Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32302e302f32322d3232203d3e203631353830.roa
File:                     3136382e3138312e32302e302f32322d3232203d3e203631353830.roa (raw, json)
Hash identifier:          pLHn7XHMdTWDeqJvp1WsI8Z3D9fhVukXTGyemFZB8Pw=
Subject key identifier:   CB:9F:68:02:5B:6C:15:DA:E1:34:C9:47:C3:41:17:A7:6F:04:86:9D
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       104F693503B6C40141DF4607F929E61360B9F27F
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32302e302f32322d3232203d3e203631353830.roa
Signing time:             Tue 28 Jul 2026 17:35:30 +0000
ROA not before:           Tue 28 Jul 2026 17:30:30 +0000
ROA not after:            Tue 27 Jul 2027 17:35:30 +0000
asID:                     61580
IP address blocks:        168.181.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4f:69:35:03:b6:c4:01:41:df:46:07:f9:29:e6:13:60:b9:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jul 28 17:30:30 2026 GMT
            Not After : Jul 27 17:35:30 2027 GMT
        Subject: CN=CB9F68025B6C15DAE134C947C34117A76F04869D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3f:f2:db:23:c7:3e:1a:5e:e2:84:d8:35:0c:
                    5a:39:4b:a7:53:45:91:14:19:35:f9:30:31:a7:f6:
                    00:f6:47:63:11:8d:b2:d9:91:12:dc:2d:4e:66:9a:
                    4e:ea:4d:f5:e3:92:e8:83:f9:7b:a7:95:5f:a9:85:
                    67:31:55:7b:0e:18:ee:97:41:fc:16:6e:e0:b9:ed:
                    69:1d:3a:ca:86:06:6b:ff:e9:7b:04:bc:77:03:52:
                    fe:d6:3a:25:9c:60:28:ec:d1:52:03:56:1e:4d:d2:
                    3d:2f:57:2e:4e:eb:ce:d1:03:8b:e8:4f:f8:4b:3d:
                    26:10:e3:50:1a:52:07:d7:b7:2a:68:32:69:2f:ec:
                    5c:4c:1a:d7:71:a0:8c:5e:17:13:54:35:6f:a2:ce:
                    10:fc:49:b9:d4:bc:14:df:03:cc:3e:29:ea:23:79:
                    53:33:a6:db:5c:5f:26:8e:cf:54:12:07:6f:aa:52:
                    ca:25:ab:3b:6c:4f:cf:36:68:56:63:19:de:42:c0:
                    a9:0e:a5:b7:ad:95:b0:c3:ee:61:cc:32:45:48:c8:
                    90:84:25:59:9f:38:22:2f:ad:07:68:21:f0:9b:12:
                    97:23:87:22:36:4e:5c:cc:96:fc:2a:09:25:5c:ce:
                    a6:1e:55:f8:2f:82:9b:df:5f:68:12:04:c6:29:4f:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9F:68:02:5B:6C:15:DA:E1:34:C9:47:C3:41:17:A7:6F:04:86:9D
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32302e302f32322d3232203d3e203631353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:53:aa:53:4a:87:f3:90:27:98:ee:f7:69:76:56:3c:e7:
         1f:d5:e2:0e:4a:a6:f7:cb:d7:15:cd:06:70:b4:99:53:c0:95:
         55:4b:1c:33:a1:fd:61:6d:76:22:54:83:01:8f:b7:cc:4f:c6:
         7c:25:1f:9f:24:e4:e5:a0:97:95:0d:bd:14:1c:c7:f4:d5:21:
         b9:fe:9f:8b:fb:9f:d0:d9:d5:4b:ac:ec:bb:bd:12:de:69:7b:
         c6:a7:d9:c7:8d:20:e2:5e:12:12:4a:ac:3b:1e:5f:d9:92:5f:
         f3:15:d5:43:93:17:f4:fc:3b:91:3c:16:30:df:8e:cf:01:be:
         70:07:54:56:da:b9:f4:77:f3:1e:92:17:7f:d5:f0:ca:5b:bd:
         a8:d8:74:7a:70:f8:f1:dd:f3:7a:ac:75:f6:d9:41:d5:7d:07:
         18:44:e6:73:01:00:36:b6:87:f3:fb:1b:f0:96:9d:3c:4c:e3:
         c0:49:e2:00:6f:9f:21:5c:a1:b4:23:2c:59:cc:bf:74:ac:d9:
         4f:b7:59:ec:f0:27:ee:de:25:e1:b9:7a:05:b5:6a:07:89:f1:
         0a:22:ef:06:f0:02:2b:3e:6e:fe:74:cf:ff:49:2c:cc:d0:28:
         07:1d:ea:4a:20:4b:60:32:6f:b9:32:a6:e2:86:18:22:db:ee:
         e6:76:5f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:16 2026 by rpki-client