Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32332d3233203d3e20323635393036.roa
File:                     3132382e3230312e3234302e302f32332d3233203d3e20323635393036.roa (raw, json)
Hash identifier:          IKIPg/qjsG9QGGXSUNgWRG1Gp0KzIhxc4br4DIzxQ6U=
Subject key identifier:   14:35:7D:C0:AD:44:2C:43:AA:4B:80:27:5A:88:2F:9E:37:83:35:B9
Certificate issuer:       /CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
Certificate serial:       5F2BDDE27E6E195017F61B73291EEFD88E0A4F02
Authority key identifier: 40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32332d3233203d3e20323635393036.roa
Signing time:             Mon 04 May 2026 16:09:57 +0000
ROA not before:           Mon 04 May 2026 16:04:57 +0000
ROA not after:            Mon 03 May 2027 16:09:57 +0000
asID:                     265906
IP address blocks:        128.201.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl
                          rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:2b:dd:e2:7e:6e:19:50:17:f6:1b:73:29:1e:ef:d8:8e:0a:4f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
        Validity
            Not Before: May  4 16:04:57 2026 GMT
            Not After : May  3 16:09:57 2027 GMT
        Subject: CN=14357DC0AD442C43AA4B80275A882F9E378335B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1f:54:a2:43:b4:97:b3:42:41:ab:7d:b3:d8:
                    c3:e0:19:b7:5a:1c:32:ab:1c:7f:26:66:47:67:72:
                    e1:ea:81:63:3c:48:85:1c:2c:ae:87:95:1c:d4:03:
                    06:86:30:0e:d2:49:12:c3:c9:d2:94:b2:97:43:49:
                    57:69:87:47:81:e5:00:b1:23:bf:44:ca:64:a3:97:
                    cf:88:7a:6b:7c:98:df:e6:21:29:4e:18:a9:70:b2:
                    73:4b:07:a6:8c:f8:83:3b:80:08:d3:5f:f2:54:90:
                    3d:04:06:27:83:5c:18:3e:46:71:45:bf:16:5e:75:
                    ee:44:6d:2b:13:ef:92:88:68:58:36:23:66:cc:82:
                    a3:91:e1:db:13:c9:ec:c1:42:b4:12:f4:1b:f9:24:
                    56:af:b8:77:0b:88:a7:ee:27:65:91:8b:ff:a1:58:
                    d6:d1:4c:03:a6:b3:76:95:fd:02:b6:5b:46:dd:31:
                    5c:19:6b:bb:96:f6:83:e3:fe:2f:d1:4b:1b:aa:2b:
                    67:e1:b8:58:b7:3f:2a:87:3e:b5:b6:95:43:6b:8c:
                    9e:f8:fe:f2:c0:64:21:8b:bd:49:4b:e6:83:cc:3e:
                    e4:ca:dd:a3:f6:81:b2:69:76:0a:35:ef:76:a8:5b:
                    73:e4:15:9b:e5:79:5b:1f:c1:4a:4e:eb:89:ff:e0:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:7D:C0:AD:44:2C:43:AA:4B:80:27:5A:88:2F:9E:37:83:35:B9
            X509v3 Authority Key Identifier:
                keyid:40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32332d3233203d3e20323635393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:37:de:19:aa:eb:b6:95:00:0d:c5:ff:24:e7:38:fd:1f:5e:
         f0:a0:2e:00:1b:a8:36:25:f5:dc:f6:a4:4e:40:36:62:4d:ac:
         50:5e:58:e4:df:57:4b:9c:25:6a:af:46:00:86:0f:2f:22:77:
         a6:d6:fa:3f:a1:ae:17:8e:0a:69:96:27:cb:f7:b6:89:94:a7:
         fd:fc:f2:d4:25:07:fd:e9:61:e3:fd:d1:e7:2d:a1:b8:af:bb:
         1c:90:ea:f0:67:e3:a9:17:0b:60:82:5f:22:0a:fc:2e:34:75:
         be:1d:f0:7d:0c:0d:a3:95:58:9f:d1:f5:15:ec:85:7d:c3:83:
         b9:08:62:ed:7e:35:a2:9c:31:a2:d6:60:1d:37:38:81:ed:13:
         0c:4c:7f:15:e9:f8:bb:21:d1:35:20:61:e1:f4:70:84:86:c3:
         59:10:ee:51:bf:0b:7b:b0:f6:dd:51:b8:ed:30:da:21:35:93:
         5b:9d:a7:18:ef:40:31:1d:0f:a6:91:d8:24:9b:00:57:50:69:
         9a:9f:a6:ae:7e:bd:c1:15:f6:5b:da:53:d6:5d:3c:4b:26:2a:
         ed:dd:6b:65:c5:e1:9a:1a:cf:d0:c8:c5:eb:95:33:73:4d:f9:
         62:50:86:47:78:39:f0:b3:92:ee:5d:53:39:4d:cf:42:aa:0b:
         31:2f:63:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:12 2026 by rpki-client