Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa
File:                     3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa (raw, json)
Hash identifier:          0KcGnI9+IeJJj03B0+gdQx296GXEgIWMs1pxVmVanfI=
Subject key identifier:   66:35:09:04:B0:6E:E0:47:C2:FC:B5:D1:24:32:40:2E:B8:43:D5:0C
Certificate issuer:       /CN=E052629FE592DB1F943C5FDDB47444A83C43817D
Certificate serial:       703EF940558E87E6DA76A0B729C2BF2F86049179
Authority key identifier: E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa
Signing time:             Thu 16 Jul 2026 20:46:13 +0000
ROA not before:           Thu 16 Jul 2026 20:41:13 +0000
ROA not after:            Thu 15 Jul 2027 20:46:13 +0000
asID:                     265328
IP address blocks:        168.181.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl
                          rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:3e:f9:40:55:8e:87:e6:da:76:a0:b7:29:c2:bf:2f:86:04:91:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E052629FE592DB1F943C5FDDB47444A83C43817D
        Validity
            Not Before: Jul 16 20:41:13 2026 GMT
            Not After : Jul 15 20:46:13 2027 GMT
        Subject: CN=66350904B06EE047C2FCB5D12432402EB843D50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:27:30:a6:ab:4b:3f:3e:44:ee:47:e8:3e:
                    b5:29:ef:cc:ac:18:4a:8e:52:d9:0c:9c:48:a7:4a:
                    8b:58:3f:7a:58:1f:8c:a8:e7:f6:54:b9:83:e2:7e:
                    e9:fa:e8:00:59:2b:9e:67:ce:99:ed:81:cc:52:bf:
                    fa:d9:d2:6e:fc:14:49:29:84:ba:59:9a:c1:bf:69:
                    87:ba:fa:c6:7f:70:c6:40:24:6b:ce:db:2c:7c:75:
                    42:01:df:57:08:0e:16:ff:81:d0:f6:b9:55:f3:8e:
                    8f:26:e5:3b:11:16:11:50:44:c4:29:77:9c:3f:cd:
                    a5:23:2a:42:08:6d:92:c3:51:9d:08:12:4e:2e:c3:
                    e5:d8:89:71:8d:43:3c:0a:10:78:11:66:0c:4b:1c:
                    56:52:26:35:20:c6:e3:eb:16:94:3e:30:1d:fe:23:
                    19:5d:d0:69:0e:58:ef:7f:61:64:11:cd:ae:4a:58:
                    37:2c:3a:54:7f:b3:c5:f9:f1:b7:85:66:9e:3b:59:
                    46:50:17:0c:20:cb:b6:e8:20:5b:5e:8a:d1:8c:6d:
                    60:be:e4:d8:38:36:91:05:9e:a4:30:f0:04:51:36:
                    e0:a1:83:0c:74:2b:cd:fc:08:fd:cc:a4:20:b2:fb:
                    a7:80:e5:f9:19:0a:93:c2:09:f8:fa:af:1f:1b:10:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:35:09:04:B0:6E:E0:47:C2:FC:B5:D1:24:32:40:2E:B8:43:D5:0C
            X509v3 Authority Key Identifier:
                keyid:E0:52:62:9F:E5:92:DB:1F:94:3C:5F:DD:B4:74:44:A8:3C:43:81:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/E052629FE592DB1F943C5FDDB47444A83C43817D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E052629FE592DB1F943C5FDDB47444A83C43817D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/3136382e3138312e36342e302f32342d3234203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         dc:1c:2b:26:cb:79:41:45:4b:05:0d:b2:97:81:82:be:1f:c8:
