Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa
File:                     3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa (raw, json)
Hash identifier:          ZkKjU24O7gDCvJxnYnohl88S+Y5jtnQzFb577U0opJs=
Subject key identifier:   BE:64:B0:93:D8:DD:FD:C6:23:39:BD:55:CA:6F:1A:66:38:42:B6:D6
Certificate issuer:       /CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
Certificate serial:       13534E5BE6A83CF05A34AEA7F9273DACA501CA20
Authority key identifier: 15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa
Signing time:             Wed 01 Jul 2026 13:57:56 +0000
ROA not before:           Wed 01 Jul 2026 13:52:56 +0000
ROA not after:            Wed 30 Jun 2027 13:57:56 +0000
asID:                     263589
IP address blocks:        168.205.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl
                          rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 06:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:4e:5b:e6:a8:3c:f0:5a:34:ae:a7:f9:27:3d:ac:a5:01:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152BD93E6DEE45ED029C88DEAC673976658E9A91
        Validity
            Not Before: Jul  1 13:52:56 2026 GMT
            Not After : Jun 30 13:57:56 2027 GMT
        Subject: CN=BE64B093D8DDFDC62339BD55CA6F1A663842B6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:6e:a2:06:c0:e1:72:57:47:0f:f3:2c:7d:
                    d9:85:63:ee:47:27:fe:74:cd:0b:b6:a3:f8:f4:64:
                    46:90:55:80:53:d6:e2:05:85:3b:cf:99:26:7b:9e:
                    aa:bf:93:91:5a:e5:29:20:72:10:56:c0:c1:89:5b:
                    c0:0e:32:90:15:cb:65:b0:7c:ca:03:ba:31:23:15:
                    04:7f:d8:4a:f8:6d:4e:49:89:e4:c5:10:1e:05:2a:
                    d9:33:cb:25:25:89:dd:2c:18:31:74:7f:c9:b5:d9:
                    5e:e6:fb:2b:69:9b:f0:73:11:d2:63:20:c5:ba:a6:
                    f6:8d:1e:ac:1a:99:28:a2:3d:b0:9c:13:38:e4:8c:
                    f3:d9:61:20:47:98:07:a9:e1:a6:4a:c1:8b:3a:a0:
                    61:5f:da:f9:39:1c:9b:f2:47:e8:b6:1b:51:58:c7:
                    40:4f:d5:77:36:3c:41:07:d4:af:38:b9:9f:3b:94:
                    d3:1a:2f:d8:8b:5d:3b:22:8a:45:45:77:a0:f4:87:
                    24:79:ea:f1:9f:1d:a2:ad:0c:6b:6c:04:73:db:2b:
                    f1:7d:2f:63:df:68:c9:cf:6f:aa:c1:3f:5c:18:96:
                    62:f2:d0:1e:3d:10:f2:f0:0e:a9:26:6e:28:17:fe:
                    e3:60:05:79:b8:22:c4:4a:cf:97:ad:96:d0:e6:d1:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:64:B0:93:D8:DD:FD:C6:23:39:BD:55:CA:6F:1A:66:38:42:B6:D6
            X509v3 Authority Key Identifier:
                keyid:15:2B:D9:3E:6D:EE:45:ED:02:9C:88:DE:AC:67:39:76:65:8E:9A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/152BD93E6DEE45ED029C88DEAC673976658E9A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/152BD93E6DEE45ED029C88DEAC673976658E9A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2diGkm3B2Fh9iHH1fJYDzy8ihXkrUGBxwE83GR3fRV47/0/3136382e3230352e32302e302f32322d3332203d3e20323633353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:70:45:0a:61:2e:3a:d3:78:cb:16:97:a0:b8:8b:6f:1d:10:
         56:da:3e:de:ce:30:e6:79:ba:1a:69:bf:3d:3f:53:90:62:4f:
         d7:c6:3a:28:0b:6d:ed:ff:c7:dd:3d:94:ec:5c:62:f8:27:4e:
         55:a8:dd:08:7c:77:5e:80:74:6e:d0:09:d0:83:2a:00:90:29:
         3f:51:d9:46:55:e9:f1:b0:b5:69:68:94:ce:e5:1c:a4:49:d3:
         03:6a:d0:d1:8a:4a:7b:c1:0c:e6:9a:e8:b6:05:62:15:25:a9:
         b3:ab:df:cc:e1:f9:e4:40:6b:d9:a7:a9:4b:99:e8:23:e8:7d:
         57:0e:c2:ac:45:fa:83:74:b9:b7:1e:04:b4:97:00:ad:94:d3:
         fe:e6:2b:fc:b2:6b:a3:1b:70:29:64:07:fd:b1:0c:df:0f:c6:
         e4:83:d0:97:6d:b5:31:c1:ee:71:77:95:cd:d4:36:d8:5c:19:
         f3:45:e9:a7:5b:c3:fa:93:11:14:41:2b:04:9a:23:3a:90:63:
         2b:6c:c6:2a:70:40:8f:c3:d5:80:d4:73:a1:f0:b3:dd:d8:8b:
         48:14:62:b3:66:71:d1:3d:c4:4c:e6:a9:f5:f7:b1:33:44:0b:
         c2:0c:fc:c4:bb:46:2d:9c:d2:a2:ad:70:6a:7e:b4:7a:b7:3b:
         c9:75:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:02:07 2026 by rpki-client