Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          D0+R24OhwFvQevTEY2h+Ik+76QFm0QHXIliRWB4dlyY=
Subject key identifier:   37:9B:17:23:DC:C2:1B:EB:25:A2:A9:80:55:EE:8F:DE:66:F4:D5:CF
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       18B64B313F4DACE745836AEDAAA550CEA43F625D
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa
Signing time:             Sat 18 Apr 2026 13:59:36 +0000
ROA not before:           Sat 18 Apr 2026 13:54:36 +0000
ROA not after:            Sat 17 Apr 2027 13:59:36 +0000
asID:                     266551
IP address blocks:        160.238.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b6:4b:31:3f:4d:ac:e7:45:83:6a:ed:aa:a5:50:ce:a4:3f:62:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Apr 18 13:54:36 2026 GMT
            Not After : Apr 17 13:59:36 2027 GMT
        Subject: CN=379B1723DCC21BEB25A2A98055EE8FDE66F4D5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:8b:28:54:86:a1:b5:0a:3b:27:3a:cb:15:
                    72:24:b7:05:d5:78:92:7f:db:6a:3e:48:6d:60:07:
                    1d:db:cf:2c:1c:7f:42:ba:54:4c:de:08:7d:fa:ad:
                    62:17:db:5e:61:35:35:72:5f:8b:80:f8:22:7e:10:
                    b9:a9:4d:ed:5b:c9:de:0a:8a:1b:43:68:7e:7a:4d:
                    7f:d7:2a:2e:34:20:92:8d:a6:b5:54:75:02:bc:b4:
                    b1:a1:b5:1f:e8:a7:21:cb:5d:88:20:15:c0:64:c4:
                    1c:87:a9:53:6f:06:2a:80:6f:e8:17:c2:07:61:20:
                    52:29:8a:f3:cd:dc:63:70:a8:05:94:74:de:73:58:
                    37:a0:64:83:59:85:3c:10:ad:d6:e2:71:a6:37:a9:
                    38:ad:f6:70:d3:cc:82:68:5a:57:7a:22:37:db:ba:
                    2e:fd:2f:c5:7b:8c:7e:32:34:d1:6b:1d:43:91:c2:
                    6f:59:78:e5:88:fc:e1:b5:8d:49:30:8c:3d:c6:41:
                    65:69:50:03:44:ee:8e:0e:c1:98:fe:e0:11:ac:d5:
                    23:4b:64:c1:b8:a5:ca:d8:a0:54:24:af:b2:90:45:
                    97:af:91:ea:1b:b3:9a:7d:ab:80:1e:48:fd:aa:a5:
                    4a:35:17:7b:77:04:77:b7:b5:df:22:7e:52:77:a7:
                    53:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9B:17:23:DC:C2:1B:EB:25:A2:A9:80:55:EE:8F:DE:66:F4:D5:CF
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:f3:77:02:dd:fe:84:1a:36:c9:93:b6:d0:f7:06:15:77:b1:
         0b:72:09:db:ba:eb:98:be:fe:32:15:c6:27:00:b5:b7:f6:76:
         70:35:53:46:d9:2e:6c:dd:5f:2f:d9:58:7f:a9:eb:09:4c:f4:
         e3:69:50:df:e7:83:65:61:58:9a:55:80:5a:64:1c:d8:25:b8:
         fb:89:15:4e:16:fd:1d:ba:d0:f9:82:21:0b:16:d1:65:24:4f:
         d7:5f:f2:7c:ef:48:9d:a5:ca:22:09:74:5b:de:e9:7d:d9:e6:
         23:1c:db:4b:df:ca:cd:35:1d:1a:5c:91:f0:3c:12:f2:d6:26:
         9b:03:92:28:27:36:5e:0b:51:4c:8d:ae:6f:0e:63:77:9d:2c:
         b1:27:09:5b:cd:1f:84:22:41:80:fd:32:5c:ca:a9:28:34:2a:
         0c:bf:25:12:a2:89:64:4f:13:2f:98:1e:44:35:ac:a1:1c:2d:
         b8:a3:0c:50:a3:16:95:42:f0:53:63:5f:ca:51:77:13:2b:76:
         a0:e5:39:15:d5:26:80:c2:30:ca:d9:f5:18:10:e7:29:5d:31:
         92:fb:28:6b:35:48:88:02:fe:f4:5a:9c:6d:08:6b:a1:fc:6c:
         5d:5c:61:66:f5:7d:be:56:28:7b:be:64:fe:86:18:61:95:ba:
         c3:16:77:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:58:53 2026 by rpki-client