Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa
File:                     3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa (raw, json)
Hash identifier:          +rreaTuymcNRzRa3Gi/IEX7UFQQr4kK+sTo8ctHcTJ4=
Subject key identifier:   96:24:B2:B6:AB:2C:2B:2C:49:84:A7:77:D5:D4:B0:7A:AB:3A:6A:F9
Certificate issuer:       /CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
Certificate serial:       09821777C7D2E52F12968F306FEB8D163B194BBA
Authority key identifier: 80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa
Signing time:             Wed 15 Jul 2026 17:01:38 +0000
ROA not before:           Wed 15 Jul 2026 16:56:38 +0000
ROA not after:            Wed 14 Jul 2027 17:01:38 +0000
asID:                     61785
IP address blocks:        201.131.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl
                          rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:17:77:c7:d2:e5:2f:12:96:8f:30:6f:eb:8d:16:3b:19:4b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8066E9F3C9E33472B98927F9B49B35F23A2E655D
        Validity
            Not Before: Jul 15 16:56:38 2026 GMT
            Not After : Jul 14 17:01:38 2027 GMT
        Subject: CN=9624B2B6AB2C2B2C4984A777D5D4B07AAB3A6AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:7b:c0:57:c4:9a:c8:bb:34:81:46:a3:9a:
                    eb:0b:dc:ac:1e:a6:b7:17:eb:76:17:eb:f2:57:a6:
                    fe:3d:0f:c5:46:03:06:a3:c5:ba:1e:1a:8c:43:3b:
                    81:c6:40:2e:ed:7f:3a:ae:95:6a:92:a2:11:fc:bc:
                    bb:23:04:11:56:8e:4a:94:e6:ef:23:40:ad:1a:1d:
                    5b:78:fa:91:2f:7a:53:e0:08:31:df:01:4d:a9:e5:
                    6b:ac:5f:2b:65:f2:3d:f0:5b:78:f6:d3:14:52:3c:
                    df:53:b3:ff:f7:fc:4d:c7:6f:b6:fe:84:29:cf:ea:
                    a0:f7:72:15:b5:84:c6:a1:e8:ab:85:23:d7:54:84:
                    96:27:36:1e:ec:b0:71:8e:80:eb:e3:b0:1d:06:9d:
                    97:c3:6b:c7:fc:b4:ee:e8:28:e3:f2:f3:2d:6b:f9:
                    e8:3d:b4:aa:96:c2:69:a2:e1:5c:5f:05:c3:4c:e4:
                    e9:0b:57:6f:2d:75:aa:07:8e:0e:eb:1a:dd:7d:ea:
                    6a:02:72:21:0b:22:65:a5:06:e7:c6:35:ac:d1:01:
                    22:44:65:f5:82:f1:80:df:04:03:15:13:75:e0:9f:
                    97:40:4e:e3:91:ff:30:8a:f5:2f:70:0b:9a:e5:4c:
                    f8:4f:78:e8:27:11:ab:62:10:7e:14:fa:97:0f:76:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:24:B2:B6:AB:2C:2B:2C:49:84:A7:77:D5:D4:B0:7A:AB:3A:6A:F9
            X509v3 Authority Key Identifier:
                keyid:80:66:E9:F3:C9:E3:34:72:B9:89:27:F9:B4:9B:35:F2:3A:2E:65:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/8066E9F3C9E33472B98927F9B49B35F23A2E655D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8066E9F3C9E33472B98927F9B49B35F23A2E655D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4rPNBX7spKw9VEFGts5bGrgMhgYgmpQ3S6QUfdN7v45/0/3230312e3133312e3135342e302f32342d3234203d3e203631373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:92:87:f8:30:81:d6:2d:81:07:87:e7:53:18:01:29:26:
         31:61:8a:e9:3d:7b:d9:76:f4:5f:90:02:14:ea:ae:d3:33:57:
         c8:85:a4:6a:8b:50:fe:04:82:2f:f5:74:a1:6b:ba:8f:c5:72:
         f4:37:bf:f6:ce:a6:e5:86:0b:38:cd:87:c2:72:c0:ae:83:41:
         64:c2:b6:a1:58:dc:be:c1:5c:d2:08:d2:64:05:34:3a:65:8c:
         47:e9:aa:8e:e5:01:58:cc:2b:55:ec:18:ba:54:f7:ce:bd:6d:
         01:1c:67:b3:9a:05:1f:41:32:3d:e9:66:63:ff:84:06:56:1e:
         0c:06:33:ac:17:03:e2:e2:0e:78:25:cd:6f:55:df:93:f0:f6:
         79:35:dc:d4:7c:7f:71:fc:e9:66:3b:8d:e6:4b:68:cc:9c:b7:
         b3:e2:c8:e8:68:17:7e:49:1e:39:2f:7a:9f:71:97:6f:ae:e1:
         d1:b7:d2:1d:90:f2:db:71:fc:fa:c1:a3:1d:06:0b:43:d2:d9:
         81:a2:30:25:09:74:18:1f:b2:ea:7c:2b:c6:31:0d:cc:9d:05:
         8c:90:0e:cc:46:1c:5a:24:e1:76:a0:35:ac:ac:1a:a3:1f:21:
         1c:9f:82:59:2e:5e:fd:12:43:43:d3:c8:1b:72:88:84:86:05:
         88:f9:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:19:13 2026 by rpki-client