Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3136382e302f32312d3231203d3e20323633323931.roa
File:                     3230312e372e3136382e302f32312d3231203d3e20323633323931.roa (raw, json)
Hash identifier:          EXuIuLHN9WYZtBWArWCa3rVN85vH9fJhhuRwFhstS/A=
Subject key identifier:   63:BC:35:69:DB:FF:FE:89:17:F9:BA:55:4C:62:2E:94:9A:70:D5:8C
Certificate issuer:       /CN=687D143A47680F9364250E4B389BE42D4587BC1D
Certificate serial:       5F5BF391136B082E244716FBFCCFB8641FD3B522
Authority key identifier: 68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3136382e302f32312d3231203d3e20323633323931.roa
Signing time:             Fri 08 May 2026 19:51:57 +0000
ROA not before:           Fri 08 May 2026 19:46:57 +0000
ROA not after:            Fri 07 May 2027 19:51:57 +0000
asID:                     263291
IP address blocks:        201.7.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl
                          rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:5b:f3:91:13:6b:08:2e:24:47:16:fb:fc:cf:b8:64:1f:d3:b5:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687D143A47680F9364250E4B389BE42D4587BC1D
        Validity
            Not Before: May  8 19:46:57 2026 GMT
            Not After : May  7 19:51:57 2027 GMT
        Subject: CN=63BC3569DBFFFE8917F9BA554C622E949A70D58C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:af:79:47:e7:d9:a2:4d:ed:0f:0b:a4:50:
                    5c:f3:26:dd:ab:bf:b8:9e:cb:89:60:9a:1c:dd:f2:
                    af:70:28:c2:17:8f:94:7f:8d:52:45:d9:74:9d:68:
                    ca:be:f6:fc:4d:60:5e:80:3d:c3:78:a5:4d:5a:0f:
                    eb:7b:5e:70:d8:1e:e7:a5:9d:09:b6:b0:94:15:92:
                    78:61:07:21:f8:f7:be:7c:87:e7:7a:32:b9:0f:21:
                    da:72:43:0f:57:b0:04:b9:e4:97:ab:40:74:e5:b7:
                    56:72:51:4b:93:0c:20:03:fb:f9:a3:ec:2e:35:60:
                    34:2f:56:61:91:86:17:04:04:17:5d:de:4b:9b:d5:
                    0b:38:88:78:ec:1f:e8:58:2e:52:78:0c:46:87:34:
                    25:78:fb:de:be:b3:a9:b7:53:c2:c0:8e:44:91:a4:
                    95:ca:1c:ca:f8:11:98:38:1c:f3:2b:bb:d6:ac:ad:
                    f2:e7:39:ca:99:98:73:b0:06:3a:65:09:9a:8f:61:
                    ec:82:54:20:31:8e:6b:cf:d4:f5:c7:8b:8b:af:b8:
                    01:6b:13:34:d0:6a:d1:e7:3c:78:9d:d3:12:00:65:
                    35:ef:b5:ba:81:e0:61:19:cb:92:a1:ae:3d:91:35:
                    06:04:30:0f:aa:46:f6:70:e5:ad:bb:3f:f6:ae:d6:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:35:69:DB:FF:FE:89:17:F9:BA:55:4C:62:2E:94:9A:70:D5:8C
            X509v3 Authority Key Identifier:
                keyid:68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3136382e302f32312d3231203d3e20323633323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:8b:d2:e3:f1:b7:ff:56:da:f7:6e:52:0f:1f:80:8c:0f:
         60:9f:5b:67:c7:b7:e1:64:e7:69:54:61:cd:0d:cc:98:82:2a:
         c0:b3:93:b7:3a:19:a1:26:57:d8:2c:ce:75:6c:9a:54:14:39:
         97:e8:af:c8:12:98:8b:66:9f:92:6a:b8:23:5f:4c:b8:a1:35:
         6f:01:2b:c8:88:4a:7f:02:ab:50:63:01:9a:20:9f:00:6d:ce:
         ba:78:a4:7c:96:49:f0:e7:b8:53:96:b0:32:1b:b3:f0:9b:1d:
         68:4a:24:9e:39:04:88:91:b6:ed:d6:eb:2e:95:50:a7:04:fe:
         72:c7:2a:25:64:b8:70:35:c7:99:fe:55:c0:42:7f:6e:a0:ad:
         27:cd:7b:11:ca:8d:da:68:ac:a7:06:fa:bf:b2:eb:eb:e4:c8:
         b8:f0:f2:40:d2:e1:50:c2:0a:05:c7:96:0b:9d:c8:e7:1e:6b:
         f6:7a:ec:f9:e8:04:79:b5:a8:1b:8b:7e:27:3e:28:22:5f:08:
         1e:a2:4d:57:8a:da:a8:70:46:d7:6b:7f:04:ef:8e:b8:3b:d6:
         7d:71:70:91:dd:fa:1c:70:2a:5e:48:16:b3:ef:d5:54:1c:32:
         2a:45:b7:c0:ed:e8:cf:07:a5:35:a2:fc:3c:4d:e0:03:11:3c:
         21:52:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:41 2026 by rpki-client