Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
File:                     3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa (raw, json)
Hash identifier:          ATNYk/zasR5qP9gdIVlVLjkgobbnC9oZbei3u9B9Yg4=
Subject key identifier:   02:20:59:2F:85:61:6B:25:4C:D6:03:F9:3E:BF:32:04:5E:AA:A1:A7
Certificate issuer:       /CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
Certificate serial:       05C4D9F293FEF0B5E9D3AFEC8383DBB6C07BA4C8
Authority key identifier: 85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa
Signing time:             Mon 23 Mar 2026 19:15:27 +0000
ROA not before:           Mon 23 Mar 2026 19:10:27 +0000
ROA not after:            Mon 22 Mar 2027 19:15:27 +0000
asID:                     264879
IP address blocks:        168.227.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl
                          rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:40:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c4:d9:f2:93:fe:f0:b5:e9:d3:af:ec:83:83:db:b6:c0:7b:a4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A56FCFE563FEF93845F3881ED32EEF82BEAD04
        Validity
            Not Before: Mar 23 19:10:27 2026 GMT
            Not After : Mar 22 19:15:27 2027 GMT
        Subject: CN=0220592F85616B254CD603F93EBF32045EAAA1A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:bd:ae:82:21:d0:9d:5e:51:11:36:dd:d8:b4:
                    86:fc:13:b6:ea:6c:c3:3a:c9:62:b7:fb:71:24:b8:
                    b9:62:df:0b:c8:87:80:bd:c6:51:07:5d:93:f7:ea:
                    52:51:12:89:2b:43:2b:b1:ea:8c:e2:51:59:b2:50:
                    85:04:43:4d:62:7b:38:55:0d:d8:6c:68:10:50:e0:
                    8f:86:9b:1c:ab:6a:a9:62:f2:32:8d:40:63:89:d1:
                    2a:41:6b:12:3a:b8:ea:37:26:33:75:df:a5:58:4a:
                    d9:05:be:be:62:17:b7:dd:d0:42:b9:08:cb:2d:d9:
                    5b:84:d8:ad:77:ba:08:b3:04:ab:d4:2a:37:17:f6:
                    ab:d8:16:43:06:fb:40:57:eb:ab:07:cf:5a:45:46:
                    97:d6:e1:ed:12:a4:6f:9c:11:ab:1f:86:b8:92:91:
                    5b:32:b8:62:7d:92:2f:9f:38:c2:a9:9d:73:59:26:
                    36:e3:c7:58:79:ff:9c:b1:f0:c7:55:4b:03:4f:10:
                    ea:46:46:ba:4e:b9:b4:24:67:77:5f:5a:ee:23:dc:
                    1a:d6:d8:c0:5e:02:21:c4:77:82:2d:13:4b:df:3f:
                    17:99:3b:9d:fb:a2:8b:41:d4:15:eb:6a:e1:e7:8d:
                    b8:01:47:6a:c3:d3:7e:01:a3:87:e4:43:51:c4:2c:
                    ec:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:20:59:2F:85:61:6B:25:4C:D6:03:F9:3E:BF:32:04:5E:AA:A1:A7
            X509v3 Authority Key Identifier:
                keyid:85:A5:6F:CF:E5:63:FE:F9:38:45:F3:88:1E:D3:2E:EF:82:BE:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85A56FCFE563FEF93845F3881ED32EEF82BEAD04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/0/3136382e3232372e3132342e302f32322d3232203d3e20323634383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:ac:bb:dc:17:da:22:e2:1d:da:78:9a:7d:c3:e7:87:8f:83:
         3e:05:fd:6f:c1:8f:da:5d:17:98:3d:68:17:c6:92:36:0d:b0:
         9b:fb:94:4b:8d:9c:d7:0b:cd:85:27:cc:4e:ff:75:18:29:dd:
         05:ed:2a:05:74:c3:c9:40:26:90:ec:83:0a:8f:57:f8:38:3d:
         b3:ee:a3:87:8e:bb:93:99:3e:ed:9d:fb:cb:a6:db:ac:08:33:
         e5:83:d5:b3:a3:a6:69:26:9a:34:61:9d:40:39:b7:92:d2:27:
         7a:13:43:42:b5:6e:b5:0e:6f:61:67:4a:c0:c6:e3:1a:b8:cc:
         5b:9b:c0:70:c6:0c:f4:1d:17:50:54:10:0e:ab:cb:56:60:e6:
         6d:99:97:71:16:6c:4a:6c:b2:9e:64:76:44:ee:a9:9b:ba:39:
         7d:5f:6f:a8:44:3f:fd:3f:2f:b5:2f:10:07:e1:8b:65:da:3a:
         79:9c:07:a4:22:82:22:21:2a:b9:9a:32:b4:c1:92:cf:45:91:
         f4:85:38:d0:c6:01:13:19:19:fa:10:91:93:1c:e2:d2:ac:e5:
         c4:47:d2:01:fe:8e:28:9a:40:06:d6:b6:4c:1d:33:5f:6d:1c:
         fe:95:77:db:bb:8d:85:41:00:7c:29:36:21:19:05:98:4d:14:
         17:d6:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:34 2026 by rpki-client