Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3232342e302f32322d3234203d3e20323730363331.roa
File:                     3230312e3135372e3232342e302f32322d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          ap1lpYzfBfPMVQAjFY0zuS6qgyqY1iaB3U8UWGV1ouo=
Subject key identifier:   5A:FD:D2:F1:EA:D4:D9:9B:D7:80:D4:1C:DF:B3:0E:01:B3:D1:3B:91
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       0493F1907AF7700A67ABBA6058E96B6BC2169421
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3232342e302f32322d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:37 +0000
ROA not before:           Thu 27 Aug 2026 02:16:37 +0000
ROA not after:            Thu 26 Aug 2027 02:21:37 +0000
asID:                     270631
IP address blocks:        201.157.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:93:f1:90:7a:f7:70:0a:67:ab:ba:60:58:e9:6b:6b:c2:16:94:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:37 2026 GMT
            Not After : Aug 26 02:21:37 2027 GMT
        Subject: CN=5AFDD2F1EAD4D99BD780D41CDFB30E01B3D13B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c9:63:b0:3b:c0:43:35:68:49:ad:f3:3f:e5:
                    24:f8:5e:9a:00:f0:61:ec:b4:6a:d6:32:c0:11:48:
                    34:c1:61:d4:95:c4:47:a0:b8:d8:12:f4:fa:20:46:
                    b0:e1:23:71:23:d5:40:5b:56:8a:96:fc:83:c2:e4:
                    fe:80:4e:1d:23:53:1e:d9:08:3a:ba:eb:53:3b:8f:
                    fa:7c:b4:5f:5d:ad:3b:8f:0d:e0:db:77:85:f8:05:
                    df:67:f1:26:7d:19:9e:eb:7c:39:8c:a6:19:64:70:
                    fc:26:e8:7d:71:be:56:27:92:11:41:f1:f0:bb:08:
                    75:cc:76:ca:b0:36:76:4d:3b:a8:13:6f:68:4e:0e:
                    31:65:56:18:54:df:b9:13:5d:26:72:73:23:43:ef:
                    27:db:ad:aa:ad:ec:44:30:d9:7c:0b:fc:83:4f:4c:
                    ee:d4:51:15:40:19:0c:0c:49:9c:d4:c9:5a:d1:10:
                    61:bf:1a:cf:cc:f7:0a:a3:f5:7a:a7:b1:29:22:95:
                    9f:3b:00:77:56:66:3c:57:34:45:f2:eb:7c:0e:46:
                    4e:8d:95:07:a2:43:a7:22:95:bb:c5:44:1d:02:c2:
                    fe:8b:a5:e5:0c:fa:e1:fa:1a:9e:eb:b6:3b:7a:28:
                    51:b9:67:a6:cc:36:6f:4e:f3:09:45:10:9f:17:a2:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FD:D2:F1:EA:D4:D9:9B:D7:80:D4:1C:DF:B3:0E:01:B3:D1:3B:91
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3232342e302f32322d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:38:0f:98:0a:d1:3f:b2:92:8b:cb:db:c2:1b:3e:27:bf:e5:
         22:79:58:71:c6:4b:6f:55:6e:27:e5:6b:93:f9:35:a4:9f:de:
         02:57:d5:35:78:70:39:03:c0:dc:17:23:98:e6:eb:60:90:16:
         ed:73:ec:62:4a:06:f4:12:16:45:f8:fd:f2:17:ec:f4:b7:61:
         64:70:76:45:b6:73:c9:43:31:94:81:6b:25:74:43:2d:c8:72:
         fb:54:a1:cf:32:d1:73:b5:e6:e1:59:03:74:f1:bf:89:30:40:
         39:c7:a1:4a:5e:1a:a1:0b:62:4e:6c:48:00:96:64:a7:3f:8a:
         b4:d2:c9:85:5f:a2:85:1e:3f:36:65:09:bf:60:42:c7:0b:e6:
         a2:8a:ca:73:6b:25:3a:8b:6c:78:83:21:77:e6:57:b3:31:93:
         7f:8e:5b:40:13:33:02:26:a2:c2:95:cd:3f:c2:32:62:e1:14:
         81:7e:cb:f4:1f:ba:58:57:9c:10:b7:5b:ff:47:f4:2d:d8:98:
         59:7a:ee:2c:5a:d0:25:f2:7d:a3:b7:19:c5:ef:dc:12:d5:c4:
         5b:ba:c7:93:55:c3:bf:19:bb:74:fb:e9:4c:1b:6e:0c:35:0a:
         d7:f7:44:0c:cc:eb:5a:90:a9:15:22:3e:52:da:69:7d:47:93:
         22:eb:dd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:02:07 2026 by rpki-client