXXEOnVyZqIVyn1YUMVnqFrcllwTQNZeH2nD7zxwuRf9cpGjTyNPk/oWkO
wQWT2PRUX6gwzWnMj0sQJb7lxQyCeXKAaBtZMVNidOIPUnxV4tNp4HNkX+Gh6WMV
Cmeq5W7u
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:45:09 2026 by rpki-client