Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa
File:                     3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa (raw, json)
Hash identifier:          UmBSKS1JO9XAxlxJE6GOxhlgwPpCvJULsAGBDmDe2/4=
Subject key identifier:   95:B1:30:A1:A5:E5:3E:C8:E4:AE:98:B0:FB:79:3F:12:29:A0:4E:5C
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       3D6CF37ABB535CD9141E5CFD3887400E96B7DF13
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa
Signing time:             Thu 26 Feb 2026 11:47:42 +0000
ROA not before:           Thu 26 Feb 2026 11:42:42 +0000
ROA not after:            Thu 25 Feb 2027 11:47:42 +0000
asID:                     262585
IP address blocks:        201.55.160.0/20 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Mar 2026 01:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:6c:f3:7a:bb:53:5c:d9:14:1e:5c:fd:38:87:40:0e:96:b7:df:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Feb 26 11:42:42 2026 GMT
            Not After : Feb 25 11:47:42 2027 GMT
        Subject: CN=95B130A1A5E53EC8E4AE98B0FB793F1229A04E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:42:03:63:9d:0b:bc:5a:6f:4e:73:01:ce:
                    da:28:7e:a4:af:6a:91:20:50:2a:c1:6e:5f:8d:97:
                    c8:7f:41:e8:b8:92:ca:c5:7c:61:cd:e4:ff:f6:d2:
                    79:df:d7:98:ff:69:ee:7b:ca:d3:1d:fe:91:3c:8b:
                    af:ee:b1:c4:e2:39:4f:87:5c:7f:01:67:4e:41:c5:
                    2e:55:a0:ad:89:16:81:f6:1d:2a:99:c2:d5:70:0e:
                    89:a8:a9:86:68:87:80:5c:c2:e4:6e:21:20:5c:6e:
                    15:a4:29:f3:c2:ca:e2:11:86:b2:c7:4a:ff:f0:4a:
                    b2:ed:e4:ed:e9:f3:39:21:28:ab:df:40:34:a5:98:
                    44:5e:1e:c3:84:de:4e:35:b2:29:95:b0:21:33:7e:
                    19:b1:a7:bf:7f:bf:1f:4a:ce:0a:0c:86:4e:96:2e:
                    a2:b9:12:78:f5:7b:bd:0e:23:65:c2:31:a7:94:df:
                    30:6c:06:56:d2:a6:fa:cc:94:2d:2b:cc:5b:4f:a2:
                    37:64:f7:00:a8:f5:16:fa:03:e1:d4:c6:74:c7:03:
                    36:90:1d:d9:3d:f4:43:44:2b:60:04:4c:a3:0a:71:
                    79:2c:2a:4c:1b:9e:6b:24:8e:21:cc:08:e1:84:f2:
                    b8:ca:bf:34:5e:80:31:5e:70:b6:40:5e:b2:54:c7:
                    8f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B1:30:A1:A5:E5:3E:C8:E4:AE:98:B0:FB:79:3F:12:29:A0:4E:5C
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3233203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:83:3a:8f:19:e7:d1:e5:f3:27:71:b9:e9:b4:24:e2:de:b6:
         5d:15:8e:18:3f:a5:3f:c7:d4:87:ba:f4:9b:71:4b:a7:97:c5:
         db:b5:44:89:ea:f8:62:45:8d:ae:af:be:ca:f6:02:99:96:9d:
         42:33:e8:a4:af:ef:79:6d:98:b7:19:d9:f4:b0:bd:8c:e0:dd:
         17:0c:a3:08:90:a1:65:54:44:e7:54:9f:9d:7e:a0:1e:08:2a:
         b4:f6:ee:b5:03:6a:a1:9b:ee:73:4b:ae:41:36:05:ef:24:cc:
         89:f5:bb:6c:d7:93:42:5f:45:8a:42:64:36:bb:21:5f:cb:3a:
         3e:b3:15:df:94:92:a5:2e:a0:f8:d0:7a:85:ba:97:bb:ca:d4:
         26:55:5c:d5:7a:75:92:57:cb:b1:dc:1c:57:69:b1:58:b0:ad:
         ac:01:d9:63:43:ac:e3:e8:0a:4f:26:7b:57:92:53:1a:13:c7:
         28:72:04:98:41:da:c8:c6:c6:64:bc:09:88:03:ee:5b:90:0c:
         a3:d5:07:3a:7c:f8:bb:11:36:f9:14:bb:35:b4:94:27:a8:62:
         18:b3:5e:98:6e:a7:21:4c:fe:3e:cd:c1:dc:d3:42:10:b3:13:
         8c:de:19:05:fd:43:ee:30:93:c0:86:9d:62:24:53:7a:a7:46:
         8c:91:b9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:05:35 2026 by rpki-client