Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa
File:                     3230302e3139322e39362e302f32312d3234203d3e203133333537.roa (raw, json)
Hash identifier:          uD6WvjgXyodr/jOrDfT0g2eMd+ighmCXOn/8ZMFQ4yY=
Subject key identifier:   B5:55:5A:0F:F1:AD:A6:A0:AD:10:F9:47:B1:34:D0:04:CC:4B:E7:6E
Certificate issuer:       /CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
Certificate serial:       4ACBFF1A6D4A7BEBD993022F1014D5F7B6B30114
Authority key identifier: B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa
Signing time:             Thu 23 Jul 2026 16:05:40 +0000
ROA not before:           Thu 23 Jul 2026 16:00:40 +0000
ROA not after:            Thu 22 Jul 2027 16:05:40 +0000
asID:                     13357
IP address blocks:        200.192.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl
                          rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 12:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cb:ff:1a:6d:4a:7b:eb:d9:93:02:2f:10:14:d5:f7:b6:b3:01:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE
        Validity
            Not Before: Jul 23 16:00:40 2026 GMT
            Not After : Jul 22 16:05:40 2027 GMT
        Subject: CN=B5555A0FF1ADA6A0AD10F947B134D004CC4BE76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:fc:56:e5:db:6b:49:8d:32:0c:b9:7e:37:
                    f2:ab:b8:c7:02:03:7e:46:88:f0:7a:5d:54:70:fb:
                    4c:fb:0c:02:d6:b9:d3:9d:46:29:22:9c:74:d2:fe:
                    f1:77:c7:7c:7a:b7:22:e8:5b:09:76:0e:70:6f:3e:
                    9a:31:8e:4d:c9:09:33:bd:3b:c1:4d:c3:3a:8c:9e:
                    e5:bc:73:37:5e:a7:6b:58:75:1f:a9:ff:1e:b7:09:
                    e7:5b:b4:66:5e:3a:09:f6:8a:cf:db:c3:9a:c4:f6:
                    81:b8:4b:e7:56:0b:bf:d5:91:0b:4d:19:53:10:da:
                    33:05:ff:a7:a5:4d:71:cc:0f:d3:b8:92:26:ff:a4:
                    ae:78:bf:f1:b5:98:df:b7:6c:99:ae:c8:bd:1e:13:
                    25:6a:90:06:d6:f2:94:08:b3:bf:7c:52:02:fd:78:
                    82:dc:ea:69:9e:9d:f6:bb:b8:7e:b5:d9:9c:26:88:
                    e8:08:71:33:1a:82:7d:57:08:12:86:fb:28:f8:27:
                    03:94:39:97:bc:84:1e:97:71:99:cc:a8:91:11:30:
                    74:34:4b:83:a6:01:c4:27:f1:89:5f:de:07:a3:59:
                    f5:48:68:ee:7b:77:d6:7f:96:ff:c3:1c:32:5c:99:
                    9c:64:2f:87:14:12:af:f0:7f:12:73:22:66:03:71:
                    67:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:55:5A:0F:F1:AD:A6:A0:AD:10:F9:47:B1:34:D0:04:CC:4B:E7:6E
            X509v3 Authority Key Identifier:
                keyid:B4:5D:1A:8A:F7:4D:94:B0:E0:B1:35:67:36:C8:BC:9A:FB:01:85:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B45D1A8AF74D94B0E0B1356736C8BC9AFB0185FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7zwxbC2AhrcXvoCe6MEoMDJCgFeRgggbLZ84UhPCmtk/0/3230302e3139322e39362e302f32312d3234203d3e203133333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:07:b7:46:9f:1b:71:03:9d:98:98:1b:a3:15:dc:54:dd:4d:
         c6:0f:dd:13:7e:98:04:85:a9:91:fc:e4:84:77:c4:4c:3b:4a:
         3d:58:c1:57:a4:75:88:c7:33:1c:bc:13:01:03:2d:46:bd:f1:
         27:20:10:67:8c:b2:81:2b:cd:be:12:2c:3c:4f:4f:48:8e:31:
         aa:1f:86:21:b0:a2:c5:5d:1f:ad:51:8b:e4:1f:fe:ec:20:9d:
         f9:6f:be:e0:d6:55:a2:d0:c8:8e:b2:e3:5d:d7:bc:29:e3:87:
         ba:8e:e1:ad:6c:49:cf:0c:6f:e1:32:18:33:c6:bf:7d:8f:25:
         02:21:4b:ee:14:93:ec:64:7f:5a:4c:a9:fa:a0:a3:67:13:e1:
         5a:20:03:e0:42:e9:41:17:65:50:27:e1:99:55:f0:30:0e:1e:
         54:ce:20:16:92:33:b8:02:ce:89:06:5a:c4:17:c0:8a:10:e3:
         1b:1d:b7:ff:a2:08:2a:a3:35:53:4a:a7:48:b6:2f:ff:56:0d:
         06:d3:0c:dd:b7:fe:7d:35:c1:5c:33:9d:f1:e4:1e:be:6b:2d:
         d8:e9:11:aa:e8:a4:d0:3e:3f:91:1c:28:90:1a:3a:06:ba:a0:
         bc:02:ac:8d:5c:37:8a:a5:81:4e:41:4e:9e:a1:80:df:b5:32:
         48:80:23:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:22:35 2026 by rpki-client