Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3332203d3e20323636313433.roa
File:                     3136302e32302e32302e302f32322d3332203d3e20323636313433.roa (raw, json)
Hash identifier:          eWVqMNX/2XcaANgvZ16tl8P8BI93XZsRZHnOkim3LA4=
Subject key identifier:   56:2C:BC:09:69:AB:DB:7D:00:24:30:81:65:D9:36:77:2F:BA:1E:D6
Certificate issuer:       /CN=70620B1C61C863D5C9CBBD460F66E1351DF8915F
Certificate serial:       76043C19AFA8D7E2A85348F17B08C9CFBB4B5A5F
Authority key identifier: 70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3332203d3e20323636313433.roa
Signing time:             Fri 20 Mar 2026 13:39:07 +0000
ROA not before:           Fri 20 Mar 2026 13:34:07 +0000
ROA not after:            Fri 19 Mar 2027 13:39:07 +0000
asID:                     266143
IP address blocks:        160.20.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.crl
                          rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 23:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:04:3c:19:af:a8:d7:e2:a8:53:48:f1:7b:08:c9:cf:bb:4b:5a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70620B1C61C863D5C9CBBD460F66E1351DF8915F
        Validity
            Not Before: Mar 20 13:34:07 2026 GMT
            Not After : Mar 19 13:39:07 2027 GMT
        Subject: CN=562CBC0969ABDB7D0024308165D936772FBA1ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:7b:c2:ce:4b:74:87:86:08:c1:f7:3f:a3:
                    f2:29:d6:35:ef:73:04:de:61:cc:0b:06:6d:d5:bf:
                    7a:6b:2b:03:12:df:7b:4b:a4:02:69:6d:7d:88:48:
                    c5:91:8c:66:0c:df:8c:a9:6b:a6:c4:c4:01:72:a6:
                    4c:ce:0d:1e:ba:10:28:57:1c:05:b5:f1:3d:cc:e5:
                    33:82:b7:8a:e2:7e:b8:8d:4a:d4:d5:7d:53:44:29:
                    cb:4f:ee:79:e5:74:d8:98:1e:6d:0d:f7:d5:df:95:
                    1b:1d:0f:c7:22:2c:8c:f9:62:f6:67:1c:3c:c2:af:
                    6d:e2:9c:5c:7d:c9:eb:91:fa:13:7d:3e:3e:db:6c:
                    c6:aa:f5:b8:82:5f:77:36:72:33:db:3e:db:ac:6b:
                    04:70:d9:79:45:9a:4c:a8:4f:ba:37:d9:50:93:aa:
                    0e:32:1f:3f:72:ef:f2:c9:27:45:de:ff:d7:31:49:
                    f2:fd:ab:05:17:c3:5e:96:7d:5d:2c:e8:f1:61:a7:
                    90:96:47:f9:db:36:90:00:ea:db:fb:ee:5d:90:55:
                    d3:78:79:55:4c:e3:07:f4:1a:3a:96:21:6c:0a:30:
                    3a:a3:c6:4f:cd:43:e2:64:f1:87:50:da:dc:7d:e9:
                    3f:d9:d8:03:23:a3:93:31:6d:fc:50:b2:ab:12:0a:
                    e1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2C:BC:09:69:AB:DB:7D:00:24:30:81:65:D9:36:77:2F:BA:1E:D6
            X509v3 Authority Key Identifier:
                keyid:70:62:0B:1C:61:C8:63:D5:C9:CB:BD:46:0F:66:E1:35:1D:F8:91:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/70620B1C61C863D5C9CBBD460F66E1351DF8915F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70620B1C61C863D5C9CBBD460F66E1351DF8915F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32302e302f32322d3332203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:80:1a:93:2b:7d:29:cd:43:46:6e:f7:fe:fe:f1:08:dc:42:
         a0:c5:3f:29:02:b0:fa:bd:9b:16:1a:e1:8b:3a:9d:95:ad:93:
         97:b3:81:9c:39:48:e1:9e:65:81:00:ce:43:3a:b2:ba:0f:33:
         03:68:ba:65:d3:4a:3d:e8:4c:51:35:fe:70:36:77:70:1e:eb:
         f1:15:3c:a4:15:41:3d:20:98:c6:f8:ee:60:ef:6f:3d:fe:af:
         99:c3:94:b0:75:88:32:14:fb:30:dc:1c:9e:1e:fd:ae:df:4a:
         67:79:08:c2:16:75:7d:10:aa:3a:00:be:f8:39:60:27:2c:06:
         e4:63:f9:7b:19:18:43:40:14:88:85:5a:5c:0a:51:cb:4b:17:
         71:50:d7:06:35:a2:35:7a:8f:99:05:d6:0b:b1:76:83:c5:b5:
         63:a7:71:43:22:f7:29:91:fb:58:00:62:aa:2a:56:5c:2e:c5:
         bd:31:e2:7b:38:8a:12:f3:16:ae:6a:60:9c:b8:f4:21:98:a1:
         ad:f6:4b:2c:40:e3:9b:d1:2a:05:e0:11:d1:49:3f:98:62:c0:
         4e:cb:8f:d4:d0:9b:31:24:04:02:59:33:5f:4c:3b:7d:6d:fd:
         60:7e:fd:50:ff:ab:4d:41:f7:85:f7:9c:e0:25:2b:f0:19:41:
         99:53:12:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:20:42 2026 by rpki-client