Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          EeLxpEnZaWgRIHYU+Q1c/vCcM4tLtHxljdaJw5cjod8=
Subject key identifier:   48:54:3B:AA:D7:FE:88:52:E5:54:C0:BE:C3:C2:CE:1A:B1:4A:E0:52
Certificate issuer:       /CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
Certificate serial:       7AA1033CBB425890F0E42F356D748DF24D95638F
Authority key identifier: 5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 16 Sep 2026 13:21:10 +0000
ROA not before:           Wed 16 Sep 2026 13:16:10 +0000
ROA not after:            Wed 15 Sep 2027 13:21:10 +0000
asID:                     271466
IP address blocks:        201.49.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a1:03:3c:bb:42:58:90:f0:e4:2f:35:6d:74:8d:f2:4d:95:63:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
        Validity
            Not Before: Sep 16 13:16:10 2026 GMT
            Not After : Sep 15 13:21:10 2027 GMT
        Subject: CN=48543BAAD7FE8852E554C0BEC3C2CE1AB14AE052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:95:9f:2b:f2:61:60:f7:3c:fd:0d:c8:cf:a7:
                    5e:a4:76:3d:5b:d1:46:de:3a:79:ad:b0:21:62:83:
                    58:a2:3d:e6:19:22:e3:1d:31:b8:be:05:fe:c4:bf:
                    70:7e:fd:e9:9a:bd:fe:4c:fb:ea:83:79:1d:fc:50:
                    b7:7b:e6:98:4b:38:4c:5c:68:47:2e:2e:c9:e9:db:
                    13:40:b7:d7:57:8b:b5:05:ee:f7:4b:7d:29:ea:0c:
                    3f:5a:45:c3:7e:48:4e:7d:92:e8:d2:48:9b:fc:a0:
                    27:6c:ff:97:10:7c:b3:06:bf:f9:df:ff:c8:63:4e:
                    6c:7d:3c:18:00:b8:15:13:4e:c2:cb:ca:d5:b2:f1:
                    6a:b4:7c:d0:c8:8a:76:2a:bf:4e:8c:64:7b:03:6c:
                    6a:84:84:df:4d:15:03:37:14:74:4a:01:6f:f2:c8:
                    db:36:86:e8:ed:7d:71:21:65:ad:ae:30:2e:62:38:
                    fb:22:6d:2b:57:ac:a2:a2:95:d5:ae:a5:8a:30:cb:
                    96:9c:64:11:52:cf:76:2c:27:9a:70:ba:e4:8b:43:
                    e8:e7:62:93:2b:91:3f:49:64:49:b8:26:6f:70:da:
                    76:3f:d2:89:07:34:de:c7:be:7f:68:88:61:60:2d:
                    f0:fc:d2:a7:dd:f9:a3:a2:61:2c:64:5c:9a:91:2b:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:54:3B:AA:D7:FE:88:52:E5:54:C0:BE:C3:C2:CE:1A:B1:4A:E0:52
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3137362e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:77:09:10:d4:d1:33:f4:74:54:fb:0b:fa:1c:df:3f:ac:76:
         82:e3:4d:0b:36:26:ba:1a:0b:a1:69:49:e0:be:b7:47:50:08:
         37:3a:0a:5d:46:39:98:2e:e9:e5:df:b8:44:b2:6d:07:74:15:
         29:dc:d1:ab:46:44:b4:5a:d0:73:6d:17:08:2c:f8:01:c5:a9:
         b2:ad:c3:fc:20:9c:7f:80:0d:cb:4e:46:e8:93:b1:6c:b3:18:
         56:a7:f3:42:5e:82:12:e5:69:a0:3c:01:3d:fd:c5:e5:58:4a:
         e5:5c:f3:fb:c7:bd:f2:30:41:03:d8:c0:a9:6f:28:bc:17:4a:
         70:86:20:a5:8b:9b:dd:ba:f2:d3:fb:2e:ac:97:ca:8a:95:48:
         b8:e9:74:c9:57:8f:e4:db:7b:10:09:7d:49:bb:82:aa:1f:87:
         a6:51:16:63:45:d6:4f:27:b0:8d:50:03:09:d0:aa:56:88:24:
         79:21:ea:91:87:2a:34:3e:4d:d5:89:17:6c:64:8e:c2:0f:8a:
         01:82:a4:43:65:bc:c7:01:1d:ee:68:71:7f:cf:e9:19:36:9d:
         46:b9:b1:1a:55:87:96:d8:82:c2:dc:9a:93:be:bb:c0:e5:49:
         b1:1d:ae:16:71:39:1e:d2:9d:83:3c:30:26:dd:24:8c:cc:a6:
         6c:51:64:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:29:08 2026 by rpki-client