Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa
File:                     3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa (raw, json)
Hash identifier:          CXxXCRmKvJc2HK0jUQW0J12oWRcduObx5wKrPISdDmw=
Subject key identifier:   55:38:AC:12:D3:7B:8B:56:12:67:D8:52:07:AF:09:10:F1:11:91:86
Certificate issuer:       /CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
Certificate serial:       30FFFA955F26A73A4F9D15F15CCE121FB1819C06
Authority key identifier: C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa
Signing time:             Wed 01 Oct 2025 01:18:11 +0000
ROA not before:           Wed 01 Oct 2025 01:13:11 +0000
ROA not after:            Wed 30 Sep 2026 01:18:11 +0000
asID:                     266197
IP address blocks:        160.20.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl
                          rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ff:fa:95:5f:26:a7:3a:4f:9d:15:f1:5c:ce:12:1f:b1:81:9c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
        Validity
            Not Before: Oct  1 01:13:11 2025 GMT
            Not After : Sep 30 01:18:11 2026 GMT
        Subject: CN=5538AC12D37B8B561267D85207AF0910F1119186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f9:05:f0:7d:af:a2:de:7f:4a:e1:88:89:bd:
                    06:ef:a2:08:58:7b:cc:7a:4e:b3:84:6d:56:60:ac:
                    f6:49:18:5b:22:68:43:b5:0d:3b:12:d2:26:f0:dc:
                    84:e1:3c:c9:44:67:3c:56:7c:d3:1d:7d:4f:6b:11:
                    22:74:75:c4:c4:39:ee:85:c6:6b:9f:e9:9f:fa:fe:
                    7b:f0:a6:85:c5:79:b5:3c:91:38:a6:ca:3b:83:8b:
                    f8:1f:1e:40:6b:b4:a9:74:8a:8f:e1:1d:5c:11:91:
                    bf:3f:f7:a8:f1:68:4c:96:a6:64:51:0d:f3:d6:3f:
                    51:ec:b9:8b:96:96:02:c9:e8:7c:20:99:b0:01:a9:
                    bd:a4:e1:7f:69:a7:62:04:8b:a4:7f:8b:bc:45:a1:
                    57:35:06:d6:dd:01:23:70:10:8c:e9:95:68:fd:58:
                    10:49:d7:e1:cc:d8:c4:02:6f:c7:19:08:fa:f2:7a:
                    6b:c2:9a:3c:03:d0:70:20:7b:70:c7:6a:e9:0a:75:
                    b2:f2:cb:b8:79:f4:02:8b:dc:4f:4f:70:cc:41:20:
                    f6:0c:57:ef:99:e3:9e:d4:2a:7a:5f:b8:2a:de:88:
                    ff:f7:0f:e3:2d:ef:e3:fc:4c:72:ce:51:1f:d1:d3:
                    26:dd:13:5d:a2:0e:7d:56:bb:eb:9d:50:e6:30:6f:
                    0b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:38:AC:12:D3:7B:8B:56:12:67:D8:52:07:AF:09:10:F1:11:91:86
            X509v3 Authority Key Identifier:
                keyid:C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:a2:80:07:7e:96:68:32:3f:31:29:40:b4:1c:7b:e1:2c:a4:
         52:2c:4a:06:84:23:19:e2:f7:c4:f7:42:82:8f:d6:b8:d0:da:
         4e:b4:19:e7:b8:94:25:87:fc:58:9e:6d:13:c2:6b:0a:4a:90:
         1c:43:ee:33:c0:92:5a:25:c8:5b:c3:27:21:c1:9e:3e:28:08:
         51:d5:79:85:c2:61:22:7c:f6:8c:33:f3:77:25:a6:95:37:b7:
         db:0d:21:85:bd:6a:b4:94:d0:94:19:8d:5c:82:de:d1:52:92:
         09:d4:0d:f2:98:45:2c:af:e5:1e:ea:5b:03:9f:26:b0:8f:18:
         c0:27:27:bb:94:d4:43:12:8f:cb:df:75:f0:63:cc:6a:ca:85:
         50:66:e7:ee:b8:24:f0:b3:e4:a8:3f:cb:d6:59:f3:34:21:00:
         9f:03:fc:e8:9d:86:51:03:38:75:5b:2a:66:ff:93:0e:42:56:
         56:61:10:8a:12:20:dd:dc:cc:67:ac:94:52:2b:61:4d:92:a3:
         66:65:7a:04:c1:de:74:b6:50:68:c5:e0:1a:fd:53:39:ac:38:
         8a:b8:52:5a:d4:9c:43:be:cb:70:29:0f:c2:9d:3c:df:7c:7c:
         13:b4:2b:58:11:51:1b:20:b0:cc:1a:93:43:7c:14:13:73:16:
         74:49:66:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:30 2025 by rpki-client