Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa
File:                     3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa (raw, json)
Hash identifier:          cXb/czMKwOYAAtmtT7uAebMmUEp9GOrGjvVCXgxxQz8=
Subject key identifier:   E6:0A:52:C3:1C:83:D1:BE:16:7B:13:5A:5F:FB:3E:C8:4D:1A:01:F5
Certificate issuer:       /CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
Certificate serial:       66C90D3AAEB5A9A445A4506F033ECCF72D2AB0C4
Authority key identifier: CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa
Signing time:             Thu 19 Mar 2026 19:44:31 +0000
ROA not before:           Thu 19 Mar 2026 19:39:31 +0000
ROA not after:            Thu 18 Mar 2027 19:44:31 +0000
asID:                     267530
IP address blocks:        201.182.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl
                          rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 19:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c9:0d:3a:ae:b5:a9:a4:45:a4:50:6f:03:3e:cc:f7:2d:2a:b0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA
        Validity
            Not Before: Mar 19 19:39:31 2026 GMT
            Not After : Mar 18 19:44:31 2027 GMT
        Subject: CN=E60A52C31C83D1BE167B135A5FFB3EC84D1A01F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:2b:ea:f3:a5:e3:1a:f5:71:a0:cc:ad:92:
                    63:57:73:da:f5:8d:93:2c:0c:ac:b0:2f:f6:4a:94:
                    b8:2c:4b:29:72:0c:00:b8:cc:6e:8f:d6:a8:5c:7b:
                    68:d2:1c:0b:02:73:02:43:26:27:e7:ea:33:c0:3b:
                    6d:12:83:6d:7e:51:6b:ca:57:c5:e4:5b:df:ce:eb:
                    50:3c:56:6a:5c:50:c8:0a:d0:11:af:2f:3e:09:43:
                    23:b5:93:96:a3:d5:4e:3b:3f:1d:17:92:c9:91:02:
                    03:bc:a2:9a:11:c2:e2:82:0a:40:a9:0e:24:a3:8e:
                    88:64:b8:ec:35:96:c0:ed:f7:d9:2a:4e:50:0e:24:
                    8b:e1:7e:87:30:55:fc:74:13:b5:d3:74:39:a7:fc:
                    27:a8:03:82:aa:62:72:6a:63:30:c1:7f:f3:49:4a:
                    dd:04:fa:c7:b6:22:68:6c:f3:de:c7:37:99:e7:a3:
                    9a:10:0a:3f:29:47:d1:a8:02:27:1a:64:ef:d7:e6:
                    db:4d:ac:63:56:af:e6:e1:f1:d0:1b:c6:b2:ef:ea:
                    76:3c:31:eb:e7:3e:d0:7b:1e:6b:c0:ed:34:f7:0c:
                    49:3e:0d:b3:80:e9:c3:00:ef:d7:51:fa:03:69:f1:
                    90:54:71:04:03:55:21:ea:12:c0:4f:34:50:f1:5d:
                    ac:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0A:52:C3:1C:83:D1:BE:16:7B:13:5A:5F:FB:3E:C8:4D:1A:01:F5
            X509v3 Authority Key Identifier:
                keyid:CF:A4:A7:F5:90:A9:A0:E2:81:9F:17:CF:4E:73:F3:DC:70:7F:25:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFA4A7F590A9A0E2819F17CF4E73F3DC707F25AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/58BCGvs6UB6o5j2i1712P78mT22YLEPVgjEn5E42wkdP/0/3230312e3138322e3139322e302f32322d3232203d3e20323637353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:b2:c1:15:16:04:cb:a6:c4:37:fe:20:66:c1:62:5a:e7:
         6d:49:7a:94:70:eb:7d:07:e0:74:b5:be:54:d7:e4:84:fb:56:
         83:13:cb:17:6b:98:1d:8f:07:ca:95:bf:b1:f5:0c:fb:d1:86:
         e8:cb:91:5b:72:f6:08:33:f7:cd:a9:e0:9e:83:83:7f:66:b1:
         3f:29:93:87:e1:12:7d:64:5a:d3:96:e4:b7:d2:66:bd:b9:4b:
         3c:b4:08:8f:37:e5:d9:95:1a:65:fa:ad:6b:62:65:5a:e1:f9:
         8c:66:05:b2:02:1d:9c:e8:5b:32:86:a6:69:71:90:a1:dc:07:
         bf:0f:0a:99:2e:f8:be:79:f5:a0:26:c8:29:b6:26:72:93:e6:
         e3:c7:d4:7b:1e:e9:b7:7a:59:f9:0c:5e:e3:6e:33:51:89:1d:
         26:24:24:4e:53:44:c5:e3:12:89:d5:1a:f8:42:dc:ac:79:35:
         5f:f7:91:93:57:4b:cd:45:a2:e7:cf:2d:1d:e8:ff:45:66:ca:
         91:42:eb:d5:f2:16:e7:32:c0:8e:8e:99:96:3b:81:d5:54:da:
         10:3a:f3:53:1e:91:c9:5a:18:b6:cb:1d:f8:5d:ce:49:61:03:
         ca:6c:34:4a:29:76:c5:b7:bb:e9:38:86:0f:e0:ad:75:55:0c:
         f9:8f:56:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:45:26 2026 by rpki-client