Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa
File:                     3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa (raw, json)
Hash identifier:          xnyUhAIHOb4bpeMHi7seF2ok4b6FV/ZjCMS8eRytktA=
Subject key identifier:   09:82:8A:38:AD:2A:24:60:C1:83:DD:67:19:4F:BC:5D:4B:65:8E:24
Certificate issuer:       /CN=065E3409E65889AAF6B851D59C66CD22E4619409
Certificate serial:       19023E7D87A0F331B12733B0721C48DBF05A20D1
Authority key identifier: 06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa
Signing time:             Wed 11 Mar 2026 13:54:18 +0000
ROA not before:           Wed 11 Mar 2026 13:49:18 +0000
ROA not after:            Wed 10 Mar 2027 13:54:18 +0000
asID:                     265461
IP address blocks:        168.196.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl
                          rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 21:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:02:3e:7d:87:a0:f3:31:b1:27:33:b0:72:1c:48:db:f0:5a:20:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065E3409E65889AAF6B851D59C66CD22E4619409
        Validity
            Not Before: Mar 11 13:49:18 2026 GMT
            Not After : Mar 10 13:54:18 2027 GMT
        Subject: CN=09828A38AD2A2460C183DD67194FBC5D4B658E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:aa:85:61:1f:9d:4a:00:55:ab:56:bd:cf:
                    f4:9a:b4:d2:cf:0b:03:9d:9d:07:dd:5d:23:a0:d0:
                    a7:04:1a:b6:9b:b0:be:b0:66:20:39:df:9b:2b:61:
                    3e:d0:9a:b8:e5:96:64:76:36:99:71:30:86:45:dc:
                    8b:ce:f8:97:9f:7f:4c:65:96:75:36:50:97:2b:86:
                    fd:7f:49:cd:4f:a2:ce:de:80:8b:3e:16:76:e5:83:
                    23:26:5f:4b:7e:3a:db:38:de:f2:3f:ad:8c:47:02:
                    cf:9a:f9:55:ef:76:12:51:f6:36:cc:4c:e8:69:0e:
                    56:7d:e2:ff:19:92:e4:bf:e4:16:ca:54:4f:48:48:
                    a6:6a:8d:c9:98:56:2c:88:92:ef:17:0a:b1:cb:d0:
                    ce:d1:b7:a0:b1:14:7a:f1:4b:84:34:d6:ee:db:7e:
                    b2:a1:82:bf:b9:4e:54:65:3e:1e:f8:02:f4:1e:ac:
                    aa:67:70:c1:28:e3:18:bb:ca:02:3f:3d:29:6d:80:
                    0d:e1:a8:40:af:33:52:b4:5c:dd:3a:e3:7c:29:71:
                    1e:1f:07:a8:d6:6b:03:1c:16:5f:92:56:6a:5d:c8:
                    31:ee:f4:64:2c:ef:64:6d:f7:2d:1d:66:2b:d0:38:
                    54:22:f2:77:de:72:fb:20:8c:19:10:86:10:8c:d8:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:82:8A:38:AD:2A:24:60:C1:83:DD:67:19:4F:BC:5D:4B:65:8E:24
            X509v3 Authority Key Identifier:
