Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
File:                     3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa (raw, json)
Hash identifier:          q3+D8AWgR8kBunJOBWfKzGaurYuSo1ZX1hhHo8/v0ko=
Subject key identifier:   D6:61:91:58:66:3A:90:05:DC:0F:B1:9F:B2:F9:EE:CE:6C:50:99:4D
Certificate issuer:       /CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
Certificate serial:       234CEDA0BF5AB808ACE2826097B243F0C327A642
Authority key identifier: C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa
Signing time:             Mon 14 Sep 2026 18:49:12 +0000
ROA not before:           Mon 14 Sep 2026 18:44:12 +0000
ROA not after:            Mon 13 Sep 2027 18:49:12 +0000
asID:                     61850
IP address blocks:        201.149.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl
                          rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 00:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4c:ed:a0:bf:5a:b8:08:ac:e2:82:60:97:b2:43:f0:c3:27:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E
        Validity
            Not Before: Sep 14 18:44:12 2026 GMT
            Not After : Sep 13 18:49:12 2027 GMT
        Subject: CN=D6619158663A9005DC0FB19FB2F9EECE6C50994D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:36:51:92:e7:b5:66:81:53:72:a5:4e:ce:85:
                    5f:d8:a6:c1:4d:64:63:cf:09:60:6c:e5:48:f7:cf:
                    a8:fd:8c:21:c5:c4:4a:66:d4:11:2b:f6:63:46:51:
                    69:9f:30:96:fe:90:84:57:e6:9c:63:2a:54:06:33:
                    92:0b:18:8c:89:5e:e2:76:8c:77:61:9b:d5:e3:98:
                    83:60:ca:0a:f1:1c:ec:25:81:5c:25:db:e8:69:30:
                    ed:1e:51:e1:4b:c6:06:e7:30:c3:4d:19:1f:9a:45:
                    14:da:79:72:6d:ec:21:81:be:85:86:ca:bd:ae:db:
                    16:84:8b:ca:75:7a:a2:de:5c:9d:be:11:57:54:3a:
                    f9:93:64:5a:b2:2d:e1:89:01:e1:a2:e4:0a:4b:60:
                    65:60:c8:d4:a9:3d:08:3c:1e:e9:fd:7c:bc:0b:20:
                    d0:49:2b:3e:a7:0a:85:2c:7b:1c:22:83:1a:69:0d:
                    fd:da:47:40:6a:be:24:0a:54:43:99:4f:49:a0:43:
                    ed:71:92:54:d2:da:7d:b3:fb:8e:ed:f9:2e:80:ed:
                    a9:0f:28:9e:01:dd:8c:58:21:62:69:69:6a:7f:21:
                    71:6b:76:a6:2d:b8:ef:dd:c0:f7:ed:7d:4f:36:ec:
                    3d:0e:11:72:fd:58:19:87:b3:d2:00:fc:9a:2b:c0:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:61:91:58:66:3A:90:05:DC:0F:B1:9F:B2:F9:EE:CE:6C:50:99:4D
            X509v3 Authority Key Identifier:
                keyid:C2:2F:D9:AD:C6:57:8F:0F:EE:0A:E6:3F:DD:E5:9F:BC:19:9F:98:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C22FD9ADC6578F0FEE0AE63FDDE59FBC199F989E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/3230312e3134392e3131322e302f32322d3234203d3e203631383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:ff:8f:76:1e:ad:f5:b2:b0:e4:83:6e:8c:a3:73:6c:c4:6e:
         36:12:5e:96:fd:99:09:e4:19:ca:59:06:30:e3:42:89:ba:d9:
         e3:60:c9:24:9f:53:f0:67:53:73:ea:d5:79:5b:0d:fc:dc:b2:
         a0:d0:16:94:e9:dd:d1:2f:e2:84:08:38:36:7e:e4:44:7c:d5:
         b6:fb:52:fd:6f:4e:38:2c:d4:f9:a6:ae:60:27:97:6a:4e:ef:
         d6:3c:5c:96:1b:f0:4b:f9:62:e2:36:46:aa:74:11:e4:a2:b5:
         89:27:84:a2:27:89:9e:a3:bd:8b:68:00:8f:63:3a:da:d4:38:
         bf:66:7f:23:fc:0a:fd:09:bc:bf:0d:5b:4e:a3:a6:48:20:13:
         eb:a9:0f:5a:a4:63:0d:d6:a7:33:57:4f:b7:3e:96:5a:31:80:
         23:92:05:04:6a:71:6c:58:8f:b8:57:01:4d:ad:08:ef:89:57:
         17:4a:15:90:e5:e9:cf:50:58:ba:43:95:41:52:aa:88:c9:e6:
         6f:70:73:91:15:de:0a:0b:af:0f:3f:17:be:2f:66:72:a4:d7:
         fb:ab:45:e0:dd:4a:2a:9b:a3:98:14:23:f8:e3:08:b5:60:3e:
         19:bd:27:12:12:85:16:1c:28:fa:2e:d0:cd:1f:2c:95:40:5b:
         5d:3b:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:01:26 2026 by rpki-client