Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32342d3332203d3e20323634343332.roa
File:                     3136382e3139352e3134382e302f32342d3332203d3e20323634343332.roa (raw, json)
Hash identifier:          +LofzBYqHttCTKgnfYbvsG9Ae1tE9UWquqnaPO4Y2RY=
Subject key identifier:   4C:BA:CB:56:41:CF:74:11:7D:5F:30:27:FC:6D:D0:E3:E0:64:54:DA
Certificate issuer:       /CN=093A10887A94FA2BB0F559720DA640851BC55675
Certificate serial:       5AD43C5459A06B1951D7EC1E29396411C7A4615B
Authority key identifier: 09:3A:10:88:7A:94:FA:2B:B0:F5:59:72:0D:A6:40:85:1B:C5:56:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32342d3332203d3e20323634343332.roa
Signing time:             Fri 20 Mar 2026 11:59:21 +0000
ROA not before:           Fri 20 Mar 2026 11:54:21 +0000
ROA not after:            Fri 19 Mar 2027 11:59:21 +0000
asID:                     264432
IP address blocks:        168.195.148.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.crl
                          rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 13:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d4:3c:54:59:a0:6b:19:51:d7:ec:1e:29:39:64:11:c7:a4:61:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093A10887A94FA2BB0F559720DA640851BC55675
        Validity
            Not Before: Mar 20 11:54:21 2026 GMT
            Not After : Mar 19 11:59:21 2027 GMT
        Subject: CN=4CBACB5641CF74117D5F3027FC6DD0E3E06454DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:1f:2a:43:8c:bc:29:20:4b:af:06:ff:30:
                    cc:68:a5:c1:93:3c:83:d7:72:15:58:22:76:90:3c:
                    db:88:77:99:96:15:9c:78:14:be:9c:3d:ea:4f:d8:
                    d9:f1:77:79:91:9b:08:3a:b9:d6:5e:4d:c7:4a:46:
                    b0:d9:5d:a2:bb:db:c3:b4:f6:a5:cf:1c:73:db:7b:
                    75:e3:f9:c4:0e:f2:ac:de:77:f2:b1:b5:c3:9a:65:
                    5a:b3:e0:f2:0f:e6:62:2f:3d:12:79:62:36:05:8f:
                    fb:f4:56:64:f5:e2:9f:b5:6a:72:c4:6f:a6:e9:d7:
                    d5:fd:80:12:cb:ef:1e:b9:64:77:26:a8:ed:3c:ab:
                    32:9c:73:9e:22:f7:51:0b:c4:90:1d:3e:e6:dc:55:
                    48:aa:3e:6d:c8:45:d2:63:01:d0:a1:02:c0:d0:71:
                    28:8a:5c:85:4c:5a:5e:6d:c8:c5:77:fc:1d:53:31:
                    a7:18:ef:21:83:98:f4:33:6a:4f:ee:18:36:2c:92:
                    9c:d3:70:6c:c5:9b:18:9c:10:b3:b7:ab:13:79:5d:
                    bd:22:fb:8a:6e:ab:73:00:6c:73:10:7d:2d:4d:e1:
                    fd:1a:35:d2:d1:be:ae:b2:57:8d:98:92:e6:52:ab:
                    57:f9:aa:e7:a4:d9:76:7b:c1:1d:bf:bf:b7:6a:cf:
                    2f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:CB:56:41:CF:74:11:7D:5F:30:27:FC:6D:D0:E3:E0:64:54:DA
            X509v3 Authority Key Identifier:
                keyid:09:3A:10:88:7A:94:FA:2B:B0:F5:59:72:0D:A6:40:85:1B:C5:56:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/093A10887A94FA2BB0F559720DA640851BC55675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/093A10887A94FA2BB0F559720DA640851BC55675.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTVz8JwQ4q7wwg8zr15XRR4bvrsSei71f4eRmcLcBVi7/0/3136382e3139352e3134382e302f32342d3332203d3e20323634343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:55:38:e1:50:be:77:8e:7e:8e:50:b3:90:66:32:72:a1:
         10:09:de:23:36:c0:70:2f:39:7c:61:e2:ee:09:33:6f:0f:ef:
         c4:fb:20:2d:fd:21:ea:d4:ec:e9:63:4d:a2:fe:41:92:ef:42:
         af:4f:aa:40:c9:a5:77:da:a1:45:47:ba:c6:33:92:33:77:1a:
         09:34:03:c0:d3:4b:e7:dc:95:b5:fe:af:3d:60:5f:21:2a:65:
         7e:3c:dd:63:aa:31:c8:c4:4b:f7:35:90:4b:28:b6:44:83:92:
         7d:04:cf:b1:06:10:21:5e:59:a0:5c:a4:fd:5f:da:46:63:27:
         69:96:fc:73:2e:ad:ad:b3:5d:eb:0d:c0:74:08:00:d2:7a:5e:
         65:23:78:22:b7:84:c1:2f:c2:6a:4e:26:cc:46:a1:91:78:13:
         b5:dd:1d:ef:84:0f:1e:8a:a5:f3:57:e1:eb:38:47:da:00:bf:
         38:43:30:19:85:d1:03:ac:5c:5f:fd:f7:16:64:f9:38:63:98:
         93:dd:30:92:7b:3f:70:7a:cc:cf:92:d6:78:16:a1:5e:dc:be:
         f1:a7:03:e4:a9:1d:b4:57:21:dd:f8:0c:10:18:67:88:a1:bd:
         00:8d:0d:48:38:77:b2:d3:c6:a9:5d:ec:de:00:f0:00:5f:03:
         8f:27:6f:ec
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWtQ8VFmgaxlR1+weKTlkEcekYVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkzQTEwODg3QTk0RkEyQkIwRjU1OTcyMERBNjQwODUx
QkM1NTY3NTAeFw0yNjAzMjAxMTU0MjFaFw0yNzAzMTkxMTU5MjFaMDMxMTAvBgNV
BAMTKDRDQkFDQjU2NDFDRjc0MTE3RDVGMzAyN0ZDNkREMEUzRTA2NDU0REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JR8qQ4y8KSBLrwb/MMxopcGT
PIPXchVYInaQPNuId5mWFZx4FL6cPepP2Nnxd3mRmwg6udZeTcdKRrDZXaK728O0
9qXPHHPbe3Xj+cQO8qzed/KxtcOaZVqz4PIP5mIvPRJ5YjYFj/v0VmT14p+1anLE
b6bp19X9gBLL7x65ZHcmqO08qzKcc54i91ELxJAdPubcVUiqPm3IRdJjAdChAsDQ
cSiKXIVMWl5tyMV3/B1TMacY7yGDmPQzak/uGDYskpzTcGzFmxicELO3qxN5Xb0i
+4puq3MAbHMQfS1N4f0aNdLRvq6yV42YkuZSq1f5quek2XZ7wR2/v7dqzy99AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTLrLVkHPdBF9XzAn/G3Q4+BkVNowHwYDVR0j
BBgwFoAUCToQiHqU+iuw9VlyDaZAhRvFVnUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlRWejhKd1E0cTd3d2c4enIxNVhSUjRidnJzU2VpNzFmNGVSbWNMY0JW
aTcvMC8wOTNBMTA4ODdBOTRGQTJCQjBGNTU5NzIwREE2NDA4NTFCQzU1Njc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA5M0ExMDg4N0E5NEZBMkJC
MEY1NTk3MjBEQTY0MDg1MUJDNTU2NzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JUVno4SndRNHE3d3dnOHpyMTVYUlI0YnZyc1NlaTcxZjRlUm1jTGNCVmk3LzAv
MzEzNjM4MmUzMTM5MzUyZTMxMzQzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzNDM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjDlDANBgkqhkiG9w0BAQsFAAOCAQEAbH9V
OOFQvneOfo5Qs5BmMnKhEAneIzbAcC85fGHi7gkzbw/vxPsgLf0h6tTs6WNNov5B
ku9Cr0+qQMmld9qhRUe6xjOSM3caCTQDwNNL59yVtf6vPWBfISplfjzdY6oxyMRL
9zWQSyi2RIOSfQTPsQYQIV5ZoFyk/V/aRmMnaZb8cy6trbNd6w3AdAgA0npeZSN4
IreEwS/Cak4mzEahkXgTtd0d74QPHoql81fh6zhH2gC/OEMwGYXRA6xcX/33FmT5
OGOYk90wkns/cHrMz5LWeBahXty+8acD5KkdtFch3fgMEBhniKG9AI0NSDh3stPG
qV3s3gDwAF8Djydv7A==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:21:10 2026 by rpki-client