                keyid:06:5E:34:09:E6:58:89:AA:F6:B8:51:D5:9C:66:CD:22:E4:61:94:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/065E3409E65889AAF6B851D59C66CD22E4619409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/065E3409E65889AAF6B851D59C66CD22E4619409.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/3136382e3139362e3135352e302f32342d3234203d3e20323635343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:f1:f3:3f:25:f9:84:b1:ed:bf:7b:5c:50:b3:71:8f:4b:15:
         27:40:31:b1:70:4f:95:a3:40:2a:c3:31:40:b4:fe:9b:1f:28:
         e8:92:ce:75:89:28:fd:7c:1b:35:45:95:aa:f0:84:e9:72:d4:
         33:42:ff:74:90:b9:ba:c2:8a:bf:cd:9d:cf:58:02:13:cc:8a:
         ce:a7:44:ae:8a:06:f1:27:31:8a:69:be:97:82:c8:eb:e7:67:
         47:19:f4:50:2b:6a:79:7f:33:d0:29:60:5c:a3:db:43:84:b4:
         dc:65:d5:d6:2e:00:25:ee:7a:bf:4c:c4:21:ac:ec:25:47:f6:
         fc:2e:0c:96:db:72:16:a4:05:91:da:0d:16:0c:7e:cd:67:61:
         cf:6a:04:e9:18:ed:24:71:97:a6:c2:28:1a:a9:3c:9a:2e:e1:
         0c:b6:af:97:07:4d:e2:40:28:d1:9e:06:d3:0d:52:52:cb:fc:
         7b:a6:4a:41:5e:59:bc:a0:03:b9:49:a8:94:d2:dd:44:27:3c:
         3a:45:4d:23:b0:ee:5a:33:33:89:b6:ff:db:d9:34:3c:2c:62:
         d0:15:68:dd:f8:2e:a8:b1:45:06:08:81:ab:30:8a:ff:fb:0a:
         0a:ba:36:2e:2d:3f:c6:72:47:44:2d:cc:55:67:6b:32:e1:2c:
         4c:55:c2:11
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGQI+fYeg8zGxJzOwchxI2/BaINEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY1RTM0MDlFNjU4ODlBQUY2Qjg1MUQ1OUM2NkNEMjJF
NDYxOTQwOTAeFw0yNjAzMTExMzQ5MThaFw0yNzAzMTAxMzU0MThaMDMxMTAvBgNV
BAMTKDA5ODI4QTM4QUQyQTI0NjBDMTgzREQ2NzE5NEZCQzVENEI2NThFMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE96qFYR+dSgBVq1a9z/SatNLP
CwOdnQfdXSOg0KcEGrabsL6wZiA535srYT7QmrjllmR2NplxMIZF3IvO+Jeff0xl
lnU2UJcrhv1/Sc1Pos7egIs+FnblgyMmX0t+Ots43vI/rYxHAs+a+VXvdhJR9jbM
TOhpDlZ94v8ZkuS/5BbKVE9ISKZqjcmYViyIku8XCrHL0M7Rt6CxFHrxS4Q01u7b
frKhgr+5TlRlPh74AvQerKpncMEo4xi7ygI/PSltgA3hqECvM1K0XN0643wpcR4f
B6jWawMcFl+SVmpdyDHu9GQs72Rt9y0dZivQOFQi8nfecvsgjBkQhhCM2JMjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUCYKKOK0qJGDBg91nGU+8XUtljiQwHwYDVR0j
BBgwFoAUBl40CeZYiar2uFHVnGbNIuRhlAkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVpZdFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNi
MncvMC8wNjVFMzQwOUU2NTg4OUFBRjZCODUxRDU5QzY2Q0QyMkU0NjE5NDA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA2NUUzNDA5RTY1ODg5QUFG
NkI4NTFENTlDNjZDRDIyRTQ2MTk0MDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlaWXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEmzANBgkqhkiG9w0BAQsFAAOCAQEAzfHz
PyX5hLHtv3tcULNxj0sVJ0AxsXBPlaNAKsMxQLT+mx8o6JLOdYko/XwbNUWVqvCE
6XLUM0L/dJC5usKKv82dz1gCE8yKzqdErooG8Scximm+l4LI6+dnRxn0UCtqeX8z
0ClgXKPbQ4S03GXV1i4AJe56v0zEIazsJUf2/C4MlttyFqQFkdoNFgx+zWdhz2oE
6RjtJHGXpsIoGqk8mi7hDLavlwdN4kAo0Z4G0w1SUsv8e6ZKQV5ZvKADuUmolNLd
RCc8OkVNI7DuWjMzibb/29k0PCxi0BVo3fguqLFFBgiBqzCK//sKCro2Li0/xnJH
RC3MVWdrMuEsTFXCEQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 02:21:29 2026 by rpki-client