Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32322d3332203d3e20323636313837.roa
File:                     3136302e32302e38382e302f32322d3332203d3e20323636313837.roa (raw, json)
Hash identifier:          AidFon8F9UBWYTl3S1v6tl2/IGALD3fspe3ZQ2wc92I=
Subject key identifier:   46:E1:4D:66:6B:1C:F2:CC:B6:AD:F2:05:6E:09:FA:1B:06:A3:AE:20
Certificate issuer:       /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial:       4C65CE251B52CC5EF3EAAA41A7DDCAF1C89563E8
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32322d3332203d3e20323636313837.roa
Signing time:             Tue 10 Jun 2025 12:10:48 +0000
ROA not before:           Tue 10 Jun 2025 12:05:48 +0000
ROA not after:            Tue 09 Jun 2026 12:10:48 +0000
asID:                     266187
IP address blocks:        160.20.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 05:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:65:ce:25:1b:52:cc:5e:f3:ea:aa:41:a7:dd:ca:f1:c8:95:63:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
        Validity
            Not Before: Jun 10 12:05:48 2025 GMT
            Not After : Jun  9 12:10:48 2026 GMT
        Subject: CN=46E14D666B1CF2CCB6ADF2056E09FA1B06A3AE20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fd:38:2c:7b:17:fa:9b:3a:d2:13:c4:98:94:
                    ae:2b:be:a4:08:50:a9:30:65:df:c4:61:80:a2:82:
                    e3:01:8c:ec:df:52:c3:45:52:65:d9:51:25:f3:79:
                    f7:f5:48:b0:a6:83:66:dd:53:ed:5a:5e:7c:29:c4:
                    f2:56:e8:60:d6:ea:59:da:c7:5b:cb:96:ce:11:e1:
                    57:6f:ec:31:b9:41:e5:09:8a:37:8c:5f:c4:8c:40:
                    bb:e0:c2:0e:31:f2:10:35:5d:37:7d:bc:ed:e4:8c:
                    a5:6c:6e:6a:33:6e:a6:79:eb:3f:85:a1:ff:3d:2b:
                    db:4b:ef:3b:be:d8:3c:c7:76:df:89:b6:48:9c:f3:
                    75:9b:d6:89:45:87:22:90:b5:a3:c6:27:83:d3:10:
                    b4:53:c4:7c:e8:3b:ab:a9:8b:3c:3b:06:7f:c1:dd:
                    dc:6c:6e:9f:a1:db:db:d0:11:10:56:98:e9:6c:6e:
                    57:0e:19:ae:e0:2f:75:e9:ad:bd:54:eb:56:c0:6c:
                    28:79:b5:34:dd:a8:f0:76:8c:0e:34:0e:da:37:22:
                    12:7b:23:15:6a:df:42:2e:6c:8f:cd:be:a4:e1:66:
                    23:de:51:d3:3d:39:2a:cd:d9:ec:fc:fb:4d:f1:35:
                    7d:2c:fb:4e:5f:1b:15:b4:e6:54:ff:16:97:0a:9d:
                    92:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E1:4D:66:6B:1C:F2:CC:B6:AD:F2:05:6E:09:FA:1B:06:A3:AE:20
            X509v3 Authority Key Identifier:
                keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32322d3332203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:6d:c1:eb:2d:b0:e4:85:ab:cb:b5:aa:48:3f:ee:df:a2:ae:
         12:47:9b:f7:b1:8f:d5:b0:4f:85:26:33:f8:94:b4:27:b0:14:
         3f:fe:db:36:91:e7:c3:b7:db:af:20:6e:27:e0:da:e9:05:fe:
         42:a8:bc:c8:56:2f:a1:b8:42:12:5b:20:58:c5:ba:c2:91:c8:
         d4:4a:dd:09:e2:82:a5:e6:3a:77:cc:f6:61:3d:c4:80:33:33:
         e7:5f:73:d8:db:43:ed:11:44:53:d6:08:5f:69:d1:92:54:cc:
         99:c8:00:00:84:16:4f:0d:92:58:aa:5e:44:03:c7:1c:05:d5:
         17:1d:03:58:b6:91:e0:4d:b8:93:04:81:21:9b:33:d7:b9:b0:
         3e:80:90:90:03:ab:51:42:8b:26:26:57:63:01:dc:59:a0:b3:
         d8:4d:f1:aa:45:32:2d:ca:f7:c3:8d:85:cc:f7:46:7e:b3:ee:
         d7:5c:09:b9:c5:3e:50:c2:88:4a:38:a3:2b:00:36:b9:fb:e2:
         6d:cd:63:46:fb:b6:dd:85:ed:4b:47:f9:d4:b0:89:0c:7f:78:
         3a:be:c8:dd:ee:9c:be:86:47:c2:90:77:6c:63:8a:85:ce:93:
         a4:1b:3d:79:71:3a:d6:f8:d4:98:f8:8d:79:34:bc:ea:70:96:
         fb:ff:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:51:59 2025 by rpki-client