Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3234203d3e20323636313837.roa
File:                     3136302e32302e38392e302f32342d3234203d3e20323636313837.roa (raw, json)
Hash identifier:          Y1amCkc0PXzdyWJr5c8UZUhPobAaPEEyt8K6tII9lbs=
Subject key identifier:   17:F6:40:A7:A6:3F:69:1D:5A:B0:49:56:05:A0:4B:DD:F2:48:CA:3B
Certificate issuer:       /CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
Certificate serial:       5DC7D59DCA8099964678D2B59E63112C4E2D3E90
Authority key identifier: 6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3234203d3e20323636313837.roa
Signing time:             Wed 01 Jul 2026 12:41:16 +0000
ROA not before:           Wed 01 Jul 2026 12:36:16 +0000
ROA not after:            Wed 30 Jun 2027 12:41:16 +0000
asID:                     266187
IP address blocks:        160.20.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c7:d5:9d:ca:80:99:96:46:78:d2:b5:9e:63:11:2c:4e:2d:3e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
        Validity
            Not Before: Jul  1 12:36:16 2026 GMT
            Not After : Jun 30 12:41:16 2027 GMT
        Subject: CN=17F640A7A63F691D5AB0495605A04BDDF248CA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:84:ef:02:20:f4:68:ff:80:71:5d:66:70:
                    83:17:ea:29:10:46:0d:b7:52:4c:98:0a:41:a0:b4:
                    f7:40:16:0a:97:b8:f3:d9:f8:9b:a4:1a:cf:01:46:
                    9f:f9:b5:94:27:10:e5:da:0f:b6:b4:00:1a:d1:f0:
                    9b:ef:f7:52:e2:e5:92:ce:bf:c4:d9:71:fc:7d:5b:
                    fe:7f:f9:77:15:96:91:e8:af:f4:1e:d2:02:e8:f1:
                    a6:4a:47:e5:63:b3:ad:76:a1:df:8a:06:41:8b:91:
                    d7:87:34:3b:3d:12:33:07:1f:bb:ba:68:cf:cf:a3:
                    0d:7b:4f:e4:0e:d9:96:fd:35:e6:07:dc:1b:b3:94:
                    dd:35:02:41:db:dc:59:28:57:0e:3e:24:f6:15:9a:
                    e6:e1:39:30:57:ba:35:cc:e3:cf:e1:a1:61:32:91:
                    44:d5:c0:cb:9d:42:9a:c1:29:60:d3:ee:5b:66:a7:
                    77:7f:54:d0:eb:c5:a0:7a:5b:e4:58:ca:6b:0d:78:
                    99:40:53:2d:7b:a3:0b:a8:0d:a4:34:d5:e5:9c:a5:
                    ab:ba:e4:dd:4f:cc:c0:cd:ca:6d:48:80:2f:a7:6e:
                    5f:47:37:f1:ea:a9:dc:70:95:f0:b0:45:5d:52:18:
                    f4:50:35:03:5d:c5:26:cb:95:c9:fd:36:17:27:a2:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F6:40:A7:A6:3F:69:1D:5A:B0:49:56:05:A0:4B:DD:F2:48:CA:3B
            X509v3 Authority Key Identifier:
                keyid:6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38392e302f32342d3234203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:c2:ca:d1:6b:d8:c8:1a:79:e0:5b:c8:db:06:57:75:95:
         b4:6f:61:f4:f3:88:59:07:ba:33:b4:bf:11:55:61:a0:90:64:
         9c:79:a1:69:17:aa:e6:5e:9e:38:98:f4:ae:53:4c:19:a5:c4:
         b9:e0:2e:50:fb:52:b2:ad:b4:35:40:e3:ab:06:ba:53:9e:07:
         29:01:73:74:41:cf:db:4c:1e:47:5f:9e:98:fd:6f:91:57:45:
         fa:44:4a:97:1a:3f:99:36:85:aa:8e:48:77:79:09:fd:cb:96:
         5e:fb:a9:28:cb:be:58:b8:0e:bb:30:da:ef:c2:f9:ca:e7:95:
         70:ad:85:28:ab:e6:9b:74:50:1d:f1:55:ad:33:f2:b1:87:6b:
         df:a4:3d:7b:c5:f5:8a:0a:6a:09:22:31:93:ba:cb:67:57:9c:
         1a:47:da:dd:6c:27:17:d9:21:75:e1:fa:92:c3:15:db:97:7e:
         e5:06:39:f3:fa:9c:88:79:20:2e:d9:78:b3:93:c0:ec:67:87:
         15:6c:0c:b0:57:fa:b2:de:c3:27:14:be:97:d0:b4:30:55:1b:
         2b:40:d4:ba:3e:b0:cd:cf:ae:9f:ec:e1:d7:41:81:d6:25:94:
         91:22:b4:2f:94:77:18:db:5a:b6:18:a1:d5:5f:09:db:ec:0a:
         b6:87:53:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:25 2026 by rpki-client