Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3230312e3138322e36382e302f32322d3332203d3e20323637353032.roa
File:                     3230312e3138322e36382e302f32322d3332203d3e20323637353032.roa (raw, json)
Hash identifier:          EKjzZcdce5dmwCY7GFJp45qxoEgsp3XDUZEvDTzhq8g=
Subject key identifier:   47:E3:08:64:04:F6:19:89:24:4A:26:28:E3:D5:EA:20:19:26:66:DB
Certificate issuer:       /CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
Certificate serial:       261B1D69932DEA287633A53424B45FEBD4C25522
Authority key identifier: 84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3230312e3138322e36382e302f32322d3332203d3e20323637353032.roa
Signing time:             Wed 22 Apr 2026 13:22:27 +0000
ROA not before:           Wed 22 Apr 2026 13:17:27 +0000
ROA not after:            Wed 21 Apr 2027 13:22:27 +0000
asID:                     267502
IP address blocks:        201.182.68.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl
                          rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 07:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:1d:69:93:2d:ea:28:76:33:a5:34:24:b4:5f:eb:d4:c2:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84515A1EE549DECBCFF34DBB8783DF637AFB108E
        Validity
            Not Before: Apr 22 13:17:27 2026 GMT
            Not After : Apr 21 13:22:27 2027 GMT
        Subject: CN=47E3086404F61989244A2628E3D5EA20192666DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:7c:03:58:f7:d2:f3:0a:1a:4d:0b:5c:cf:
                    79:a8:20:94:17:77:95:97:db:71:94:b2:86:7c:3c:
                    63:df:10:4b:ba:a5:8d:c7:52:b5:32:ff:5c:9f:7d:
                    0a:f9:f8:f0:37:9d:1c:9e:05:65:66:1b:49:24:e7:
                    f1:b2:38:d8:88:ae:8d:f6:90:26:73:03:58:ae:57:
                    58:c4:3b:15:96:48:4d:a1:11:7a:d9:9d:b6:ee:2c:
                    ec:62:c2:69:5a:98:dc:87:a0:65:07:e7:53:08:2e:
                    f1:81:23:3d:07:a1:2b:ac:fb:4e:5b:3e:36:a1:79:
                    8b:18:f3:0d:93:53:cd:6b:c5:34:d5:a5:df:af:41:
                    79:e3:a7:39:5c:1c:e2:56:5c:07:82:cf:9b:64:17:
                    cf:43:54:e1:ac:64:55:89:2d:29:4d:44:73:45:b0:
                    f4:12:73:aa:80:f6:e9:0c:28:f4:88:af:df:11:a8:
                    4a:4b:c6:de:17:37:e4:3b:ab:dd:7c:c2:1f:77:0d:
                    f8:fa:b0:24:5b:29:3d:10:10:33:4d:fc:d4:0e:65:
                    b9:75:c4:20:b7:e2:59:1d:cc:a2:0a:6d:cd:ab:b5:
                    1c:a7:d3:42:09:81:14:3b:97:6f:09:52:00:93:d4:
                    8b:92:fd:34:50:c1:56:aa:57:48:00:89:0e:c2:c7:
                    42:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E3:08:64:04:F6:19:89:24:4A:26:28:E3:D5:EA:20:19:26:66:DB
            X509v3 Authority Key Identifier:
                keyid:84:51:5A:1E:E5:49:DE:CB:CF:F3:4D:BB:87:83:DF:63:7A:FB:10:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/84515A1EE549DECBCFF34DBB8783DF637AFB108E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84515A1EE549DECBCFF34DBB8783DF637AFB108E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7xaYxrCxmcwRXhsajgJDMPtmrwTdfDRmd7LAHymdMGt/0/3230312e3138322e36382e302f32322d3332203d3e20323637353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:73:fd:0d:3e:46:97:10:5e:d0:c4:89:31:64:08:9f:88:79:
         c7:99:ab:56:56:5d:6c:a2:09:3d:d9:8b:ad:0e:12:d3:eb:7f:
         dd:88:23:e7:79:ac:47:b8:86:d3:2b:66:90:87:5b:e3:c6:2f:
         42:0e:7d:13:4a:7b:dd:f2:37:11:a8:74:92:76:13:c8:13:d8:
         b5:17:cc:8e:d2:12:77:c5:0d:f6:36:9d:ee:9b:d7:8a:84:8b:
         fa:73:90:35:c2:91:b6:b2:de:a1:60:82:d0:ad:4b:82:ae:1e:
         6f:3d:ad:3a:3a:4b:99:c5:61:4d:9e:ad:15:ae:92:5d:3d:2c:
         f2:11:a4:90:e1:31:fc:19:13:5d:24:d4:12:ee:3b:61:02:6c:
         2e:8c:5c:aa:98:64:66:a7:d6:4c:59:34:e9:da:a4:3d:20:af:
         3b:b7:e6:26:5e:8a:94:41:ea:c5:cb:c8:31:d2:83:d5:66:48:
         13:48:0f:84:b1:02:83:7f:d4:6e:c6:40:91:18:d3:32:b0:25:
         10:e8:e6:db:e4:6c:8e:92:ba:cd:aa:c9:de:14:99:c7:12:2a:
         b3:4a:6a:6b:46:b5:fd:b3:43:39:a5:5b:ef:c8:81:fc:db:f1:
         d4:cf:2a:9d:25:97:c4:fd:a6:ac:09:5c:b2:33:10:c3:2f:e4:
         1b:7f:95:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:13 2026 by rpki-client