Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa
File:                     3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa (raw, json)
Hash identifier:          HH5C+9lkdY3kxkb13bBJxJOhIMLJzx05YfduBKfxFuE=
Subject key identifier:   04:F4:7D:69:9E:C3:64:C9:57:D3:C1:C8:E1:02:F2:12:BC:61:81:E6
Certificate issuer:       /CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
Certificate serial:       250EDD924CFEC37D76A9752121C7F2C3039BD39D
Authority key identifier: 36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa
Signing time:             Mon 07 Sep 2026 02:29:00 +0000
ROA not before:           Mon 07 Sep 2026 02:24:00 +0000
ROA not after:            Mon 06 Sep 2027 02:29:00 +0000
asID:                     265334
IP address blocks:        168.181.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl
                          rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 09:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:dd:92:4c:fe:c3:7d:76:a9:75:21:21:c7:f2:c3:03:9b:d3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36ACD44E2E3E16388FA2901E5BC9BB79A881BF80
        Validity
            Not Before: Sep  7 02:24:00 2026 GMT
            Not After : Sep  6 02:29:00 2027 GMT
        Subject: CN=04F47D699EC364C957D3C1C8E102F212BC6181E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:9c:1f:27:97:05:3e:5c:f5:32:2c:e2:4f:
                    3e:51:94:08:80:17:0f:ef:72:f7:1d:a6:13:7b:ee:
                    cd:9c:76:c6:0d:63:5b:b4:d3:49:44:4a:46:b2:6a:
                    fb:ac:b8:e1:71:46:a8:82:4f:0d:e4:43:20:ac:a3:
                    08:76:31:21:ee:e7:d3:6e:11:6e:ab:73:f8:5f:52:
                    7c:69:89:53:54:64:8b:3d:98:99:ea:8c:f1:ad:98:
                    41:bf:08:70:c6:40:64:21:24:b7:31:0e:bc:c3:fe:
                    25:7b:7c:5f:14:1b:86:94:73:9d:a2:e9:12:2c:1f:
                    54:8b:e1:a5:1d:ae:f8:c0:0c:ac:1d:2f:fb:56:eb:
                    08:9b:13:83:58:35:9d:af:90:ec:9a:36:cb:dc:93:
                    e5:83:ba:19:15:22:97:30:45:a8:ed:01:7a:db:c0:
                    d6:43:45:b0:20:2c:f6:8b:57:12:9e:5d:5d:d3:6d:
                    95:1d:c0:3f:4e:5f:ad:4f:88:a2:2a:67:75:bb:df:
                    2b:9c:eb:ca:7e:d5:38:15:a3:ee:fd:d6:fa:b2:51:
                    cd:f0:b6:69:b7:01:a1:6e:ea:4e:33:5e:b7:27:9a:
                    6f:1d:fa:30:eb:d6:37:59:58:b3:41:53:84:76:3a:
                    34:ab:5f:06:f3:f6:2a:80:d9:fc:65:50:70:3e:7d:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F4:7D:69:9E:C3:64:C9:57:D3:C1:C8:E1:02:F2:12:BC:61:81:E6
            X509v3 Authority Key Identifier:
                keyid:36:AC:D4:4E:2E:3E:16:38:8F:A2:90:1E:5B:C9:BB:79:A8:81:BF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36ACD44E2E3E16388FA2901E5BC9BB79A881BF80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zG8Bhu6si8VZ9DmBsLMbN6rjGZQxoXtGLzqpdVEWhd8/0/3136382e3138312e3130342e302f32322d3332203d3e20323635333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:69:28:e7:53:ca:3d:79:4e:c8:fc:fd:aa:c9:91:42:2d:ef:
