Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa (raw, json)
Hash identifier:          WlkdkPfQA6gqo232fkkAb/cnsSow9uds6VRKMfUlTg0=
Subject key identifier:   6F:E6:A2:80:4A:72:FB:D9:F4:19:21:1A:F3:7B:4E:40:7C:75:0E:EE
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       2FDA98E9724C4D7C547E341FF2597C52CAAEC0FC
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:38 +0000
ROA not before:           Wed 15 Jul 2026 16:56:38 +0000
ROA not after:            Wed 14 Jul 2027 17:01:38 +0000
asID:                     61785
IP address blocks:        201.131.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:da:98:e9:72:4c:4d:7c:54:7e:34:1f:f2:59:7c:52:ca:ae:c0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:38 2026 GMT
            Not After : Jul 14 17:01:38 2027 GMT
        Subject: CN=6FE6A2804A72FBD9F419211AF37B4E407C750EEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:c4:4d:0b:35:25:39:cd:6a:e3:34:81:f9:
                    70:ab:14:76:a6:e1:c6:04:47:bd:1f:f3:b3:83:ad:
                    e1:68:b7:29:95:38:7e:8f:f1:26:de:4c:29:5e:23:
                    31:23:49:b3:56:b2:02:eb:a5:7b:e5:79:65:2e:e4:
                    4e:5a:42:1d:2a:00:20:17:f7:f9:50:21:5d:e5:c0:
                    51:99:83:64:f5:07:58:fe:4d:f2:c4:d9:9f:01:96:
                    d9:5c:b1:55:3d:be:08:7d:27:87:6b:81:ba:20:50:
                    47:62:5c:82:8e:4b:b3:e2:fc:0c:d5:8f:74:44:32:
                    72:4d:93:cd:36:c4:53:ed:16:44:53:5f:92:cb:cb:
                    e1:e1:ee:dd:f9:7d:de:11:99:fd:ce:45:ec:8b:26:
                    62:0e:70:b2:dd:7b:a3:fa:41:6d:9a:37:56:2c:87:
                    c5:af:de:82:fe:d2:53:36:2d:43:1c:10:ad:3e:cc:
                    f9:f3:82:2f:43:c8:d4:94:bc:a3:06:15:be:8b:fd:
                    32:b7:05:5c:fc:ad:bb:39:63:cc:20:22:1e:13:8d:
                    0d:3b:92:bf:b1:41:31:ce:37:15:e5:7f:33:ec:ff:
                    9b:b0:17:37:ab:78:ed:77:fb:ee:d0:07:75:59:eb:
                    da:c6:bc:a1:66:a5:1d:aa:ae:02:2c:b9:95:8b:16:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E6:A2:80:4A:72:FB:D9:F4:19:21:1A:F3:7B:4E:40:7C:75:0E:EE
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32322d3232203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:89:b2:af:97:f4:6e:1d:99:2f:80:83:85:db:b3:08:9d:5c:
         92:1e:83:3b:87:5b:73:82:30:3d:6a:8b:b2:53:65:ef:a7:ef:
         1a:9f:b0:d6:66:c2:f9:05:05:4f:ae:e6:dd:25:1d:70:a0:d8:
         f2:bc:de:4a:2c:08:ba:ee:32:44:1e:0f:9a:b8:e9:66:0d:2c:
         84:12:61:7d:59:11:f3:6e:e6:88:82:27:09:54:17:91:e3:93:
         27:35:c8:55:71:3d:0f:4e:cf:9e:52:55:6a:29:7b:c8:e0:66:
         2b:c2:c8:4e:92:0a:7f:aa:42:eb:bf:4b:93:5c:d5:95:90:75:
         8a:7c:af:55:7d:3c:0e:6a:6e:d0:c2:32:ca:99:6a:00:4d:6b:
         f1:5c:33:2e:57:2d:cb:79:2f:8c:28:43:71:5a:55:7b:35:64:
         36:2d:9b:6a:73:85:bb:0e:89:94:8c:49:56:84:5a:76:93:e6:
         9d:76:6f:9d:ec:c8:8f:2d:43:cd:ed:dd:d7:c6:c8:5c:5c:5f:
         02:ee:f0:d4:6a:18:52:ab:a3:de:8d:02:67:a4:ba:72:ab:6b:
         5f:b2:16:4b:e5:ec:11:6c:ba:ff:7d:96:1a:6e:76:0e:82:bb:
         b1:35:eb:39:e2:81:b5:62:37:df:60:cf:cc:31:56:48:9e:d3:
         da:da:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:17:39 2026 by rpki-client