Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3139322e302f32332d3234203d3e20323730363331.roa
File:                     3230312e3135372e3139322e302f32332d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          6U02UtLHeWGE1mP4dzWN5KMZfPTp1ZR5mqxeFF4ZgfQ=
Subject key identifier:   50:95:20:4F:9F:90:EC:00:EC:37:1B:30:AF:51:DC:E1:B0:6D:AD:1C
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       1D09108638DD796252034534A64E61F0A65DBF67
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3139322e302f32332d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:44 +0000
ROA not before:           Thu 27 Aug 2026 02:16:44 +0000
ROA not after:            Thu 26 Aug 2027 02:21:44 +0000
asID:                     270631
IP address blocks:        201.157.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:10:86:38:dd:79:62:52:03:45:34:a6:4e:61:f0:a6:5d:bf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:44 2026 GMT
            Not After : Aug 26 02:21:44 2027 GMT
        Subject: CN=5095204F9F90EC00EC371B30AF51DCE1B06DAD1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:88:1d:10:c1:da:45:5c:a2:bc:a2:91:94:e3:
                    05:3f:94:43:43:b5:9c:8c:31:af:69:fc:9c:c3:b2:
                    23:44:75:08:a4:6b:3d:6b:52:3f:b1:94:78:26:ba:
                    ea:b3:22:82:70:76:2e:e9:b1:2e:7e:71:78:5d:16:
                    33:44:c9:6f:21:ad:d2:16:c4:97:80:d4:55:22:3a:
                    a6:7d:31:2d:4e:8c:2c:4f:45:2e:d6:ad:95:bf:72:
                    69:a2:ea:e6:bc:c4:8d:17:df:ef:b1:1b:cf:a6:fd:
                    32:23:7a:d9:20:ed:49:b5:3d:32:ee:9f:f8:e4:f6:
                    78:ec:67:85:fb:63:c7:75:f5:e0:bb:2b:6a:96:2a:
                    dc:a5:cc:8a:5a:2b:12:4a:21:ce:65:63:32:0b:1a:
                    3e:74:7d:8b:98:cc:79:b3:c9:9c:66:a6:07:bc:15:
                    27:e1:f6:69:81:46:9c:b3:5d:07:fe:76:01:aa:3f:
                    5b:62:45:14:9d:df:35:d0:ec:6d:0e:91:cf:fb:b6:
                    cd:68:09:b5:cd:bc:79:9f:76:7a:31:c1:c7:f6:90:
                    09:c9:3f:f2:36:00:f5:53:d9:56:57:ff:7e:93:6a:
                    7c:dd:f9:de:54:aa:c2:a3:ae:34:af:29:a3:eb:77:
                    ab:06:d8:f9:a6:88:63:43:df:c2:55:05:0e:ee:d0:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:20:4F:9F:90:EC:00:EC:37:1B:30:AF:51:DC:E1:B0:6D:AD:1C
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3139322e302f32332d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:11:03:ec:34:26:d0:0a:2f:05:1a:ae:71:e8:81:d4:c6:8c:
         3a:9c:85:1a:a2:fd:c8:f2:f5:86:22:71:61:38:6d:00:c2:65:
         dc:96:de:b9:67:d6:42:1c:31:f2:9b:36:7d:ed:34:de:97:b0:
         9c:e4:06:ab:4c:60:9b:25:f3:64:b5:9f:f9:08:71:6d:ca:4d:
         a4:8b:7b:36:bb:5a:76:3e:f6:0f:e3:4b:96:90:d5:b2:d6:9e:
         85:28:5e:57:34:00:e6:b1:9d:37:32:0e:63:1a:87:f5:5c:95:
         14:0d:e9:bf:04:4a:81:bc:24:c0:7a:0a:fc:2c:92:0e:80:c5:
         3e:fa:8f:72:e5:9d:30:ab:c8:17:6d:fc:1b:1e:84:23:b4:04:
         d8:66:a7:7e:30:4d:3c:03:d1:cd:40:2a:0b:9c:d3:a0:43:7e:
         ac:bb:0d:c0:39:01:e1:f5:41:a9:5f:35:7b:5f:43:df:eb:1b:
         13:59:4c:0d:91:05:be:4e:06:4f:e3:6e:02:9c:8c:c4:b1:35:
         fe:c1:da:9e:4b:dc:5e:fb:cc:5a:c8:0a:29:c1:b7:31:8f:26:
         47:99:10:c8:db:6a:fd:62:d6:cc:6b:73:9a:16:64:a2:50:c1:
         3b:9d:21:1d:9b:9c:0e:0b:06:58:d8:ba:03:3d:dc:44:d7:ad:
         49:3f:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:56:41 2026 by rpki-client