Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa
File:                     3136302e32302e38382e302f32342d3234203d3e20323636313837.roa (raw, json)
Hash identifier:          rqviocig+RwK8PZ5AuMtu1Qdv+/Fv2v4hz8Qzwt/ozk=
Subject key identifier:   9F:0B:06:2C:74:E3:D1:6B:EA:90:38:29:21:D9:EF:9D:CE:BD:B3:C8
Certificate issuer:       /CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
Certificate serial:       0CED225B0FA6B725F1573637C902DE479BCFA289
Authority key identifier: 6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa
Signing time:             Wed 01 Jul 2026 12:41:15 +0000
ROA not before:           Wed 01 Jul 2026 12:36:15 +0000
ROA not after:            Wed 30 Jun 2027 12:41:15 +0000
asID:                     266187
IP address blocks:        160.20.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ed:22:5b:0f:a6:b7:25:f1:57:36:37:c9:02:de:47:9b:cf:a2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
        Validity
            Not Before: Jul  1 12:36:15 2026 GMT
            Not After : Jun 30 12:41:15 2027 GMT
        Subject: CN=9F0B062C74E3D16BEA90382921D9EF9DCEBDB3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:6d:9a:17:9d:d3:e9:45:fe:8e:3a:73:0b:
                    c4:73:e0:4d:01:03:8e:60:f6:49:f7:6f:5b:6a:c0:
                    4c:81:f1:c5:9e:4a:ef:33:9a:bb:de:2d:d8:84:fa:
                    40:47:3e:6d:12:85:79:19:4b:a7:b5:11:4d:90:57:
                    c4:45:e6:45:3c:74:be:7f:57:54:13:ce:b8:9d:19:
                    0b:36:79:97:4d:69:92:3a:73:20:99:40:86:17:a8:
                    ad:c1:6e:08:b7:9b:0a:42:4e:f9:e5:14:38:c2:8f:
                    93:ff:60:ef:ee:c2:56:45:7b:5e:d9:a5:b6:06:04:
                    89:c5:37:a5:01:44:62:08:92:2f:30:fb:25:2e:9c:
                    9c:fb:ad:29:df:b7:55:29:69:f9:71:27:08:db:18:
                    1b:ab:c2:ad:42:92:f9:b1:5a:c6:f4:94:56:b1:cb:
                    fb:65:a7:36:2d:57:a9:00:59:a7:7f:f1:a1:88:de:
                    0d:fa:5a:4a:d7:00:e5:6a:84:a2:55:b9:c4:47:6c:
                    8b:a5:17:cd:80:5d:82:5c:42:fe:3e:35:a2:a6:57:
                    64:2e:92:a6:28:a0:42:3f:8b:19:14:03:e1:2f:8b:
                    ca:eb:ce:0e:68:05:e1:e1:00:7d:6a:64:c4:99:dc:
                    8b:56:d0:38:19:f3:7f:b8:ac:f1:6e:88:93:ea:a1:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0B:06:2C:74:E3:D1:6B:EA:90:38:29:21:D9:EF:9D:CE:BD:B3:C8
            X509v3 Authority Key Identifier:
                keyid:6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:95:af:52:78:36:fc:9e:0d:cd:73:58:b6:52:1a:dd:52:1e:
         02:03:3e:21:65:f1:9a:dd:f2:e7:a6:db:da:68:3e:c2:75:1a:
         55:92:9a:1e:a0:c3:6a:a7:9f:46:c8:42:2f:b1:d4:d0:47:6b:
         7b:97:45:ac:5b:7b:7e:c2:e4:6d:52:a7:ee:32:d9:45:d2:5d:
         15:76:1c:84:5e:19:ad:a8:da:b6:2a:33:69:a0:98:91:8f:a9:
         5d:9e:80:c4:d1:3f:9f:ab:94:95:b0:c9:a4:0d:4d:20:0b:07:
         50:c6:1e:5e:4d:63:40:f5:91:e9:3d:9d:4a:95:b4:70:d0:94:
         9f:90:c9:07:42:02:d6:02:83:93:25:90:c2:1c:5f:97:4e:5c:
         db:b2:fb:97:bc:97:ff:59:e6:39:3b:c5:a5:a7:dc:57:aa:c1:
         a0:2e:50:ad:b3:cc:17:80:18:ff:56:6c:03:44:54:73:4f:69:
         e6:50:bb:3c:79:48:e2:20:e0:ce:f7:c8:c8:43:65:2d:a8:d1:
         48:02:d1:9e:cb:99:02:b8:c9:da:0d:1e:1a:24:e9:58:2f:d6:
         24:50:2e:f6:e5:bb:b5:03:55:61:39:76:31:9c:06:e7:1f:c5:
         b7:4b:92:37:d6:a6:71:2e:4a:58:0a:f5:4c:94:9f:9a:33:e8:
         06:b1:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:29 2026 by rpki-client