Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
File:                     3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa (raw, json)
Hash identifier:          jZVhr8nlAyHD5xHUXair4ako1+EIMNdJVz98n094Ni8=
Subject key identifier:   81:A1:79:54:84:EB:33:8E:A0:A3:AC:FA:86:C2:99:F2:41:EB:F1:E6
Certificate issuer:       /CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
Certificate serial:       5B10DD245E8C99A93928FB10E0542B8B653A2E62
Authority key identifier: 14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa
Signing time:             Thu 30 Oct 2025 17:56:27 +0000
ROA not before:           Thu 30 Oct 2025 17:51:27 +0000
ROA not after:            Thu 29 Oct 2026 17:56:27 +0000
asID:                     265468
IP address blocks:        168.196.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl
                          rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 19:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:10:dd:24:5e:8c:99:a9:39:28:fb:10:e0:54:2b:8b:65:3a:2e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14115659F5BEF5DE4FB458DCB8485788EF7B5306
        Validity
            Not Before: Oct 30 17:51:27 2025 GMT
            Not After : Oct 29 17:56:27 2026 GMT
        Subject: CN=81A1795484EB338EA0A3ACFA86C299F241EBF1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:f3:0e:f5:1d:5c:a8:c1:01:8a:a6:41:69:
                    aa:86:9a:1a:06:62:01:c9:fe:c3:82:6f:53:d2:aa:
                    79:3f:2d:7f:99:2d:48:6a:da:a0:23:7c:14:da:33:
                    d7:19:0e:c2:90:82:5d:8a:2f:86:cf:6a:b9:a9:ba:
                    50:3a:f8:63:c3:d9:f4:6d:9b:96:a6:39:58:74:71:
                    d2:9f:2b:e2:9e:a2:c8:ce:98:bc:79:47:39:4a:29:
                    0a:eb:d9:41:6f:b4:e3:bf:60:2d:db:f7:a8:b4:7c:
                    8f:30:b8:8c:41:d3:81:ef:1e:b5:ed:e9:fd:a2:ca:
                    f0:da:0b:64:3b:ed:c4:87:c7:60:99:c2:ef:6c:19:
                    c6:29:1c:e8:e9:12:f6:7d:59:31:2f:67:e6:dc:cc:
                    9d:84:a5:02:45:73:b7:28:de:6e:61:fb:69:7f:8d:
                    ce:cb:82:ef:f8:d2:aa:57:69:e6:76:d0:99:f3:46:
                    86:d2:79:02:15:e0:df:4a:ed:70:90:e4:da:66:91:
                    c2:26:11:f6:62:24:73:04:48:2b:05:30:a1:0f:41:
                    cc:dc:b6:5a:5e:40:bd:ca:b9:18:4c:bd:bd:8f:ab:
                    9a:fa:17:a7:6a:db:4a:6e:33:a8:c3:0f:9f:4f:77:
                    9f:85:b0:53:0b:a1:86:8b:5f:cc:4a:52:94:cb:19:
                    09:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A1:79:54:84:EB:33:8E:A0:A3:AC:FA:86:C2:99:F2:41:EB:F1:E6
            X509v3 Authority Key Identifier:
