Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/3136382e3132312e3130342e302f32322d3332203d3e20323635333230.roa
File:                     3136382e3132312e3130342e302f32322d3332203d3e20323635333230.roa (raw, json)
Hash identifier:          zGFYQ4i5hwfDjePCZ0kvix1pucJjKrpWZHnv0ZxopmE=
Subject key identifier:   0E:EA:34:50:38:B7:F3:00:72:55:8C:A1:AB:9F:8C:0E:5F:64:DB:D4
Certificate issuer:       /CN=D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE
Certificate serial:       0988159DBF9F53C502C45512A8E30F2B2961D2A4
Authority key identifier: D0:1B:7B:99:D6:6F:CD:E6:B6:DC:2C:DF:54:E7:96:A8:8E:D5:1A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/3136382e3132312e3130342e302f32322d3332203d3e20323635333230.roa
Signing time:             Fri 06 Mar 2026 01:45:34 +0000
ROA not before:           Fri 06 Mar 2026 01:40:34 +0000
ROA not after:            Fri 05 Mar 2027 01:45:34 +0000
asID:                     265320
IP address blocks:        168.121.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.crl
                          rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 06:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:88:15:9d:bf:9f:53:c5:02:c4:55:12:a8:e3:0f:2b:29:61:d2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE
        Validity
            Not Before: Mar  6 01:40:34 2026 GMT
            Not After : Mar  5 01:45:34 2027 GMT
        Subject: CN=0EEA345038B7F30072558CA1AB9F8C0E5F64DBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:b0:80:f7:67:24:b6:7a:5b:e3:b3:c7:18:
                    5d:5f:2b:d5:c1:42:c9:7f:7a:3c:b6:35:c1:c2:38:
                    be:86:24:f4:bc:41:cb:87:f7:74:77:5c:55:87:f0:
                    54:c7:30:ea:36:cd:09:5c:ed:ba:e1:c9:69:06:c9:
                    94:72:71:a7:ce:30:c6:00:d5:53:94:45:e0:7d:05:
                    96:70:ac:74:27:8c:16:11:30:09:ac:a3:29:69:e7:
                    ca:6a:00:7a:39:c4:a0:d0:46:eb:de:d3:8d:2f:f1:
                    34:d6:f5:73:16:23:53:c2:e5:8c:ed:b3:3a:92:20:
                    d9:b8:35:5d:d2:47:25:f6:67:0f:85:6c:93:96:4c:
                    5a:0f:8a:73:6a:55:36:4b:bc:17:17:84:1e:b5:8a:
                    b4:9d:57:bc:b8:32:23:d2:cc:f2:e1:2e:2b:29:04:
                    af:f6:05:3d:e2:a2:9b:34:01:ae:c4:23:72:2b:e7:
                    77:7f:49:b3:44:b9:47:49:a2:57:75:ac:4b:e4:ee:
                    ac:5c:02:eb:f6:6a:ed:86:22:ed:fe:9f:62:15:60:
                    82:63:28:1c:44:13:c0:a8:9a:2f:c7:ac:d3:b5:6b:
                    1a:ff:01:a1:78:e7:4d:c0:60:b1:d0:05:dd:b8:80:
                    a9:36:02:ba:6e:ef:c5:ed:45:91:1e:6d:16:32:09:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EA:34:50:38:B7:F3:00:72:55:8C:A1:AB:9F:8C:0E:5F:64:DB:D4
            X509v3 Authority Key Identifier:
