Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32342d3234203d3e20323635393036.roa
File:                     3132382e3230312e3234302e302f32342d3234203d3e20323635393036.roa (raw, json)
Hash identifier:          xOZEsjJg5eeWw7hCO0sV+vOC/X+eFdt/e04crwd2lLM=
Subject key identifier:   D0:5C:44:36:BC:3C:AA:0D:DF:CD:61:4F:D8:E3:AD:23:3B:66:15:20
Certificate issuer:       /CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
Certificate serial:       07D43C5C47D77F0543605A3DE58D91FB1EE5FB11
Authority key identifier: 40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32342d3234203d3e20323635393036.roa
Signing time:             Mon 04 May 2026 16:10:05 +0000
ROA not before:           Mon 04 May 2026 16:05:05 +0000
ROA not after:            Mon 03 May 2027 16:10:05 +0000
asID:                     265906
IP address blocks:        128.201.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl
                          rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:d4:3c:5c:47:d7:7f:05:43:60:5a:3d:e5:8d:91:fb:1e:e5:fb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
        Validity
            Not Before: May  4 16:05:05 2026 GMT
            Not After : May  3 16:10:05 2027 GMT
        Subject: CN=D05C4436BC3CAA0DDFCD614FD8E3AD233B661520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:6e:49:17:cf:09:f8:c5:77:9d:91:2e:5c:
                    b0:aa:60:83:18:70:93:09:97:28:d4:1b:3f:ac:50:
                    72:ca:1c:c2:08:58:e6:8b:da:e1:6d:eb:e2:b1:31:
                    dd:69:4e:53:1f:e6:c0:72:9f:ff:5d:a0:d1:95:ce:
                    07:e5:01:2b:8d:77:a6:8d:37:43:fe:a7:f0:0e:da:
                    9b:c1:8d:07:27:d5:40:72:e3:02:86:75:ad:55:86:
                    cf:64:c9:48:90:f0:d5:e4:00:69:55:85:46:cb:62:
                    d6:69:1a:6c:33:81:d5:e9:59:04:f9:10:27:ce:b3:
                    db:6f:d4:6e:73:0e:6d:a9:e6:85:a0:22:7e:6b:dc:
                    d1:67:e5:8d:e9:a2:c1:77:36:fd:69:2c:32:75:4a:
                    2c:94:26:32:06:08:b2:c2:54:c4:29:7d:e1:0a:b1:
                    ec:6d:6c:9d:5d:67:3b:dc:99:85:57:06:5d:68:a8:
                    d3:fc:b9:c4:f7:a7:c6:eb:cf:80:6e:ae:96:68:67:
                    c8:d2:d0:62:e3:99:59:af:8b:8c:1d:ee:6b:f6:7c:
                    22:a3:ee:75:75:8f:68:07:50:8b:b2:2f:4f:3b:01:
                    4c:6b:1e:0e:0d:c3:cb:9f:b8:00:f7:40:3c:2c:e1:
                    02:ec:3f:68:6b:ee:17:11:b3:e6:82:da:21:1e:c4:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5C:44:36:BC:3C:AA:0D:DF:CD:61:4F:D8:E3:AD:23:3B:66:15:20
            X509v3 Authority Key Identifier:
                keyid:40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234302e302f32342d3234203d3e20323635393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:ab:12:5a:9a:1f:25:c7:89:18:c1:35:34:3d:e5:b6:db:
         b8:e3:8d:0a:b7:5b:40:b2:6a:58:f4:e8:5b:6b:c6:76:5d:be:
         87:8d:8c:25:64:bf:a8:38:c5:29:ee:a6:18:94:42:11:e9:25:
         57:81:21:90:c5:20:f7:a7:86:e7:8d:76:bb:f1:65:4c:5d:68:
         4b:a8:6c:5b:e6:3d:96:38:a5:cf:9c:60:4a:a7:eb:f6:d2:bd:
         9b:a3:e2:f4:d8:4a:18:04:0d:28:5e:f9:70:97:25:df:8d:1c:
         cc:27:e1:eb:fe:10:79:af:49:64:26:cf:d5:9b:65:93:14:5c:
         eb:de:b5:ab:73:3d:80:91:79:4a:99:86:2a:95:39:21:cd:ed:
         b9:99:92:77:65:d4:87:ca:91:d3:2e:c8:7b:b7:43:02:76:66:
         24:25:2a:a3:c8:e1:bf:8f:04:9f:d3:d5:e0:17:88:eb:e7:0b:
         e9:fa:59:52:56:e5:70:4e:39:a3:83:dd:17:af:51:c6:db:f6:
         7e:1a:0e:12:ed:cf:13:eb:25:55:b0:6d:87:07:f7:2d:31:ff:
         7e:80:d7:79:04:16:32:2f:a7:79:cf:71:28:e1:c2:5f:db:2e:
         00:00:f5:90:99:f5:37:44:37:a4:89:55:93:bd:70:df:3e:ac:
         0b:c7:3d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:09 2026 by rpki-client