Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa
File:                     3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa (raw, json)
Hash identifier:          hR75jzF7TYgKDqwx5UXQZXZZfyKQ0iyeJoaozNXi6m0=
Subject key identifier:   1C:9E:3C:33:2A:13:99:16:8E:ED:81:1D:92:2A:2C:67:E7:91:B2:06
Certificate issuer:       /CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
Certificate serial:       26C3D83ED4DA7EA2A75C827294A7E3A580D98694
Authority key identifier: 2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa
Signing time:             Wed 04 Mar 2026 16:36:30 +0000
ROA not before:           Wed 04 Mar 2026 16:31:30 +0000
ROA not after:            Wed 03 Mar 2027 16:36:30 +0000
asID:                     266547
IP address blocks:        160.238.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl
                          rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 14:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c3:d8:3e:d4:da:7e:a2:a7:5c:82:72:94:a7:e3:a5:80:d9:86:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FA895A323CDE6686379D8ED8C43170C6BA8C85B
        Validity
            Not Before: Mar  4 16:31:30 2026 GMT
            Not After : Mar  3 16:36:30 2027 GMT
        Subject: CN=1C9E3C332A1399168EED811D922A2C67E791B206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:6f:79:f4:f8:a9:e0:32:e6:3b:87:88:11:
                    76:a3:66:a8:f7:02:0a:3e:1a:53:d1:3b:89:59:34:
                    db:83:e2:e3:b5:49:6f:24:ed:f8:59:95:2b:2a:db:
                    cb:b2:44:1e:f2:d0:c7:4a:5f:ee:84:84:6c:1b:0f:
                    6e:ee:48:5a:90:30:49:29:33:9b:0f:b3:a6:ec:35:
                    5a:94:91:c0:e9:47:ac:e7:48:d5:fa:f7:4c:0c:ca:
                    91:4e:ee:7e:07:5b:a0:1b:95:db:64:e6:b5:e5:15:
                    6c:64:5e:e2:70:92:41:13:0e:de:e7:18:2a:88:c9:
                    05:fb:be:4e:76:c7:8f:a8:d8:b3:70:4a:0c:8f:72:
                    30:0c:a4:c3:cd:8d:5d:4e:d7:34:a5:a5:2b:3b:0c:
                    aa:12:b8:e4:d5:47:b3:62:4e:a3:ca:f8:b9:c2:9c:
                    5b:e7:3b:6d:be:d5:aa:39:88:1f:c4:bb:40:27:b2:
                    eb:5f:8a:ca:02:25:08:41:65:85:a9:7f:c3:40:42:
                    87:fd:97:e0:ec:d9:15:12:e6:0c:20:d9:5f:0f:45:
                    3a:22:ed:14:9a:91:09:96:2f:d1:82:13:c4:fa:59:
                    d2:45:76:63:f6:c6:cb:60:e8:2f:82:fe:7f:63:b3:
                    0b:2a:95:63:4a:43:a3:87:c9:7a:a5:3d:14:26:41:
                    ae:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9E:3C:33:2A:13:99:16:8E:ED:81:1D:92:2A:2C:67:E7:91:B2:06
            X509v3 Authority Key Identifier:
                keyid:2F:A8:95:A3:23:CD:E6:68:63:79:D8:ED:8C:43:17:0C:6B:A8:C8:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FA895A323CDE6686379D8ED8C43170C6BA8C85B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3132382e302f32322d3234203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:75:12:5e:fb:03:68:11:17:24:49:63:b5:50:68:38:0f:6c:
         95:ad:2f:34:bb:6e:24:15:c2:2b:6c:8a:31:54:39:7e:64:a4:
         41:ab:c8:f3:34:87:23:af:be:44:71:d3:27:48:42:ce:6c:54:
         5b:a0:a8:ad:92:23:73:8e:f0:67:19:17:8c:74:6b:3f:d9:11:
         cf:14:45:27:c4:78:1f:5d:a2:fa:71:69:1f:3a:8e:98:c1:14:
         fd:15:20:24:31:19:60:5f:dd:dd:69:6b:e8:a5:3e:15:c8:9e:
         8e:36:f2:6f:04:c3:9e:57:79:75:59:1a:90:1f:2f:38:ff:30:
         be:de:4a:32:3b:fc:39:c1:23:39:3f:46:0e:d1:fe:16:ff:3a:
         5a:94:4e:4e:69:51:41:56:b3:b9:33:32:14:a5:d1:2d:75:7c:
         c9:cc:5f:c7:c4:c3:ff:ac:19:09:c7:76:3a:8f:3c:09:35:47:
         58:bc:e2:65:94:ab:a3:85:9c:d4:3c:1f:4c:e9:fd:df:42:38:
         3c:42:1c:cc:69:71:0a:67:23:43:1c:bd:5a:8c:54:b8:a7:2b:
         a8:06:7d:bf:7d:19:3d:36:04:0c:b2:74:48:64:7f:61:5f:e0:
         d9:88:84:65:ba:f3:74:97:1f:ee:26:93:eb:b4:2a:5d:b0:ea:
         58:66:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:39:07 2026 by rpki-client