Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
File:                     3136382e3132312e36342e302f32322d3332203d3e203238363439.roa (raw, json)
Hash identifier:          9uVxS0d/UHKqWa0Ckr3TvMUOg0Y50qGNeoRUaK3DH5I=
Subject key identifier:   12:E5:DE:D3:E7:84:AC:38:40:3C:9B:9A:24:31:DE:26:8C:F6:1A:DB
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       26AC6FB596F1343755B2C7630828E5BAE9FE2607
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:11 +0000
ROA not before:           Fri 17 Jul 2026 20:56:11 +0000
ROA not after:            Fri 16 Jul 2027 21:01:11 +0000
asID:                     28649
IP address blocks:        168.121.64.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:43:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ac:6f:b5:96:f1:34:37:55:b2:c7:63:08:28:e5:ba:e9:fe:26:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:11 2026 GMT
            Not After : Jul 16 21:01:11 2027 GMT
        Subject: CN=12E5DED3E784AC38403C9B9A2431DE268CF61ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:04:42:43:e0:3a:96:67:9f:3c:08:e4:5b:5e:
                    b6:10:33:a9:83:33:ae:a8:19:d0:00:26:25:b0:55:
                    ef:bc:61:37:f7:0b:5b:bf:37:bd:11:d8:37:ab:c9:
                    de:ca:75:02:07:83:1f:91:e8:6b:08:74:55:fc:d3:
                    50:8d:31:5e:cd:43:ca:0d:b8:be:10:f7:4d:b1:74:
                    3e:42:36:f8:be:39:3a:dd:8f:a6:e1:47:14:a1:79:
                    4d:21:db:da:1e:a8:10:ef:ae:ca:73:e2:f6:68:4e:
                    3e:4a:a7:f1:c1:ad:d2:75:fb:b9:61:17:ac:a6:b5:
                    dd:bb:65:f9:01:07:3a:91:6b:a5:b4:a9:46:e3:8d:
                    49:20:ef:64:31:b8:c9:38:0b:ff:b8:c7:1c:92:85:
                    01:f0:48:57:70:eb:3a:96:58:59:18:e1:8b:39:71:
                    7a:93:a7:5a:e4:f9:7b:a8:4e:75:37:f7:67:3b:97:
                    a8:6a:26:08:9d:14:14:d1:63:2c:5b:07:7d:66:ee:
                    eb:10:d6:7e:43:8c:24:1a:9e:ac:69:aa:18:e5:3d:
                    7a:87:1b:93:1b:c8:91:04:5b:34:c1:92:b9:30:6e:
                    99:52:0a:75:fa:5e:0d:01:92:94:59:03:6d:d9:16:
                    68:e7:d6:92:d7:0d:42:ec:f7:2c:91:bf:73:d9:42:
                    62:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E5:DE:D3:E7:84:AC:38:40:3C:9B:9A:24:31:DE:26:8C:F6:1A:DB
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3136382e3132312e36342e302f32322d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:0a:9e:0c:e3:7b:5a:93:b3:24:a7:78:f2:b2:d8:1a:cb:
         ed:32:5c:1d:c5:8f:4e:9d:e1:1b:43:8c:a7:37:45:5d:ab:c6:
