Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa
File:                     3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          1x6SErO8zjCaR8IY4MJCUImffDBw5M2Rp6APoCZWq7M=
Subject key identifier:   ED:AA:65:E7:F3:27:FA:69:24:DF:49:88:2F:5F:0E:70:05:1B:DF:60
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       25941C2DDED9CC2B47AD636E47ACB409646E91B4
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:10 +0000
ROA not before:           Fri 17 Jul 2026 20:56:10 +0000
ROA not after:            Fri 16 Jul 2027 21:01:10 +0000
asID:                     28649
IP address blocks:        200.236.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:94:1c:2d:de:d9:cc:2b:47:ad:63:6e:47:ac:b4:09:64:6e:91:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:10 2026 GMT
            Not After : Jul 16 21:01:10 2027 GMT
        Subject: CN=EDAA65E7F327FA6924DF49882F5F0E70051BDF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8c:8d:ed:86:9f:2e:ce:fd:77:3f:20:f8:90:
                    de:d9:c9:8c:1e:89:08:5c:ef:bb:b3:b2:b4:1e:58:
                    37:b0:14:46:4a:be:c3:aa:64:92:fe:03:b1:59:90:
                    99:58:9c:12:5d:28:b8:ca:38:51:5b:bd:b8:8a:4a:
                    83:ad:25:8e:48:f0:d2:87:8c:96:52:eb:96:52:03:
                    75:7c:76:8a:35:04:39:a2:b7:e9:3e:32:90:6e:d7:
                    1d:74:4d:24:a5:02:d6:9b:a5:22:fb:71:6a:9d:a8:
                    19:20:ad:e9:4d:24:55:29:5e:09:f4:82:f5:4a:3f:
                    97:0f:ac:d2:23:31:89:39:46:e7:3a:e0:38:2e:8c:
                    ca:39:bf:ed:8a:6f:75:ca:99:35:39:ab:93:23:93:
                    6a:22:ff:b6:39:3b:b5:d7:a6:e3:39:ec:30:fa:f6:
                    39:39:d8:ab:ef:08:2f:21:59:5d:ed:5c:c3:d3:9d:
                    c1:c1:3c:33:21:a6:75:8e:e7:ad:08:bb:1a:31:ca:
                    c3:16:62:47:d9:9f:ce:22:e5:b1:e6:bb:cd:eb:4c:
                    cb:e4:cc:e0:43:e4:c0:72:7a:ba:0f:bb:28:57:7f:
                    02:1d:8e:0f:46:b2:73:11:a7:d0:78:6f:17:ae:97:
                    b6:89:94:5d:f7:95:5c:b1:3c:eb:52:76:5a:d1:cf:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AA:65:E7:F3:27:FA:69:24:DF:49:88:2F:5F:0E:70:05:1B:DF:60
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230302e3233362e3139322e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.236.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d6:2e:f6:92:0c:7f:d8:5e:23:b2:59:61:18:36:c7:16:dd:82:
         7f:9a:47:10:94:34:c5:1a:a7:29:6c:0b:05:bf:3c:f8:4e:03:
         b5:50:54:28:f2:48:a3:9a:91:de:c6:f8:8e:97:0d:dc:e2:e6:
         d9:df:05:fd:ed:ed:28:c7:0f:9a:16:82:c2:56:d8:21:6a:d5:
         75:6f:33:11:88:c7:79:32:51:0e:74:2a:57:56:f1:1d:7e:40:
         4d:eb:60:a5:cc:25:b4:91:d4:cb:6c:c5:be:73:8a:65:e1:e2:
         c3:d9:70:67:1d:96:33:0b:6b:92:c1:9c:56:dc:96:7b:a3:dc:
         0b:7d:5d:b5:11:93:2d:d4:d0:34:6f:15:23:9e:65:f0:a6:43:
         98:51:d7:74:6a:e3:a8:df:76:67:dc:b1:ea:5d:47:58:23:dd:
         08:05:46:c5:dd:61:c6:14:d1:8f:77:09:a9:3f:65:e8:61:25:
         dc:c2:92:06:99:9a:27:24:45:59:6c:8f:73:4f:25:5a:f7:46:
         b4:12:e0:0b:9b:95:a0:fc:3f:41:96:69:76:ae:09:1f:08:3e:
         8f:61:d0:36:c0:bc:fd:3a:41:38:a4:17:35:9a:6d:da:34:1e:
         e0:2d:5b:fa:63:af:9e:20:41:f4:d1:2f:dd:ce:a0:55:4a:75:
         d4:95:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:15:33 2026 by rpki-client