Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (raw, json)
Hash identifier:          i1eW/SbytzVOvVhrTFhZIOORO8pNmAgs/aTXVA0XwrQ=
Subject key identifier:   CE:00:3E:D1:31:FB:58:FE:09:59:0B:65:B6:4F:DC:6B:3E:30:AE:57
Certificate issuer:       /CN=C937518393EB538612A5266582E32D1178E5D342
Certificate serial:       64317562283092C8074154EB165E875E972A524B
Authority key identifier: C9:37:51:83:93:EB:53:86:12:A5:26:65:82:E3:2D:11:78:E5:D3:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
Signing time:             Thu 07 May 2026 14:03:22 +0000
ROA not before:           Thu 07 May 2026 13:58:22 +0000
ROA not after:            Thu 06 May 2027 14:03:22 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:31:75:62:28:30:92:c8:07:41:54:eb:16:5e:87:5e:97:2a:52:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C937518393EB538612A5266582E32D1178E5D342
        Validity
            Not Before: May  7 13:58:22 2026 GMT
            Not After : May  6 14:03:22 2027 GMT
        Subject: CN=CE003ED131FB58FE09590B65B64FDC6B3E30AE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:92:64:3b:ee:8a:d7:df:6d:84:fc:1f:53:
                    79:9a:d7:f1:6e:eb:6a:0f:77:c4:70:be:88:06:bd:
                    fb:fb:5a:fd:34:9d:42:71:47:89:7e:65:ef:65:78:
                    55:ed:2f:b5:45:66:02:95:af:d0:f9:79:5d:71:72:
                    81:fc:0b:17:28:62:c0:e9:9b:be:0a:d7:61:d2:0f:
                    0f:f8:5c:33:35:32:f3:37:b4:f9:c1:44:e9:8a:e3:
                    53:10:22:b4:c3:95:bd:15:8a:af:9c:18:c6:45:85:
                    b4:70:5f:a8:f9:40:9a:b3:ed:08:4c:78:c1:af:70:
                    04:07:48:23:85:55:76:fe:dc:72:0d:26:e7:b0:43:
                    be:2f:d5:3c:38:6e:b3:50:02:a0:fa:da:fc:65:8e:
                    82:84:e4:db:0c:82:8f:e7:b8:10:ee:35:b7:2b:49:
                    14:9a:a0:c3:09:7a:72:a2:2a:45:7f:cc:91:5e:4c:
                    95:e4:2e:23:f7:61:b4:75:2a:6f:1e:77:de:a5:d8:
                    9c:78:31:85:df:34:94:d7:ad:79:0d:b8:6b:19:4b:
                    a4:b8:13:97:bb:fc:26:7e:a9:65:68:b0:d0:62:92:
                    15:c6:95:14:50:b5:be:65:b0:9f:26:4b:d2:b7:89:
                    df:59:ea:7d:61:a5:62:8e:55:94:98:87:e8:f1:cc:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:3E:D1:31:FB:58:FE:09:59:0B:65:B6:4F:DC:6B:3E:30:AE:57
            X509v3 Authority Key Identifier:
                keyid:C9:37:51:83:93:EB:53:86:12:A5:26:65:82:E3:2D:11:78:E5:D3:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/C937518393EB538612A5266582E32D1178E5D342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C937518393EB538612A5266582E32D1178E5D342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:ef:83:60:1e:40:55:27:76:55:e1:48:66:2b:81:fa:bb:1e:
         b7:ab:8b:04:e2:31:e4:77:65:85:33:ac:1a:1e:8d:0b:f3:be:
         ba:54:e3:f4:44:26:70:f2:b1:dd:38:ad:ac:a5:2b:3c:67:34:
         a8:55:57:f8:7f:d4:26:6d:ec:99:d4:e1:14:4f:e5:88:22:47:
         04:6d:a8:a0:cd:a7:03:41:51:40:80:ea:4c:b9:0e:5d:39:c3:
         d4:68:d2:3d:58:45:35:90:5e:e1:bb:bd:ab:ac:d5:e4:78:fa:
         9d:a2:5a:b1:76:06:73:1e:6c:85:64:4d:c2:1a:5b:ec:0b:df:
         dd:3b:0f:42:58:1a:a6:46:bc:3e:7d:71:30:d9:fd:a7:32:a0:
         40:16:f8:06:f5:eb:82:b6:ae:3f:cf:f2:e5:64:8e:23:13:c4:
         c5:4c:a7:b7:3a:91:8d:e9:35:f3:00:7b:5f:db:fa:13:81:94:
         9a:2f:b5:8f:eb:a8:4e:4f:13:6c:d7:38:ab:5f:61:ca:4c:bb:
         e5:34:f4:4b:fb:ee:26:36:db:ae:94:f3:2b:c1:cc:a1:b9:16:
         fd:9c:d7:6b:fe:5a:fd:b1:65:de:80:84:36:ec:56:ba:c1:5a:
         95:44:86:24:36:b9:1b:5d:b8:78:43:76:fe:8c:fd:df:c9:94:
         ff:b1:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:04:08 2026 by rpki-client