Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232342e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          qrre6A6211fj0PnPO2xnw80yNWdS1ddf2Q8Q9zDvbc8=
Subject key identifier:   66:4C:B9:3B:93:ED:96:96:FA:5C:12:8B:C1:4C:91:04:ED:5C:8E:09
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       4B4AB04AF65684A49740A2861A87D2881140961F
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32342d3234203d3e20323636353531.roa
Signing time:             Sat 18 Apr 2026 13:57:28 +0000
ROA not before:           Sat 18 Apr 2026 13:52:28 +0000
ROA not after:            Sat 17 Apr 2027 13:57:28 +0000
asID:                     266551
IP address blocks:        160.238.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4a:b0:4a:f6:56:84:a4:97:40:a2:86:1a:87:d2:88:11:40:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Apr 18 13:52:28 2026 GMT
            Not After : Apr 17 13:57:28 2027 GMT
        Subject: CN=664CB93B93ED9696FA5C128BC14C9104ED5C8E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ca:2d:3f:de:e1:6e:57:70:2e:b6:29:e0:5e:
                    ce:80:6e:72:e9:60:41:a6:3e:5b:13:99:97:4c:37:
                    33:d8:34:cb:e8:7b:f8:54:d2:02:83:98:40:cf:f0:
                    c4:32:a7:ae:71:ab:a9:cb:d6:ef:48:45:4d:90:bd:
                    b8:c6:6a:2b:7b:65:b2:f7:4c:e1:c0:61:80:06:e2:
                    da:1e:4a:48:ac:c5:8f:26:05:c5:94:21:ea:a6:09:
                    ea:17:2f:dc:1d:01:bb:c0:b7:9c:fd:4d:31:78:e0:
                    33:4d:ac:47:00:d5:56:45:f5:e6:a8:62:c9:39:09:
                    2f:f6:16:29:50:c8:85:f6:d7:3c:e0:57:b7:fd:cd:
                    c4:63:58:a0:d2:4f:ae:b6:0e:06:4a:cf:b7:3c:9f:
                    50:a9:e2:6d:33:93:5f:4d:9e:9c:ad:00:01:34:49:
                    d2:b9:c9:1f:c6:ad:cb:ef:98:92:57:35:1a:28:c0:
                    56:8a:88:7a:42:b3:2f:c9:04:2e:23:bc:c2:64:f9:
                    24:c4:0f:be:24:ec:03:09:95:7f:4c:53:6a:11:7e:
                    a0:70:12:d1:5d:af:a8:1c:bd:ed:17:84:7b:8d:54:
                    c6:1b:33:f6:9f:e6:4e:7a:5c:b8:5a:31:74:f7:fd:
                    6e:89:39:25:46:21:d6:62:f6:9c:b9:ee:c5:22:16:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4C:B9:3B:93:ED:96:96:FA:5C:12:8B:C1:4C:91:04:ED:5C:8E:09
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:55:8a:8f:6f:df:8f:f5:bc:06:b7:32:fe:b6:28:ae:4c:0c:
         64:41:46:7e:1a:e1:d4:4c:e2:38:13:33:68:5e:fd:26:68:7a:
         a3:6f:61:ff:17:1b:b5:fe:92:80:03:d1:38:8b:3f:8b:64:17:
         23:31:85:14:b2:c0:fd:d3:e5:07:95:65:ee:62:fe:81:19:92:
         55:d9:c2:4e:18:16:a4:05:1f:8f:d2:1f:b8:6e:58:d1:17:a5:
         07:db:10:8b:2f:c8:6c:c1:2a:02:1c:8e:b3:50:87:f1:8c:5b:
         59:ea:a0:10:bb:f7:66:04:25:16:e3:33:a3:3f:f4:6f:3d:38:
         34:92:de:be:3f:db:10:20:17:ad:c4:92:97:7f:40:7c:7d:a9:
         ff:b5:67:0f:9a:35:54:bb:1b:db:60:b9:18:c6:63:b6:b4:49:
         67:46:3d:19:f5:3d:93:00:60:09:d9:e8:5e:c6:d9:1d:eb:79:
         35:39:0a:49:59:9d:fe:a3:30:4e:6d:02:65:09:dd:b5:76:74:
         a4:22:71:79:83:35:ea:64:47:a4:2d:5d:d1:09:1a:cf:04:23:
         bb:e0:94:ef:88:0e:d5:8c:4d:81:b3:2c:cd:a4:b1:ea:f9:e3:
         0b:31:06:7b:b3:35:57:36:c8:55:cf:10:e5:7f:ea:30:59:34:
         58:15:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:22:42 2026 by rpki-client