Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa
File:                     3136302e32302e39312e302f32342d3234203d3e20323636313837.roa (raw, json)
Hash identifier:          vChyqyzsbmLojMey8foQCSvs2a7yNWlbrJhEcCM1OZo=
Subject key identifier:   86:4A:EB:96:03:E3:F3:A4:D3:23:84:2E:F4:45:D3:4F:65:10:37:EF
Certificate issuer:       /CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
Certificate serial:       6C8793FAE3BB7024B121A1F4C36BCE15412A9F80
Authority key identifier: 6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa
Signing time:             Wed 01 Jul 2026 12:41:15 +0000
ROA not before:           Wed 01 Jul 2026 12:36:15 +0000
ROA not after:            Wed 30 Jun 2027 12:41:15 +0000
asID:                     266187
IP address blocks:        160.20.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:93:fa:e3:bb:70:24:b1:21:a1:f4:c3:6b:ce:15:41:2a:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A8AFF2BC17137B88D1978673F370B98459B81DD
        Validity
            Not Before: Jul  1 12:36:15 2026 GMT
            Not After : Jun 30 12:41:15 2027 GMT
        Subject: CN=864AEB9603E3F3A4D323842EF445D34F651037EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:e3:7e:d3:e0:64:e2:ad:a6:75:98:37:dd:
                    50:9b:aa:3d:47:99:1a:54:b9:0c:db:a8:ec:4e:26:
                    63:dd:14:72:db:e2:1d:0a:de:9a:fa:86:b6:d7:d3:
                    6c:ef:11:6c:8b:95:9d:16:a0:5a:6e:ba:28:91:e8:
                    72:de:9f:3a:6a:62:70:36:40:17:a8:63:f6:5c:c7:
                    eb:d7:cb:fd:5f:f0:4b:ed:64:56:a2:38:df:79:2d:
                    38:16:8f:2f:f7:ef:b9:52:0c:0f:26:dc:43:02:c4:
                    0d:fa:7c:33:b5:a0:57:e8:bc:79:7a:8d:6a:8e:32:
                    c5:73:65:c9:9f:af:07:d2:d3:10:65:6b:08:02:32:
                    d0:6f:f7:b4:9d:8b:68:5a:6a:90:b7:27:ad:da:41:
                    d8:73:7d:68:0c:2e:da:2c:36:a3:1a:3d:fd:5f:14:
                    39:79:47:aa:4b:a9:39:06:6d:f3:32:79:5f:1a:d3:
                    87:c2:96:31:a3:f0:6c:63:7f:6a:58:e8:74:ab:b1:
                    e3:2f:64:b0:35:e7:d7:bc:1f:15:75:b1:5b:e0:7c:
                    b2:f5:88:33:19:27:eb:71:44:03:a0:70:54:f7:1a:
                    70:ac:15:c3:21:a0:e1:d3:6e:7c:ce:0f:fc:82:ff:
                    28:ba:4f:33:51:be:5c:7f:6b:c8:1e:a4:39:54:97:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:EB:96:03:E3:F3:A4:D3:23:84:2E:F4:45:D3:4F:65:10:37:EF
            X509v3 Authority Key Identifier:
                keyid:6A:8A:FF:2B:C1:71:37:B8:8D:19:78:67:3F:37:0B:98:45:9B:81:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/6A8AFF2BC17137B88D1978673F370B98459B81DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A8AFF2BC17137B88D1978673F370B98459B81DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e39312e302f32342d3234203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:61:36:e9:77:5d:ea:69:1d:72:94:13:93:07:3d:d4:06:06:
