Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135322e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          0oU1IAxI2bTK/dfJwxrKRPuOtUupTyi18T5cOiyJUa0=
Subject key identifier:   47:1F:8D:5A:1A:9E:1E:8D:41:A1:8D:5D:73:B0:C9:39:4C:66:36:1D
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       2B80077701D4B1AA7DF6DA6A3122E4F4FCEF677F
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32342d3234203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:39 +0000
ROA not before:           Wed 15 Jul 2026 16:56:39 +0000
ROA not after:            Wed 14 Jul 2027 17:01:39 +0000
asID:                     61785
IP address blocks:        201.131.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:07:77:01:d4:b1:aa:7d:f6:da:6a:31:22:e4:f4:fc:ef:67:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:39 2026 GMT
            Not After : Jul 14 17:01:39 2027 GMT
        Subject: CN=471F8D5A1A9E1E8D41A18D5D73B0C9394C66361D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:27:a8:d8:75:09:2a:e3:50:6d:de:ae:36:
                    8f:4a:86:ab:ad:92:40:0d:7e:0d:2a:da:55:3d:44:
                    fd:b2:4e:ab:94:8e:08:35:0a:82:af:7c:84:4e:fb:
                    20:9a:86:0e:79:b5:32:2a:92:36:c0:a0:75:e2:58:
                    a7:70:02:11:81:c0:c3:c9:d3:10:d4:9e:fc:8f:23:
                    36:23:84:77:0e:76:29:c2:a7:1b:da:1b:4a:ef:6b:
                    fe:38:9e:ec:43:69:0e:4b:2f:3f:a7:10:a5:85:97:
                    73:8b:25:c1:3a:23:7b:a7:1d:dd:3e:c9:dd:2e:a7:
                    69:4f:28:fb:7d:f4:25:2d:46:fb:93:ab:1d:4a:f3:
                    1f:c8:98:98:c7:aa:d8:64:c1:31:7c:2b:b7:28:ac:
                    1a:0f:b7:a1:d5:78:4d:6c:71:7b:01:46:f9:a5:57:
                    58:79:9d:fd:3c:cb:13:32:73:34:ac:12:b7:cc:2b:
                    44:00:bd:39:bc:34:78:43:66:00:c9:56:48:0b:1a:
                    da:ca:f9:45:2b:7b:4c:40:99:0f:f8:23:f5:f7:95:
                    08:1f:7e:1c:6b:f2:3a:2a:2a:01:fa:9c:eb:80:f1:
                    00:07:c2:5b:ee:c3:dc:32:11:4f:87:b2:d6:8f:cf:
                    4a:72:fd:3b:87:9d:74:23:d5:7a:26:1b:5c:52:ef:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1F:8D:5A:1A:9E:1E:8D:41:A1:8D:5D:73:B0:C9:39:4C:66:36:1D
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135322e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:15:21:4e:0d:60:c9:58:7a:f3:27:0a:12:f9:5a:a3:5b:74:
         e0:e1:44:39:e4:49:f6:88:43:fa:1d:6b:ec:26:d7:0d:fe:3f:
         b9:46:a6:37:47:32:50:ee:c3:ea:fa:59:6d:66:9f:94:f2:79:
         09:b9:37:36:95:79:0e:7a:42:9c:fc:d2:d6:9c:df:e7:6b:45:
         4d:60:ed:c0:06:27:0e:19:fa:5b:2b:3a:43:c8:1d:45:81:12:
         90:78:45:33:bb:31:c4:33:6e:11:b8:f9:d2:44:fd:09:44:73:
         41:98:96:fb:dd:2e:e3:14:ec:4e:d3:f0:ac:64:d0:ec:ab:30:
         92:bf:f0:45:7b:14:c5:d4:4c:bc:e7:46:08:c5:be:49:b4:d4:
         01:71:ee:f4:21:ff:70:07:b9:ae:61:24:a2:0f:19:53:73:51:
         d6:33:bc:46:53:b6:16:8b:b5:ee:a0:d0:72:ec:e0:d4:b7:4d:
         e2:92:7f:dc:81:00:9b:b7:e0:49:85:ba:8f:c1:42:3d:1b:0c:
         d5:c0:6c:f1:12:fa:e2:2e:d4:42:5d:f7:37:35:85:13:c3:e0:
         f5:2c:3a:94:47:9f:a8:cf:ec:0d:00:79:5f:12:19:8c:d0:c2:
         26:af:bc:77:43:63:35:82:f9:c5:fa:fc:2b:1f:0c:bd:1d:70:
         de:7a:ba:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:41 2026 by rpki-client