Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136342e302f32322d3232203d3e203533323237.roa
File:                     3138362e3235312e3136342e302f32322d3232203d3e203533323237.roa (raw, json)
Hash identifier:          IY/hvH0ONWMSjMI1IOJmLuJBCYcAS5bF4/AU0P5evN4=
Subject key identifier:   A8:D8:3B:AF:41:EF:E9:27:BA:50:95:67:01:97:08:90:21:27:C4:26
Certificate issuer:       /CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
Certificate serial:       5D873E930CBB3D166A6E9CA9114CCA2814B567AE
Authority key identifier: 65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136342e302f32322d3232203d3e203533323237.roa
Signing time:             Thu 16 Jul 2026 15:46:13 +0000
ROA not before:           Thu 16 Jul 2026 15:41:13 +0000
ROA not after:            Thu 15 Jul 2027 15:46:13 +0000
asID:                     53227
IP address blocks:        186.251.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl
                          rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 01:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:87:3e:93:0c:bb:3d:16:6a:6e:9c:a9:11:4c:ca:28:14:b5:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658D66B1BD26D1C90CD3EB7ECF5740198F13027A
        Validity
            Not Before: Jul 16 15:41:13 2026 GMT
            Not After : Jul 15 15:46:13 2027 GMT
        Subject: CN=A8D83BAF41EFE927BA509567019708902127C426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:81:b2:a5:8f:95:b2:54:7f:f2:ee:aa:90:04:
                    de:bc:9f:7a:e2:d1:e4:25:59:6b:7c:91:8d:e1:db:
                    ae:1e:84:3f:79:84:df:f8:7b:98:c8:99:28:79:7d:
                    39:8f:16:ba:cd:c2:fa:e1:c4:ec:78:74:53:49:d6:
                    65:05:b0:61:24:fc:8d:82:c4:6f:07:d4:72:23:af:
                    fe:eb:38:9a:68:8b:36:bf:be:e9:ed:2a:8f:68:c3:
                    76:e0:14:b4:dd:f4:73:2c:58:4a:fd:7a:c0:e3:63:
                    d0:27:32:61:e3:f4:65:50:b9:03:cb:82:4c:fa:b8:
                    45:75:ec:6f:cb:0d:2e:28:b3:b8:9b:0f:52:ed:0e:
                    13:9c:ff:9c:00:0d:a9:9b:3e:fc:a1:af:2b:a4:c8:
                    52:c2:8b:60:ee:51:ad:65:55:33:cc:36:0f:4c:ec:
                    9f:39:1c:ed:25:69:e5:cc:5f:33:e7:f5:8d:dc:bd:
                    16:21:a9:ac:74:8d:3c:37:69:66:a1:a7:f7:cb:ea:
                    44:84:c9:02:e0:c9:7b:6d:5f:52:b7:a6:2c:3f:59:
                    50:fc:43:3b:12:31:ee:a3:63:b0:ce:72:fd:93:30:
                    48:1c:ad:8b:dc:fc:37:71:06:27:d7:04:ea:07:c3:
                    e3:a0:de:5a:c7:3e:f5:1e:65:f6:56:92:0e:bd:9c:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D8:3B:AF:41:EF:E9:27:BA:50:95:67:01:97:08:90:21:27:C4:26
            X509v3 Authority Key Identifier:
