Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3332203d3e20323632343337.roa
File:                     3230312e3137352e34382e302f32322d3332203d3e20323632343337.roa (raw, json)
Hash identifier:          F27yvA8oEMYfBmWVuzv7MbXVIzW+io4xAvOrJcd/DDU=
Subject key identifier:   F5:CD:CB:40:2B:B1:A6:4D:1B:D8:A1:9E:26:32:2D:79:6E:EA:D5:46
Certificate issuer:       /CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA
Certificate serial:       792A434CC6F492BCA23DA31F93D0AD09E89A17F8
Authority key identifier: CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3332203d3e20323632343337.roa
Signing time:             Thu 19 Mar 2026 18:00:00 +0000
ROA not before:           Thu 19 Mar 2026 17:55:00 +0000
ROA not after:            Thu 18 Mar 2027 18:00:00 +0000
asID:                     262437
IP address blocks:        201.175.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.crl
                          rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 17:43:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:43:4c:c6:f4:92:bc:a2:3d:a3:1f:93:d0:ad:09:e8:9a:17:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA
        Validity
            Not Before: Mar 19 17:55:00 2026 GMT
            Not After : Mar 18 18:00:00 2027 GMT
        Subject: CN=F5CDCB402BB1A64D1BD8A19E26322D796EEAD546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:75:ec:d7:6f:94:f4:43:b3:7c:e4:83:50:
                    67:fc:12:7a:52:d6:9f:69:2f:75:48:b6:f0:2e:a4:
                    eb:f4:5d:c5:99:97:49:5a:fb:4c:0e:5c:77:4b:7a:
                    e3:b9:8f:66:fd:36:4b:3b:34:a1:5b:31:14:47:b1:
                    04:e2:2a:99:60:c8:d0:c3:2a:eb:28:18:b6:0c:c6:
                    50:11:fc:0f:48:82:96:47:87:fd:87:b4:c4:4b:74:
                    de:d7:a6:14:e0:14:dd:6a:8c:41:8c:cb:30:50:5f:
                    3a:91:10:f6:ba:a8:85:a7:d0:eb:91:eb:02:47:fd:
                    9a:91:5f:0e:31:9b:8a:d1:52:9f:0c:5b:d2:dd:e1:
                    8c:9f:04:19:36:08:06:d0:12:fc:ec:f0:67:90:a3:
                    c1:94:4c:17:0a:cb:49:4a:42:db:da:ca:3a:06:b1:
                    37:6b:41:5f:2c:39:d0:75:49:eb:2e:cf:0a:c3:20:
                    c3:6c:37:94:bd:b1:3b:67:78:c1:64:b1:68:73:8f:
                    e6:90:94:6e:f3:30:96:8a:8e:57:74:ad:12:b9:e0:
                    95:6c:de:bc:54:5d:89:01:8d:d8:e6:3b:01:05:27:
                    32:53:ae:82:4a:cb:80:07:b8:73:dc:9c:c9:8c:4d:
                    95:98:11:b9:2b:2e:f2:3e:e4:7a:cd:e0:e0:02:05:
                    d9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:CB:40:2B:B1:A6:4D:1B:D8:A1:9E:26:32:2D:79:6E:EA:D5:46
            X509v3 Authority Key Identifier:
                keyid:CA:FA:5B:8A:D9:7D:E8:8F:DD:2F:97:62:F5:13:BB:3E:6D:F6:71:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAFA5B8AD97DE88FDD2F9762F513BB3E6DF671BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UvsCbHGw5vUgsEqLSW7PkDb6y8QDv1ZB6juNfA9zu5L/0/3230312e3137352e34382e302f32322d3332203d3e20323632343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.175.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:05:77:6c:b2:3e:12:20:52:ff:6f:2f:c4:cf:fb:fa:28:
         3a:50:fe:08:70:d8:80:4e:bd:57:49:c9:25:7d:ac:af:73:2a:
         b9:25:d2:ce:84:a1:80:03:ad:94:22:00:78:19:9b:df:04:1b:
         bc:f7:26:f8:cb:71:56:b1:dc:5b:7b:06:15:37:af:84:ed:10:
         d2:de:a1:cf:99:46:52:7a:91:67:95:72:93:8e:42:c0:d5:00:
         c1:1a:95:ac:2c:13:2e:20:f8:b0:43:eb:b2:f8:3f:32:3b:0a:
         2c:4e:bc:31:d0:e6:52:c8:b0:87:51:f9:3a:77:09:e5:fa:43:
         a1:b2:e1:80:6b:28:0d:bf:ee:8d:aa:8b:88:a3:d0:d5:1b:e5:
         6f:20:39:87:2c:9f:d6:ee:c6:da:ae:9e:61:a8:de:94:66:55:
         53:d5:80:72:5f:23:83:71:8c:f9:78:df:59:44:9f:37:d3:ce:
         d8:96:d0:5f:8a:86:b9:d3:58:4d:fd:f7:3b:21:82:44:08:ad:
         95:91:74:6a:2e:fa:71:8c:4d:3f:06:19:3e:3a:7e:ea:83:8a:
         02:3e:cb:28:53:3d:55:cb:58:81:c7:b3:35:ad:8e:b9:87:c9:
         8b:a6:77:0b:0f:e8:47:5e:67:99:a2:c9:51:d6:8f:59:cd:05:
         58:61:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:04 2026 by rpki-client