Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa
File:                     3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa (raw, json)
Hash identifier:          sgRt1cSLgVZAyizJeX5MXTxXo5tzp55WHEJLjwQncvs=
Subject key identifier:   DF:F5:68:FF:25:03:6E:F7:6A:BA:C9:32:19:3A:58:CB:3C:7D:0C:61
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       600672E05C1112319DD2352B625556D2493325BB
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:01 +0000
ROA not before:           Thu 17 Jul 2025 17:55:01 +0000
ROA not after:            Thu 16 Jul 2026 18:00:01 +0000
asID:                     266551
IP address blocks:        160.238.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 17:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:06:72:e0:5c:11:12:31:9d:d2:35:2b:62:55:56:d2:49:33:25:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:01 2025 GMT
            Not After : Jul 16 18:00:01 2026 GMT
        Subject: CN=DFF568FF25036EF76ABAC932193A58CB3C7D0C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5e:69:a1:66:d0:d0:79:68:0c:91:64:02:a1:
                    e1:c1:ff:b4:16:9f:21:5f:4b:25:44:f8:88:4a:09:
                    6e:10:71:21:a9:15:3b:1b:b7:ab:48:dd:1f:20:11:
                    f9:b4:27:47:a0:98:6c:ce:27:6a:dc:71:83:78:c0:
                    ef:d1:93:4e:90:78:2e:c9:03:73:ea:bd:72:ff:fa:
                    8c:89:f7:7c:22:4e:fc:25:6a:9f:ff:e3:e7:7b:35:
                    0d:5e:2b:60:38:f0:08:e3:3f:f7:08:f5:58:d4:58:
                    98:68:57:97:91:cd:db:d1:4e:48:00:b9:87:77:89:
                    90:c5:2f:59:e5:c6:3c:dc:94:4a:d6:c7:64:42:48:
                    19:bf:c2:1e:88:39:a3:63:4a:ac:6a:6e:aa:d1:ac:
                    92:25:c7:8a:6f:c2:3e:94:60:23:fb:7c:34:99:f8:
                    5c:54:24:4e:1f:9c:d0:34:c6:77:f3:5c:69:13:c5:
                    57:bd:a1:1a:2c:6c:13:65:78:5d:08:44:1c:f3:f9:
                    ea:26:71:f7:b7:50:9b:90:9d:87:bc:e1:e6:78:d7:
                    e1:64:e9:bc:86:d5:4b:a0:f9:90:52:d1:46:eb:4a:
                    01:a5:8d:24:51:a5:5b:62:05:c6:d4:b8:69:5c:51:
                    a7:59:20:c6:3b:20:cb:63:6a:92:03:96:58:c2:4c:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F5:68:FF:25:03:6E:F7:6A:BA:C9:32:19:3A:58:CB:3C:7D:0C:61
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232362e302f32332d3233203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:19:1f:13:9d:fc:0c:0d:f3:f5:11:80:ab:ce:4a:83:fd:a9:
         fa:d1:35:4d:b6:a2:e0:73:0c:b4:0b:5b:be:db:14:74:de:3c:
         e7:00:fd:c0:b2:0d:73:e3:09:01:b7:ba:82:84:e0:e3:24:cd:
         c4:22:fb:38:f9:be:68:8a:e2:35:79:53:dc:ca:85:eb:8e:6f:
         22:28:82:14:11:33:1d:8e:1a:2a:39:d5:7e:42:6b:ed:f0:40:
         9d:bd:1d:e2:e0:6b:52:6d:76:35:99:41:75:86:d5:cf:71:c0:
         a5:c6:d5:08:4e:c0:1e:f3:77:c9:dd:2e:e5:95:ec:d2:61:89:
         ae:96:29:9c:59:ef:8c:5a:99:a7:3b:5f:76:81:27:de:15:48:
         43:9d:cb:fb:76:0d:1a:a1:6b:61:93:52:97:e4:7f:ad:d7:40:
         d6:62:7e:7e:77:bd:fc:3a:89:cc:a7:46:8b:06:08:49:94:bd:
         0d:06:63:21:d9:d3:ba:14:b7:39:05:0e:bc:c7:f4:ba:28:bf:
         44:8f:fc:2c:f9:32:5c:3c:b0:fc:2e:a1:f2:61:2c:93:78:93:
         d1:1f:47:28:54:9e:81:9e:b4:7b:7c:ce:a5:89:b5:9b:a5:4d:
         46:01:5b:1e:97:f2:16:1a:a9:7f:bb:77:a9:62:66:f4:cf:c7:
         be:a7:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:51:40 2025 by rpki-client