                keyid:65:8D:66:B1:BD:26:D1:C9:0C:D3:EB:7E:CF:57:40:19:8F:13:02:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D66B1BD26D1C90CD3EB7ECF5740198F13027A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dtw8RycRmT2JG7wtwEKvMYCotyXre44k2nxqF8SrhPpH/0/3138362e3235312e3136342e302f32322d3232203d3e203533323237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:8b:4f:45:2e:42:50:33:cf:cc:6f:44:00:3b:7f:ff:2a:
         ba:fb:9f:bf:fd:5c:36:14:df:5b:8f:3f:8a:28:9d:ae:de:47:
         b2:23:ba:44:50:3c:7c:bb:80:c8:c2:e1:71:62:c2:02:d8:c2:
         63:25:f8:c3:df:57:cb:ca:6c:7f:ff:31:c6:b6:28:cb:0f:40:
         8b:b9:aa:db:01:70:15:25:b5:b1:51:57:18:45:f6:14:fc:e8:
         56:05:14:fd:f4:8f:ed:d0:dc:32:63:d3:b0:9f:ec:47:9d:8d:
         02:b7:ef:5b:4d:b2:a2:9a:50:17:16:d6:30:de:55:49:c8:70:
         d7:b8:5a:60:e7:cf:3b:d7:2d:47:bf:7c:d9:7a:e6:fb:a7:f1:
         27:68:23:08:b1:a3:09:d2:d1:ac:f5:b4:7e:7b:22:ca:f6:1e:
         8c:4a:3a:87:da:2e:53:8f:14:ed:39:7d:97:ea:6a:8c:b0:06:
         5f:b9:cb:2a:e6:6d:61:d0:9e:4c:63:5c:b0:35:50:2a:48:b5:
         07:f4:f6:ff:02:79:3e:eb:44:92:6a:5a:48:86:ae:d1:18:8e:
         13:c4:6f:de:39:b5:c1:a0:e7:1d:82:4f:bb:23:ef:b5:f2:b0:
         99:9d:14:e4:63:11:95:51:26:93:db:c1:0e:d3:11:ce:d8:5d:
         5b:84:92:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXYc+kwy7PRZqbpypEUzKKBS1Z64wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4RDY2QjFCRDI2RDFDOTBDRDNFQjdFQ0Y1NzQwMTk4
RjEzMDI3QTAeFw0yNjA3MTYxNTQxMTNaFw0yNzA3MTUxNTQ2MTNaMDMxMTAvBgNV
BAMTKEE4RDgzQkFGNDFFRkU5MjdCQTUwOTU2NzAxOTcwODkwMjEyN0M0MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgbKlj5WyVH/y7qqQBN68n3ri
0eQlWWt8kY3h264ehD95hN/4e5jImSh5fTmPFrrNwvrhxOx4dFNJ1mUFsGEk/I2C
xG8H1HIjr/7rOJpoiza/vuntKo9ow3bgFLTd9HMsWEr9esDjY9AnMmHj9GVQuQPL
gkz6uEV17G/LDS4os7ibD1LtDhOc/5wADambPvyhryukyFLCi2DuUa1lVTPMNg9M
7J85HO0laeXMXzPn9Y3cvRYhqax0jTw3aWahp/fL6kSEyQLgyXttX1K3piw/WVD8
QzsSMe6jY7DOcv2TMEgcrYvc/DdxBifXBOoHw+Og3lrHPvUeZfZWkg69nLapAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqNg7r0Hv6Se6UJVnAZcIkCEnxCYwHwYDVR0j
BBgwFoAUZY1msb0m0ckM0+t+z1dAGY8TAnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHR3OFJ5Y1JtVDJKRzd3dHdFS3ZNWUNvdHlYcmU0NGsybnhxRjhTcmhQ
cEgvMC82NThENjZCMUJEMjZEMUM5MENEM0VCN0VDRjU3NDAxOThGMTMwMjdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY1OEQ2NkIxQkQyNkQxQzkw
Q0QzRUI3RUNGNTc0MDE5OEYxMzAyN0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R0dzhSeWNSbVQySkc3d3R3RUt2TVlDb3R5WHJlNDRrMm54cUY4U3JoUHBILzAv
MzEzODM2MmUzMjM1MzEyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzMzMjMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+6QwDQYJKoZIhvcNAQELBQADggEBAKLqi09F
LkJQM8/Mb0QAO3//Krr7n7/9XDYU31uPP4oona7eR7IjukRQPHy7gMjC4XFiwgLY
wmMl+MPfV8vKbH//Mca2KMsPQIu5qtsBcBUltbFRVxhF9hT86FYFFP30j+3Q3DJj
07Cf7EedjQK371tNsqKaUBcW1jDeVUnIcNe4WmDnzzvXLUe/fNl65vun8SdoIwix
ownS0az1tH57Isr2HoxKOofaLlOPFO05fZfqaoywBl+5yyrmbWHQnkxjXLA1UCpI
tQf09v8CeT7rRJJqWkiGrtEYjhPEb945tcGg5x2CT7sj77XysJmdFORjEZVRJpPb
wQ7TEc7YXVuEkoA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:51:28 2026 by rpki-client