Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
File:                     3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa (raw, json)
Hash identifier:          ekI6W8pWz4YvTqnse4zE7EQwtVgHLBkwdS1ksdC0kiM=
Subject key identifier:   65:0F:D5:5F:91:05:C7:A3:9F:89:5F:E8:9B:E5:18:4A:6B:1E:AB:2B
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       1C5A0F36BD3156F457A3C4C33E38D48E7597380D
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa
Signing time:             Wed 13 May 2026 12:36:16 +0000
ROA not before:           Wed 13 May 2026 12:31:16 +0000
ROA not after:            Wed 12 May 2027 12:36:16 +0000
asID:                     265465
IP address blocks:        168.196.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5a:0f:36:bd:31:56:f4:57:a3:c4:c3:3e:38:d4:8e:75:97:38:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: May 13 12:31:16 2026 GMT
            Not After : May 12 12:36:16 2027 GMT
        Subject: CN=650FD55F9105C7A39F895FE89BE5184A6B1EAB2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:93:d7:4f:1d:4b:34:b8:9f:37:2a:cf:d4:
                    0b:ec:0e:9e:66:68:d0:93:a0:63:2a:8d:b8:da:cb:
                    e0:c3:ae:3c:d4:97:aa:b3:43:58:ff:eb:1d:ca:20:
                    f8:0b:e9:d2:29:4c:40:51:57:10:fb:9d:35:ab:c8:
                    29:69:58:e8:72:24:4b:8d:c8:11:64:dd:a4:2b:72:
                    bc:13:2f:cd:cd:7a:f8:d0:bb:a8:ef:73:ad:6a:e3:
                    65:61:21:45:6c:d8:07:1d:eb:30:ee:c7:c4:35:59:
                    a8:e7:80:50:9f:25:a2:6a:93:60:2d:87:8f:e6:8e:
                    51:b9:0f:ca:86:0c:1c:fe:7f:04:1d:ca:f3:81:d3:
                    dc:1f:d0:85:2f:5c:68:8e:bf:e0:a6:e3:09:fd:84:
                    93:fe:96:61:07:14:06:de:ad:62:43:b2:99:6a:ce:
                    bd:7d:c7:37:5a:79:f9:bf:70:86:78:db:8a:87:34:
                    a6:95:4b:86:93:90:6b:4f:00:e9:62:ce:8a:5d:7f:
                    91:fd:cd:e4:16:43:aa:8d:dc:96:6b:c6:a3:00:b6:
                    eb:ac:dd:9d:92:31:77:a7:f5:05:aa:cd:67:a0:03:
                    5c:f4:88:0c:d0:50:0a:0a:cf:dc:b2:be:fc:8a:7e:
                    ea:ac:c0:90:5e:25:28:20:71:bc:95:60:b3:13:39:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:D5:5F:91:05:C7:A3:9F:89:5F:E8:9B:E5:18:4A:6B:1E:AB:2B
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136302e302f32322d3232203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:92:a7:9b:db:83:74:63:b5:18:fa:7e:3e:f6:e4:ed:e6:34:
         ba:c2:fa:aa:97:85:d0:f2:9d:08:52:d2:88:7f:99:e9:1e:91:
         11:05:a4:26:9b:c7:bc:a1:86:f4:c4:4e:53:cd:bd:f3:42:d7:
         81:16:b0:d8:4e:8f:78:c8:cd:75:dd:be:94:5a:a6:07:8e:d5:
         e7:c7:04:70:7e:1c:eb:6b:8a:5a:6e:2f:96:90:08:9e:99:0d:
         f5:5d:24:10:a0:41:50:74:99:d6:7a:89:03:f3:8c:f1:76:d8:
         e6:eb:c6:30:58:94:38:b5:26:e2:52:e4:b5:4e:b8:f8:57:fa:
         02:08:6c:6c:b4:00:f4:0f:a0:89:ab:23:3c:a7:8c:55:f5:ce:
         cc:e2:ab:de:ee:53:7c:fd:b7:bb:75:d3:99:9d:55:e8:62:fe:
         83:a1:e9:55:dc:59:65:10:80:ba:b0:2c:72:1b:dd:93:2c:dd:
         32:30:7a:4d:15:75:fa:ec:d0:16:bc:88:3b:ec:1f:5e:d7:31:
         75:5a:b3:3d:14:fb:57:c3:bd:49:74:d9:b0:7a:d0:52:51:79:
         77:be:52:88:5d:f5:79:49:44:45:12:d2:3b:2d:52:57:36:02:
         c4:f4:4a:f4:e6:22:18:14:08:18:1e:a2:0b:46:8c:e1:a6:5d:
         5e:4d:4e:e7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHFoPNr0xVvRXo8TDPjjUjnWXOA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0MjQ5MjY1NDlFNEU1MUM1RDYwNDA1MzJCMzRGNjMw
M0FBQzlCNjAeFw0yNjA1MTMxMjMxMTZaFw0yNzA1MTIxMjM2MTZaMDMxMTAvBgNV
BAMTKDY1MEZENTVGOTEwNUM3QTM5Rjg5NUZFODlCRTUxODRBNkIxRUFCMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNzZPXTx1LNLifNyrP1AvsDp5m
aNCToGMqjbjay+DDrjzUl6qzQ1j/6x3KIPgL6dIpTEBRVxD7nTWryClpWOhyJEuN
yBFk3aQrcrwTL83NevjQu6jvc61q42VhIUVs2Acd6zDux8Q1WajngFCfJaJqk2At
h4/mjlG5D8qGDBz+fwQdyvOB09wf0IUvXGiOv+Cm4wn9hJP+lmEHFAberWJDsplq
zr19xzdaefm/cIZ424qHNKaVS4aTkGtPAOlizopdf5H9zeQWQ6qN3JZrxqMAtuus
3Z2SMXen9QWqzWegA1z0iAzQUAoKz9yyvvyKfuqswJBeJSggcbyVYLMTOY05AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZQ/VX5EFx6OfiV/om+UYSmseqyswHwYDVR0j
BBgwFoAU9kJJJlSeTlHF1gQFMrNPYwOqybYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJLdHFXVFczNXpnZkZQblA4NHl0MnZyTHhEa0oxem9WV0p2Zm9QQTdZ
ZG4vMC9GNjQyNDkyNjU0OUU0RTUxQzVENjA0MDUzMkIzNEY2MzAzQUFDOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDI0OTI2NTQ5RTRFNTFD
NUQ2MDQwNTMyQjM0RjYzMDNBQUM5QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiS3RxV1RXMzV6Z2ZGUG5QODR5dDJ2ckx4RGtKMXpvVldKdmZvUEE3WWRuLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqjEoDANBgkqhkiG9w0BAQsFAAOCAQEArpKn
m9uDdGO1GPp+Pvbk7eY0usL6qpeF0PKdCFLSiH+Z6R6REQWkJpvHvKGG9MROU829
80LXgRaw2E6PeMjNdd2+lFqmB47V58cEcH4c62uKWm4vlpAInpkN9V0kEKBBUHSZ
1nqJA/OM8XbY5uvGMFiUOLUm4lLktU64+Ff6AghsbLQA9A+giasjPKeMVfXOzOKr
3u5TfP23u3XTmZ1V6GL+g6HpVdxZZRCAurAschvdkyzdMjB6TRV1+uzQFryIO+wf
XtcxdVqzPRT7V8O9SXTZsHrQUlF5d75SiF31eUlERRLSOy1SVzYCxPRK9OYiGBQI
GB6iC0aM4aZdXk1O5w==
-----END CERTIFICATE-----
Generated at Wed May 13 20:29:19 2026 by rpki-client