Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa
File:                     3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa (raw, json)
Hash identifier:          a2d3gC7IUJGFdbsvD7tH6I1ziihwpZfuCadKKXek5m4=
Subject key identifier:   91:22:A0:87:D2:17:A7:2A:5B:11:B0:86:85:89:9D:BC:9C:67:25:33
Certificate issuer:       /CN=9B82CF16836AA7014254540B72E7CE427D7C9003
Certificate serial:       2BEDB20FAC1967FA7F911714A99B06053D32E625
Authority key identifier: 9B:82:CF:16:83:6A:A7:01:42:54:54:0B:72:E7:CE:42:7D:7C:90:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa
Signing time:             Tue 03 Mar 2026 12:39:39 +0000
ROA not before:           Tue 03 Mar 2026 12:34:39 +0000
ROA not after:            Tue 02 Mar 2027 12:39:39 +0000
asID:                     264461
IP address blocks:        201.182.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.crl
                          rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ed:b2:0f:ac:19:67:fa:7f:91:17:14:a9:9b:06:05:3d:32:e6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B82CF16836AA7014254540B72E7CE427D7C9003
        Validity
            Not Before: Mar  3 12:34:39 2026 GMT
            Not After : Mar  2 12:39:39 2027 GMT
        Subject: CN=9122A087D217A72A5B11B08685899DBC9C672533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:e3:84:92:39:12:a2:55:7e:99:cf:12:c1:
                    33:ef:c0:9c:8a:7b:af:91:ff:79:f9:c2:36:5c:13:
                    c5:0c:cb:c6:b3:ab:60:22:94:04:01:e7:4e:a4:56:
                    1e:bc:6f:7a:72:c9:60:54:8b:29:8a:b5:19:fa:c9:
                    14:74:df:3a:96:96:ef:ff:bb:ff:46:f0:ab:eb:55:
                    1b:ae:7f:c7:0d:46:ae:60:cc:2b:1d:2b:af:5f:a8:
                    c3:b8:6e:9e:e3:e5:cc:9e:ae:b9:7d:ae:0e:b9:d2:
                    05:58:ce:77:03:3a:84:de:64:0f:bf:98:1d:96:8e:
                    a7:b4:cd:20:a3:f7:58:5f:3a:f6:7a:8f:6d:72:ee:
                    22:05:4d:46:0a:a2:ab:58:f8:07:ef:05:7e:57:3b:
                    b4:ea:4d:59:85:a6:8a:63:17:9e:8b:ef:ea:28:4b:
                    40:3a:5d:be:be:39:2d:0a:b6:ed:2f:cc:6e:74:96:
                    92:be:a9:75:09:1e:c6:38:60:bd:c5:69:89:0d:27:
                    8b:cd:49:fa:31:84:07:e9:a5:1d:8b:f9:ce:1a:cd:
                    c1:e0:0f:12:d5:ed:33:d0:3c:31:ca:99:12:8f:0a:
                    78:82:66:b1:fe:78:43:09:e2:43:de:fc:e6:c3:87:
                    0d:57:85:d1:df:9a:b8:9b:3a:2d:ec:91:94:47:91:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:22:A0:87:D2:17:A7:2A:5B:11:B0:86:85:89:9D:BC:9C:67:25:33
            X509v3 Authority Key Identifier:
                keyid:9B:82:CF:16:83:6A:A7:01:42:54:54:0B:72:E7:CE:42:7D:7C:90:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/9B82CF16836AA7014254540B72E7CE427D7C9003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B82CF16836AA7014254540B72E7CE427D7C9003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/3230312e3138322e33322e302f32322d3234203d3e20323634343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:b1:a0:de:04:23:0c:80:ae:66:6b:76:f6:15:ef:32:dc:69:
         23:e0:b1:d9:bc:bb:29:09:94:d9:32:68:a2:5f:b5:d8:c0:d7:
         ad:bb:14:31:bb:2a:3e:7d:53:68:2c:31:97:a8:5c:53:f4:46:
         14:e0:e9:8b:5f:98:9a:a0:6e:fb:f6:6c:ee:dc:89:49:04:8c:
         18:51:8a:48:14:f3:e6:a6:b7:69:92:16:48:2d:b1:3a:b6:93:
         fc:23:ed:80:b4:9c:42:1e:f9:fc:be:35:ba:e8:bf:23:cc:d5:
         9a:e0:df:0a:57:34:b2:07:a1:5d:b6:05:ea:a7:33:74:fb:24:
         1c:80:4d:55:c4:58:b3:3b:53:aa:2b:2a:00:94:8f:99:92:ca:
         15:55:e0:62:aa:27:3a:37:6d:da:51:21:b2:4c:90:02:f4:53:
         5a:9c:60:37:fb:06:54:8c:3a:35:71:94:75:e2:4d:d8:cc:c2:
         36:e3:4c:6b:fb:08:28:40:bd:b3:e8:9f:ac:08:b7:d8:80:70:
         2d:7e:63:f8:9d:bf:0a:af:17:1a:c0:6a:c1:65:75:8a:22:d0:
         75:5f:2f:5d:a4:d3:d5:3a:64:74:87:76:83:f3:09:ba:ec:93:
         95:8a:48:19:71:98:54:07:ad:dc:b4:4e:c8:16:b5:24:63:cb:
         67:d8:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:45 2026 by rpki-client