Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa
File:                     3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa (raw, json)
Hash identifier:          CNcl4T68L+qU0KlKeURJjtifYZjZ58kJM1d7CdoP2AU=
Subject key identifier:   29:9A:A6:0C:AA:54:A7:7E:5C:C8:DA:2B:01:54:E5:F5:4A:B3:87:EE
Certificate issuer:       /CN=6AE14256892C56A512E61A5576E8BB4674AB83E4
Certificate serial:       0A445E7E8A99641E82B832B18AC699DDD3FB131C
Authority key identifier: 6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa
Signing time:             Thu 08 Oct 2026 13:30:41 +0000
ROA not before:           Thu 08 Oct 2026 13:25:41 +0000
ROA not after:            Thu 07 Oct 2027 13:30:41 +0000
asID:                     271013
IP address blocks:        168.181.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.crl
                          rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 10:44:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:44:5e:7e:8a:99:64:1e:82:b8:32:b1:8a:c6:99:dd:d3:fb:13:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AE14256892C56A512E61A5576E8BB4674AB83E4
        Validity
            Not Before: Oct  8 13:25:41 2026 GMT
            Not After : Oct  7 13:30:41 2027 GMT
        Subject: CN=299AA60CAA54A77E5CC8DA2B0154E5F54AB387EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:35:a3:16:5a:91:7b:90:3f:3e:4e:ae:7c:
                    72:42:a1:64:11:b5:9e:0d:87:5b:2f:f9:e3:7b:2e:
                    b5:90:fa:32:f9:6b:f2:0a:18:58:c8:1e:32:08:ef:
                    ca:f2:e3:a4:c2:b4:58:76:f7:97:05:8d:69:81:2c:
                    9b:9f:46:bd:2a:ea:63:8d:53:30:fc:a0:40:15:39:
                    2a:0e:de:ff:8c:0d:58:e6:6f:20:0c:1e:57:a4:e5:
                    9b:82:13:ec:6a:fd:6f:e9:73:68:51:dc:46:d5:c7:
                    0d:6d:85:40:ad:be:5e:ad:fc:f2:24:3e:08:43:2e:
                    01:c1:be:1b:d1:ce:ba:b6:c7:ee:41:7d:f7:51:07:
                    78:0a:9e:c7:46:db:23:13:cf:2c:56:08:7e:8f:97:
                    ba:ab:a2:55:bd:cd:e2:bd:46:e6:e2:60:ef:d5:6d:
                    f2:b1:54:0b:92:c8:5b:b1:7c:2b:22:60:1a:e3:af:
                    77:97:23:96:5f:b7:06:2b:a5:86:3d:af:06:87:01:
                    e2:9c:3b:63:10:90:44:46:50:6b:ab:a1:92:ff:05:
                    a4:1c:1b:16:37:de:74:14:2a:3c:b4:c6:ec:e0:cd:
                    02:6d:5a:4f:d4:a2:b7:73:ae:59:80:31:e0:fa:b1:
                    1c:49:cd:8f:ea:72:0f:33:a1:50:d3:d7:5a:c6:53:
                    4c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:A6:0C:AA:54:A7:7E:5C:C8:DA:2B:01:54:E5:F5:4A:B3:87:EE
            X509v3 Authority Key Identifier:
                keyid:6A:E1:42:56:89:2C:56:A5:12:E6:1A:55:76:E8:BB:46:74:AB:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/6AE14256892C56A512E61A5576E8BB4674AB83E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6AE14256892C56A512E61A5576E8BB4674AB83E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5tJr64pk1Nv7pXKHipi4fTBB4Rs5bmGa3VEQa3NcmpAX/0/3136382e3138312e3130302e302f32322d3234203d3e20323731303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:b2:2b:ef:ea:83:23:bf:2a:9e:3f:8b:aa:64:0f:fe:04:
