Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa (raw, json)
Hash identifier:          CWS1mlbXbxmGUSjoNElRhfNkqrMaTlMZMcz+KWjPu64=
Subject key identifier:   8B:04:71:E3:DC:EE:70:A9:D5:8C:E6:14:D6:D4:22:18:90:D9:54:C7
Certificate issuer:       /CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
Certificate serial:       235FCA28193C0A2D96935BDB42D34A5206DB4C78
Authority key identifier: 6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa
Signing time:             Wed 22 Jul 2026 22:05:53 +0000
ROA not before:           Wed 22 Jul 2026 22:00:53 +0000
ROA not after:            Wed 21 Jul 2027 22:05:53 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5f:ca:28:19:3c:0a:2d:96:93:5b:db:42:d3:4a:52:06:db:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167
        Validity
            Not Before: Jul 22 22:00:53 2026 GMT
            Not After : Jul 21 22:05:53 2027 GMT
        Subject: CN=8B0471E3DCEE70A9D58CE614D6D4221890D954C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:63:b4:14:88:f3:95:cc:08:77:86:43:10:
                    97:3c:7c:ed:cc:3a:70:0e:69:78:c4:c4:46:3e:f3:
                    ac:a1:ba:25:6e:75:11:69:08:75:e0:b0:8d:f3:d1:
                    76:26:bc:d3:3b:48:68:c0:32:a4:4f:79:7a:05:85:
                    05:e1:34:e8:48:6b:1b:68:c9:0c:ad:96:6c:fd:c7:
                    db:28:7a:c0:f7:aa:0a:ab:13:f1:f0:6b:25:a5:5a:
                    52:3b:c9:0b:46:42:2b:30:d7:71:80:13:b6:31:8b:
                    09:96:a8:d2:fc:04:f2:60:29:eb:50:85:36:10:1b:
                    43:6a:79:2f:f4:5c:12:a6:9a:1a:0a:9c:80:08:78:
                    1c:08:79:0f:13:ba:c3:0a:29:cb:bb:11:2e:7b:a9:
                    47:e5:73:8e:43:25:c0:ca:4d:41:9b:3e:8d:dd:43:
                    d0:d8:f0:7f:29:51:8c:b8:f8:70:fa:8d:68:95:13:
                    7c:40:74:8c:29:f4:7c:0a:3b:4a:a1:18:68:4c:09:
                    f6:d5:22:69:fe:2d:65:52:c4:72:ff:7c:0f:9a:42:
                    08:f0:48:ef:e2:b8:23:61:32:cb:0b:3b:f7:42:de:
                    22:58:c9:dd:7c:2e:6b:e6:88:ab:64:f8:94:4e:d8:
                    c5:1b:d8:b2:19:82:51:42:6b:6a:6e:90:0a:af:01:
                    ef:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:04:71:E3:DC:EE:70:A9:D5:8C:E6:14:D6:D4:22:18:90:D9:54:C7
            X509v3 Authority Key Identifier:
                keyid:6C:66:D3:75:B9:67:51:36:E7:C6:8B:AA:C4:F2:DD:DB:2C:E4:E1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6C66D375B9675136E7C68BAAC4F2DDDB2CE4E167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3234203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:31:db:36:c5:fe:8b:4b:74:cd:eb:79:6e:6a:f2:2e:15:
         d4:b4:8a:01:6a:e8:55:84:1b:e7:26:76:4f:ab:f5:0e:5b:d2:
         5b:63:51:f1:60:31:71:73:85:cb:e0:d3:9a:19:15:53:4c:20:
         81:b4:0f:fa:be:67:01:d9:76:ec:2c:c2:e5:58:75:b3:9f:6f:
         1a:fe:45:fb:35:ea:22:13:9d:03:df:66:bb:42:1a:22:bb:1b:
         45:f6:b5:d8:e8:f1:24:aa:49:bb:ba:82:3e:51:f5:04:39:08:
         ff:89:dd:07:eb:f7:11:6f:73:01:5f:c4:e4:37:1c:dd:88:95:
         4e:01:34:1a:25:ff:08:ed:65:ac:5e:51:fb:fc:bf:22:0d:52:
         33:e6:43:64:20:a2:47:a5:f9:67:d0:52:d5:99:cf:ec:1e:26:
         24:3a:7d:f0:81:47:b8:89:9c:ca:71:5d:a7:4c:b1:e1:56:00:
         f3:0c:2e:87:76:e7:ba:9e:0f:66:bf:d6:e0:3f:4f:88:af:76:
         86:ea:c5:91:ff:6e:ff:ff:5e:b2:71:5f:bc:bc:f0:0d:d1:10:
         67:40:61:42:ac:02:04:be:58:f6:82:f1:be:c6:14:b6:c2:57:
         d3:73:ca:9f:ee:6b:68:88:8f:da:38:0f:96:3b:cd:4d:5a:ea:
         aa:b4:ac:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:24:41 2026 by rpki-client