Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3234382e302f32332d3234203d3e20323730363331.roa
File:                     3230312e3135372e3234382e302f32332d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          /rjRTRcK6gYteUvFAGiau7bmXwC4Y+JvRr3THrttXSw=
Subject key identifier:   84:48:0B:89:DA:14:23:EA:E7:B7:3D:62:93:AC:75:D1:B6:71:70:F7
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       77D22F5A0A748F3C724C957F134B144AF90D9FEA
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3234382e302f32332d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:43 +0000
ROA not before:           Thu 27 Aug 2026 02:16:43 +0000
ROA not after:            Thu 26 Aug 2027 02:21:43 +0000
asID:                     270631
IP address blocks:        201.157.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d2:2f:5a:0a:74:8f:3c:72:4c:95:7f:13:4b:14:4a:f9:0d:9f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:43 2026 GMT
            Not After : Aug 26 02:21:43 2027 GMT
        Subject: CN=84480B89DA1423EAE7B73D6293AC75D1B67170F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:eb:6b:bc:79:7a:0a:21:1a:31:bc:22:9a:af:
                    87:ce:15:55:19:9d:ed:a8:82:61:73:36:38:c7:c8:
                    43:f1:5b:2d:d1:68:30:ab:1b:d2:5f:ed:e6:f9:c2:
                    7f:18:42:e3:3f:48:97:03:db:01:b5:df:8a:6e:90:
                    42:05:d2:7d:e0:6f:83:d9:34:5d:ca:21:84:e5:28:
                    38:ac:34:88:36:a0:42:71:7e:74:e3:03:aa:48:c8:
                    9a:40:20:c6:79:94:9d:ee:59:bd:3d:e7:07:ae:80:
                    72:d8:7f:97:a0:d8:19:0f:f3:26:cd:5a:1a:02:ea:
                    e4:32:1a:89:5e:82:b9:52:8a:a9:3f:7b:5b:17:51:
                    48:2d:d0:ba:f1:be:34:9f:a4:a0:8a:1f:e8:e5:17:
                    70:17:fc:7b:c2:6c:9d:59:46:ea:8c:77:19:31:f7:
                    1f:cf:3a:33:7f:d2:75:17:59:cc:60:49:72:02:1e:
                    11:d7:81:6b:a3:17:95:fd:5c:91:a2:51:0d:11:fa:
                    3c:b0:50:f5:e7:f2:b1:2a:92:90:a8:b4:09:c9:90:
                    2c:8c:fe:40:37:c4:25:62:65:f1:e9:d8:e8:91:96:
                    dd:f5:b3:e8:4c:dc:2a:70:58:55:c1:56:51:7a:b7:
                    90:12:b5:2d:c7:3c:95:81:eb:9f:0b:64:ec:2e:e6:
                    ee:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:0B:89:DA:14:23:EA:E7:B7:3D:62:93:AC:75:D1:B6:71:70:F7
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3234382e302f32332d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:f4:54:ca:3d:72:d6:d5:73:9c:89:84:b2:1c:d0:20:25:87:
         7d:af:45:e1:83:dd:4a:01:4b:98:3e:97:ba:66:28:8f:27:5d:
         3d:c7:91:a5:bf:e5:98:b0:bf:d4:6e:99:dc:71:51:a8:90:a7:
         ce:28:98:98:49:76:01:64:c8:c3:6a:6b:cf:23:e5:73:0c:1e:
         84:2d:af:6c:c5:5f:46:d8:bd:8d:25:38:2f:68:b2:06:22:c2:
         e1:ec:82:09:2a:e3:39:a2:d5:68:87:fb:72:f8:cb:1a:0e:74:
         5b:27:bc:a3:08:f0:34:75:00:ec:c8:47:c1:ee:4b:33:0a:83:
         cb:37:38:28:9e:96:58:0e:e0:cc:f0:63:6e:47:1d:4e:6e:ef:
         05:61:f2:a8:c1:6f:fc:e1:03:0e:1f:c9:88:45:ef:2e:76:ef:
         4c:a3:b4:4a:2a:22:6b:95:8c:f2:15:3a:ab:f9:46:07:fe:01:
         5f:96:73:ce:fc:54:4f:f7:e5:e0:18:c9:41:99:ec:f3:80:ff:
         ab:79:60:1a:05:61:cf:20:cf:9e:33:71:72:98:4b:37:9e:39:
         23:c1:90:a5:2f:a9:74:b3:ab:b7:32:43:d7:9e:53:a0:93:8d:
         1d:46:eb:f9:68:73:1f:80:ec:3d:c8:fc:4b:80:45:a0:1c:93:
         66:f4:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:33 2026 by rpki-client