                keyid:D0:1B:7B:99:D6:6F:CD:E6:B6:DC:2C:DF:54:E7:96:A8:8E:D5:1A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D01B7B99D66FCDE6B6DC2CDF54E796A88ED51AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fKTS62atHiGiACTvMJDBRCKVaVtQ1Fnh2b6b8WGVvvr/0/3136382e3132312e3130342e302f32322d3332203d3e20323635333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:8a:89:73:37:ba:0c:2d:78:78:2a:71:af:74:fc:7f:1e:
         34:b9:97:2a:72:0c:10:5e:7b:17:19:22:6f:92:d2:d8:32:eb:
         f5:cf:bb:7b:bb:57:e5:02:6d:c3:1f:1f:a2:f6:cc:07:c3:05:
         9b:53:95:d0:7d:67:bb:34:e8:ce:06:80:63:5a:3a:f7:0a:b2:
         0a:66:3a:c8:7a:2f:1c:c4:3d:98:1e:86:f6:44:d4:9d:24:ff:
         45:bd:b4:e0:ac:c7:50:50:e4:2e:59:b4:4d:cd:4a:89:e9:58:
         8d:1a:b8:bc:cb:45:29:5c:9e:8a:09:43:f0:fa:ec:b0:bf:96:
         b8:d9:c2:8f:56:a8:6d:f7:22:42:cf:77:32:32:23:4d:75:6b:
         d4:cf:a9:5d:10:cb:0d:b7:e9:58:cf:a9:d4:74:65:09:23:c7:
         67:51:4b:e2:b1:1b:10:6e:47:dc:63:05:a8:e9:bb:61:d1:59:
         67:6a:d8:99:35:17:b2:68:f6:9e:f1:c0:f1:c6:16:9e:fb:a8:
         3e:5a:64:c4:10:63:61:4f:85:e8:a4:82:00:a0:da:30:54:b1:
         cc:fe:8e:8f:37:89:88:21:b0:0d:3d:60:59:0d:74:d0:ce:fa:
         ce:68:c3:87:9c:1b:9f:37:5a:b5:1d:2a:ab:22:02:f3:ec:6c:
         5e:21:14:1d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCYgVnb+fU8UCxFUSqOMPKylh0qQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAxQjdCOTlENjZGQ0RFNkI2REMyQ0RGNTRFNzk2QTg4
RUQ1MUFBRTAeFw0yNjAzMDYwMTQwMzRaFw0yNzAzMDUwMTQ1MzRaMDMxMTAvBgNV
BAMTKDBFRUEzNDUwMzhCN0YzMDA3MjU1OENBMUFCOUY4QzBFNUY2NERCRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZKLCA92cktnpb47PHGF1fK9XB
Qsl/ejy2NcHCOL6GJPS8QcuH93R3XFWH8FTHMOo2zQlc7brhyWkGyZRycafOMMYA
1VOUReB9BZZwrHQnjBYRMAmsoylp58pqAHo5xKDQRuve040v8TTW9XMWI1PC5Yzt
szqSINm4NV3SRyX2Zw+FbJOWTFoPinNqVTZLvBcXhB61irSdV7y4MiPSzPLhLisp
BK/2BT3iops0Aa7EI3Ir53d/SbNEuUdJold1rEvk7qxcAuv2au2GIu3+n2IVYIJj
KBxEE8Comi/HrNO1axr/AaF4503AYLHQBd24gKk2Arpu78XtRZEebRYyCQwtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDuo0UDi38wByVYyhq5+MDl9k29QwHwYDVR0j
BBgwFoAU0Bt7mdZvzea23CzfVOeWqI7VGq4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZLVFM2MmF0SGlHaUFDVHZNSkRCUkNLVmFWdFExRm5oMmI2YjhXR1Z2
dnIvMC9EMDFCN0I5OUQ2NkZDREU2QjZEQzJDREY1NEU3OTZBODhFRDUxQUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwMUI3Qjk5RDY2RkNERTZC
NkRDMkNERjU0RTc5NkE4OEVENTFBQUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhmS1RTNjJhdEhpR2lBQ1R2TUpEQlJDS1ZhVnRRMUZuaDJiNmI4V0dWdnZyLzAv
MzEzNjM4MmUzMTMyMzEyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNTMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5aDANBgkqhkiG9w0BAQsFAAOCAQEAPQ+K
iXM3ugwteHgqca90/H8eNLmXKnIMEF57Fxkib5LS2DLr9c+7e7tX5QJtwx8fovbM
B8MFm1OV0H1nuzTozgaAY1o69wqyCmY6yHovHMQ9mB6G9kTUnST/Rb204KzHUFDk
Llm0Tc1KielYjRq4vMtFKVyeiglD8PrssL+WuNnCj1aobfciQs93MjIjTXVr1M+p
XRDLDbfpWM+p1HRlCSPHZ1FL4rEbEG5H3GMFqOm7YdFZZ2rYmTUXsmj2nvHA8cYW
nvuoPlpkxBBjYU+F6KSCAKDaMFSxzP6OjzeJiCGwDT1gWQ100M76zmjDh5wbnzda
tR0qqyIC8+xsXiEUHQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:42:27 2026 by rpki-client