Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
File:                     3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa (raw, json)
Hash identifier:          g8LLngTToxDIToTA50s0Ua6sbvBHrygDEd5EHzhk8g0=
Subject key identifier:   AF:BE:96:62:B3:F8:EA:42:68:01:12:52:82:61:BA:2E:DE:04:06:4A
Certificate issuer:       /CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
Certificate serial:       1B6E5933E25930D6C0A286456BD31D8513A37BCF
Authority key identifier: D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa
Signing time:             Tue 21 Jul 2026 22:02:03 +0000
ROA not before:           Tue 21 Jul 2026 21:57:03 +0000
ROA not after:            Tue 20 Jul 2027 22:02:03 +0000
asID:                     263252
IP address blocks:        168.197.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl
                          rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 06:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:59:33:e2:59:30:d6:c0:a2:86:45:6b:d3:1d:85:13:a3:7b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C0F8C23F7F2B786212B9250BB199698F36242F
        Validity
            Not Before: Jul 21 21:57:03 2026 GMT
            Not After : Jul 20 22:02:03 2027 GMT
        Subject: CN=AFBE9662B3F8EA42680112528261BA2EDE04064A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:37:4d:e1:b8:a1:6a:6f:de:5f:14:8b:96:77:
                    86:5d:12:64:a7:d9:70:39:c5:3f:e7:14:05:cc:34:
                    be:1f:83:0f:40:e5:c1:e9:69:f3:62:e1:ee:af:53:
                    62:31:1c:0e:d2:33:54:ee:89:56:ca:53:29:e4:64:
                    73:fe:3a:14:01:59:6e:6e:38:65:39:2a:e6:26:9d:
                    ea:ce:01:e6:bf:f1:ee:6a:6b:3d:92:79:af:1a:25:
                    b0:85:51:42:31:86:29:41:f4:4c:f1:73:c3:d5:9c:
                    ad:e9:f6:10:ca:b5:0b:63:d5:dc:82:1a:66:95:72:
                    04:a1:d7:02:18:fc:b1:3e:bd:55:5b:e9:8b:b7:c7:
                    b2:c0:c8:26:7f:65:76:4e:fd:89:19:a9:a9:e2:0c:
                    72:75:36:06:ba:4d:7b:42:a3:2f:5f:c3:9f:a2:9b:
                    55:e0:26:38:33:1f:ec:98:3f:29:fc:be:74:4f:d3:
                    ac:33:d7:7d:cd:94:e3:a8:fc:a9:66:af:eb:22:26:
                    47:83:6d:b0:e3:d8:90:d4:bf:81:bb:c2:8a:d7:12:
                    b8:bc:8d:ff:e7:5e:f8:3d:a5:63:4d:7e:63:5f:f1:
                    5d:b1:79:03:32:0f:13:62:04:5a:6e:1c:d7:02:16:
                    55:9d:7a:ea:39:57:5d:82:8c:79:8b:d5:fb:dd:a1:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:96:62:B3:F8:EA:42:68:01:12:52:82:61:BA:2E:DE:04:06:4A
            X509v3 Authority Key Identifier:
                keyid:D4:C0:F8:C2:3F:7F:2B:78:62:12:B9:25:0B:B1:99:69:8F:36:24:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/D4C0F8C23F7F2B786212B9250BB199698F36242F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C0F8C23F7F2B786212B9250BB199698F36242F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/3136382e3139372e3232382e302f32322d3332203d3e20323633323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:4d:22:8d:cf:71:de:ed:64:43:95:b3:75:7b:29:10:a7:bb:
