Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          Bu/qYR2yVByc90+cjUNBEOUzWYq6ztuKGxO3L2FwhLk=
Subject key identifier:   68:0D:EF:B7:61:2F:DA:0E:BC:B5:CD:A9:23:4C:08:BC:ED:C8:AD:D3
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       4448FAB70397EE2942B519EB0608AEBE436D95EB
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:38 +0000
ROA not before:           Wed 15 Jul 2026 16:56:38 +0000
ROA not after:            Wed 14 Jul 2027 17:01:38 +0000
asID:                     61785
IP address blocks:        201.131.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:48:fa:b7:03:97:ee:29:42:b5:19:eb:06:08:ae:be:43:6d:95:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:38 2026 GMT
            Not After : Jul 14 17:01:38 2027 GMT
        Subject: CN=680DEFB7612FDA0EBCB5CDA9234C08BCEDC8ADD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:60:40:7b:12:97:8a:13:78:1c:5e:cb:e3:01:
                    df:22:73:3a:e7:a7:20:bd:d2:de:83:b9:a3:0f:14:
                    79:54:46:62:9e:04:18:34:92:29:d4:1a:55:aa:05:
                    f9:08:1f:2d:72:f2:1f:b0:ff:2e:85:93:e7:72:aa:
                    6f:b8:d7:d2:0a:38:8b:f2:6c:ae:41:3f:3f:1a:96:
                    e0:17:d2:f8:73:85:78:45:0f:7a:d0:93:ca:93:57:
                    c5:b4:1f:a9:6c:68:5d:a9:51:6b:73:76:82:b6:3f:
                    45:10:dc:28:80:3a:21:bc:19:ce:31:89:3c:9c:dc:
                    c9:03:bc:28:65:0c:ef:a2:0b:73:dd:01:07:85:6b:
                    93:dc:c7:b6:47:ca:93:cd:39:76:42:b2:c6:be:a7:
                    19:ab:43:5a:b6:08:10:bb:52:cb:b6:d3:c3:36:0d:
                    51:d2:15:ce:93:48:d1:93:89:61:14:bc:1d:5a:bf:
                    28:6b:0f:20:6d:6d:8e:f8:68:31:04:6f:89:b8:51:
                    04:ac:e6:51:5c:92:99:b5:9c:40:e3:76:02:7a:b7:
                    8e:69:2e:9b:d7:c0:d2:90:2c:3e:c8:00:cb:ee:db:
                    1e:ed:f1:5c:49:39:69:2d:d1:ab:2a:ad:ca:2e:70:
                    05:17:fa:a8:3c:3a:13:48:fe:fe:54:c1:44:45:6c:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0D:EF:B7:61:2F:DA:0E:BC:B5:CD:A9:23:4C:08:BC:ED:C8:AD:D3
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135332e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:dd:9c:c6:dd:d5:82:cc:27:68:c1:bc:f3:ed:e5:5e:2a:
         c6:58:03:a8:04:03:01:43:50:a0:50:8d:63:af:56:e8:c8:27:
         1e:f5:a0:ec:d1:cd:5d:dd:25:0f:d6:1c:7e:87:90:22:95:30:
         72:f2:fe:94:f7:fe:d5:d3:16:26:71:f6:ea:b5:d0:27:e3:59:
         f4:e0:83:a5:f4:67:ee:5a:84:6c:84:44:57:be:ad:aa:81:95:
         20:4d:7e:cd:bb:b7:91:38:c4:e3:3a:94:e5:f1:7d:82:8d:cf:
         b6:9f:52:e6:ba:09:a6:9f:f6:27:7a:b5:08:6a:37:52:ac:4a:
         35:76:5e:fb:6b:53:0f:01:a4:d0:2c:ef:36:15:ae:fd:f1:33:
         a5:84:41:cc:80:06:ae:d9:69:c3:10:05:23:97:0b:93:b6:5d:
         c1:2b:13:bb:93:40:9d:ef:1e:e2:fb:3a:ff:aa:01:94:1d:68:
         a3:4e:9f:5e:50:33:d4:89:5c:00:50:56:9c:4a:1d:f3:e5:17:
         19:0c:b4:c4:f2:1e:0a:9e:58:cb:41:8a:9d:42:71:c6:62:bc:
         6e:0d:72:3f:fa:c1:f4:18:bf:c4:65:aa:ad:14:64:d2:ec:5c:
         ef:58:80:11:41:3a:c4:15:d1:d9:65:4e:cf:52:b6:6d:36:8a:
         c8:35:70:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:18:48 2026 by rpki-client