Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa
File:                     3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa (raw, json)
Hash identifier:          uHnjdQrQPrfAXqaQE1CfLJcDudQ8gZIF7o8xe9UB3Wc=
Subject key identifier:   9A:96:15:89:21:CD:9A:69:8C:3E:25:D5:88:DC:10:CF:E4:4D:7E:78
Certificate issuer:       /CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
Certificate serial:       2C5235848B3FE822BCFE2CD3E64D57D1EDC2EB8D
Authority key identifier: D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa
Signing time:             Mon 13 Jul 2026 19:31:23 +0000
ROA not before:           Mon 13 Jul 2026 19:26:23 +0000
ROA not after:            Mon 12 Jul 2027 19:31:23 +0000
asID:                     61853
IP address blocks:        201.140.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl
                          rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 09:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:52:35:84:8b:3f:e8:22:bc:fe:2c:d3:e6:4d:57:d1:ed:c2:eb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8A8B7356E8E02B3DAB2805D0123500642A2CC00
        Validity
            Not Before: Jul 13 19:26:23 2026 GMT
            Not After : Jul 12 19:31:23 2027 GMT
        Subject: CN=9A96158921CD9A698C3E25D588DC10CFE44D7E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:9f:68:ed:98:60:8a:73:35:db:6b:2f:25:
                    00:89:62:28:b0:4b:f3:1e:a8:2d:da:24:35:4b:27:
                    cc:b8:fe:5f:f7:15:8b:f1:11:13:ef:b3:a6:0d:e1:
                    f8:0a:03:8a:d8:ef:55:fa:9b:e9:45:67:6d:8f:6b:
                    ed:19:a9:f5:43:ab:b0:9c:ef:ae:a2:8a:71:92:2a:
                    3d:f0:a1:c4:e3:2b:89:0b:c8:39:55:0a:95:c9:b4:
                    f7:08:6e:fa:43:9c:ab:ae:ad:85:ca:ee:0e:d0:5a:
                    a6:8a:70:99:5f:dc:b6:e5:a3:2b:30:f6:ab:59:48:
                    e4:9c:3a:23:6c:87:fc:33:03:db:5c:8b:29:ee:9c:
                    0b:89:20:33:6b:92:f3:14:0a:46:a0:5d:84:75:81:
                    8f:aa:7e:e5:eb:7f:8e:42:1f:a4:31:6c:b3:d2:a5:
                    af:91:da:c6:15:29:2f:ff:e0:3d:43:09:f4:7a:44:
                    cf:3a:cf:0f:4e:16:50:48:b5:d1:d5:9a:d5:03:85:
                    6d:d9:d2:a3:a6:6a:d7:23:25:1e:0e:d6:84:ce:ea:
                    77:f5:fb:f4:2d:77:6d:95:88:e9:d0:41:ea:bb:5c:
                    06:2b:c3:47:8b:1d:c1:9d:35:1c:92:5d:a7:18:e0:
                    ff:56:d2:f3:66:f8:25:72:50:c5:6f:33:71:ac:e1:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:96:15:89:21:CD:9A:69:8C:3E:25:D5:88:DC:10:CF:E4:4D:7E:78
            X509v3 Authority Key Identifier:
                keyid:D8:A8:B7:35:6E:8E:02:B3:DA:B2:80:5D:01:23:50:06:42:A2:CC:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8A8B7356E8E02B3DAB2805D0123500642A2CC00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZiVFkDpC2MTQTFRzQMKnLNzquVu3WerFQef3BmbdMYK/0/3230312e3134302e3234342e302f32322d3234203d3e203631383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:34:95:e3:32:43:cd:de:0a:f7:36:d9:34:f5:3c:a0:11:bf:
         76:f0:00:ed:60:87:30:65:50:00:1d:b7:a0:56:d3:8c:a7:ca:
         46:6b:f9:f7:b9:ed:01:87:68:e3:d6:3b:ee:99:69:4a:ac:f3:
         e9:0d:1e:88:e2:c2:9b:ed:5a:28:d0:f1:70:12:5d:c6:77:79:
         6f:44:0f:1b:2b:5c:4a:82:29:9b:00:e2:f4:dc:7b:7f:b5:90:
         12:ab:e0:ce:f8:72:d2:c5:78:94:2c:4e:f6:a4:0e:ff:b3:04:
         36:8e:c4:e8:23:de:6f:ff:5b:1f:df:6e:dd:e9:f6:47:cc:f9:
         98:dc:b4:c2:46:97:28:09:92:9f:57:da:44:52:a0:de:9e:87:
         ab:21:8d:74:1c:48:57:ce:48:31:b5:5c:f6:26:c3:6a:8a:1f:
         fe:bb:ae:91:03:6b:6a:47:68:03:d7:92:ad:21:c3:d0:a1:c3:
         23:81:18:f8:d2:0f:3b:f6:b6:66:ed:9b:29:d9:17:4f:fc:da:
         45:21:28:85:55:2f:b8:57:22:e1:8b:0a:5f:2f:e6:1e:50:c1:
         6b:7f:bd:5e:32:99:9e:02:a3:fe:0f:eb:18:8b:ac:36:ab:1a:
         f0:b0:7f:9a:93:22:b0:85:71:91:ed:48:b9:45:7c:c1:52:ab:
         36:15:58:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:12 2026 by rpki-client