         d5:24:4c:bb:c7:91:59:fd:b0:b3:47:df:4a:bf:7d:81:33:29:
         a6:34:c9:aa:1c:fc:6c:1a:13:65:10:a5:ab:33:a8:9c:fa:1b:
         c1:73:00:5c:cb:a0:d4:03:21:4c:a4:c9:6f:a5:45:21:cd:5b:
         eb:d1:38:f0:dc:66:e9:3d:f6:20:5c:59:00:f3:7d:47:43:e4:
         dd:49:e7:b1:29:8f:77:30:21:93:e7:cd:1a:3d:98:c7:15:9e:
         1d:cf:0e:f6:0e:0e:64:7b:b9:60:ff:89:ec:97:1a:bb:fa:3e:
         24:f1:a0:b2:54:de:f4:e4:4a:72:02:64:b7:93:65:b1:1b:07:
         64:0d:cc:3f:d4:90:bf:26:65:92:67:5c:0a:50:d1:0b:cb:94:
         fb:82:74:62:08:b5:4a:4a:46:3c:4f:f3:c9:e4:39:76:cf:d0:
         05:96:ff:ce:95:f6:12:8f:bf:c2:74:1e:b1:39:b0:58:71:2f:
         03:1b:b6:52:f8:b0:e0:13:82:9d:fa:dd:08:7a:63:cb:e4:40:
         ae:1d:1e:be:d1:f4:2a:93:bc:4a:99:56:ab:27:67:20:f3:bc:
         cb:23:70:bf:c6:eb:2a:b9:3a:1b:60:e0:78:c6:68:85:df:3a:
         43:9f:1d:cc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcD75QFWOh+badqC3KcK/L4YEkXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA1MjYyOUZFNTkyREIxRjk0M0M1RkREQjQ3NDQ0QTgz
QzQzODE3RDAeFw0yNjA3MTYyMDQxMTNaFw0yNzA3MTUyMDQ2MTNaMDMxMTAvBgNV
BAMTKDY2MzUwOTA0QjA2RUUwNDdDMkZDQjVEMTI0MzI0MDJFQjg0M0Q1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaUycwpqtLPz5E7kfoPrUp78ys
GEqOUtkMnEinSotYP3pYH4yo5/ZUuYPifun66ABZK55nzpntgcxSv/rZ0m78FEkp
hLpZmsG/aYe6+sZ/cMZAJGvO2yx8dUIB31cIDhb/gdD2uVXzjo8m5TsRFhFQRMQp
d5w/zaUjKkIIbZLDUZ0IEk4uw+XYiXGNQzwKEHgRZgxLHFZSJjUgxuPrFpQ+MB3+
Ixld0GkOWO9/YWQRza5KWDcsOlR/s8X58beFZp47WUZQFwwgy7boIFteitGMbWC+
5Ng4NpEFnqQw8ARRNuChgwx0K838CP3MpCCy+6eA5fkZCpPCCfj6rx8bENYvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZjUJBLBu4EfC/LXRJDJALrhD1QwwHwYDVR0j
BBgwFoAU4FJin+WS2x+UPF/dtHREqDxDgX0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVRZNkc5a0tTWVZicVBzUmtrYnhuZEdldjVDbUFvZXRIZThoODNLVFFF
elUvMC9FMDUyNjI5RkU1OTJEQjFGOTQzQzVGRERCNDc0NDRBODNDNDM4MTdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UwNTI2MjlGRTU5MkRCMUY5
NDNDNUZEREI0NzQ0NEE4M0M0MzgxN0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlUWTZHOWtLU1lWYnFQc1Jra2J4bmRHZXY1Q21Bb2V0SGU4aDgzS1RRRXpVLzAv
MzEzNjM4MmUzMTM4MzEyZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzUzMzMyMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACotUAwDQYJKoZIhvcNAQELBQADggEBANwcKybL
eUFFSwUNspeBgr4fyNUkTLvHkVn9sLNH30q/fYEzKaY0yaoc/GwaE2UQpaszqJz6
G8FzAFzLoNQDIUykyW+lRSHNW+vROPDcZuk99iBcWQDzfUdD5N1J57Epj3cwIZPn
zRo9mMcVnh3PDvYODmR7uWD/ieyXGrv6PiTxoLJU3vTkSnICZLeTZbEbB2QNzD/U
kL8mZZJnXApQ0QvLlPuCdGIItUpKRjxP88nkOXbP0AWW/86V9hKPv8J0HrE5sFhx
LwMbtlL4sOATgp363Qh6Y8vkQK4dHr7R9CqTvEqZVqsnZyDzvMsjcL/G6yq5Ohtg
4HjGaIXfOkOfHcw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:05:49 2026 by rpki-client