Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa
File:                     3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa (raw, json)
Hash identifier:          G3mFe6HxFM04SCyxwzccMFUX3AZlV42u7D2oGIKCGhc=
Subject key identifier:   D8:8F:70:C0:0C:1B:4E:42:83:AD:2A:F1:C5:AA:DB:6A:DC:E0:06:4E
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       4744961E1C0BA79606DEFC4FD84EDCCBA232E2F4
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:38 +0000
ROA not before:           Wed 15 Jul 2026 16:56:38 +0000
ROA not after:            Wed 14 Jul 2027 17:01:38 +0000
asID:                     61785
IP address blocks:        201.131.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:44:96:1e:1c:0b:a7:96:06:de:fc:4f:d8:4e:dc:cb:a2:32:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:38 2026 GMT
            Not After : Jul 14 17:01:38 2027 GMT
        Subject: CN=D88F70C00C1B4E4283AD2AF1C5AADB6ADCE0064E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:87:e9:3d:2d:30:8f:36:f4:0c:96:41:3a:33:
                    b0:5a:5f:56:2c:f7:97:c1:c7:fb:94:64:f2:a9:67:
                    06:bd:62:1c:fa:c7:72:e2:a7:f2:8f:55:cf:ae:5a:
                    bf:28:da:49:05:80:10:99:25:88:2c:df:3b:e2:4f:
                    e1:56:05:3b:3f:87:08:e0:c4:23:f6:19:4c:2f:d7:
                    5b:4a:15:b3:3e:94:9a:e0:6b:c5:8f:56:41:a3:da:
                    bd:4b:df:68:7e:5b:16:c5:4e:ee:07:52:02:38:af:
                    33:a7:bb:a9:1f:d8:24:76:90:21:13:c5:33:80:ee:
                    f3:22:16:02:0f:94:60:ba:40:6a:68:b3:be:17:0e:
                    ab:12:83:50:dc:f2:e3:e5:16:bc:eb:40:cf:bf:b6:
                    2d:c4:dd:b0:24:e6:d1:3d:64:9a:24:0d:9f:82:e9:
                    19:13:f4:b9:cd:34:b3:48:bd:cc:ca:a7:25:20:fe:
                    07:b4:69:78:00:38:07:84:a3:e6:65:2f:77:e6:aa:
                    2b:f0:df:8d:e8:af:19:b9:d0:60:36:74:f4:4f:4f:
                    03:0c:41:b8:86:cc:29:04:20:da:62:55:2f:b7:ae:
                    c1:10:d4:eb:3e:38:af:f8:cf:b6:ae:b1:a0:98:8c:
                    61:78:f1:70:9f:3e:46:2d:d8:03:aa:0b:43:5f:2a:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8F:70:C0:0C:1B:4E:42:83:AD:2A:F1:C5:AA:DB:6A:DC:E0:06:4E
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32332d3233203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:b1:c6:a3:14:76:b4:63:fe:2f:11:4a:86:42:ac:c3:2f:37:
         21:e3:d4:f5:d4:af:30:48:27:1f:92:9e:01:a7:64:03:eb:03:
         a1:52:be:5d:2c:9d:0b:c4:a1:8d:60:33:37:d2:1d:2a:7b:74:
         b5:7f:30:c8:2d:e8:b4:44:09:8a:68:3b:31:89:9c:b1:4d:dc:
         f5:1b:34:d8:12:fc:06:12:0f:2e:b3:ef:c1:1c:98:9d:50:0a:
         b3:bb:b5:06:21:9a:e2:9a:67:24:57:47:74:e1:67:07:b0:58:
         f6:46:0d:09:8b:0a:49:3b:78:ea:f5:71:8f:76:d5:5f:c5:61:
         a4:00:73:95:9b:35:1e:99:2c:da:37:ea:c6:c5:f9:d9:08:21:
         cc:de:30:47:f8:97:6d:3b:7c:90:a5:0d:be:a6:6c:01:d1:8e:
         05:a7:0f:b3:a2:de:59:25:bd:b7:1b:d9:db:a6:06:0b:40:64:
         69:fa:e5:d1:61:6b:92:95:2e:72:e2:ba:85:bf:c3:c0:b3:0a:
         60:a3:38:a8:f0:68:41:ef:23:62:a1:4a:ac:eb:d4:43:2c:7c:
         dd:15:68:bf:d9:26:19:b8:99:6c:79:b0:d5:85:a0:1e:c3:08:
         45:fb:1a:20:ec:7c:d3:21:96:b5:61:71:7f:fa:3d:17:6c:bd:
         09:e7:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:47:38 2026 by rpki-client