Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa
File:                     3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa (raw, json)
Hash identifier:          ItOZcralZG0MmTD7EmMySPZSXC7a1K+JxaJDaLcnnng=
Subject key identifier:   39:26:A5:E7:D0:CD:23:E1:AE:FB:87:03:43:7A:30:9B:2E:DE:30:A5
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       5636C4CE636BC293F794C194F31822A8BCDD064A
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa
Signing time:             Thu 18 Jun 2026 18:00:00 +0000
ROA not before:           Thu 18 Jun 2026 17:55:00 +0000
ROA not after:            Thu 17 Jun 2027 18:00:00 +0000
asID:                     266551
IP address blocks:        160.238.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 16:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:36:c4:ce:63:6b:c2:93:f7:94:c1:94:f3:18:22:a8:bc:dd:06:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jun 18 17:55:00 2026 GMT
            Not After : Jun 17 18:00:00 2027 GMT
        Subject: CN=3926A5E7D0CD23E1AEFB8703437A309B2EDE30A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:78:99:60:b7:fb:37:c8:f4:0e:91:08:26:
                    db:2a:29:e7:b8:d4:47:48:77:de:a0:d2:03:43:6d:
                    e6:f4:96:80:84:4d:1f:ee:5d:a9:62:51:8e:88:3e:
                    33:3a:bd:8e:53:c8:92:59:20:ea:a7:55:d2:15:57:
                    32:18:0d:05:f8:30:76:a0:e9:25:4d:8c:be:a5:8d:
                    03:61:60:8c:52:10:8f:a4:8a:3f:6b:17:c9:a9:b9:
                    d7:e0:b8:fe:0b:ac:d2:95:be:b7:d2:3c:ad:7e:f9:
                    b7:b4:b0:8c:ac:6e:54:60:82:d6:40:11:d7:ac:17:
                    35:e4:bd:a2:7d:d6:2d:82:00:94:65:6b:78:f7:8a:
                    9b:ab:4f:59:49:fa:a1:68:0d:b4:46:f8:11:7a:10:
                    df:7f:be:54:26:20:10:07:63:1c:92:98:a1:50:b8:
                    1d:a3:70:b4:a7:ce:16:ba:d3:b2:91:c8:06:31:90:
                    23:d4:3f:aa:e6:e1:4a:eb:c7:4f:b1:5a:91:5e:8f:
                    6c:de:13:70:d7:e4:c7:7a:17:13:e7:51:3c:fb:3a:
                    f2:5c:71:be:ba:4b:59:32:9b:dc:fc:8d:a3:d8:3b:
                    54:f1:f7:83:85:63:f3:9e:d8:13:eb:04:ea:96:86:
                    b5:a8:97:d6:a1:03:1e:94:72:32:d3:57:56:d6:d1:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:26:A5:E7:D0:CD:23:E1:AE:FB:87:03:43:7A:30:9B:2E:DE:30:A5
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32332d3233203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:7e:4e:7f:8e:40:ff:62:d0:b5:9e:d8:2d:91:a7:59:59:
         b6:cf:63:7a:36:2a:93:37:01:0c:25:6f:05:90:d0:e0:c5:ad:
         98:61:e6:fb:a8:e7:16:c8:ea:62:bd:f0:79:8c:40:42:7c:fe:
         a0:d4:51:6d:24:23:68:f8:dc:27:9e:9b:82:7e:3b:01:fb:00:
         0e:10:4b:5b:40:39:91:39:1a:c5:72:d7:fc:5e:36:f1:af:0f:
         0c:b9:fa:e5:3b:75:4a:5a:b6:f4:a6:4b:36:a2:34:67:aa:72:
         25:ad:eb:6e:61:91:a2:0f:30:01:d0:ce:9f:5e:d0:77:36:a4:
         16:fd:f5:cc:0b:0b:67:a0:c8:f8:ce:f6:9b:cb:02:55:4c:9c:
         91:79:ba:3b:89:12:84:cd:db:8e:8e:5b:32:d2:5f:13:e0:3d:
         b9:3f:9b:cb:0c:23:36:15:44:97:75:37:08:7c:90:5d:ec:a6:
         ad:37:76:0b:13:33:2b:15:8f:12:55:f9:2a:18:36:3f:80:cc:
         78:9e:50:81:4f:01:85:f8:01:1f:f3:31:2b:f5:c0:3e:f9:cb:
         04:6f:df:a7:af:0b:3b:b3:99:22:8f:db:25:6e:e3:3b:f6:fe:
         bd:b2:59:ea:8f:0a:ce:60:3d:95:f9:1c:34:6f:3a:cc:11:9f:
         1f:bb:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 20:08:31 2026 by rpki-client