         fa:22:02:c8:a7:fe:d5:61:e4:96:26:f5:fd:f2:5f:76:e1:5c:
         5c:94:6b:a4:12:dc:62:6b:89:fa:e4:c0:e0:a3:5f:0f:bb:f5:
         63:9e:8f:1e:14:4b:79:65:5f:0a:70:6b:31:da:b9:68:1b:b0:
         a4:3f:08:0c:c7:88:50:37:7d:4d:17:a9:e3:d8:ed:79:9f:1f:
         fe:aa:07:99:c7:c8:c7:66:a1:1a:26:96:45:84:08:7f:a2:54:
         71:3b:9f:97:76:0e:48:82:e9:a7:1b:81:c7:30:23:8c:fc:ba:
         06:40:cf:ee:2d:1f:ca:cf:ef:ba:40:1f:a9:57:82:58:25:56:
         c0:d6:0d:44:3f:de:6f:48:fd:02:fc:19:ec:14:d6:bc:55:d8:
         d1:81:e2:5a:e8:eb:5b:76:c9:97:c2:88:1a:db:2d:9d:c0:f1:
         9c:cf:1f:fb:c7:8b:fb:ec:9e:e9:f7:43:94:1c:a5:cd:d0:79:
         a0:7f:68:52:51:cb:a2:c3:14:45:15:46:4f:6b:1a:cb:e9:32:
         38:4e:f4:cb:82:d5:fa:ab:b5:7a:2c:6f:b4:fb:a2:2b:e2:d4:
         cf:a7:f8:35:49:76:56:99:70:9a:00:b6:40:ae:73:6c:32:c1:
         a5:5f:b8:d7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCkRefoqZZB6CuDKxisaZ3dP7ExwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFFMTQyNTY4OTJDNTZBNTEyRTYxQTU1NzZFOEJCNDY3
NEFCODNFNDAeFw0yNjEwMDgxMzI1NDFaFw0yNzEwMDcxMzMwNDFaMDMxMTAvBgNV
BAMTKDI5OUFBNjBDQUE1NEE3N0U1Q0M4REEyQjAxNTRFNUY1NEFCMzg3RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOLDWjFlqRe5A/Pk6ufHJCoWQR
tZ4Nh1sv+eN7LrWQ+jL5a/IKGFjIHjII78ry46TCtFh295cFjWmBLJufRr0q6mON
UzD8oEAVOSoO3v+MDVjmbyAMHlek5ZuCE+xq/W/pc2hR3EbVxw1thUCtvl6t/PIk
PghDLgHBvhvRzrq2x+5BffdRB3gKnsdG2yMTzyxWCH6Pl7qrolW9zeK9RubiYO/V
bfKxVAuSyFuxfCsiYBrjr3eXI5ZftwYrpYY9rwaHAeKcO2MQkERGUGuroZL/BaQc
GxY33nQUKjy0xuzgzQJtWk/UordzrlmAMeD6sRxJzY/qcg8zoVDT11rGU0wFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKZqmDKpUp35cyNorAVTl9Uqzh+4wHwYDVR0j
BBgwFoAUauFCVoksVqUS5hpVdui7RnSrg+QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXRKcjY0cGsxTnY3cFhLSGlwaTRmVEJCNFJzNWJtR2EzVkVRYTNOY21w
QVgvMC82QUUxNDI1Njg5MkM1NkE1MTJFNjFBNTU3NkU4QkI0Njc0QUI4M0U0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBRTE0MjU2ODkyQzU2QTUx
MkU2MUE1NTc2RThCQjQ2NzRBQjgzRTQuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV0SnI2NHBrMU52N3BYS0hpcGk0ZlRCQjRSczVibUdhM1ZFUWEzTmNtcEFYLzAv
MzEzNjM4MmUzMTM4MzEyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzczMTMwMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqi1ZDANBgkqhkiG9w0BAQsFAAOCAQEAOZ2y
K+/qgyO/Kp4/i6pkD/4E+iICyKf+1WHklib1/fJfduFcXJRrpBLcYmuJ+uTA4KNf
D7v1Y56PHhRLeWVfCnBrMdq5aBuwpD8IDMeIUDd9TRep49jteZ8f/qoHmcfIx2ah
GiaWRYQIf6JUcTufl3YOSILppxuBxzAjjPy6BkDP7i0fys/vukAfqVeCWCVWwNYN
RD/eb0j9AvwZ7BTWvFXY0YHiWujrW3bJl8KIGtstncDxnM8f+8eL++ye6fdDlByl
zdB5oH9oUlHLosMURRVGT2say+kyOE70y4LV+qu1eixvtPuiK+LUz6f4NUl2Vplw
mgC2QK5zbDLBpV+41w==
-----END CERTIFICATE-----
Generated at Thu Oct 29 03:56:14 2026 by rpki-client