Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234322e302f32342d3234203d3e20323635393036.roa
File:                     3132382e3230312e3234322e302f32342d3234203d3e20323635393036.roa (raw, json)
Hash identifier:          BR7p04PHANFGMM47bSm1dAdHrLgjI1XHGVjkZbHVi/8=
Subject key identifier:   4C:0A:A3:BC:02:1E:65:FF:F9:44:AE:49:9E:F1:3D:77:DD:EF:A5:B0
Certificate issuer:       /CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
Certificate serial:       46F6D1BA08BDF097393F52351AE3AE77104CD5AC
Authority key identifier: 40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234322e302f32342d3234203d3e20323635393036.roa
Signing time:             Mon 04 May 2026 16:10:12 +0000
ROA not before:           Mon 04 May 2026 16:05:12 +0000
ROA not after:            Mon 03 May 2027 16:10:12 +0000
asID:                     265906
IP address blocks:        128.201.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl
                          rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f6:d1:ba:08:bd:f0:97:39:3f:52:35:1a:e3:ae:77:10:4c:d5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
        Validity
            Not Before: May  4 16:05:12 2026 GMT
            Not After : May  3 16:10:12 2027 GMT
        Subject: CN=4C0AA3BC021E65FFF944AE499EF13D77DDEFA5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:05:66:87:6f:90:00:e2:6d:77:53:84:63:0b:
                    3e:e3:6e:ec:89:14:9c:50:a0:d1:f2:4f:4f:4b:0f:
                    40:14:ba:1b:b1:dc:26:5c:05:73:20:8b:02:82:1e:
                    62:99:f8:19:5c:be:72:cc:94:6a:f8:94:97:09:5e:
                    9e:1b:b5:75:c3:bc:79:e1:0e:1a:7f:59:ef:f8:70:
                    53:5d:2f:30:13:2d:db:ab:c1:36:30:f0:a2:82:42:
                    76:a8:08:20:6d:f8:b7:8e:01:41:f1:36:62:a4:22:
                    74:cb:47:db:32:db:90:13:ae:e9:c5:eb:7b:77:81:
                    ce:ce:02:9b:8c:68:18:8e:93:e2:d6:2e:e5:0f:2d:
                    cb:ff:cb:bc:6a:cb:94:8c:24:46:59:6b:1e:a0:07:
                    50:c7:b0:64:ea:e5:dd:2d:81:ef:d8:64:93:3d:14:
                    74:d2:e5:1e:87:5c:cc:30:ec:9e:90:4d:d6:74:ca:
                    ab:46:63:bf:41:76:ab:3e:d1:cc:26:4d:c5:9e:dc:
                    1d:97:b9:d8:0b:ca:5d:51:00:2d:e2:86:63:0d:8d:
                    c9:46:f4:d3:ba:fb:4b:4f:22:37:15:a3:6a:b6:65:
                    81:7e:d6:bb:99:5b:64:6b:9c:8b:48:78:b0:b1:4d:
                    13:aa:64:57:2a:89:54:9b:91:a6:8d:11:1c:3a:a6:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0A:A3:BC:02:1E:65:FF:F9:44:AE:49:9E:F1:3D:77:DD:EF:A5:B0
            X509v3 Authority Key Identifier:
                keyid:40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234322e302f32342d3234203d3e20323635393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:82:58:b4:f9:32:bc:fb:e4:e3:f0:e9:6b:89:25:d1:1a:6c:
         c3:6d:04:c1:30:df:8e:4a:d6:25:bc:7e:b9:95:5a:65:a4:4f:
         8e:07:c1:c4:86:8d:1a:61:8d:9c:ae:aa:05:f5:95:e4:c9:68:
         cf:2f:1e:33:e4:b3:f2:eb:30:21:cd:d7:7a:3f:b3:35:9a:b0:
         25:93:bc:b7:b0:65:b8:2f:19:f8:b9:4d:fb:70:f9:4f:6a:db:
         41:ee:8c:9c:e1:5f:6f:82:62:74:5c:ef:9d:ed:7d:ee:b6:2b:
         df:1f:ea:b9:d1:7b:98:a7:7b:66:e1:a7:b5:0d:3f:d1:e4:44:
         71:d2:34:c9:fa:7d:82:65:1b:34:24:d3:72:bf:73:95:b8:52:
         01:4d:3c:c0:0e:06:b4:1c:29:48:e3:58:c5:74:c6:47:ee:d3:
         0d:a0:3a:ad:50:9a:73:c8:6a:0b:b2:9f:b9:2d:24:79:a6:1e:
         f8:f1:59:a7:a1:fd:0a:37:25:38:44:ea:1e:4d:9e:96:ef:72:
         24:aa:ef:66:e9:25:c7:c8:8b:18:77:7a:ca:27:64:57:7a:43:
         62:d4:34:81:68:fe:be:04:bf:eb:42:1b:18:af:10:fe:ab:15:
         48:a5:4d:41:ed:2e:58:37:ee:36:1c:9e:e9:ed:3a:93:82:b7:
         c0:b9:84:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:09 2026 by rpki-client