         2d:a2:2a:48:27:85:62:70:60:d6:0b:3a:5e:86:96:83:31:84:
         68:7f:99:73:e9:17:02:c8:a1:4f:f7:4c:bd:98:8b:ae:f2:7e:
         9f:66:4a:96:c6:e2:96:43:53:dd:6d:0d:63:4a:23:9c:51:9e:
         b9:de:64:11:b5:26:23:af:32:b2:60:96:bd:03:4a:24:f1:a3:
         97:5b:43:66:cd:44:24:14:cb:04:ed:6f:59:82:25:60:a3:52:
         c6:56:0f:b5:6e:37:31:d6:04:25:c6:8e:e7:a6:fc:c5:4f:7f:
         78:9c:a1:4b:e1:60:ec:44:1f:c9:c7:a5:42:0b:af:da:4c:ca:
         40:9f:85:2f:a0:6e:cf:80:c4:81:64:6f:5d:ec:a1:96:1e:9f:
         b3:36:4e:af:ee:d1:3d:74:f8:15:e7:3a:42:46:c8:ef:b5:9d:
         e6:e8:80:10:9d:f1:20:65:be:9b:f0:32:a9:49:81:ac:05:76:
         dd:44:5e:15:68:c8:f7:a1:92:0c:36:07:3e:79:0a:91:61:c9:
         a3:d0:bb:89:4a:e4:a6:76:1a:26:40:a3:7b:1d:57:bb:7d:da:
         1f:c3:5b:21:06:87:05:0c:73:d0:cd:17:72:46:d1:0e:39:d7:
         39:e1:b8:ea
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUJQ7dkkz+w312qXUhIcfywwOb050wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzZBQ0Q0NEUyRTNFMTYzODhGQTI5MDFFNUJDOUJCNzlB
ODgxQkY4MDAeFw0yNjA5MDcwMjI0MDBaFw0yNzA5MDYwMjI5MDBaMDMxMTAvBgNV
BAMTKDA0RjQ3RDY5OUVDMzY0Qzk1N0QzQzFDOEUxMDJGMjEyQkM2MTgxRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUJwfJ5cFPlz1MiziTz5RlAiA
Fw/vcvcdphN77s2cdsYNY1u000lESkayavusuOFxRqiCTw3kQyCsowh2MSHu59Nu
EW6rc/hfUnxpiVNUZIs9mJnqjPGtmEG/CHDGQGQhJLcxDrzD/iV7fF8UG4aUc52i
6RIsH1SL4aUdrvjADKwdL/tW6wibE4NYNZ2vkOyaNsvck+WDuhkVIpcwRajtAXrb
wNZDRbAgLPaLVxKeXV3TbZUdwD9OX61PiKIqZ3W73yuc68p+1TgVo+791vqyUc3w
tmm3AaFu6k4zXrcnmm8d+jDr1jdZWLNBU4R2OjSrXwbz9iqA2fxlUHA+fR0pAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUBPR9aZ7DZMlX08HI4QLyErxhgeYwHwYDVR0j
BBgwFoAUNqzUTi4+FjiPopAeW8m7eaiBv4AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96RzhCaHU2c2k4Vlo5RG1Cc0xNYk42cmpHWlF4b1h0R0x6cXBkVkVXaGQ4
LzAvMzZBQ0Q0NEUyRTNFMTYzODhGQTI5MDFFNUJDOUJCNzlBODgxQkY4MC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8zNkFDRDQ0RTJFM0UxNjM4OEZB
MjkwMUU1QkM5QkI3OUE4ODFCRjgwLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96
RzhCaHU2c2k4Vlo5RG1Cc0xNYk42cmpHWlF4b1h0R0x6cXBkVkVXaGQ4LzAvMzEz
NjM4MmUzMTM4MzEyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYz
NTMzMzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAqi1aDANBgkqhkiG9w0BAQsFAAOCAQEAFmko51PK
PXlOyPz9qsmRQi3vLaIqSCeFYnBg1gs6XoaWgzGEaH+Zc+kXAsihT/dMvZiLrvJ+
n2ZKlsbilkNT3W0NY0ojnFGeud5kEbUmI68ysmCWvQNKJPGjl1tDZs1EJBTLBO1v
WYIlYKNSxlYPtW43MdYEJcaO56b8xU9/eJyhS+Fg7EQfycelQguv2kzKQJ+FL6Bu
z4DEgWRvXeyhlh6fszZOr+7RPXT4Fec6QkbI77Wd5uiAEJ3xIGW+m/AyqUmBrAV2
3UReFWjI96GSDDYHPnkKkWHJo9C7iUrkpnYaJkCjex1Xu33aH8NbIQaHBQxz0M0X
ckbRDjnXOeG46g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 18:57:10 2026 by rpki-client