Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa
File:                     3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa (raw, json)
Hash identifier:          Z3bySa+BJOj9bv+UeJqbdpgHVY51qqXpMmLaLhC5hcY=
Subject key identifier:   51:21:DC:46:D1:A9:57:22:BB:44:0A:8F:00:50:72:62:A6:D7:34:EB
Certificate issuer:       /CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
Certificate serial:       5F14984A6A86DEC3F5D2567152E06A2A624227DC
Authority key identifier: F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa
Signing time:             Wed 13 May 2026 12:36:18 +0000
ROA not before:           Wed 13 May 2026 12:31:18 +0000
ROA not after:            Wed 12 May 2027 12:36:18 +0000
asID:                     265465
IP address blocks:        168.196.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl
                          rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:16:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:14:98:4a:6a:86:de:c3:f5:d2:56:71:52:e0:6a:2a:62:42:27:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6424926549E4E51C5D6040532B34F6303AAC9B6
        Validity
            Not Before: May 13 12:31:18 2026 GMT
            Not After : May 12 12:36:18 2027 GMT
        Subject: CN=5121DC46D1A95722BB440A8F00507262A6D734EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:c0:48:4c:37:1e:e0:4f:2f:83:64:6d:06:
                    06:68:3d:70:a0:bf:ac:f7:c9:b5:41:9c:ab:d2:3d:
                    5b:5b:93:bc:d5:06:3b:ee:b9:8a:c4:cb:c7:4a:50:
                    74:3f:60:11:79:0d:a8:3f:cd:70:23:fe:a7:48:b3:
                    fe:8b:65:c3:c0:a0:03:77:d2:97:59:61:cd:01:ea:
                    e7:27:e9:7f:c4:d5:e5:44:3e:fb:6b:02:d3:7d:cd:
                    92:84:c9:09:b7:1d:dc:09:c9:86:ce:79:5d:a2:22:
                    dc:23:03:9f:70:50:17:71:eb:91:d3:ad:72:cc:ae:
                    41:02:c1:10:b5:f0:5b:d8:20:40:46:f0:ee:65:b3:
                    0c:d5:35:8a:0c:e2:b0:63:9f:aa:9e:c9:f2:13:16:
                    f8:c3:aa:7f:00:b0:52:6f:17:25:24:5a:f6:d1:4c:
                    b2:b7:c0:55:4f:e3:5b:b3:ae:ad:87:73:d0:58:ff:
                    9b:de:1d:a0:53:67:70:15:27:27:98:80:95:d4:79:
                    70:c5:5b:b2:ef:bf:9b:d4:35:15:1b:90:a6:3a:80:
                    bc:56:28:70:3e:11:d6:76:b3:69:6e:64:90:c3:7d:
                    50:31:01:6b:53:f3:fa:46:ef:4f:ab:10:61:2e:1d:
                    51:67:ba:c1:1b:57:7a:bb:5e:24:a5:6a:56:6d:cd:
                    bb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:21:DC:46:D1:A9:57:22:BB:44:0A:8F:00:50:72:62:A6:D7:34:EB
            X509v3 Authority Key Identifier:
