Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32342d3234203d3e20323636313937.roa
File:                     3136302e32302e3136322e302f32342d3234203d3e20323636313937.roa (raw, json)
Hash identifier:          0Je+nXO4KN50WX7ENhhpVG2W5n5NalPwKCfeEPB6jaw=
Subject key identifier:   B0:1F:03:64:6A:26:3D:E8:5E:D7:D9:6D:89:98:52:10:D8:10:D3:61
Certificate issuer:       /CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
Certificate serial:       3A1696537D438B81C722A88FE82D826576E7493B
Authority key identifier: C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32342d3234203d3e20323636313937.roa
Signing time:             Wed 01 Oct 2025 01:18:28 +0000
ROA not before:           Wed 01 Oct 2025 01:13:28 +0000
ROA not after:            Wed 30 Sep 2026 01:18:28 +0000
asID:                     266197
IP address blocks:        160.20.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl
                          rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:16:96:53:7d:43:8b:81:c7:22:a8:8f:e8:2d:82:65:76:e7:49:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01B6E051024BDBFADF13A18BB1C97739E8D11AA
        Validity
            Not Before: Oct  1 01:13:28 2025 GMT
            Not After : Sep 30 01:18:28 2026 GMT
        Subject: CN=B01F03646A263DE85ED7D96D89985210D810D361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8d:6e:14:0a:b2:0f:bb:15:a0:d2:5e:fd:67:
                    72:96:54:54:50:f2:9d:81:90:b7:44:0a:85:3f:ae:
                    88:00:dd:83:f6:be:ed:86:df:d4:da:33:dd:56:2c:
                    0c:04:e4:45:d0:40:4a:b1:0e:a6:49:01:61:a8:4b:
                    f3:67:e0:d1:cb:cf:31:a6:f9:93:c9:6a:aa:ab:8f:
                    a8:b1:84:79:3d:29:08:d5:b3:bd:89:b4:90:d1:50:
                    7a:bc:d0:72:d4:95:16:4d:ff:10:f3:fa:fb:31:b0:
                    9a:b4:1b:d7:41:d6:3b:e0:b7:a4:4e:aa:7f:61:5c:
                    51:ac:e0:51:31:0b:5d:c0:9e:c1:69:22:ed:b5:d8:
                    6e:5d:06:53:78:b7:e0:95:80:6d:f8:7f:10:78:e0:
                    e2:8d:7a:60:d4:22:b4:47:00:14:5d:d9:93:eb:5b:
                    87:8c:94:51:42:8b:f0:36:3d:09:82:8b:18:89:f4:
                    75:60:91:74:f0:01:8e:3c:43:2e:70:cd:54:29:df:
                    c6:3c:d5:c4:63:49:90:d2:36:9c:d1:0c:4f:fc:aa:
                    f2:ad:87:8e:45:67:66:8f:e9:f5:e2:75:37:ba:3f:
                    72:dc:40:be:4e:c7:31:d2:7b:0a:99:6d:d2:be:7f:
                    60:cb:0b:b9:6e:7b:d0:f5:a0:81:fe:ec:42:ca:34:
                    4d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1F:03:64:6A:26:3D:E8:5E:D7:D9:6D:89:98:52:10:D8:10:D3:61
            X509v3 Authority Key Identifier:
                keyid:C0:1B:6E:05:10:24:BD:BF:AD:F1:3A:18:BB:1C:97:73:9E:8D:11:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C01B6E051024BDBFADF13A18BB1C97739E8D11AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32342d3234203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:59:e1:70:4a:44:61:5a:c1:a9:55:ad:65:34:a0:0b:3a:ba:
         a3:93:e8:d7:d0:ba:58:33:7f:0f:f8:17:fa:f0:6f:00:40:6b:
         86:59:b9:bf:cd:3a:3e:2f:1b:3b:3d:3f:a8:87:85:10:67:e6:
         9e:6d:81:16:97:b1:05:57:97:27:e9:fa:8b:16:c4:ed:77:55:
         62:53:52:32:e2:7f:e9:eb:ab:3e:a3:58:9e:d1:15:7b:b2:2e:
         e5:04:ca:a5:1f:bf:9c:40:66:cd:1e:6b:fc:aa:62:9b:23:46:
         cf:6f:60:a7:98:2b:55:d7:84:b3:cb:ff:08:b4:b0:36:91:2e:
         e4:3c:0a:70:83:a5:55:34:d3:78:1b:20:95:dc:b9:35:1d:d1:
         06:ea:c4:94:97:36:4b:de:d5:dd:c4:c8:c9:0b:f0:b3:b9:d7:
         83:99:c6:d5:c2:18:46:1a:4b:f4:f7:42:92:84:ee:7d:2f:8d:
         48:91:75:f3:da:39:ee:f2:48:f1:c7:7b:bf:15:1c:68:f2:cd:
         2a:0e:83:cf:07:8b:de:47:bc:72:9e:8b:c3:fb:96:ab:8e:a3:
         33:a6:6e:6c:f6:9d:8f:a7:ba:9c:9d:35:39:cf:47:fe:e5:81:
         aa:c0:c0:51:a3:5f:8e:d1:3d:6d:fa:5a:cd:a7:1b:e1:a7:e0:
         77:aa:64:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:24 2025 by rpki-client