Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa
File:                     3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa (raw, json)
Hash identifier:          QwFyhKmCn9flxt8QGhDwHfG0DUNsA/Dgkd3CMNbbpoU=
Subject key identifier:   C9:E8:12:33:ED:22:B3:89:76:90:2B:87:E5:8F:A5:D4:66:C6:35:06
Certificate issuer:       /CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
Certificate serial:       106F1A43A091B1249673975D744D1EBC8EEC63DB
Authority key identifier: C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa
Signing time:             Wed 01 Oct 2025 01:17:49 +0000
ROA not before:           Wed 01 Oct 2025 01:12:49 +0000
ROA not after:            Wed 30 Sep 2026 01:17:49 +0000
asID:                     266197
IP address blocks:        160.20.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl
                          rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6f:1a:43:a0:91:b1:24:96:73:97:5d:74:4d:1e:bc:8e:ec:63:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
        Validity
            Not Before: Oct  1 01:12:49 2025 GMT
            Not After : Sep 30 01:17:49 2026 GMT
        Subject: CN=C9E81233ED22B38976902B87E58FA5D466C63506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:88:28:1b:5e:7e:b0:4f:e0:9e:29:18:2a:
                    44:d1:29:54:16:9f:2a:77:15:d7:47:ce:af:8f:cb:
                    22:ad:ff:a4:33:0a:22:fc:09:56:43:d6:35:c3:2d:
                    88:0e:a6:1b:dd:58:cc:40:ef:88:1b:a3:2f:70:13:
                    1a:63:eb:4e:06:ea:ad:cd:df:01:33:9e:37:4d:b6:
                    d5:66:79:5f:32:53:bf:66:14:0a:b5:18:0b:63:d9:
                    71:26:f4:66:19:e9:39:19:5b:8c:99:13:da:2d:4e:
                    96:76:0e:6c:df:8c:91:e5:15:a5:3c:a3:55:da:25:
                    83:8c:d4:18:bf:cb:49:89:a8:03:bb:80:25:ac:84:
                    2e:e3:6b:44:a7:35:ca:38:1b:74:ab:2b:bf:98:72:
                    5d:cf:1a:d5:54:a4:e9:3a:1f:66:81:51:c5:4d:b6:
                    3f:41:85:9c:5e:02:28:e0:2d:aa:3c:86:5b:af:7f:
                    3d:f3:c3:9c:b1:55:1a:37:d3:8c:a0:90:02:01:c5:
                    c5:a7:dd:38:5a:c8:d1:4e:27:1c:3f:84:73:10:08:
                    6e:2e:9c:40:7e:d5:fd:70:b4:e2:36:66:35:c6:d1:
                    9e:6f:63:c9:05:d0:b1:e7:8a:97:ce:1e:a3:ab:75:
                    bb:af:41:cf:15:d6:4c:ba:ec:3e:bf:94:d9:29:7f:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E8:12:33:ED:22:B3:89:76:90:2B:87:E5:8F:A5:D4:66:C6:35:06
            X509v3 Authority Key Identifier:
                keyid:C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:92:52:9f:2c:60:f5:4a:ef:ff:b3:22:c7:0e:d1:7d:f2:
         8b:c5:1f:6c:5c:15:23:6e:89:e4:42:90:37:9f:e6:0a:f0:60:
         c9:01:a5:f5:22:70:77:cc:6e:ff:c5:d8:3f:83:cd:87:a2:ce:
         13:82:c1:6e:f1:cb:62:a1:18:cc:66:11:70:82:9c:2c:7e:8f:
         15:23:39:b8:aa:f6:18:bd:68:a1:8f:a2:1e:94:02:4c:e1:a7:
         6c:86:ff:7a:2f:e9:2e:c6:01:8b:fe:05:45:e5:97:fd:83:0c:
         49:84:00:f0:9a:db:d9:d0:a0:5c:0f:a4:2a:36:23:a5:11:03:
         74:a7:61:e6:da:a8:b7:fb:95:a8:89:d4:b9:70:ba:84:aa:ed:
         33:9f:cc:96:dd:16:0b:2b:42:5b:4f:51:d3:ca:67:46:02:be:
         3f:49:39:19:36:74:ca:35:10:b0:46:04:3a:a9:3e:3b:af:98:
         e8:87:b6:94:19:e1:24:ed:91:8d:ae:b4:d3:de:ec:09:f5:30:
         77:15:43:97:98:5f:09:7e:1c:3d:0b:0c:af:b2:1d:4c:73:70:
         99:b1:bc:6e:d5:b9:3e:4e:14:a3:df:d6:df:d1:28:9a:49:f3:
         3c:df:f1:90:6c:07:b1:84:f1:59:ee:e9:82:1a:d8:73:dd:82:
         22:22:32:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:36:38 2025 by rpki-client