Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32322e302f32342d3234203d3e203631353830.roa
File:                     3136382e3138312e32322e302f32342d3234203d3e203631353830.roa (raw, json)
Hash identifier:          /KEZ9PbBjy+Ufn+8O/Nucxhq7oy2iHGFY2q/nTFzMLU=
Subject key identifier:   90:88:3C:93:8E:25:D8:27:F2:EC:8D:16:45:61:FD:16:40:C5:66:8E
Certificate issuer:       /CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
Certificate serial:       663E3CCC01C6F6BCCDA513CE07496C14B7A689A8
Authority key identifier: 63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32322e302f32342d3234203d3e203631353830.roa
Signing time:             Tue 28 Jul 2026 17:35:29 +0000
ROA not before:           Tue 28 Jul 2026 17:30:29 +0000
ROA not after:            Tue 27 Jul 2027 17:35:29 +0000
asID:                     61580
IP address blocks:        168.181.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl
                          rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 17:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3e:3c:cc:01:c6:f6:bc:cd:a5:13:ce:07:49:6c:14:b7:a6:89:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632519A9C27B3B2869AC30EDF296B484E44BF1F0
        Validity
            Not Before: Jul 28 17:30:29 2026 GMT
            Not After : Jul 27 17:35:29 2027 GMT
        Subject: CN=90883C938E25D827F2EC8D164561FD1640C5668E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:8f:45:49:95:cb:d5:b6:47:92:91:db:35:
                    ff:27:35:eb:dd:28:de:6b:a9:51:e6:2d:05:69:c2:
                    37:38:c9:2c:6b:87:f6:29:64:7e:a6:39:4e:1d:67:
                    e8:da:0d:7c:4d:5a:48:f1:0f:51:48:fb:e8:da:07:
                    d7:1a:c5:9d:e3:05:28:d5:0f:b4:41:c0:b2:41:e0:
                    e3:a8:2c:38:4f:44:ca:88:ca:69:f5:9f:a1:60:ed:
                    01:0a:6e:15:9f:8e:23:76:fb:16:56:60:3a:a7:87:
                    80:62:db:ae:2c:e6:97:d4:a9:21:33:db:f2:da:ce:
                    b4:4d:46:41:81:79:41:23:b5:8a:da:63:9b:2e:c8:
                    58:c6:a2:5e:cc:df:80:cc:46:eb:53:41:52:f6:29:
                    a2:e9:73:d4:ad:33:b5:b1:9b:f6:32:d4:84:68:64:
                    64:48:f1:54:b1:e6:4f:b0:f3:32:48:b3:21:7e:48:
                    b8:5c:c8:4e:35:0e:b9:b6:5e:6f:f6:45:16:d4:68:
                    a3:73:30:f7:08:6e:b8:88:09:4d:d4:4a:c7:56:24:
                    01:0e:47:89:aa:db:50:c4:2b:06:4a:c4:b7:d9:0c:
                    91:a0:c3:e1:63:30:17:63:07:58:54:6f:8b:52:47:
                    55:81:dc:f6:4a:af:3c:c2:1c:80:0c:23:ce:4c:a0:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:88:3C:93:8E:25:D8:27:F2:EC:8D:16:45:61:FD:16:40:C5:66:8E
            X509v3 Authority Key Identifier:
                keyid:63:25:19:A9:C2:7B:3B:28:69:AC:30:ED:F2:96:B4:84:E4:4B:F1:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/632519A9C27B3B2869AC30EDF296B484E44BF1F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/632519A9C27B3B2869AC30EDF296B484E44BF1F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/2/3136382e3138312e32322e302f32342d3234203d3e203631353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:f0:79:12:fd:9c:74:b2:75:a8:b5:80:2d:f8:5e:c0:c6:a3:
         89:cc:f8:8c:09:82:36:bd:fa:f2:76:51:bb:58:ee:9f:82:10:
         3c:59:02:92:6a:f0:44:d5:a5:89:6c:fd:96:9a:5f:1c:5a:ef:
         f5:54:69:5c:62:a1:43:89:55:91:48:e2:9b:cb:94:0c:89:d3:
         7d:02:ea:0e:f0:c7:12:f9:c0:a1:2c:29:fe:43:da:1a:0d:cd:
         34:5b:b2:f7:b6:c6:12:ea:e9:6d:f4:4b:aa:a2:35:61:e2:41:
         28:19:ca:db:b6:21:a5:e5:58:d7:4a:51:42:82:a7:93:fa:19:
         28:04:0b:1a:25:3c:9b:c7:61:6c:53:54:a1:bb:bb:d0:a2:18:
         de:7e:a7:11:61:70:a8:94:05:53:42:7f:2a:93:f4:92:ab:53:
         55:96:fe:fd:1d:f7:2c:a2:97:aa:45:05:c4:53:35:80:00:f3:
         0d:87:7e:fc:99:fc:a7:c9:97:79:2c:95:63:4c:23:63:d7:6b:
         df:40:7a:6d:3d:9b:f7:fd:3b:22:7d:b5:e8:22:ad:b1:ef:11:
         63:ee:aa:59:d3:33:0c:48:aa:56:60:c9:5f:db:94:12:91:44:
         86:a3:29:8c:c1:3e:48:13:21:05:8f:d9:ac:7b:a6:59:2b:c8:
         27:68:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:29:15 2026 by rpki-client