Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
File:                     3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa (raw, json)
Hash identifier:          AzvofCVE1aPR2xjsrvS/YtSMLdiLfrIpqcCLVKBRuss=
Subject key identifier:   CA:4D:CB:69:D2:64:66:CA:93:92:CF:2E:31:93:4D:1E:F6:7F:B5:2C
Certificate issuer:       /CN=3490EF13BCC5964A7152D991720DF98A8B7739E8
Certificate serial:       0F5B0A3A0226B4DD4D524E6A0C749F494369F1F4
Authority key identifier: 34:90:EF:13:BC:C5:96:4A:71:52:D9:91:72:0D:F9:8A:8B:77:39:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa
Signing time:             Wed 06 May 2026 14:11:19 +0000
ROA not before:           Wed 06 May 2026 14:06:19 +0000
ROA not after:            Wed 05 May 2027 14:11:19 +0000
asID:                     272645
IP address blocks:        201.216.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.crl
                          rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 13:44:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5b:0a:3a:02:26:b4:dd:4d:52:4e:6a:0c:74:9f:49:43:69:f1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3490EF13BCC5964A7152D991720DF98A8B7739E8
        Validity
            Not Before: May  6 14:06:19 2026 GMT
            Not After : May  5 14:11:19 2027 GMT
        Subject: CN=CA4DCB69D26466CA9392CF2E31934D1EF67FB52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:05:f0:15:7a:54:c8:45:e0:60:5f:ad:44:
                    61:fb:58:48:2d:f3:a7:ab:bd:88:01:6e:b2:c9:cb:
                    86:39:2f:01:c1:e9:ef:b2:f6:2a:0a:d7:0c:65:a1:
                    0b:c4:f4:3a:a8:df:d3:72:6d:c1:57:a0:d2:64:b8:
                    b1:6b:78:aa:cb:9e:ed:41:e7:f4:9f:8b:8f:1f:15:
                    6a:75:c6:36:6b:6d:a5:38:2b:e4:d6:df:f3:c8:36:
                    ce:23:a6:50:61:94:2d:af:b4:6f:eb:86:76:9c:50:
                    f1:47:10:56:ed:57:5c:64:ab:89:af:ba:53:d1:ad:
                    47:ca:96:8b:81:23:b5:80:65:2d:f5:83:5b:36:ea:
                    44:16:a8:54:ce:f1:bb:49:46:6c:38:f3:50:a2:1f:
                    06:4c:d0:64:5c:0c:02:9a:40:04:16:82:4d:d3:c3:
                    1f:8c:8e:16:7e:d1:13:d8:cc:ae:2b:db:43:3e:c6:
                    0f:96:9a:1f:1d:aa:40:0a:90:89:4e:fe:e0:ed:d9:
                    53:b6:19:ce:93:f8:d7:90:86:d4:09:77:2e:29:a1:
                    2c:b9:b5:63:f0:13:39:2d:14:9c:a0:92:08:56:45:
                    ae:c3:b3:18:e6:32:5e:2f:ce:2e:8a:99:e4:8c:43:
                    16:4f:b5:63:96:a3:ac:2b:be:aa:05:96:3c:db:80:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:4D:CB:69:D2:64:66:CA:93:92:CF:2E:31:93:4D:1E:F6:7F:B5:2C
            X509v3 Authority Key Identifier:
                keyid:34:90:EF:13:BC:C5:96:4A:71:52:D9:91:72:0D:F9:8A:8B:77:39:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3490EF13BCC5964A7152D991720DF98A8B7739E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3490EF13BCC5964A7152D991720DF98A8B7739E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/3230312e3231362e3130342e302f32322d3332203d3e20323732363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:88:fe:37:b6:a8:ec:a0:4f:66:9f:05:58:25:b7:5a:fa:5e:
         7c:5a:21:eb:bd:4c:9d:13:14:ac:bd:4d:5f:25:e4:06:86:1a:
         be:ae:92:a2:71:28:ec:1c:c6:cb:e5:9d:00:0b:28:f3:d0:26:
         19:63:d2:2f:32:51:ac:d4:bb:69:10:5b:ad:27:56:a8:66:c6:
         e3:fe:51:5d:79:25:96:27:3d:f0:f7:b2:28:bd:ab:0c:76:99:
         0e:16:04:bb:8d:7b:a7:54:f1:72:35:3d:0d:f4:a1:e7:ef:e7:
         1d:c3:50:ca:cb:9e:7c:2f:f9:c2:d3:ce:17:d6:86:9e:bd:74:
         0e:f9:78:be:8e:56:05:d4:9a:84:68:04:7a:e2:4d:31:fa:e1:
         9d:11:80:50:75:81:f8:b1:cd:03:84:ec:dd:63:27:e8:98:e1:
         f4:1b:2a:63:8a:84:d7:88:70:d4:07:8e:5d:72:35:2c:21:8f:
         34:d7:ce:3e:50:a5:24:53:6d:07:b8:be:d8:76:9d:b9:b9:fc:
         ee:6b:15:7c:48:49:32:9f:3d:c9:8b:90:e7:ef:d2:8f:63:f2:
         2e:99:cd:f3:c6:13:9a:f8:a5:67:63:0d:07:1a:25:1b:cc:f3:
         a5:f9:89:a0:3f:5a:72:61:28:87:b2:bb:44:47:ec:90:a2:92:
         4e:91:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:30:24 2026 by rpki-client