Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232372e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232372e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          8TucHioI+2Fd8eekd3wqWmFEYK+5hiArpjka9f/UU4o=
Subject key identifier:   E6:74:85:F2:4F:B1:6B:87:58:62:7F:29:23:05:28:E6:06:CB:FE:40
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       36D9DDB7CAB7B2DD504BC8D46944CEB425A201E5
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232372e302f32342d3234203d3e20323636353531.roa
Signing time:             Sat 18 Apr 2026 14:15:36 +0000
ROA not before:           Sat 18 Apr 2026 14:10:36 +0000
ROA not after:            Sat 17 Apr 2027 14:15:36 +0000
asID:                     266551
IP address blocks:        160.238.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 15:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d9:dd:b7:ca:b7:b2:dd:50:4b:c8:d4:69:44:ce:b4:25:a2:01:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Apr 18 14:10:36 2026 GMT
            Not After : Apr 17 14:15:36 2027 GMT
        Subject: CN=E67485F24FB16B8758627F29230528E606CBFE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:a0:87:14:f3:07:e8:94:cc:db:85:bf:59:
                    52:a2:6d:4b:d0:31:62:d8:55:12:25:2f:c3:38:f7:
                    56:7d:e0:bf:74:0d:06:c9:48:cf:b6:d8:c1:32:32:
                    f4:d8:a1:85:b6:c1:d7:ea:03:34:95:db:40:bc:af:
                    7e:05:14:6e:74:d2:b7:1e:e7:6d:9f:3e:16:fd:25:
                    5d:93:06:08:e9:70:9c:8a:e2:a4:37:3a:0d:ae:34:
                    e0:a3:cf:35:a4:5b:93:70:d9:f7:97:31:5b:c3:a4:
                    6c:b5:79:d7:fe:25:6d:03:ec:62:43:25:87:04:76:
                    f4:5c:6c:bc:6a:d9:48:89:0f:52:5b:2e:33:46:fe:
                    57:ab:4f:98:d7:77:64:36:67:6c:77:8c:02:9b:81:
                    2d:42:47:a7:00:c6:47:21:6c:4e:2e:e0:1d:60:ba:
                    1c:af:31:8a:fe:71:a2:92:cb:0c:96:29:4c:29:c5:
                    53:45:fc:36:a5:f0:3d:9a:a6:eb:21:a9:86:0b:f0:
                    aa:c8:03:00:fd:b3:7a:87:2c:40:03:f8:53:bf:c5:
                    9c:cd:47:fd:7f:e4:1f:c1:f4:57:9d:e1:00:0f:d2:
                    87:a5:e7:ae:43:7c:b6:a7:09:f7:c6:96:41:c4:03:
                    0b:fd:90:ce:e6:86:2f:a8:15:18:ba:24:54:74:b9:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:85:F2:4F:B1:6B:87:58:62:7F:29:23:05:28:E6:06:CB:FE:40
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232372e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:2f:ad:d1:9f:50:6c:2f:a9:bc:ca:28:6d:61:dc:2a:15:af:
         0a:f1:4b:b6:a5:ff:63:22:b8:c1:c2:49:b0:76:f3:56:54:81:
         bf:5c:da:b0:06:75:ab:ad:81:24:83:78:98:d9:bc:89:21:34:
         4b:81:b2:a1:15:e0:6a:e6:ec:0d:bb:95:27:b4:fc:70:ed:9a:
         9b:9c:d6:45:ba:2d:cf:47:cd:42:20:63:df:48:62:33:27:94:
         45:63:55:78:80:28:34:54:c6:4c:b3:8c:91:74:58:7d:2d:51:
         42:6b:25:43:fe:1a:29:d5:cd:20:17:31:58:db:fb:16:f8:8d:
         b4:4a:e2:e6:ac:a9:6f:3d:08:2e:4b:bb:3c:8d:e5:7a:65:68:
         78:bb:78:49:d5:56:7d:5d:e7:e4:8b:85:ba:14:b5:37:aa:44:
         2f:cb:71:1b:52:54:89:7c:9a:16:e3:f1:71:9c:f2:1e:23:ae:
         28:32:53:c4:5b:cf:7d:38:f2:96:11:18:4a:04:89:ec:7e:b6:
         e9:da:a2:5e:2c:6a:63:a0:04:8c:71:f8:b4:d9:cc:c7:96:27:
         a8:49:44:99:8b:e0:78:e7:f7:a6:61:95:0f:f8:2a:2e:4b:d9:
         14:3a:5a:a3:b3:74:98:fa:c9:9d:1d:f4:78:b3:47:75:65:d2:
         38:46:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:58 2026 by rpki-client