Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
File:                     3136382e302e32302e302f32322d3332203d3e20323635323432.roa (raw, json)
Hash identifier:          zDxaTBJ86yerWyXci9onD/Frjh8j4g7etzHDZRNCzkc=
Subject key identifier:   60:07:33:98:E7:96:50:46:FC:2D:EF:15:59:2B:DF:53:2F:EE:90:5E
Certificate issuer:       /CN=122D80AE5CEA22D4789D552033283A997593BB96
Certificate serial:       5804F505F140F094AF8039B1DB2FDF7DF7757B49
Authority key identifier: 12:2D:80:AE:5C:EA:22:D4:78:9D:55:20:33:28:3A:99:75:93:BB:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122D80AE5CEA22D4789D552033283A997593BB96.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa
Signing time:             Wed 08 Apr 2026 22:47:06 +0000
ROA not before:           Wed 08 Apr 2026 22:42:06 +0000
ROA not after:            Wed 07 Apr 2027 22:47:06 +0000
asID:                     265242
IP address blocks:        168.0.20.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/122D80AE5CEA22D4789D552033283A997593BB96.crl
                          rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/122D80AE5CEA22D4789D552033283A997593BB96.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122D80AE5CEA22D4789D552033283A997593BB96.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 23:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:04:f5:05:f1:40:f0:94:af:80:39:b1:db:2f:df:7d:f7:75:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D80AE5CEA22D4789D552033283A997593BB96
        Validity
            Not Before: Apr  8 22:42:06 2026 GMT
            Not After : Apr  7 22:47:06 2027 GMT
        Subject: CN=60073398E7965046FC2DEF15592BDF532FEE905E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:37:2e:8f:f4:9f:ae:6c:2d:e0:32:66:3f:
                    45:db:71:6f:e3:14:4b:90:3f:7d:af:15:ee:a1:6a:
                    4c:08:40:22:14:90:72:a1:39:ab:8e:64:95:37:e3:
                    8f:6f:c7:00:cd:e2:7d:8c:d2:94:cd:68:fd:fe:ee:
                    7c:87:98:78:7c:ec:3f:ea:fe:ea:d5:4b:7c:77:0f:
                    87:c3:fe:d3:c8:4e:6c:87:bc:bb:57:d2:0a:67:40:
                    2b:e3:85:b5:ed:62:5f:da:26:93:74:6d:43:86:e0:
                    53:7b:1d:8e:0a:57:3d:e2:3f:34:0b:0e:53:54:c5:
                    10:60:ae:aa:5b:4d:10:34:b2:b5:8a:bb:dc:39:99:
                    4f:47:5b:9f:90:3e:07:9e:c1:d8:f0:fe:76:f8:20:
                    0d:bc:f0:3d:b9:0a:e7:14:b6:10:ed:b1:f9:0b:87:
                    b2:75:96:56:c5:d6:00:e3:15:42:a7:0b:cf:8b:18:
                    3e:4b:71:45:1f:1e:b8:2f:5b:53:29:36:71:27:53:
                    b6:b5:91:3b:8b:cf:b1:10:ec:3b:72:6a:88:4b:3a:
                    1d:82:c7:e3:cc:52:19:1a:7b:14:5a:24:fe:8b:b1:
                    33:f2:9e:7d:eb:9a:42:d2:70:b1:c5:1e:db:41:68:
                    f1:d0:b4:a5:5e:72:47:fc:a3:f0:fb:af:72:70:c1:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:07:33:98:E7:96:50:46:FC:2D:EF:15:59:2B:DF:53:2F:EE:90:5E
            X509v3 Authority Key Identifier:
                keyid:12:2D:80:AE:5C:EA:22:D4:78:9D:55:20:33:28:3A:99:75:93:BB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/122D80AE5CEA22D4789D552033283A997593BB96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/122D80AE5CEA22D4789D552033283A997593BB96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mnDPqeuygaQ3FHypBW8q6MVJr6QcQtSrxKNZqHnpHyu/0/3136382e302e32302e302f32322d3332203d3e20323635323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:ea:83:4e:49:90:6e:7a:fd:99:d5:cc:11:80:03:ec:0d:92:
         ef:f0:b5:86:56:43:c1:d8:eb:7c:19:61:51:d9:95:39:4a:3f:
         28:f9:f7:e4:69:be:a1:ac:2c:45:66:2e:b2:bc:0a:23:d9:d5:
         1e:36:7f:c5:59:c6:72:be:45:40:15:34:21:fa:42:65:c7:d2:
         2f:c6:92:fa:95:57:89:eb:31:23:4d:54:1a:97:f0:3d:ef:7b:
         ac:97:1d:c8:9d:ce:19:b8:ee:16:79:6d:c8:c8:28:aa:b4:81:
         3c:f4:14:53:70:ed:b0:e7:26:a5:41:7c:82:b0:45:9f:9b:4a:
         64:32:b4:a6:40:7f:c8:3e:95:05:e8:08:25:dd:da:ee:c3:ea:
         a8:46:5d:93:8c:e8:58:b4:91:05:79:88:e5:23:bd:b4:f7:39:
         77:fd:7b:92:cb:4a:59:7d:a0:a4:c3:bd:dc:b9:63:c3:f7:e6:
         96:a4:6a:b9:0d:92:e1:7c:77:28:a7:43:0f:95:34:f3:44:eb:
         5e:a4:46:e0:ef:b2:79:29:4a:30:9d:d2:c3:f3:21:42:7e:ac:
         9e:20:68:73:e9:bd:44:30:79:b8:31:49:c2:92:34:73:35:fd:
         58:f2:1c:c2:8c:fa:b6:6f:db:03:ab:be:14:98:ca:06:29:26:
         5d:7d:2e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:46:16 2026 by rpki-client