Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3136302e3233382e3232382e302f32322d3234203d3e203532373635.roa
File:                     3136302e3233382e3232382e302f32322d3234203d3e203532373635.roa (raw, json)
Hash identifier:          8T7iR0C0oPuWXJgngQ0vt75RbDxWKloKWAzIHxwc/XQ=
Subject key identifier:   F4:6C:B0:51:CC:AD:C7:1D:31:DD:F3:45:EE:C3:78:A4:55:96:D6:B2
Certificate issuer:       /CN=A601CC15A099E546A3DCBD53AF497300DAA65598
Certificate serial:       17C9739CE0BE6C274FF46A0A89907B697470EF99
Authority key identifier: A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3136302e3233382e3232382e302f32322d3234203d3e203532373635.roa
Signing time:             Mon 27 Apr 2026 19:33:30 +0000
ROA not before:           Mon 27 Apr 2026 19:28:30 +0000
ROA not after:            Mon 26 Apr 2027 19:33:30 +0000
asID:                     52765
IP address blocks:        160.238.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c9:73:9c:e0:be:6c:27:4f:f4:6a:0a:89:90:7b:69:74:70:ef:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A601CC15A099E546A3DCBD53AF497300DAA65598
        Validity
            Not Before: Apr 27 19:28:30 2026 GMT
            Not After : Apr 26 19:33:30 2027 GMT
        Subject: CN=F46CB051CCADC71D31DDF345EEC378A45596D6B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:15:87:37:8c:7d:dd:c6:79:69:b3:5f:94:9c:
                    cd:e7:7b:f2:c2:1a:eb:36:30:62:53:73:4b:64:3d:
                    ce:d0:56:13:ca:6b:a3:63:df:4f:cf:54:c6:55:1b:
                    a3:e3:a0:71:e0:fc:4b:55:f4:16:a0:d1:22:6d:6e:
                    80:8d:bf:48:20:93:8d:d0:67:98:39:4f:8f:5f:90:
                    89:74:dd:54:bf:71:9e:f3:93:28:f5:32:40:e9:7d:
                    ad:a7:2e:69:30:63:90:df:60:b7:b6:e1:5e:25:ae:
                    4d:95:76:27:35:91:00:05:20:3f:9d:17:44:7c:f8:
                    c1:4f:b8:ac:e0:b4:78:3f:3e:45:f1:1e:27:e8:96:
                    da:44:9e:70:75:10:e2:af:18:a8:da:7a:21:e6:b7:
                    1e:12:63:51:3e:40:89:4e:7b:99:98:a1:25:13:a6:
                    45:e1:b4:19:69:22:91:15:53:42:73:7e:09:36:a2:
                    d5:8e:b5:34:29:65:fc:79:97:7d:97:fa:29:25:cc:
                    bf:b9:fd:2c:b7:f3:56:05:18:53:f2:7c:07:93:25:
                    e1:1d:51:bc:f9:76:0b:bf:df:b4:24:bd:ef:8f:da:
                    3f:b7:42:09:62:e0:e0:34:12:9b:53:ba:30:ee:83:
                    7c:df:c8:8f:1a:93:9b:e5:b4:9a:d3:ca:6d:c2:10:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6C:B0:51:CC:AD:C7:1D:31:DD:F3:45:EE:C3:78:A4:55:96:D6:B2
            X509v3 Authority Key Identifier:
                keyid:A6:01:CC:15:A0:99:E5:46:A3:DC:BD:53:AF:49:73:00:DA:A6:55:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/A601CC15A099E546A3DCBD53AF497300DAA65598.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A601CC15A099E546A3DCBD53AF497300DAA65598.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/1/3136302e3233382e3232382e302f32322d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:56:bf:54:b5:d6:87:3b:e9:0a:af:51:49:f5:92:70:d9:8d:
         11:e9:c5:7c:d4:89:50:77:13:3e:83:bf:1e:e8:a1:1c:cb:fb:
         7e:34:75:34:68:28:77:41:76:4e:0d:2c:d8:42:13:52:0b:c9:
         8d:0f:b7:21:65:87:16:15:19:1b:c7:50:11:d0:3a:79:8f:7e:
         8f:50:9e:cc:78:00:b0:0f:6b:24:70:bf:5d:8f:d6:92:29:58:
         1f:97:ce:ba:c5:76:f2:0b:e4:d2:4a:06:c7:3e:e2:0a:1d:bf:
         4e:b8:4b:77:18:bd:f8:ff:ac:a4:aa:ae:91:59:0a:a7:51:3b:
         ce:b8:4b:cf:79:c3:12:3a:98:be:6c:6a:37:c5:ce:13:c4:c0:
         a4:23:1b:2d:0c:c3:e0:4e:93:e9:05:e9:b6:5c:d8:aa:a3:40:
         d5:e9:4a:b9:a6:bf:71:8e:12:7f:6a:0c:3d:2f:ed:c9:db:99:
         a5:0c:79:3c:33:d0:fc:31:0e:58:63:dd:b8:10:d2:18:c9:71:
         ab:aa:b4:ab:d5:9d:95:2d:2d:3c:a8:0c:0e:e3:89:79:1e:5c:
         56:ea:0a:28:c4:d8:96:5a:66:9d:61:98:5c:da:ef:6c:61:33:
         8f:1d:b4:1c:c4:12:28:8a:96:82:78:e6:fd:b6:ff:bb:47:8e:
         57:eb:14:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:42:48 2026 by rpki-client