Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa
File:                     3136302e32302e38382e302f32342d3234203d3e20323636313837.roa (raw, json)
Hash identifier:          HYmGt6aKFVXfdthos4mAzkRStqwa6NJwm8uluzTSEnQ=
Subject key identifier:   B8:F7:80:41:52:D6:A4:69:6A:89:17:4C:77:4C:33:B3:FF:39:46:D7
Certificate issuer:       /CN=F9C78D96B739AC531FF8ABF2158D27A0087863CB
Certificate serial:       32244846160AEF7C3CE50FC203D4C3BCA242D741
Authority key identifier: F9:C7:8D:96:B7:39:AC:53:1F:F8:AB:F2:15:8D:27:A0:08:78:63:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa
Signing time:             Fri 17 Apr 2026 18:51:09 +0000
ROA not before:           Fri 17 Apr 2026 18:46:09 +0000
ROA not after:            Fri 16 Apr 2027 18:51:09 +0000
asID:                     266187
IP address blocks:        160.20.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 19:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:48:46:16:0a:ef:7c:3c:e5:0f:c2:03:d4:c3:bc:a2:42:d7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9C78D96B739AC531FF8ABF2158D27A0087863CB
        Validity
            Not Before: Apr 17 18:46:09 2026 GMT
            Not After : Apr 16 18:51:09 2027 GMT
        Subject: CN=B8F7804152D6A4696A89174C774C33B3FF3946D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:39:77:c4:24:c4:e6:8c:d0:73:46:3d:48:
                    77:42:15:e0:69:4a:e5:85:c1:32:bf:f7:85:a0:4c:
                    18:e0:6f:20:93:a0:cc:4d:cb:f4:c6:4a:5e:04:21:
                    75:b6:24:0d:f5:de:a3:f2:16:f5:75:ce:e4:da:5d:
                    38:30:43:d8:1b:a0:cb:df:72:39:a0:fd:01:ce:51:
                    50:1b:47:df:e0:23:45:34:04:f3:fb:88:b9:99:19:
                    8e:d5:f8:6c:7d:90:fe:9f:27:8f:e2:0c:aa:fb:af:
                    38:44:c6:25:0f:69:12:e5:20:9f:0e:5d:bf:d3:52:
                    e8:57:98:37:c5:1e:37:1e:23:2f:cd:a8:42:97:78:
                    ce:94:d3:bd:c7:64:5f:05:df:5b:93:a8:82:6e:71:
                    72:79:f6:a0:91:56:8c:6e:d1:96:6c:98:67:57:17:
                    ea:4f:f2:fa:56:a4:70:90:bc:bc:a7:d2:e1:1e:2c:
                    6e:a4:0f:f4:c6:49:75:07:5f:1e:6d:f9:f4:3e:c9:
                    85:67:23:97:dc:59:b1:37:5d:65:f2:ba:ea:14:0a:
                    3e:78:e5:ff:88:a4:8f:45:61:c3:3b:17:e7:46:a8:
                    ac:93:a5:77:59:84:03:0f:65:70:67:ab:16:11:0d:
                    98:b3:25:a0:11:eb:a7:9b:1c:12:e0:53:63:4e:c6:
                    7a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F7:80:41:52:D6:A4:69:6A:89:17:4C:77:4C:33:B3:FF:39:46:D7
            X509v3 Authority Key Identifier:
                keyid:F9:C7:8D:96:B7:39:AC:53:1F:F8:AB:F2:15:8D:27:A0:08:78:63:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/F9C78D96B739AC531FF8ABF2158D27A0087863CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C78D96B739AC531FF8ABF2158D27A0087863CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3136302e32302e38382e302f32342d3234203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:a5:1a:44:ea:8e:60:3a:76:64:14:06:2e:eb:7f:b0:b8:
         65:c1:fd:9c:0e:60:45:44:1a:eb:6d:48:ad:15:2b:c9:d7:a2:
         62:a8:5a:4a:b0:56:08:c8:1d:cb:b1:a5:e5:e4:0e:d1:63:aa:
         4d:21:56:81:3a:8d:66:c6:7b:a7:6e:7a:33:47:0e:c4:66:59:
         a6:cf:f3:6f:3a:ac:af:30:c2:94:f0:65:b9:fe:88:a8:3b:92:
         cf:db:c4:fd:91:1a:8e:64:61:10:79:34:44:c3:f3:3c:dc:9d:
         e8:82:38:ab:a8:86:0d:7c:04:b5:92:69:69:3c:3a:85:90:5c:
         df:6c:a7:03:e3:4a:ca:6b:a2:0e:7a:71:0f:1f:c9:f2:d5:7d:
         3c:1a:61:c1:73:e5:4b:27:97:52:c5:d5:30:a8:c4:93:c2:a7:
         cf:78:31:53:42:54:af:97:8a:41:bc:ff:3e:bc:83:8f:21:4e:
         f5:27:91:1e:1a:c6:3b:32:e0:f4:a4:ab:e3:6f:a5:92:94:3f:
         83:b3:bd:b3:af:8f:bf:4f:38:9c:c1:36:53:23:63:c3:7e:12:
         ff:33:de:f7:2a:09:bb:82:b0:36:1a:70:50:59:dd:cf:d7:6e:
         b0:c4:d8:f5:ec:ed:84:00:29:c8:c6:0e:12:ec:92:0b:b1:7d:
         79:dd:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:06:34 2026 by rpki-client