Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa
File:                     3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa (raw, json)
Hash identifier:          wXoiWnq2+tX/A5KSGW4YHEC1C6umbufyJDbqRYLD3co=
Subject key identifier:   F3:94:B4:88:FC:F2:58:68:4D:A5:A4:B6:80:DA:99:B3:0C:B2:F0:53
Certificate issuer:       /CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
Certificate serial:       4C8FC958A2BEF9D074C36CBBAC12CA983484A1D4
Authority key identifier: 71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa
Signing time:             Fri 03 Apr 2026 02:13:58 +0000
ROA not before:           Fri 03 Apr 2026 02:08:58 +0000
ROA not after:            Fri 02 Apr 2027 02:13:58 +0000
asID:                     268242
IP address blocks:        160.20.242.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl
                          rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:c9:58:a2:be:f9:d0:74:c3:6c:bb:ac:12:ca:98:34:84:a1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D
        Validity
            Not Before: Apr  3 02:08:58 2026 GMT
            Not After : Apr  2 02:13:58 2027 GMT
        Subject: CN=F394B488FCF258684DA5A4B680DA99B30CB2F053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4c:15:30:47:fe:b4:61:99:b8:50:97:54:c8:
                    f7:95:cb:76:ed:77:f0:10:58:e4:63:ff:24:f0:d6:
                    c8:cd:9b:5b:37:b9:0f:89:7a:7f:a1:0f:26:ef:93:
                    26:59:6a:56:d1:cd:d3:f4:ce:20:a8:3c:6b:e9:fb:
                    10:9b:45:2e:e8:97:47:2c:41:b9:63:3e:fc:74:91:
                    50:0a:01:3b:c9:8a:35:a9:c3:c0:e8:c3:47:02:ce:
                    38:08:cb:b0:a6:1a:74:c9:75:83:f5:98:7e:36:fa:
                    d6:77:42:98:43:4c:52:f0:09:f5:b1:bc:69:87:62:
                    9b:69:29:34:4f:c5:92:d1:85:aa:37:e9:9f:b2:0d:
                    b4:2d:79:a3:ce:6d:a4:0c:4d:e0:f2:73:18:9b:14:
                    06:a9:bd:bd:e3:ab:c2:54:7a:12:52:c7:44:3c:76:
                    ad:2d:49:c3:6a:cd:0b:80:25:14:95:de:b5:21:cb:
                    47:23:60:c8:0f:f3:86:95:2a:18:1b:43:86:d4:9a:
                    5f:93:36:e8:0e:24:51:3b:2b:c2:1c:3e:fb:83:4f:
                    fb:ac:ae:43:b0:aa:dc:0f:bb:97:7c:68:05:49:4d:
                    78:51:e5:5b:f7:26:8b:2d:7d:19:ce:6a:90:fb:76:
                    57:02:99:9b:b8:a4:79:b8:43:6b:db:d6:7e:15:fd:
                    2a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:94:B4:88:FC:F2:58:68:4D:A5:A4:B6:80:DA:99:B3:0C:B2:F0:53
            X509v3 Authority Key Identifier:
                keyid:71:D6:03:2D:BE:B3:57:52:D0:22:3D:C3:91:AD:ED:AD:0A:E3:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71D6032DBEB35752D0223DC391ADEDAD0AE3BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ad4k8JMTSkSNXuyGTsY3HsmbexUuVtSHjES57oFhcEWM/0/3136302e32302e3234322e302f32332d3332203d3e20323638323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:0f:25:16:8d:cf:4d:b9:68:95:db:87:cf:bb:4e:7c:ec:
         e8:c8:1d:0d:7b:6f:00:73:b2:e4:98:4c:c1:9a:fc:03:a2:37:
         14:43:21:4b:b3:fd:28:34:0a:4f:8e:45:91:b1:28:ef:e9:76:
         e7:3d:be:45:9f:48:d5:fa:73:8e:02:98:82:36:d6:1f:49:b9:
         5f:1e:d6:87:99:00:39:3f:b9:2e:56:19:e3:ec:7b:bb:a3:1d:
         f6:44:39:e0:70:d2:c2:53:d8:1e:b1:ed:ae:3b:8c:0c:f8:38:
         36:6b:36:48:47:fe:2b:21:df:2d:d8:b9:72:9f:7f:ed:24:f4:
         7a:14:61:da:a8:67:8d:ea:9f:6a:46:e3:c4:a5:24:b7:45:96:
         d5:42:1f:fc:fe:46:16:04:60:2c:8f:83:5e:b0:71:dc:c5:8e:
         51:ac:91:f8:b2:44:4e:b3:81:24:10:34:44:34:1c:af:16:d0:
         81:93:4d:35:4f:4b:35:7f:a7:e9:7c:3e:ee:b9:d5:6a:e1:60:
         3e:e6:1e:83:03:91:0e:1e:6d:b6:f6:88:4d:97:d3:39:33:06:
         c1:a3:87:87:2a:60:24:fa:bc:80:cc:42:d7:db:ce:c8:3e:d6:
         f0:0d:2e:48:bd:23:a1:f7:d1:1a:41:17:86:00:18:ce:52:f3:
         dc:5a:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:00:39 2026 by rpki-client