Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
File:                     3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa (raw, json)
Hash identifier:          ZVmrNilPo2EiiHpYByzxf1JdZyXttHln3cSLtrnoc9U=
Subject key identifier:   BC:46:50:41:BC:AA:38:37:EC:98:8F:C6:AE:B9:87:CC:0C:68:D0:95
Certificate issuer:       /CN=BB630F032807A55E781DAE033958D10E9EA54D5B
Certificate serial:       0BED80DF7B5164E44DE0FBAAF9B04BEFB800F347
Authority key identifier: BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa
Signing time:             Thu 23 Jul 2026 14:17:28 +0000
ROA not before:           Thu 23 Jul 2026 14:12:28 +0000
ROA not after:            Thu 22 Jul 2027 14:17:28 +0000
asID:                     264297
IP address blocks:        168.197.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl
                          rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ed:80:df:7b:51:64:e4:4d:e0:fb:aa:f9:b0:4b:ef:b8:00:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB630F032807A55E781DAE033958D10E9EA54D5B
        Validity
            Not Before: Jul 23 14:12:28 2026 GMT
            Not After : Jul 22 14:17:28 2027 GMT
        Subject: CN=BC465041BCAA3837EC988FC6AEB987CC0C68D095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:92:8d:a4:e8:73:d4:82:d9:e6:46:71:06:
                    d8:8f:7b:35:2e:67:00:ba:b8:d6:09:e1:2d:49:3f:
                    66:25:6c:11:dc:a1:63:f6:9f:f9:de:eb:4f:f7:92:
                    6a:2d:4b:0f:f9:46:18:52:1e:d2:72:57:a2:7d:9d:
                    02:2d:0e:fd:df:c5:83:1e:48:8d:ed:46:1f:9e:fa:
                    29:a5:f3:94:9a:a7:8a:aa:6f:c7:5d:83:73:b6:95:
                    79:c8:4c:f9:73:f7:63:7b:34:be:81:f5:80:d0:e2:
                    64:a1:5b:ae:1a:12:77:b0:c3:2d:f5:f1:3e:2f:39:
                    15:f0:f5:bb:1d:03:c3:c5:b2:c4:da:a0:99:07:f6:
                    9b:74:3a:ab:0f:e0:64:4e:19:ed:07:8d:c3:b3:ed:
                    3e:1f:f8:73:33:bc:d5:3b:98:31:93:97:4b:12:27:
                    c7:f8:b2:f9:db:f2:d8:cd:61:71:53:eb:ba:b6:06:
                    b4:c0:21:f5:a7:44:ac:ac:2a:04:89:ca:66:8a:1c:
                    cf:45:b7:08:e2:4c:ca:e1:a2:78:ae:b1:d0:ef:83:
                    74:62:6f:45:46:4d:8b:b8:d0:13:91:8e:42:32:25:
                    88:ed:2a:f1:44:25:19:bf:ec:e5:6d:7e:1d:d0:8f:
                    47:ca:ff:8b:f4:f0:22:06:8e:e5:29:d0:33:c3:d6:
                    91:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:46:50:41:BC:AA:38:37:EC:98:8F:C6:AE:B9:87:CC:0C:68:D0:95
            X509v3 Authority Key Identifier:
                keyid:BB:63:0F:03:28:07:A5:5E:78:1D:AE:03:39:58:D1:0E:9E:A5:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/BB630F032807A55E781DAE033958D10E9EA54D5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB630F032807A55E781DAE033958D10E9EA54D5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARyNxJ93JKe7ssb7xKi6NN1cMsFp81FwMoGwRYZB7gxu/0/3136382e3139372e3232302e302f32322d3234203d3e20323634323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:00:35:5d:b6:6c:3c:bb:8e:7b:08:08:c2:64:72:a9:d5:
         4a:97:cb:3a:fb:b5:02:cd:1b:97:70:4d:cc:04:fc:32:f0:77:
         e7:61:bf:61:24:7d:cc:f4:df:a9:24:69:b4:d6:da:59:19:c0:
         fd:be:8e:82:14:52:bf:ed:07:1c:fb:fe:13:22:81:b1:f6:26:
         eb:82:01:b9:7e:bd:c5:3e:3f:84:ef:ea:d3:3d:99:a1:d8:dc:
         b4:71:ef:5f:fe:4f:15:22:9d:d1:10:a9:ae:e7:ca:b7:fa:de:
         36:c7:3e:14:b7:86:52:4b:f2:06:cb:12:3b:da:6f:ab:f1:3f:
         ab:d2:83:1f:14:e2:5e:e3:fb:ea:a6:51:14:cd:cd:9a:6d:c9:
         bd:10:46:84:e9:4d:40:15:22:e5:08:10:db:c4:52:ae:04:d9:
         09:81:e5:c4:58:44:1d:45:37:a1:92:c1:a2:74:17:7d:a5:91:
         06:7a:8f:23:c6:bc:02:da:9b:44:5a:85:8d:21:97:dd:df:b1:
         60:3d:15:00:99:b7:bc:1a:b6:b5:75:52:3c:cc:c4:45:b2:56:
         9b:f1:8a:69:ca:06:a1:92:ff:88:79:3d:39:eb:8a:e0:e6:70:
         3f:56:f4:f2:70:dc:36:05:4c:f8:cb:ce:0b:57:d2:06:8f:51:
         31:4a:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:02 2026 by rpki-client