Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
File:                     3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa (raw, json)
Hash identifier:          +qkv05FAN9F/n4nTr4Zzwkk6CQJ1kqYpd+e/0Kp1dew=
Subject key identifier:   40:CA:92:0E:BC:10:A4:D7:F9:60:77:08:59:49:4F:2C:5C:9D:EE:92
Certificate issuer:       /CN=790C9628ED14224C863D38B11F70DADA38D3E260
Certificate serial:       27553AC6EB80A202210AD79ED460E38AE27ADFF9
Authority key identifier: 79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa
Signing time:             Tue 30 Jun 2026 17:42:18 +0000
ROA not before:           Tue 30 Jun 2026 17:37:18 +0000
ROA not after:            Tue 29 Jun 2027 17:42:18 +0000
asID:                     267517
IP address blocks:        201.182.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl
                          rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:55:3a:c6:eb:80:a2:02:21:0a:d7:9e:d4:60:e3:8a:e2:7a:df:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790C9628ED14224C863D38B11F70DADA38D3E260
        Validity
            Not Before: Jun 30 17:37:18 2026 GMT
            Not After : Jun 29 17:42:18 2027 GMT
        Subject: CN=40CA920EBC10A4D7F960770859494F2C5C9DEE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:32:66:2f:4f:e1:a5:d4:d4:68:0b:2e:30:4d:
                    70:48:5a:fd:ce:2b:44:67:aa:02:22:59:1f:1e:8a:
                    bd:25:46:5c:47:d2:e9:41:52:92:d1:9d:9e:f5:bd:
                    4a:7f:32:de:ef:c4:8d:45:88:47:7b:4b:74:9f:33:
                    5f:e7:69:b8:53:f5:62:46:1d:97:ab:02:10:5c:fc:
                    b4:95:de:f2:79:5e:4f:63:2d:91:04:af:20:42:9b:
                    e1:56:be:2d:2c:83:4b:48:a8:cf:12:d0:2e:6e:5b:
                    12:19:1b:5d:16:61:72:9d:67:f2:1d:df:ae:4c:5b:
                    d5:75:7e:91:ce:da:30:20:85:02:f0:4b:5e:bc:ed:
                    eb:fb:43:9b:73:73:1c:d2:7f:57:55:21:00:70:1b:
                    0e:14:2b:1c:64:5b:cb:2f:27:c4:07:d7:bb:74:96:
                    43:d2:a1:5b:7b:cd:01:c7:e3:80:01:56:25:3c:7a:
                    4c:10:33:c5:f0:26:b9:c0:b6:f9:46:9c:a1:90:a3:
                    4d:ce:07:62:25:75:55:7c:b3:d7:fa:0b:74:5d:8e:
                    f9:55:5c:74:30:ca:80:8b:24:79:fe:f3:6a:10:9f:
                    e2:84:0d:12:3d:d8:52:dc:bd:b5:10:9b:bb:76:67:
                    d0:97:e9:c4:0c:bb:d6:86:d4:94:c2:11:fe:19:ea:
                    94:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CA:92:0E:BC:10:A4:D7:F9:60:77:08:59:49:4F:2C:5C:9D:EE:92
            X509v3 Authority Key Identifier:
                keyid:79:0C:96:28:ED:14:22:4C:86:3D:38:B1:1F:70:DA:DA:38:D3:E2:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/790C9628ED14224C863D38B11F70DADA38D3E260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/790C9628ED14224C863D38B11F70DADA38D3E260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2aTnJenuRpCfV3HB1FWcdFGCeXwWt6d9fbrp25J5uLaG/0/3230312e3138322e3132302e302f32322d3332203d3e20323637353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b1:fa:fb:e6:58:31:5b:75:34:88:e1:92:c5:62:76:a1:2f:
         f2:59:b9:5a:00:47:7c:1d:93:52:0a:4f:b0:f0:c3:bd:ce:49:
         7a:80:28:2e:ff:6a:07:55:01:a6:d7:03:89:c5:93:34:14:0c:
         58:a1:03:9b:aa:7c:0a:78:86:9d:9a:07:e6:f4:19:26:22:9f:
         ef:ed:ff:1c:d7:95:44:e1:a8:f2:fa:15:fa:e0:97:e3:e8:bc:
         a9:63:f7:bf:cf:c9:a8:20:10:f0:65:f7:78:76:21:a6:da:1e:
         d0:86:45:78:98:3a:23:02:3a:de:d3:db:f4:a0:e4:96:3f:14:
         b7:68:9b:05:79:1f:b8:51:b0:0f:d0:cf:51:1c:db:1c:52:91:
         a7:71:29:52:d0:de:c8:c5:19:1a:f4:82:d3:b3:47:63:4e:b2:
         b8:d2:f8:c3:a1:7d:55:c0:45:90:c9:34:c3:ee:dd:a0:13:cd:
         06:c1:1a:69:0e:cd:2f:66:04:5a:2c:4d:6a:a3:61:21:7d:ec:
         28:0a:67:7c:15:b0:a6:ca:03:e1:20:05:38:72:50:62:9b:10:
         e0:87:5d:94:e7:59:a7:c4:78:ce:03:a4:bd:ca:46:b1:c8:3a:
         5d:dc:d7:ae:f9:df:9a:1c:b0:9d:e7:6f:5e:13:9b:a6:c6:f4:
         54:c9:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:56 2026 by rpki-client