                keyid:F6:42:49:26:54:9E:4E:51:C5:D6:04:05:32:B3:4F:63:03:AA:C9:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/F6424926549E4E51C5D6040532B34F6303AAC9B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F6424926549E4E51C5D6040532B34F6303AAC9B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbKtqWTW35zgfFPnP84yt2vrLxDkJ1zoVWJvfoPA7Ydn/0/3136382e3139362e3136312e302f32342d3234203d3e20323635343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:66:50:4d:ab:0a:9a:1e:a1:cd:1b:00:78:07:d6:e3:c9:db:
         1a:4a:ec:23:74:a3:7c:2b:77:bf:39:a7:74:fa:ef:1a:1a:2c:
         27:a5:78:eb:6a:c4:f7:85:88:e3:f1:41:9e:3e:d6:06:e7:20:
         3c:93:ea:4a:f6:93:f6:b3:78:59:a9:7a:7c:3e:cb:2e:18:e4:
         c3:51:47:e6:6f:15:b9:c1:24:45:c5:83:23:7b:d0:1f:29:53:
         56:c2:75:87:43:16:78:e7:6b:56:bf:b6:51:94:6a:26:a2:e7:
         27:b8:50:bc:2a:ce:31:e3:28:bf:08:33:cc:4a:2e:4f:40:4e:
         82:53:81:c1:76:9d:70:e8:03:6a:ed:76:a3:16:7d:da:ef:60:
         f4:a5:8f:d2:ad:00:9f:98:82:4c:7f:b6:27:41:b8:dc:f2:71:
         46:33:43:b7:d7:3c:52:65:90:15:e6:d5:80:ad:ad:d6:37:22:
         af:ca:c9:e7:ab:e8:06:52:10:89:6c:71:97:ca:a2:4a:7e:40:
         c0:80:1a:7d:4b:ad:e2:4e:ea:76:bc:87:d0:69:ec:0c:bd:15:
         e7:78:53:63:04:91:5d:5b:99:11:9f:c6:91:2b:77:ce:af:0b:
         bb:60:95:f5:48:90:79:28:b8:da:74:ab:0c:f7:91:6a:e2:87:
         8a:7f:01:e2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXxSYSmqG3sP10lZxUuBqKmJCJ9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0MjQ5MjY1NDlFNEU1MUM1RDYwNDA1MzJCMzRGNjMw
M0FBQzlCNjAeFw0yNjA1MTMxMjMxMThaFw0yNzA1MTIxMjM2MThaMDMxMTAvBgNV
BAMTKDUxMjFEQzQ2RDFBOTU3MjJCQjQ0MEE4RjAwNTA3MjYyQTZENzM0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ycBITDce4E8vg2RtBgZoPXCg
v6z3ybVBnKvSPVtbk7zVBjvuuYrEy8dKUHQ/YBF5Dag/zXAj/qdIs/6LZcPAoAN3
0pdZYc0B6ucn6X/E1eVEPvtrAtN9zZKEyQm3HdwJyYbOeV2iItwjA59wUBdx65HT
rXLMrkECwRC18FvYIEBG8O5lswzVNYoM4rBjn6qeyfITFvjDqn8AsFJvFyUkWvbR
TLK3wFVP41uzrq2Hc9BY/5veHaBTZ3AVJyeYgJXUeXDFW7Lvv5vUNRUbkKY6gLxW
KHA+EdZ2s2luZJDDfVAxAWtT8/pG70+rEGEuHVFnusEbV3q7XiSlalZtzbsrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUSHcRtGpVyK7RAqPAFByYqbXNOswHwYDVR0j
BBgwFoAU9kJJJlSeTlHF1gQFMrNPYwOqybYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGJLdHFXVFczNXpnZkZQblA4NHl0MnZyTHhEa0oxem9WV0p2Zm9QQTdZ
ZG4vMC9GNjQyNDkyNjU0OUU0RTUxQzVENjA0MDUzMkIzNEY2MzAzQUFDOUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDI0OTI2NTQ5RTRFNTFD
NUQ2MDQwNTMyQjM0RjYzMDNBQUM5QjYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiS3RxV1RXMzV6Z2ZGUG5QODR5dDJ2ckx4RGtKMXpvVldKdmZvUEE3WWRuLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEoTANBgkqhkiG9w0BAQsFAAOCAQEAj2ZQ
TasKmh6hzRsAeAfW48nbGkrsI3SjfCt3vzmndPrvGhosJ6V462rE94WI4/FBnj7W
BucgPJPqSvaT9rN4Wal6fD7LLhjkw1FH5m8VucEkRcWDI3vQHylTVsJ1h0MWeOdr
Vr+2UZRqJqLnJ7hQvCrOMeMovwgzzEouT0BOglOBwXadcOgDau12oxZ92u9g9KWP
0q0An5iCTH+2J0G43PJxRjNDt9c8UmWQFebVgK2t1jcir8rJ56voBlIQiWxxl8qi
Sn5AwIAafUut4k7qdryH0GnsDL0V53hTYwSRXVuZEZ/GkSt3zq8Lu2CV9UiQeSi4
2nSrDPeRauKHin8B4g==
-----END CERTIFICATE-----
Generated at Wed May 13 20:29:21 2026 by rpki-client