         59:85:c3:3f:d8:1b:8e:b9:8c:bc:d6:5d:af:eb:fd:04:b4:09:
         11:6f:49:40:ca:e2:61:65:54:de:b4:aa:b3:2f:8a:7e:ee:f7:
         c6:3d:03:32:65:c6:93:73:2c:52:c7:e9:ac:75:b0:47:a3:95:
         c8:f9:fc:af:ce:0b:53:ef:90:12:80:a6:5d:87:60:1f:07:73:
         c6:49:58:dc:b5:46:1e:c7:3c:08:d1:d5:70:5d:0d:5a:60:46:
         30:92:a2:a4:c3:f1:e3:b7:9c:a4:5b:6b:6c:7d:7b:3c:55:62:
         ae:0e:96:2d:b2:2f:ca:ee:93:da:5f:84:11:77:84:c4:75:3a:
         c9:64:27:e4:a0:61:7a:c2:10:08:da:bb:13:5b:48:00:eb:09:
         dd:e5:ff:14:7d:15:14:68:71:7d:e8:e8:bc:d4:18:c6:5b:54:
         bf:d1:e1:a4:3a:02:2f:6f:67:89:7f:b7:f6:b9:6a:8a:28:f2:
         46:79:e7:d2:fb:de:9b:4b:ae:2d:36:ba:8b:b7:41:78:e4:ff:
         4a:7a:e1:79:77:04:99:3f:ec:b7:38:53:f9:5f:a4:6e:38:78:
         66:04:c4:a9:32:a9:b2:f0:18:ef:6a:1e:66:b1:ba:a6:c3:29:
         88:53:7b:90
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUG25ZM+JZMNbAooZFa9MdhROje88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDRDMEY4QzIzRjdGMkI3ODYyMTJCOTI1MEJCMTk5Njk4
RjM2MjQyRjAeFw0yNjA3MjEyMTU3MDNaFw0yNzA3MjAyMjAyMDNaMDMxMTAvBgNV
BAMTKEFGQkU5NjYyQjNGOEVBNDI2ODAxMTI1MjgyNjFCQTJFREUwNDA2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbN03huKFqb95fFIuWd4ZdEmSn
2XA5xT/nFAXMNL4fgw9A5cHpafNi4e6vU2IxHA7SM1TuiVbKUynkZHP+OhQBWW5u
OGU5KuYmnerOAea/8e5qaz2Sea8aJbCFUUIxhilB9Ezxc8PVnK3p9hDKtQtj1dyC
GmaVcgSh1wIY/LE+vVVb6Yu3x7LAyCZ/ZXZO/YkZqaniDHJ1Nga6TXtCoy9fw5+i
m1XgJjgzH+yYPyn8vnRP06wz133NlOOo/Klmr+siJkeDbbDj2JDUv4G7worXEri8
jf/nXvg9pWNNfmNf8V2xeQMyDxNiBFpuHNcCFlWdeuo5V12CjHmL1fvdoYKFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUr76WYrP46kJoARJSgmG6Lt4EBkowHwYDVR0j
BBgwFoAU1MD4wj9/K3hiErklC7GZaY82JC8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnFvc0VGSFZRYmVRdnk4aWt0ZE56cFdOSEtjQjF6ZVY0bVNkNkYxZWEx
V04vMC9ENEMwRjhDMjNGN0YyQjc4NjIxMkI5MjUwQkIxOTk2OThGMzYyNDJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0QzBGOEMyM0Y3RjJCNzg2
MjEyQjkyNTBCQjE5OTY5OEYzNjI0MkYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJxb3NFRkhWUWJlUXZ5OGlrdGROenBXTkhLY0IxemVWNG1TZDZGMWVhMVdOLzAv
MzEzNjM4MmUzMTM5MzcyZTMyMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjF5DANBgkqhkiG9w0BAQsFAAOCAQEAQU0i
jc9x3u1kQ5WzdXspEKe7WYXDP9gbjrmMvNZdr+v9BLQJEW9JQMriYWVU3rSqsy+K
fu73xj0DMmXGk3MsUsfprHWwR6OVyPn8r84LU++QEoCmXYdgHwdzxklY3LVGHsc8
CNHVcF0NWmBGMJKipMPx47ecpFtrbH17PFVirg6WLbIvyu6T2l+EEXeExHU6yWQn
5KBhesIQCNq7E1tIAOsJ3eX/FH0VFGhxfejovNQYxltUv9HhpDoCL29niX+39rlq
iijyRnnn0vvem0uuLTa6i7dBeOT/SnrheXcEmT/stzhT+V+kbjh4ZgTEqTKpsvAY
72oeZrG6psMpiFN7kA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:45:10 2026 by rpki-client