Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa
File:                     3230302e35332e37362e302f32332d3233203d3e20323731333136.roa (raw, json)
Hash identifier:          kRPYEdA37SkjY2gFZ/WapPmNp3eYJ4n3X3w3pOAb4xY=
Subject key identifier:   39:B4:32:93:EC:77:4D:EA:E6:A4:0C:61:F1:1A:11:51:82:50:E8:F0
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       36F3B08FBB014A95E6365BD4AF271D8958C1D3D2
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa
Signing time:             Tue 14 Jul 2026 19:32:32 +0000
ROA not before:           Tue 14 Jul 2026 19:27:32 +0000
ROA not after:            Tue 13 Jul 2027 19:32:32 +0000
asID:                     271316
IP address blocks:        200.53.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 03:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f3:b0:8f:bb:01:4a:95:e6:36:5b:d4:af:27:1d:89:58:c1:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Jul 14 19:27:32 2026 GMT
            Not After : Jul 13 19:32:32 2027 GMT
        Subject: CN=39B43293EC774DEAE6A40C61F11A11518250E8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:0d:d5:19:04:ea:5f:42:a0:36:ad:4f:5b:
                    06:82:8a:2c:cb:52:78:4b:26:04:3e:c9:59:4f:44:
                    d0:8e:74:f0:9a:20:ad:d1:d6:fa:08:a2:30:03:c1:
                    e5:19:7b:31:b8:32:8a:64:24:43:7d:b1:a6:bb:1a:
                    ec:2a:81:30:79:32:d6:10:bd:8e:f3:a1:9c:ea:c8:
                    80:5a:a7:ab:ed:bd:8c:65:f8:26:d8:19:1b:4c:ed:
                    b9:ab:60:6b:7b:2c:31:6d:14:24:b8:d3:8f:4f:ef:
                    01:94:12:8f:f7:45:f4:02:b9:82:e5:04:93:4f:f9:
                    39:84:de:2d:28:97:c8:e4:b7:8f:db:7e:67:dc:7f:
                    a8:28:bf:ac:18:2d:c4:04:48:b1:dd:ee:d8:54:6e:
                    b7:64:52:85:03:cf:54:20:00:09:2a:80:04:a3:cb:
                    4b:1a:41:e0:18:cd:d6:f1:9d:2f:2d:70:1c:b8:a0:
                    7f:4d:d8:d3:0e:76:4b:fd:cb:f2:f4:43:4d:0d:83:
                    f3:e7:64:a5:d7:70:6e:7b:78:94:dd:72:63:03:cc:
                    4a:6e:e1:f4:15:a5:40:ef:1c:97:99:9f:99:bc:fa:
                    42:7b:95:3c:5b:c7:f2:c6:95:7b:55:13:eb:40:d0:
                    23:d4:4e:cf:ab:08:c0:49:6d:63:78:e8:9d:33:ea:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:32:93:EC:77:4D:EA:E6:A4:0C:61:F1:1A:11:51:82:50:E8:F0
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37362e302f32332d3233203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:65:61:81:42:19:71:90:7d:7d:e3:80:7a:54:2d:6c:5f:
         5c:41:42:82:fa:79:f8:12:5a:86:99:33:cb:97:84:ae:45:be:
         b3:b1:98:f0:36:f9:6d:86:3a:db:8e:cf:b2:e1:dd:65:66:d0:
         25:a6:03:2c:0e:70:e5:f9:ad:d4:0b:12:3c:fa:21:dc:e3:8d:
         d4:e4:92:c3:67:16:27:ce:cb:ff:50:79:e7:70:c3:2e:a1:7e:
         99:c5:ab:65:d9:20:93:eb:0d:8e:67:71:ff:15:ef:62:b9:c2:
         c7:ba:fb:8e:56:5b:8f:2e:36:e2:85:65:2f:2e:3a:82:e8:ca:
         ff:0a:d1:bd:7f:a3:11:06:95:5e:46:f2:95:df:bd:a0:32:a9:
         b3:d9:f6:f9:1c:f9:a4:3e:20:be:35:0e:f5:fb:3d:d0:b2:e5:
         67:44:17:89:53:6e:fb:32:f0:5f:0b:d1:5f:8a:db:af:dc:8f:
         e6:d8:c0:84:1f:3a:9b:73:0e:58:9b:71:58:b1:63:71:fc:cb:
         e8:58:1f:79:1d:d0:62:0e:6b:f1:c3:72:7d:61:26:0d:7d:74:
         d3:dd:93:75:5c:94:1a:37:e2:da:40:bf:2a:6f:b5:e0:90:75:
         9a:72:38:19:94:c7:f0:da:12:49:69:2c:8b:b1:e1:74:cf:a5:
         da:5c:b9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:21:53 2026 by rpki-client