Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3230312e37362e3132382e302f32302d3234203d3e203238363532.roa
File:                     3230312e37362e3132382e302f32302d3234203d3e203238363532.roa (raw, json)
Hash identifier:          g0oDsj4g+Fz5Aal01djrXTGWoItL3YFmyWGY2HYIde0=
Subject key identifier:   19:41:B1:23:D6:F4:D3:1A:0F:67:D9:D1:54:A8:00:DB:CF:2F:A3:C4
Certificate issuer:       /CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
Certificate serial:       7466FE2A3A8440D2B5C87A6DB569E0BDCFE5A7F3
Authority key identifier: 5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3230312e37362e3132382e302f32302d3234203d3e203238363532.roa
Signing time:             Tue 17 Mar 2026 17:49:07 +0000
ROA not before:           Tue 17 Mar 2026 17:44:07 +0000
ROA not after:            Tue 16 Mar 2027 17:49:07 +0000
asID:                     28652
IP address blocks:        201.76.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl
                          rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 21:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:66:fe:2a:3a:84:40:d2:b5:c8:7a:6d:b5:69:e0:bd:cf:e5:a7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8
        Validity
            Not Before: Mar 17 17:44:07 2026 GMT
            Not After : Mar 16 17:49:07 2027 GMT
        Subject: CN=1941B123D6F4D31A0F67D9D154A800DBCF2FA3C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1d:6b:b7:df:de:22:e1:94:f9:b9:df:ce:d6:
                    3f:72:30:01:38:d3:07:84:25:91:b5:f3:58:45:a5:
                    8e:db:06:b1:bf:7a:60:e4:9d:12:cf:e7:8e:ff:d6:
                    4a:a7:5c:8c:e0:8c:af:00:a1:36:f1:01:a1:ca:66:
                    62:c3:1d:b6:df:9a:5f:1b:9d:7a:ee:63:2c:ed:56:
                    47:01:45:02:b9:84:cd:54:1c:fd:d7:6c:af:60:88:
                    2f:ce:f7:16:b7:5c:d7:ab:9f:e8:b3:a4:ee:f5:37:
                    04:ee:ee:d3:4b:0d:7d:3c:a9:2c:4d:d8:1d:2d:62:
                    2f:1b:78:fa:7b:a2:c0:7f:75:b9:bb:2a:83:c1:c7:
                    75:34:8d:69:c0:26:c1:41:b8:ab:1c:b2:d2:be:ed:
                    11:7b:9b:a0:38:b8:b6:81:35:4e:78:ca:ca:8a:d7:
                    da:7a:71:82:b4:1a:33:a2:7e:2c:71:2e:8f:57:d7:
                    6e:b7:c7:11:1d:18:00:62:d9:17:9a:34:c6:7a:21:
                    33:e5:3f:93:f8:13:a7:ff:19:49:fc:ad:2e:44:3e:
                    b3:83:a4:75:1a:a2:fa:49:c4:5a:eb:eb:30:df:61:
                    6c:c8:1d:7b:a2:7d:a4:6c:fb:fd:fc:1c:78:8b:fa:
                    06:ab:4f:53:8a:4d:bc:ed:89:3c:ed:ea:62:61:67:
                    4c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:41:B1:23:D6:F4:D3:1A:0F:67:D9:D1:54:A8:00:DB:CF:2F:A3:C4
            X509v3 Authority Key Identifier:
                keyid:5E:AE:5D:EC:C4:E9:FF:C4:35:7A:90:7E:44:64:0E:D4:04:C2:CF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5EAE5DECC4E9FFC4357A907E44640ED404C2CFE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D91epqYXehcztzAsGoCpwXfPrmrBPemT4AvPzhHFKFRx/0/3230312e37362e3132382e302f32302d3234203d3e203238363532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:10:b8:dd:29:87:48:8b:0c:5f:35:97:f8:d0:c1:76:e9:07:
         4a:62:f5:4d:aa:1d:32:1e:97:00:1f:30:f1:72:14:ab:48:5b:
         32:b3:0d:33:9f:7b:63:f3:79:74:44:62:43:db:36:34:5e:97:
         46:82:a9:54:4d:15:8b:0b:b7:d2:8d:78:71:3e:0d:fc:88:58:
         42:39:02:2c:dd:b2:39:cd:51:2b:e2:d6:a2:93:e1:e6:83:89:
         7b:55:87:bb:0a:c8:2c:38:c2:3c:c5:60:3d:c6:7e:71:c9:54:
         d6:41:b6:d1:fa:62:1e:cb:11:02:1f:f3:c2:a5:ff:1c:1b:06:
         16:e2:24:12:46:e1:f6:7b:85:6c:ec:33:f2:e7:4b:90:e6:4d:
         73:4f:76:84:b8:a9:36:59:29:a8:21:56:1a:93:7d:06:07:03:
         bb:88:7e:ef:ee:dd:c3:b4:ac:71:31:df:66:b4:97:a0:59:51:
         ce:4c:7a:42:f5:bf:9f:45:07:21:52:d8:28:ec:95:97:ac:46:
         e3:d1:95:10:14:2f:8e:8c:78:d2:6f:4c:56:6f:6a:07:a1:60:
         d5:ad:16:49:e0:d0:06:8f:72:ef:2e:65:a3:04:53:37:49:a8:
         67:05:b6:83:ff:56:e1:cd:31:58:d4:29:e0:91:d9:13:46:ee:
         4c:ed:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:22:13 2026 by rpki-client