Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa
File:                     3230312e33332e36342e302f32302d3332203d3e203238363439.roa (raw, json)
Hash identifier:          9bo8vfoSXgY6JsdhM7I/PhO37FZxgKtyIo+X02F+J+M=
Subject key identifier:   46:B6:F7:A1:62:E3:3D:E8:72:2F:6C:F4:17:10:82:AA:A1:38:94:FC
Certificate issuer:       /CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
Certificate serial:       1FE1831A1FEE51769145EBB200B83C887C354010
Authority key identifier: 01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa
Signing time:             Fri 17 Jul 2026 21:01:09 +0000
ROA not before:           Fri 17 Jul 2026 20:56:09 +0000
ROA not after:            Fri 16 Jul 2027 21:01:09 +0000
asID:                     28649
IP address blocks:        201.33.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e1:83:1a:1f:ee:51:76:91:45:eb:b2:00:b8:3c:88:7c:35:40:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A574138D0D8FC0A376AA23DB4E1533FF0C5652
        Validity
            Not Before: Jul 17 20:56:09 2026 GMT
            Not After : Jul 16 21:01:09 2027 GMT
        Subject: CN=46B6F7A162E33DE8722F6CF4171082AAA13894FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:c4:11:87:5f:f2:3c:b0:fb:d6:03:91:d2:
                    d2:dd:ff:71:da:cd:2e:3a:eb:cd:f8:43:48:a5:2d:
                    13:7d:bc:ed:ae:3e:a3:f0:49:e9:d8:f9:a3:9b:c0:
                    ed:b3:f1:86:59:22:de:64:a8:e2:b5:7a:22:aa:e4:
                    c2:b9:53:87:cb:a8:d4:94:c0:b4:0c:88:2a:16:74:
                    32:1a:9d:f7:49:20:1a:57:4a:ad:e0:b3:9b:96:e6:
                    75:6b:b1:b8:7f:11:39:28:e1:5a:55:67:6c:b6:a9:
                    c7:71:03:ff:0e:b5:61:68:15:81:cc:9d:2a:ad:79:
                    ff:12:38:e1:ee:57:31:3b:38:60:b4:5b:4c:8c:94:
                    16:33:de:b7:97:e4:9e:ed:87:74:06:f8:a6:90:bd:
                    3e:b5:62:38:ab:df:18:d8:a1:bb:90:b0:93:ab:17:
                    e7:7a:d7:22:7d:6b:d8:7a:89:3f:b3:f1:31:73:64:
                    40:0d:36:1c:94:99:34:51:85:6c:20:2f:ce:06:78:
                    a7:1f:3a:dc:5f:83:cc:4c:af:15:15:45:06:49:b4:
                    ca:a2:c2:d0:74:82:2c:99:e2:98:bf:9e:c7:58:be:
                    77:84:91:06:ca:8e:8e:c9:a7:5f:48:79:02:bf:b2:
                    0a:0b:e3:fb:c6:42:99:e3:9f:ee:04:78:be:c0:9c:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B6:F7:A1:62:E3:3D:E8:72:2F:6C:F4:17:10:82:AA:A1:38:94:FC
            X509v3 Authority Key Identifier:
                keyid:01:A5:74:13:8D:0D:8F:C0:A3:76:AA:23:DB:4E:15:33:FF:0C:56:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01A574138D0D8FC0A376AA23DB4E1533FF0C5652.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/3230312e33332e36342e302f32302d3332203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:87:09:15:11:4d:19:8c:10:26:3c:4a:53:7b:59:e7:9c:bf:
         5a:03:84:0f:51:65:08:4f:e8:ee:0d:7e:3c:d1:4d:d1:c3:f8:
         46:b1:be:a8:38:1f:0b:4c:5d:de:e6:db:79:d3:02:dc:a2:51:
         00:78:ad:6e:3e:93:1a:2c:38:47:7d:73:fe:51:6d:ac:e6:af:
         61:3b:bd:77:85:54:6c:70:e6:81:9e:11:09:58:de:9f:83:88:
         f6:8b:d6:fb:19:0b:f4:75:27:ec:f9:cc:d3:e4:ae:e0:42:09:
         46:5d:28:e2:22:ff:2c:8a:ab:5f:8c:fb:b5:e2:84:5d:c0:b2:
         c7:bf:e0:e2:e2:96:01:0a:69:59:a6:c7:c3:2a:b5:6d:e4:70:
         64:7b:ff:1c:ab:e4:50:0c:d0:d9:9a:9b:62:11:e3:bb:11:93:
         f0:0d:3d:b9:cc:3e:54:e0:bd:ac:62:74:9d:1a:48:2a:06:67:
         0a:12:f8:14:af:83:b8:58:6b:b1:b2:05:03:e3:ed:6c:1b:1d:
         d8:52:27:87:1f:80:49:62:fe:20:cd:14:ce:68:ac:1d:64:35:
         64:42:fb:35:54:c7:fc:6b:2e:eb:17:71:a8:1c:7f:e3:ee:7e:
         43:2c:de:a7:85:53:7e:cc:ac:06:26:a4:e7:92:a7:fe:66:d5:
         df:91:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:47 2026 by rpki-client