Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
File:                     3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa (raw, json)
Hash identifier:          2kWGfRv4IYPbdiKY2esB+H10bnlyd1VEKt8gaKpnNOk=
Subject key identifier:   5B:69:7E:8D:ED:07:60:1B:86:9D:01:6F:39:DE:22:21:67:99:0B:CD
Certificate issuer:       /CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
Certificate serial:       443BACFBDB312A9214E646E13A0EDBBEE8849E98
Authority key identifier: D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa
Signing time:             Sat 21 Feb 2026 13:40:56 +0000
ROA not before:           Sat 21 Feb 2026 13:35:56 +0000
ROA not after:            Sat 20 Feb 2027 13:40:56 +0000
asID:                     267426
IP address blocks:        181.191.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl
                          rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3b:ac:fb:db:31:2a:92:14:e6:46:e1:3a:0e:db:be:e8:84:9e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7B66328E77D26A85BC24A6209552AFF3FD4B6CC
        Validity
            Not Before: Feb 21 13:35:56 2026 GMT
            Not After : Feb 20 13:40:56 2027 GMT
        Subject: CN=5B697E8DED07601B869D016F39DE222167990BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c8:24:72:23:7e:f7:0f:67:6c:b2:ca:d0:c9:
                    05:b6:31:5c:cb:af:f4:e3:e7:c7:4e:87:84:5b:66:
                    b0:2c:2b:20:07:d9:56:d8:42:5c:1b:23:6b:44:f7:
                    92:45:d0:98:7e:0e:28:92:2d:c0:48:2f:81:cc:7c:
                    39:9c:3b:c6:4d:bf:40:44:29:57:ed:ed:14:7a:a6:
                    1f:38:93:36:62:38:f0:11:9e:a5:6a:3c:2b:b5:fa:
                    fc:db:f1:28:13:f1:ae:25:fe:47:9a:1d:25:3b:f7:
                    e2:3d:11:88:9b:9d:42:ad:a8:d4:fd:00:95:3d:78:
                    67:d1:35:07:03:bd:f2:e7:a9:cd:74:b6:cb:40:b9:
                    3f:6b:78:43:24:2c:ee:bd:ad:f1:76:0f:29:60:86:
                    d9:d9:fd:10:30:28:25:a2:7a:d5:86:4c:0d:4d:8b:
                    53:8f:1a:56:9e:c0:dc:ef:45:33:af:ad:f2:a6:52:
                    cb:44:16:65:5d:5f:9e:58:72:03:7e:eb:ad:a7:81:
                    cb:e4:4d:fa:0b:db:d6:98:ac:54:20:fc:c9:36:fb:
                    38:ae:d5:ca:06:ef:fa:e4:ea:c2:0f:9f:93:fa:e7:
                    92:aa:19:18:77:b7:63:ff:34:31:33:8b:d9:b1:1c:
                    54:21:a6:9b:36:56:f2:76:19:1b:49:e2:82:83:76:
                    11:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:69:7E:8D:ED:07:60:1B:86:9D:01:6F:39:DE:22:21:67:99:0B:CD
            X509v3 Authority Key Identifier:
                keyid:D7:B6:63:28:E7:7D:26:A8:5B:C2:4A:62:09:55:2A:FF:3F:D4:B6:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B66328E77D26A85BC24A6209552AFF3FD4B6CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/0/3138312e3139312e3136302e302f32342d3234203d3e20323637343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:2f:71:5f:44:01:45:41:35:64:b5:c1:e5:69:aa:3c:30:
         f2:7a:3f:a8:13:fd:88:9c:0f:1d:e5:8d:a2:cc:50:77:27:16:
         a9:b1:bf:8b:ee:76:d1:71:d9:81:3d:43:4e:7e:83:67:3c:de:
         f9:79:4d:6f:11:f6:6d:83:3a:95:3f:dc:46:3c:9b:00:90:72:
         6c:c1:de:30:4e:c0:dc:02:b9:e1:e3:8b:17:e1:2a:96:25:4c:
         55:ce:78:e4:49:30:d5:32:79:48:8d:e7:67:c6:e4:53:dc:68:
         ba:eb:37:d9:5d:96:2e:37:40:73:e9:af:99:67:d0:8c:aa:28:
         64:4a:35:b6:02:54:d4:a3:85:6c:5e:84:66:54:7d:24:61:30:
         a2:c2:3e:35:7d:77:6b:ca:c2:03:b3:c7:dd:14:6c:be:5a:ad:
         4b:cc:00:7b:e4:1d:8c:ae:b6:89:dd:0b:17:f0:18:ac:53:d6:
         2b:94:ae:8a:26:5d:48:fc:07:2c:45:f2:a5:0a:82:45:b2:57:
         0f:49:19:51:9b:f1:a9:35:b5:d9:ba:f2:d0:71:e2:d0:d2:4b:
         fa:b5:27:85:6a:42:8d:23:2f:87:31:fb:a3:52:5b:e4:a3:0b:
         c6:5b:ca:d9:17:fc:fc:b5:60:04:44:da:16:c7:a0:93:fe:ef:
         9b:c4:d2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:18:01 2026 by rpki-client