Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa
File:                     3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa (raw, json)
Hash identifier:          ig6hTxBa+mRv9Q1srxczmUq0uvBwGyk1GcfswaFZI3Y=
Subject key identifier:   88:9A:23:9A:19:7A:ED:55:1F:C0:56:51:A8:35:10:F2:A1:EB:4C:7A
Certificate issuer:       /CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
Certificate serial:       0660907EFE18F7FD60C3C55795B08FFBDBD3921C
Authority key identifier: F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa
Signing time:             Thu 17 Jul 2025 18:00:00 +0000
ROA not before:           Thu 17 Jul 2025 17:55:00 +0000
ROA not after:            Thu 16 Jul 2026 18:00:00 +0000
asID:                     266551
IP address blocks:        160.238.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl
                          rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 09 Aug 2025 10:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:60:90:7e:fe:18:f7:fd:60:c3:c5:57:95:b0:8f:fb:db:d3:92:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99
        Validity
            Not Before: Jul 17 17:55:00 2025 GMT
            Not After : Jul 16 18:00:00 2026 GMT
        Subject: CN=889A239A197AED551FC05651A83510F2A1EB4C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d4:76:26:a7:ab:04:f0:41:c0:e1:36:b6:cf:
                    3f:d8:2d:36:58:f6:5b:32:80:83:7b:10:f4:bb:30:
                    8d:1f:7b:a1:df:c4:35:c5:2c:47:06:6b:74:f6:f7:
                    2d:72:19:a5:10:cb:ac:79:9b:2f:a1:f0:fb:18:94:
                    5c:fe:81:17:b3:57:46:85:56:f7:db:77:e4:f3:bc:
                    c6:db:fa:fc:32:7f:96:55:cf:47:d5:79:e1:dc:f4:
                    51:c6:fb:5f:ad:c0:40:80:96:42:cb:f1:8e:59:51:
                    c6:5a:dd:f8:09:db:b9:37:23:94:bb:32:d3:32:8c:
                    dd:6f:36:8a:62:5b:d1:cb:7d:dc:17:da:d9:d7:43:
                    af:1a:30:2b:40:87:df:0e:74:97:11:d8:5a:6c:bd:
                    af:03:89:ed:eb:07:e5:9a:ec:d5:30:52:7e:b0:27:
                    01:b8:8e:08:f5:9a:33:91:35:a7:de:97:fb:d6:84:
                    ed:5a:29:90:f9:68:c7:1a:cf:5b:1d:49:16:1d:00:
                    af:18:56:06:f9:03:d9:1e:47:6c:c3:b6:4d:9e:98:
                    d5:10:2d:5f:12:2c:f6:d4:bd:31:19:a6:c1:3f:66:
                    0f:80:0b:32:f1:77:1d:b8:bb:bc:6d:a0:78:77:3d:
                    97:6e:a9:d4:b1:3f:7f:a5:fb:73:46:f1:d4:45:4a:
                    70:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9A:23:9A:19:7A:ED:55:1F:C0:56:51:A8:35:10:F2:A1:EB:4C:7A
            X509v3 Authority Key Identifier:
                keyid:F5:26:D2:FD:9A:3E:C2:6E:D6:E3:EA:D6:11:E5:94:E6:BE:0A:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F526D2FD9A3EC26ED6E3EAD611E594E6BE0A2E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/0/3136302e3233382e3232342e302f32322d3232203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:0b:59:c6:bc:69:6f:fe:fc:6f:6e:47:44:41:3b:ce:72:00:
         7e:f3:41:31:5e:c2:5a:17:41:1b:24:23:6f:c3:9b:63:78:be:
         ae:85:4f:58:e2:98:f0:04:6e:80:f1:ba:20:1b:eb:d8:ec:ca:
         a8:ab:e2:d7:ac:03:f6:d6:d4:8c:e9:49:3b:66:88:08:6a:56:
         81:13:96:84:4c:b4:3a:2f:da:7f:4f:15:4b:9d:cf:80:64:fc:
         4b:ca:93:54:33:45:e4:85:79:85:fa:c3:8b:12:f6:9b:c8:29:
         d8:d4:8e:58:15:92:de:4e:dc:5e:d5:86:52:27:86:9d:c5:0e:
         90:f5:c7:9a:da:36:5c:06:92:c2:b1:0b:3a:58:87:35:23:c6:
         06:8b:ab:87:e5:74:b9:6b:cf:c6:b1:28:57:f6:42:2d:e5:7d:
         24:80:3e:e0:2e:e8:68:6e:b3:c4:ba:a2:fa:76:ef:fc:53:a9:
         87:ea:22:59:fd:11:4f:26:14:30:a3:68:38:3a:dc:6e:31:31:
         6c:a3:fb:7a:3d:e3:9b:11:35:a9:9e:0c:13:6c:b8:0a:9a:69:
         2d:12:6b:12:92:e2:7f:bb:43:72:1b:5a:7e:c9:97:d9:3b:59:
         95:0e:ce:56:b1:32:d4:2c:17:95:47:7a:d6:ad:56:9f:a4:ad:
         9b:d6:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:24:58 2025 by rpki-client