         4f:56:10:41:78:69:39:6f:c5:4a:ed:19:b9:c8:bf:89:3a:7b:
         41:31:46:8e:f9:8d:e1:1f:3c:44:35:a3:ad:c1:61:a3:a2:4d:
         40:27:13:e9:79:e5:6b:79:39:7c:2f:88:08:c9:0e:da:42:4a:
         a4:b4:e7:10:f2:34:7a:92:fb:27:82:31:a9:10:3e:3c:ae:97:
         98:3c:0e:20:a8:57:4e:3e:b1:11:f4:36:e6:7d:d0:d0:58:4d:
         3b:5d:06:c0:d1:99:91:cf:e5:03:b2:e0:99:44:3f:e2:62:c6:
         4a:dd:55:b6:a0:02:07:3c:3d:c5:b6:da:03:0b:c5:ed:1c:41:
         2d:a6:1d:de:24:70:8d:7b:ca:53:b7:94:a6:00:00:22:02:fd:
         42:6d:cf:7f:3a:d8:14:20:0e:72:15:a8:45:a6:4c:26:e4:e6:
         41:62:c6:e9:6f:1f:96:b5:5a:c9:2c:e9:c0:7d:cf:bf:79:ff:
         53:01:f5:84:eb:7f:71:57:8a:2c:5b:f1:0c:7b:6b:66:28:e9:
         c7:c8:d1:1f:a1:cf:cb:0f:16:65:f9:ea:8a:28:dd:de:db:83:
         d0:3d:ec:20:00:db:8c:cd:02:e4:23:26:a9:f2:69:b2:ea:3f:
         55:c0:b4:ab
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbIeT+uO7cCSxIaH0w2vOFUEqn4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4QUZGMkJDMTcxMzdCODhEMTk3ODY3M0YzNzBCOTg0
NTlCODFERDAeFw0yNjA3MDExMjM2MTVaFw0yNzA2MzAxMjQxMTVaMDMxMTAvBgNV
BAMTKDg2NEFFQjk2MDNFM0YzQTREMzIzODQyRUY0NDVEMzRGNjUxMDM3RUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuJuN+0+Bk4q2mdZg33VCbqj1H
mRpUuQzbqOxOJmPdFHLb4h0K3pr6hrbX02zvEWyLlZ0WoFpuuiiR6HLenzpqYnA2
QBeoY/Zcx+vXy/1f8EvtZFaiON95LTgWjy/377lSDA8m3EMCxA36fDO1oFfovHl6
jWqOMsVzZcmfrwfS0xBlawgCMtBv97Sdi2haapC3J63aQdhzfWgMLtosNqMaPf1f
FDl5R6pLqTkGbfMyeV8a04fCljGj8Gxjf2pY6HSrseMvZLA159e8HxV1sVvgfLL1
iDMZJ+txRAOgcFT3GnCsFcMhoOHTbnzOD/yC/yi6TzNRvlx/a8gepDlUlxI9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhkrrlgPj86TTI4Qu9EXTT2UQN+8wHwYDVR0j
BBgwFoAUaor/K8FxN7iNGXhnPzcLmEWbgd0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFwZzVOR0FYeXFWR2hFMTJaOTJBajFBTW9uMm51czFIa3U2OWE5R05M
YkwvMC82QThBRkYyQkMxNzEzN0I4OEQxOTc4NjczRjM3MEI5ODQ1OUI4MURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZBOEFGRjJCQzE3MTM3Qjg4
RDE5Nzg2NzNGMzcwQjk4NDU5QjgxREQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhcGc1TkdBWHlxVkdoRTEyWjkyQWoxQU1vbjJudXMxSGt1NjlhOUdOTGJMLzAv
MzEzNjMwMmUzMjMwMmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAoBRbMA0GCSqGSIb3DQEBCwUAA4IBAQB4YTbpd13q
aR1ylBOTBz3UBgZPVhBBeGk5b8VK7Rm5yL+JOntBMUaO+Y3hHzxENaOtwWGjok1A
JxPpeeVreTl8L4gIyQ7aQkqktOcQ8jR6kvsngjGpED48rpeYPA4gqFdOPrER9Dbm
fdDQWE07XQbA0ZmRz+UDsuCZRD/iYsZK3VW2oAIHPD3FttoDC8XtHEEtph3eJHCN
e8pTt5SmAAAiAv1Cbc9/OtgUIA5yFahFpkwm5OZBYsbpbx+WtVrJLOnAfc+/ef9T
AfWE639xV4osW/EMe2tmKOnHyNEfoc/LDxZl+eqKKN3e24PQPewgANuMzQLkIyap
8mmy6j9VwLSr
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:59:33 2026 by rpki-client