Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138372e3130392e3136302e302f32302d3332203d3e20323633353739.roa
File:                     3138372e3130392e3136302e302f32302d3332203d3e20323633353739.roa (raw, json)
Hash identifier:          rBCvbozlMbmTfUJBE+82rlIXbHn9GNzWQ/cfFHI8byU=
Subject key identifier:   06:C1:56:94:A8:B4:F7:5B:D9:16:9D:63:E3:AC:1E:55:C4:EA:8F:35
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       5EFE979A4DB28908BB3DCA5B1659E1092405781E
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138372e3130392e3136302e302f32302d3332203d3e20323633353739.roa
Signing time:             Thu 23 Jul 2026 20:48:35 +0000
ROA not before:           Thu 23 Jul 2026 20:43:35 +0000
ROA not after:            Thu 22 Jul 2027 20:48:35 +0000
asID:                     263579
IP address blocks:        187.109.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fe:97:9a:4d:b2:89:08:bb:3d:ca:5b:16:59:e1:09:24:05:78:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Jul 23 20:43:35 2026 GMT
            Not After : Jul 22 20:48:35 2027 GMT
        Subject: CN=06C15694A8B4F75BD9169D63E3AC1E55C4EA8F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d0:55:53:f1:80:0f:05:52:0b:15:cd:13:4a:
                    e3:b8:e4:1b:a4:bd:1a:b2:b0:23:25:91:32:4d:3e:
                    c6:d9:72:a1:2f:e0:59:fc:57:3a:75:9a:c3:55:a3:
                    88:bb:ff:05:ca:1a:4f:72:26:b7:2b:ed:81:63:01:
                    ae:f3:72:93:ce:64:af:91:34:2f:3a:c9:98:c3:c6:
                    de:ee:cb:c1:30:b0:1d:35:21:a9:74:a3:c3:e6:99:
                    ab:6d:8e:09:a3:d8:16:12:4e:f7:83:af:0c:cf:45:
                    51:c8:ab:8f:19:bd:61:f4:ac:15:da:f8:10:94:ce:
                    4a:11:af:be:33:b4:c5:50:3a:50:27:ea:3f:56:b8:
                    39:f6:10:aa:18:81:b4:d2:7f:bb:9e:20:80:8c:eb:
                    50:58:8d:1d:b6:e3:4d:31:ef:72:e9:39:94:ba:1a:
                    a6:3a:e8:b2:61:88:54:b6:89:8c:b1:17:37:8b:84:
                    4c:48:27:cb:46:d1:49:68:87:eb:66:06:3f:c8:e3:
                    00:b9:b5:e9:c7:e5:5d:1d:f8:6d:2d:f0:89:04:0f:
                    e5:85:30:26:00:ce:f8:7f:7e:40:4a:37:ea:f6:07:
                    30:d3:fa:02:ba:6d:2f:3f:df:de:2e:17:9f:42:11:
                    f9:25:d7:6e:35:61:a7:dc:ac:15:df:47:ce:3f:11:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:56:94:A8:B4:F7:5B:D9:16:9D:63:E3:AC:1E:55:C4:EA:8F:35
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3138372e3130392e3136302e302f32302d3332203d3e20323633353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:31:ff:4a:cc:06:c4:a7:93:d7:e4:7d:05:57:ba:1f:23:60:
         55:de:6a:78:89:cc:7a:d9:a0:f3:e3:92:24:da:ab:aa:8f:3b:
         e1:8d:14:84:2c:cc:0c:4f:34:b0:a3:b6:95:4d:08:3d:12:48:
         94:30:16:23:d0:f9:ec:de:c9:0c:4b:84:4e:9d:47:9d:16:5b:
         17:11:f0:42:c8:09:77:02:19:91:23:6a:fc:90:62:1e:ff:2b:
         b7:22:e6:93:44:5d:35:c3:a7:11:cd:f1:00:46:44:00:e8:41:
         8b:e0:c8:bb:ef:0f:5e:cb:23:05:87:83:0b:95:9c:a9:73:3f:
         11:39:89:79:5f:3c:ea:f5:e2:ad:7b:23:ee:43:65:0d:ce:0d:
         52:25:92:33:09:ac:55:30:d8:20:3a:f5:2c:05:ab:9e:b6:b9:
         4f:fe:03:23:40:c4:14:6c:20:20:9c:c9:ac:23:b1:33:cc:61:
         84:4e:a8:bf:9e:d3:9e:88:33:d4:c9:6b:35:13:fe:1e:da:cf:
         76:be:ca:17:d9:2b:2b:1a:1c:cb:c7:1d:77:5d:ae:1d:fd:4e:
         d6:98:dc:4a:5b:b6:f2:fb:e6:69:4c:5a:7f:a1:b3:65:66:0e:
         0b:25:28:93:7e:f0:54:28:8c:e0:79:5a:b5:90:1d:3b:17:3d:
         8e:32:fa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:36:54 2026 by rpki-client