         87:dc:fa:b2:0b:98:47:63:53:0b:3f:72:20:b5:7b:b5:08:7f:
         65:87:52:8a:dd:9e:21:b1:4b:8b:af:b3:a5:a8:1f:1a:b2:79:
         51:17:7d:66:7f:d2:02:24:b3:c8:b0:8c:59:91:19:38:c0:62:
         ed:03:eb:f3:0c:83:40:61:24:3f:08:1d:1f:da:f5:e2:5e:fd:
         46:3c:87:52:a9:7f:9f:94:df:93:0b:b9:10:36:c3:89:ab:fa:
         77:3c:51:75:f7:ee:9e:39:ba:1f:27:0b:86:8b:4a:82:33:f7:
         f6:ff:d8:a2:19:cd:33:cf:ef:ae:7f:06:1d:17:d0:39:f4:a1:
         00:7f:8a:1a:ec:38:bb:70:0c:6c:ca:38:1d:e3:a3:ed:05:90:
         f1:c9:43:b8:3a:31:6d:71:cd:80:06:bf:c3:2d:a1:24:f9:c0:
         35:58:c0:35:d1:7b:5e:c0:4a:43:2d:a8:9a:e4:e8:85:3d:8c:
         db:27:33:e1:2a:e7:40:e9:1b:a1:ed:98:7e:fb:99:e6:bb:c8:
         c2:a8:29:9d:28:6d:a8:52:bd:0f:d7:0b:d4:69:33:9e:fa:46:
         ed:51:77:b7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJqxvtZbxNDdVssdjCCjluun+JgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBNTc0MTM4RDBEOEZDMEEzNzZBQTIzREI0RTE1MzNG
RjBDNTY1MjAeFw0yNjA3MTcyMDU2MTFaFw0yNzA3MTYyMTAxMTFaMDMxMTAvBgNV
BAMTKDEyRTVERUQzRTc4NEFDMzg0MDNDOUI5QTI0MzFERTI2OENGNjFBREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBEJD4DqWZ588CORbXrYQM6mD
M66oGdAAJiWwVe+8YTf3C1u/N70R2Deryd7KdQIHgx+R6GsIdFX801CNMV7NQ8oN
uL4Q902xdD5CNvi+OTrdj6bhRxSheU0h29oeqBDvrspz4vZoTj5Kp/HBrdJ1+7lh
F6ymtd27ZfkBBzqRa6W0qUbjjUkg72QxuMk4C/+4xxyShQHwSFdw6zqWWFkY4Ys5
cXqTp1rk+XuoTnU392c7l6hqJgidFBTRYyxbB31m7usQ1n5DjCQanqxpqhjlPXqH
G5MbyJEEWzTBkrkwbplSCnX6Xg0BkpRZA23ZFmjn1pLXDULs9yyRv3PZQmJjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEuXe0+eErDhAPJuaJDHeJoz2GtswHwYDVR0j
BBgwFoAUAaV0E40Nj8Cjdqoj204VM/8MVlIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXQxSlpzODhqa3BqaEgyZVhiZDhjZWFvMnRrNFJ5MmlUaEJYc1VmVm8z
ZEsvMC8wMUE1NzQxMzhEMEQ4RkMwQTM3NkFBMjNEQjRFMTUzM0ZGMEM1NjUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQTU3NDEzOEQwRDhGQzBB
Mzc2QUEyM0RCNEUxNTMzRkYwQzU2NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F0MUpaczg4amtwamhIMmVYYmQ4Y2VhbzJ0azRSeTJpVGhCWHNVZlZvM2RLLzAv
MzEzNjM4MmUzMTMyMzEyZTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM4
MzYzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqHlAMA0GCSqGSIb3DQEBCwUAA4IBAQBI6QqeDON7
WpOzJKd48rLYGsvtMlwdxY9OneEbQ4ynN0Vdq8aH3PqyC5hHY1MLP3IgtXu1CH9l
h1KK3Z4hsUuLr7OlqB8asnlRF31mf9ICJLPIsIxZkRk4wGLtA+vzDINAYSQ/CB0f
2vXiXv1GPIdSqX+flN+TC7kQNsOJq/p3PFF19+6eObofJwuGi0qCM/f2/9iiGc0z
z++ufwYdF9A59KEAf4oa7Di7cAxsyjgd46PtBZDxyUO4OjFtcc2ABr/DLaEk+cA1
WMA10XtewEpDLaia5OiFPYzbJzPhKudA6Ruh7Zh++5nmu8jCqCmdKG2oUr0P1wvU
aTOe+kbtUXe3
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:31:19 2026 by rpki-client