                keyid:14:11:56:59:F5:BE:F5:DE:4F:B4:58:DC:B8:48:57:88:EF:7B:53:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/14115659F5BEF5DE4FB458DCB8485788EF7B5306.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14115659F5BEF5DE4FB458DCB8485788EF7B5306.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AQYSeozqspiunCk94yJsKNhpR3bo1Q5QpjFT6yqs7MWB/0/3136382e3139362e3136342e302f32342d3234203d3e20323635343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:34:e2:2f:ac:ca:7f:f5:e8:99:47:1a:45:94:40:9f:0c:83:
         65:32:ad:05:c6:0a:4b:da:4d:fb:28:2f:40:a5:f5:06:dd:21:
         c9:8e:f1:33:61:b7:d4:ef:ce:44:ed:05:3e:9c:fe:1c:f5:25:
         66:74:3d:a2:07:74:41:f8:21:e4:b7:b2:cb:4e:b0:33:59:13:
         82:75:e7:22:ce:ed:45:36:06:f3:5d:91:89:04:a9:42:58:20:
         fc:aa:8e:9c:e5:b2:cf:e6:f2:20:80:62:99:cf:88:38:9c:0b:
         2e:6f:eb:c0:31:9b:1b:a8:b1:b8:ae:58:16:62:da:06:25:61:
         64:27:5f:2b:3b:19:73:8a:c7:41:d3:c3:e5:0c:d7:14:f3:13:
         f3:0d:31:94:ee:34:9c:2e:d0:90:df:71:4a:5c:09:62:58:d7:
         5b:84:68:90:61:a9:d4:76:b0:4e:14:af:10:d4:08:74:0e:6b:
         4f:f6:a4:77:b0:33:54:49:f3:52:88:14:1a:dc:8e:35:be:63:
         ed:e3:60:6a:b7:97:26:9b:78:7a:d9:bd:f5:14:94:6c:5b:72:
         e4:7a:d6:e4:fc:fb:e4:08:3d:09:5e:f4:b5:1c:42:99:08:09:
         fe:59:d9:6e:28:99:c9:22:3c:34:81:83:9e:9c:c7:03:06:ac:
         47:4a:48:94
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUWxDdJF6Mmak5KPsQ4FQri2U6LmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQxMTU2NTlGNUJFRjVERTRGQjQ1OERDQjg0ODU3ODhF
RjdCNTMwNjAeFw0yNTEwMzAxNzUxMjdaFw0yNjEwMjkxNzU2MjdaMDMxMTAvBgNV
BAMTKDgxQTE3OTU0ODRFQjMzOEVBMEEzQUNGQTg2QzI5OUYyNDFFQkYxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5svMO9R1cqMEBiqZBaaqGmhoG
YgHJ/sOCb1PSqnk/LX+ZLUhq2qAjfBTaM9cZDsKQgl2KL4bParmpulA6+GPD2fRt
m5amOVh0cdKfK+KeosjOmLx5RzlKKQrr2UFvtOO/YC3b96i0fI8wuIxB04HvHrXt
6f2iyvDaC2Q77cSHx2CZwu9sGcYpHOjpEvZ9WTEvZ+bczJ2EpQJFc7co3m5h+2l/
jc7Lgu/40qpXaeZ20JnzRobSeQIV4N9K7XCQ5NpmkcImEfZiJHMESCsFMKEPQczc
tlpeQL3KuRhMvb2Pq5r6F6dq20puM6jDD59Pd5+FsFMLoYaLX8xKUpTLGQkfAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgaF5VITrM46go6z6hsKZ8kHr8eYwHwYDVR0j
BBgwFoAUFBFWWfW+9d5PtFjcuEhXiO97UwYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVFZU2VvenFzcGl1bkNrOTR5SnNLTmhwUjNibzFRNVFwakZUNnlxczdN
V0IvMC8xNDExNTY1OUY1QkVGNURFNEZCNDU4RENCODQ4NTc4OEVGN0I1MzA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE0MTE1NjU5RjVCRUY1REU0
RkI0NThEQ0I4NDg1Nzg4RUY3QjUzMDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FRWVNlb3pxc3BpdW5Dazk0eUpzS05ocFIzYm8xUTVRcGpGVDZ5cXM3TVdCLzAv
MzEzNjM4MmUzMTM5MzYyZTMxMzYzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEpDANBgkqhkiG9w0BAQsFAAOCAQEAUTTi
L6zKf/XomUcaRZRAnwyDZTKtBcYKS9pN+ygvQKX1Bt0hyY7xM2G31O/ORO0FPpz+
HPUlZnQ9ogd0Qfgh5Leyy06wM1kTgnXnIs7tRTYG812RiQSpQlgg/KqOnOWyz+by
IIBimc+IOJwLLm/rwDGbG6ixuK5YFmLaBiVhZCdfKzsZc4rHQdPD5QzXFPMT8w0x
lO40nC7QkN9xSlwJYljXW4RokGGp1HawThSvENQIdA5rT/akd7AzVEnzUogUGtyO
Nb5j7eNgareXJpt4etm99RSUbFty5HrW5Pz75Ag9CV70tRxCmQgJ/lnZbiiZySI8
NIGDnpzHAwasR0pIlA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:24:16 2025 by rpki-client