Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
File:                     3230312e37312e31362e302f32322d3234203d3e20323730323835.roa (raw, json)
Hash identifier:          vIpzOX19ALsNnl9xeusqUhIR6eqgWEX3FqXqYwCrp0k=
Subject key identifier:   50:5B:50:CC:45:BF:C6:97:BA:BA:F2:90:C7:2D:9C:C2:AE:3E:EF:B6
Certificate issuer:       /CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
Certificate serial:       0F178169DA5B1F0B201865B6567ACA27C65CB9D5
Authority key identifier: DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa
Signing time:             Tue 05 May 2026 01:25:01 +0000
ROA not before:           Tue 05 May 2026 01:20:01 +0000
ROA not after:            Tue 04 May 2027 01:25:01 +0000
asID:                     270285
IP address blocks:        201.71.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl
                          rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 11:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:17:81:69:da:5b:1f:0b:20:18:65:b6:56:7a:ca:27:c6:5c:b9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9415C36A536191ABEEF23CD6A326417BD63F0F
        Validity
            Not Before: May  5 01:20:01 2026 GMT
            Not After : May  4 01:25:01 2027 GMT
        Subject: CN=505B50CC45BFC697BABAF290C72D9CC2AE3EEFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:7f:19:1f:be:eb:4d:67:db:0d:e9:6f:9c:
                    67:a4:60:a0:fb:fb:d0:48:56:05:b9:59:d4:cd:33:
                    99:cf:88:45:b7:98:f8:44:3c:f3:3d:1c:87:aa:ec:
                    7d:2d:9d:e2:29:88:54:e1:4f:f7:1e:02:67:07:0e:
                    51:40:fc:5c:a7:df:c6:2c:11:0a:72:3d:86:01:7a:
                    58:73:72:94:5c:c0:de:00:b4:91:60:a5:f8:ef:42:
                    63:16:82:88:ca:ee:d7:9c:a5:56:2f:09:ae:f7:3e:
                    f5:2d:f5:cd:48:52:75:8a:f2:81:e7:fd:7a:cd:be:
                    b1:1f:3f:f5:da:bc:60:fa:05:38:5e:5b:f4:ad:41:
                    b4:81:6f:67:a5:16:ec:82:14:57:c8:8a:a1:3f:42:
                    55:69:89:b9:f4:1a:88:96:2e:b8:3b:7c:7e:b0:d4:
                    63:13:d0:cf:99:ea:2a:f4:f4:26:fc:f8:cf:7a:e2:
                    14:13:90:f2:23:03:f3:6c:ac:8c:77:30:68:2f:0f:
                    1e:24:7b:74:11:e2:e3:f2:07:f9:fe:ba:c4:03:01:
                    26:cb:fd:e9:83:0e:b7:f5:83:01:77:d2:53:13:35:
                    22:5d:f9:f6:1b:8e:8c:da:24:90:22:3a:20:9b:94:
                    bd:0a:56:70:5c:fc:fa:09:64:98:29:a6:3b:b4:c2:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5B:50:CC:45:BF:C6:97:BA:BA:F2:90:C7:2D:9C:C2:AE:3E:EF:B6
            X509v3 Authority Key Identifier:
                keyid:DB:94:15:C3:6A:53:61:91:AB:EE:F2:3C:D6:A3:26:41:7B:D6:3F:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/DB9415C36A536191ABEEF23CD6A326417BD63F0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB9415C36A536191ABEEF23CD6A326417BD63F0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8iFE3kgFM5779Gv7Vkjf84JTxvQVPkqNYkLoBnLB8wWU/0/3230312e37312e31362e302f32322d3234203d3e20323730323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:c7:5e:88:31:a0:61:60:63:37:2e:3c:fd:e8:6b:a0:06:
         74:a1:0a:fd:0e:cd:67:b1:8e:26:b8:d4:01:e3:03:9c:3f:a6:
         a9:e6:c0:77:a1:59:f4:ea:8d:22:32:da:7c:e0:96:01:71:40:
         93:53:68:37:56:c2:59:ba:2e:df:c4:0a:ba:93:11:d9:52:ad:
         a1:79:c5:84:59:0e:58:1d:e5:d2:0c:cc:3b:34:a0:88:49:7d:
         52:52:c8:b2:be:7f:d6:48:c9:ea:98:8b:b4:fd:c9:33:ff:33:
         38:86:b0:b3:30:9f:d8:c0:c1:3e:4b:2e:23:9d:7a:af:a6:e9:
         a3:00:0f:a3:dd:06:8c:11:8c:08:8d:b0:0a:16:6b:32:20:d7:
         db:c5:bd:7a:12:d4:d4:ee:03:08:9f:11:18:66:70:c9:d6:40:
         1c:aa:07:67:ad:0e:1b:c6:a6:65:14:f9:53:e6:91:be:bf:fc:
         fd:7a:b3:60:04:a0:49:a2:8d:47:93:5a:d9:0a:57:56:56:a7:
         30:f5:b7:04:2b:31:60:c6:a7:85:f2:5a:c5:10:91:2e:d6:dd:
         8e:ab:fa:fb:74:90:0d:cd:22:6e:c9:0d:0a:45:c9:ac:cb:62:
         52:13:bf:0f:fe:c9:c7:e8:2b:11:1c:d0:67:b5:88:18:90:51:
         82:b6:0c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 22:24:04 2026 by rpki-client