Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa
File:                     3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa (raw, json)
Hash identifier:          18uOdOq1fc4kDsNdg6BO2GwAlWXhd1BPq+icqwd6Rsw=
Subject key identifier:   6B:EA:6C:B5:61:B2:3E:83:14:EE:C7:D6:05:F4:38:5F:70:4C:F0:5A
Certificate issuer:       /CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
Certificate serial:       7C419708AA9F56C8A215BFEF0F44D5C235333BF4
Authority key identifier: 03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa
Signing time:             Wed 20 May 2026 16:01:01 +0000
ROA not before:           Wed 20 May 2026 15:56:01 +0000
ROA not after:            Wed 19 May 2027 16:01:01 +0000
asID:                     271110
IP address blocks:        160.20.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl
                          rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 13:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:41:97:08:aa:9f:56:c8:a2:15:bf:ef:0f:44:d5:c2:35:33:3b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Validity
            Not Before: May 20 15:56:01 2026 GMT
            Not After : May 19 16:01:01 2027 GMT
        Subject: CN=6BEA6CB561B23E8314EEC7D605F4385F704CF05A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:e0:84:a4:df:98:26:7d:6d:87:74:96:25:
                    24:28:68:06:0f:a1:c0:24:d7:3c:5a:53:66:45:c5:
                    97:0e:8f:42:5d:fc:bd:16:60:94:04:f9:b6:33:20:
                    66:16:93:92:27:15:5d:8b:cb:9d:cd:e6:7f:cb:3d:
                    ca:59:a8:40:d4:70:54:35:bc:8a:22:e8:e5:58:c1:
                    97:06:da:95:ab:fe:7f:f5:77:e2:5b:06:ae:a2:d5:
                    28:04:44:86:5b:76:b8:83:94:9e:64:19:36:68:ae:
                    fd:66:03:18:b5:0d:fc:19:68:f3:0b:d6:a7:ac:fd:
                    68:8b:62:d5:05:e6:0d:bc:33:46:85:75:28:d1:c4:
                    51:f6:8e:a6:22:3c:1a:33:79:ac:71:a9:77:03:a0:
                    50:8d:bd:89:56:7e:25:1a:2e:85:58:9b:c7:2b:62:
                    3d:86:d8:5f:4f:6d:03:13:03:5b:39:d0:4f:8d:a8:
                    6b:f9:57:c4:6f:d3:88:9a:23:28:3a:90:cc:28:cf:
                    23:1b:7e:84:7f:f9:cb:02:be:cb:c6:bf:0b:b5:62:
                    06:e1:38:e4:8e:26:85:b8:ac:be:04:d4:70:5e:e9:
                    66:bb:f9:15:cb:84:b9:08:b1:e4:e6:86:13:d5:8b:
                    51:c8:ef:50:66:0a:6f:aa:95:44:49:f2:03:93:a6:
                    cd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EA:6C:B5:61:B2:3E:83:14:EE:C7:D6:05:F4:38:5F:70:4C:F0:5A
            X509v3 Authority Key Identifier:
                keyid:03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/3136302e32302e3137392e302f32342d3234203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2e:a3:54:2c:16:e7:44:18:a9:1e:80:9f:a4:d0:81:c2:e6:
         0a:86:7a:0d:51:f4:5b:28:c9:09:3d:7f:f2:17:fe:98:e3:78:
         84:f7:f2:c4:56:8e:41:60:a1:94:d7:c1:cd:97:e3:c9:38:a2:
         9b:d2:e4:9d:fc:9c:11:f3:5a:20:c9:27:99:14:50:5b:9d:dc:
         8c:90:ba:4f:61:3e:c1:8a:ff:73:4b:4b:8d:8b:62:64:9b:17:
         65:f4:f0:53:cf:9e:e9:9a:e5:11:9d:67:b8:0f:93:81:58:00:
         5b:39:57:d8:85:36:28:c7:f4:bb:1e:b7:eb:ea:92:d9:e5:a2:
         98:5f:e3:ef:42:f8:b7:62:45:30:77:7f:50:1c:ea:4f:1d:eb:
         d7:ef:c3:ee:9d:7d:b8:dd:bc:aa:43:56:bd:38:87:7a:df:c6:
         ce:64:64:a0:7e:d0:ac:78:93:3f:85:5e:5f:28:2e:cf:20:9d:
         9c:e3:f9:db:7d:de:9d:de:b8:64:02:82:fc:b7:bb:6f:5e:31:
         3e:82:76:35:c1:df:90:49:06:15:74:52:99:7c:85:53:a1:6b:
         b2:cb:72:93:d0:3d:6a:8f:b3:61:66:fc:5c:6e:75:66:ee:d0:
         64:c2:5c:95:b2:80:38:4b:31:70:91:3d:52:d4:5d:7b:42:e3:
         1f:3b:57:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:18:09 2026 by rpki-client