Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3137322e302f32342d3234203d3e20323633323931.roa
File:                     3230312e372e3137322e302f32342d3234203d3e20323633323931.roa (raw, json)
Hash identifier:          nuGJQoVnq0/M9FiRFHhjPc3xKKee8QEGUlNykMFl6Vs=
Subject key identifier:   58:A0:DA:88:DF:22:AA:AC:18:08:B0:44:AD:CC:60:3A:52:48:CC:AC
Certificate issuer:       /CN=687D143A47680F9364250E4B389BE42D4587BC1D
Certificate serial:       01737A83A52FDB4FA79675A5F1A356CC876B9D65
Authority key identifier: 68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3137322e302f32342d3234203d3e20323633323931.roa
Signing time:             Fri 08 May 2026 19:52:24 +0000
ROA not before:           Fri 08 May 2026 19:47:24 +0000
ROA not after:            Fri 07 May 2027 19:52:24 +0000
asID:                     263291
IP address blocks:        201.7.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl
                          rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:73:7a:83:a5:2f:db:4f:a7:96:75:a5:f1:a3:56:cc:87:6b:9d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687D143A47680F9364250E4B389BE42D4587BC1D
        Validity
            Not Before: May  8 19:47:24 2026 GMT
            Not After : May  7 19:52:24 2027 GMT
        Subject: CN=58A0DA88DF22AAAC1808B044ADCC603A5248CCAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:f5:c0:3b:92:06:53:ab:62:8c:93:6d:bd:
                    bb:0d:f5:b0:c6:58:09:bc:5d:a4:7e:93:33:f8:be:
                    59:7b:84:c4:95:c1:95:4a:94:5b:28:d1:85:5e:07:
                    d6:97:fd:52:e1:fb:1e:d3:69:a6:08:14:2f:10:aa:
                    7e:19:66:39:ab:43:72:20:83:be:14:ce:5a:81:48:
                    fd:fe:82:e9:b8:67:27:80:f6:4c:07:8a:c8:f3:e5:
                    ef:e2:03:1f:11:27:99:5e:d0:c6:9a:32:c3:74:ae:
                    06:68:64:a3:07:6b:1f:4e:74:8c:f5:ab:22:53:1b:
                    4b:01:87:1b:41:15:68:ac:29:0c:f4:e4:72:41:07:
                    cc:8e:ab:13:88:dc:f1:d7:4a:ee:49:25:1d:5e:cb:
                    4d:f1:24:37:c1:40:8a:5d:45:a6:91:4e:6a:b8:28:
                    dd:a5:32:b9:8d:d4:b6:3d:7b:d2:3a:ff:3e:d9:0c:
                    6f:af:b3:fb:ad:90:19:55:f8:6e:94:4a:c0:04:e5:
                    4a:0e:cf:92:1c:ba:1f:e2:28:54:6a:06:3a:5b:ec:
                    07:04:2d:83:43:d4:54:53:5e:60:b3:e9:0f:9e:ad:
                    0c:4e:36:ee:1b:64:cb:40:7f:83:6f:2c:d0:38:6b:
                    c3:51:83:51:fe:60:93:33:e9:78:f7:aa:69:fb:c1:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:DA:88:DF:22:AA:AC:18:08:B0:44:AD:CC:60:3A:52:48:CC:AC
            X509v3 Authority Key Identifier:
                keyid:68:7D:14:3A:47:68:0F:93:64:25:0E:4B:38:9B:E4:2D:45:87:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/687D143A47680F9364250E4B389BE42D4587BC1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687D143A47680F9364250E4B389BE42D4587BC1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2w1Z3v1dx4TnApuYTrsXQXJw2MjvKzHs56MvaWGrL2G9/0/3230312e372e3137322e302f32342d3234203d3e20323633323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:13:fb:2d:5e:b0:af:a0:46:6e:87:09:48:54:6a:aa:ae:
         e4:e9:5f:20:20:45:f9:16:90:2e:84:70:88:bb:ff:c3:c9:44:
         a7:da:28:f7:26:40:df:f1:37:a6:24:55:c2:12:a0:c5:04:5e:
         c4:6a:44:a9:83:96:0a:db:0c:8b:15:05:26:41:e3:e9:44:fb:
         5b:e9:ec:95:0e:4f:17:94:7a:34:bc:35:e5:2e:b8:e9:9d:a2:
         dc:fd:99:5f:c9:cd:1a:ba:48:94:f4:04:26:a0:55:68:cb:05:
         a9:b0:f8:d2:b9:47:6a:6e:5b:6d:21:c0:86:e1:bb:d5:88:60:
         9b:6c:82:87:bd:89:7b:88:89:a4:d0:32:85:41:4f:a8:b5:f6:
         20:77:4e:61:a8:cd:aa:c6:3c:98:cf:f8:0f:db:38:1d:af:d4:
         c4:7d:ec:33:b9:db:ac:ff:e3:c8:9c:9d:74:17:ef:05:ee:f9:
         c7:69:d1:5d:fa:63:89:24:97:58:24:e9:51:91:30:f6:78:f6:
         80:3a:ba:e3:7b:b2:a1:3d:49:cc:98:18:6f:19:76:56:c4:40:
         ef:ad:44:f4:77:d4:d1:de:5a:cc:ce:0f:0c:01:b4:f6:e6:1b:
         ed:fa:d0:92:62:ea:78:7a:a8:e7:49:82:6f:af:37:36:de:7b:
         aa:e1:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:36:51 2026 by rpki-client