Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3235302e302f32342d3234203d3e20323730363331.roa
File:                     3230312e3135372e3235302e302f32342d3234203d3e20323730363331.roa (raw, json)
Hash identifier:          tmZVYx8sWwmRTF8AJz8Yt/OkPcJJV9qtlCsoUFomuEI=
Subject key identifier:   0C:F0:2C:75:AA:AA:5A:25:94:34:AC:07:1C:52:E3:E3:13:11:A4:01
Certificate issuer:       /CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
Certificate serial:       739E66883FC2B3210BF4B36A73C3457BB5B8BD77
Authority key identifier: F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3235302e302f32342d3234203d3e20323730363331.roa
Signing time:             Thu 27 Aug 2026 02:21:41 +0000
ROA not before:           Thu 27 Aug 2026 02:16:41 +0000
ROA not after:            Thu 26 Aug 2027 02:21:41 +0000
asID:                     270631
IP address blocks:        201.157.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl
                          rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:9e:66:88:3f:c2:b3:21:0b:f4:b3:6a:73:c3:45:7b:b5:b8:bd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562
        Validity
            Not Before: Aug 27 02:16:41 2026 GMT
            Not After : Aug 26 02:21:41 2027 GMT
        Subject: CN=0CF02C75AAAA5A259434AC071C52E3E31311A401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:84:da:a1:a9:23:85:40:ed:e3:83:1a:bc:
                    26:76:40:ad:02:e2:ae:22:67:86:8f:9d:45:3c:bd:
                    21:ff:56:18:bf:5f:cf:83:47:57:37:6d:cd:9a:75:
                    98:4f:a2:e6:9d:21:ad:68:e4:20:25:bb:ac:93:ee:
                    5f:ff:36:ed:83:0a:cd:c2:b6:6b:6a:d1:00:f2:9a:
                    08:12:20:cb:85:b1:54:21:0b:1c:fd:a5:d5:6b:c7:
                    3d:b7:3b:fe:9a:80:f7:10:8e:4c:6a:1a:33:b7:1e:
                    77:8b:1e:ca:67:fd:9b:15:e2:a5:01:df:63:d0:06:
                    77:75:6f:51:2f:8e:e2:0b:6c:22:31:6e:5b:15:03:
                    27:61:53:94:11:e1:0a:51:bb:09:f4:eb:2d:41:77:
                    26:44:18:64:97:66:14:a1:51:e7:f5:8b:4d:e4:3a:
                    6a:7a:b0:d4:bc:71:51:55:52:c0:8e:84:1b:99:93:
                    51:bd:ea:41:78:f0:a8:97:5b:b4:94:47:4e:71:0d:
                    17:ca:03:dd:e4:cd:74:81:fc:23:f1:63:9b:ec:6e:
                    a8:21:db:9f:27:3d:6d:30:9b:a4:dc:44:11:14:d5:
                    b1:58:29:b8:8f:13:66:f6:75:67:5d:3b:23:bd:c4:
                    a8:d1:a7:d1:57:06:d6:c1:0f:72:15:e4:61:4d:f9:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F0:2C:75:AA:AA:5A:25:94:34:AC:07:1C:52:E3:E3:13:11:A4:01
            X509v3 Authority Key Identifier:
                keyid:F0:F9:0B:08:A3:E9:F0:2E:AC:9E:16:5C:1B:0D:3D:CE:B3:8C:C5:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0F90B08A3E9F02EAC9E165C1B0D3DCEB38CC562.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MkUKsN79AbpoUaWLuCd7e2DY9rshNN69LkHoXzpU8z1/0/3230312e3135372e3235302e302f32342d3234203d3e20323730363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:ab:f2:4e:1b:06:48:6b:8a:b6:f9:f5:d4:5e:76:7a:aa:
         43:aa:92:0a:d5:3f:46:57:0e:34:56:fb:ed:65:ed:d7:2a:ca:
         fe:37:c2:ce:56:fa:db:8c:68:7a:23:73:ea:8b:ee:04:88:ea:
         b8:30:44:35:47:24:e6:d0:2c:35:23:31:60:99:87:d5:2e:92:
         4b:c3:d6:e4:8d:f3:61:ef:6a:d4:cd:ac:e9:43:5b:7f:28:9f:
         f8:6f:ef:9a:9e:44:7a:bd:e7:85:00:38:44:aa:fc:d8:c5:5c:
         86:6b:fd:3e:1f:9d:b9:88:08:04:80:d9:91:e2:21:9e:c6:64:
         63:87:02:26:04:67:f9:33:1f:0e:f7:0d:47:a5:6f:8d:3a:f2:
         fb:db:1b:eb:b6:31:a7:d5:3d:46:f9:dc:10:6e:46:82:54:37:
         a6:4f:43:99:ad:d1:0a:b8:fe:66:10:f3:8d:4c:3b:7f:20:41:
         d1:4a:16:19:8a:25:bd:54:c4:76:c0:bc:53:62:5a:56:3c:51:
         ae:d5:f0:88:a7:f3:9f:a5:6c:82:ae:83:5b:be:e8:84:4c:e4:
         36:c9:8d:0e:c5:a4:39:d2:75:c1:e2:a9:1e:2c:07:5c:79:34:
         68:21:13:3c:40:36:cb:af:53:82:2d:bc:93:fa:74:f8:6f:e0:
         1b:90:4b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:54:09 2026 by rpki-client