Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e20313938393439.roa
File:                     3230302e3136302e31362e302f32302d3234203d3e20313938393439.roa (raw, json)
Hash identifier:          AWdQJ0gzGMhk336eFmh0egItryIjZYpr55hBtP4D000=
Subject key identifier:   38:0F:3D:33:2B:78:B8:DB:E7:86:E6:D0:28:17:BF:A8:AD:6D:BA:43
Certificate issuer:       /CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
Certificate serial:       66325016842209580FA4AE1109A3BA58E940E7B3
Authority key identifier: 0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e20313938393439.roa
Signing time:             Mon 07 Sep 2026 18:00:39 +0000
ROA not before:           Mon 07 Sep 2026 17:55:39 +0000
ROA not after:            Mon 06 Sep 2027 18:00:39 +0000
asID:                     198949
IP address blocks:        200.160.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl
                          rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 18:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:32:50:16:84:22:09:58:0f:a4:ae:11:09:a3:ba:58:e9:40:e7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A6CE41314DED3332665E69E87FF0E48E950B3A3
        Validity
            Not Before: Sep  7 17:55:39 2026 GMT
            Not After : Sep  6 18:00:39 2027 GMT
        Subject: CN=380F3D332B78B8DBE786E6D02817BFA8AD6DBA43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:44:00:c5:5c:31:62:6a:41:d0:42:01:72:
                    1a:bf:35:3f:c4:ce:a0:e0:7c:67:3f:53:c0:ff:ca:
                    f0:21:cc:28:0b:8a:50:82:9b:55:13:93:f1:a6:68:
                    26:2c:23:cb:e2:60:c6:6d:8b:e4:e1:57:e9:46:09:
                    53:aa:c5:ed:83:27:a4:7a:6d:87:e4:25:57:d2:a7:
                    b9:8b:a6:07:90:4c:28:c8:82:1a:ab:38:a7:ae:32:
                    63:67:ba:8a:f4:c0:4e:7b:09:2e:26:c8:8f:fb:3e:
                    75:e8:a9:74:46:05:04:1a:99:88:fa:bf:2e:46:59:
                    a6:38:f3:10:24:70:fb:67:42:b8:a3:f1:15:3d:26:
                    38:95:bb:cc:67:f5:46:9c:5b:a3:75:0e:1d:dd:38:
                    9a:de:04:1d:07:c8:7b:aa:7c:de:96:cf:19:c7:e6:
                    02:43:b2:4a:70:59:81:10:44:50:93:1f:80:f3:08:
                    4c:42:a6:69:1b:be:0b:03:83:f0:33:1e:83:66:bc:
                    bc:36:b1:14:3c:3f:91:70:e1:b6:71:0d:70:3e:0f:
                    c0:9e:89:b1:f9:f7:39:02:80:44:1e:f8:ce:38:28:
                    00:19:b3:28:cf:55:18:8c:b0:10:18:cd:d6:9e:dc:
                    36:41:59:7c:0d:02:e4:78:1c:5e:a5:8f:fa:af:89:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0F:3D:33:2B:78:B8:DB:E7:86:E6:D0:28:17:BF:A8:AD:6D:BA:43
            X509v3 Authority Key Identifier:
                keyid:0A:6C:E4:13:14:DE:D3:33:26:65:E6:9E:87:FF:0E:48:E9:50:B3:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A6CE41314DED3332665E69E87FF0E48E950B3A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3AQkQ9wNn7gdmSWAxHjc7CjpiRmbkL3QjJ9xmiuwDop/1/3230302e3136302e31362e302f32302d3234203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:df:a0:70:7e:1e:0e:89:ce:27:25:2e:ff:8c:b5:f3:ea:ff:
         07:36:b8:b7:ee:e3:0f:0c:90:19:64:3e:5b:7c:3a:a2:ad:2f:
         21:f7:e2:e1:c2:d7:97:0f:f9:5e:a2:fc:e5:b2:27:42:bb:a2:
         dd:70:ee:84:1c:e5:c5:b1:86:39:21:54:6f:1b:5c:14:70:aa:
         c3:fd:cd:0d:88:7e:cb:af:0f:c6:03:22:cd:8c:c4:bd:a5:28:
         b2:be:5a:d4:a0:8c:2f:9b:16:8c:16:89:7b:4c:78:a1:01:66:
         a5:79:69:d5:b0:0e:8b:21:b2:14:4e:75:37:9c:94:05:9a:f3:
         a2:de:49:d0:43:45:3d:7d:08:d6:22:53:a6:ae:a4:8a:f9:d8:
         ca:7b:07:0c:43:4d:20:16:f8:69:0e:85:7c:d5:58:16:8d:18:
         ad:06:f0:d0:67:8e:fa:9d:84:ec:ee:57:26:66:8a:6b:dd:4d:
         ea:38:c8:fd:9c:fb:e1:01:2b:ea:20:19:47:d9:07:a7:fe:e1:
         db:93:cb:1f:5f:ed:d6:4b:af:e2:39:21:66:51:67:7b:bd:4d:
         6e:ba:7a:7e:f9:af:fb:b1:63:6e:b3:40:ea:2f:6f:d8:c3:8f:
         1b:c8:17:b5:58:8c:9c:2a:17:a4:db:3e:51:cd:a1:e3:a7:35:
         f8:bf:19:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:51:30 2026 by rpki-client