Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234332e302f32342d3234203d3e20323635393036.roa
File:                     3132382e3230312e3234332e302f32342d3234203d3e20323635393036.roa (raw, json)
Hash identifier:          JYpk7wrTyIKCbSkkgWrUwiF3lJ5ftEEWimszZq7kjdE=
Subject key identifier:   E8:73:B3:93:23:33:D1:A4:B3:10:FB:D5:8B:9C:77:26:20:EE:07:7E
Certificate issuer:       /CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
Certificate serial:       6C48A18B04841D9D43AE8ECA8CE73BF0AF61E5E1
Authority key identifier: 40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234332e302f32342d3234203d3e20323635393036.roa
Signing time:             Mon 04 May 2026 16:10:14 +0000
ROA not before:           Mon 04 May 2026 16:05:14 +0000
ROA not after:            Mon 03 May 2027 16:10:14 +0000
asID:                     265906
IP address blocks:        128.201.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl
                          rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:48:a1:8b:04:84:1d:9d:43:ae:8e:ca:8c:e7:3b:f0:af:61:e5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403F35E2DE61DEF82492B30E9CC2E15B83779A45
        Validity
            Not Before: May  4 16:05:14 2026 GMT
            Not After : May  3 16:10:14 2027 GMT
        Subject: CN=E873B3932333D1A4B310FBD58B9C772620EE077E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:61:1b:68:45:77:2d:2d:17:ed:ec:ca:e8:5a:
                    31:db:50:54:53:67:30:02:c8:1d:ac:85:60:d4:a9:
                    eb:c1:23:a0:fb:c6:d5:4e:81:2e:74:bc:b9:5c:01:
                    18:24:bb:fe:f4:d0:38:a8:b9:fe:8f:d5:90:ba:93:
                    e2:2f:d3:62:a1:4a:3c:a8:06:48:55:97:ce:b6:7b:
                    46:26:3b:18:68:97:5a:72:f2:f7:f6:28:73:75:cc:
                    88:67:da:9a:e7:35:f3:30:6d:5d:13:cf:c0:ac:d4:
                    d0:45:60:13:6c:7d:0a:e1:66:d4:1d:7c:72:c8:5c:
                    79:dd:bf:a0:de:af:d6:ce:33:5b:82:11:ec:75:8f:
                    5b:14:7a:8c:52:7c:8e:98:75:e6:5c:67:97:ac:9a:
                    2e:71:a3:32:b5:ad:61:77:84:16:4b:47:84:4f:07:
                    c9:99:7d:22:03:00:40:62:ff:41:15:42:3c:07:38:
                    e1:ae:10:eb:56:3c:65:5c:e5:d9:40:f9:f1:39:87:
                    a1:9b:c5:57:72:09:22:7e:9d:7e:7d:f3:20:d3:49:
                    04:96:ce:24:b8:1e:28:3b:37:28:ae:c6:bd:66:e0:
                    f8:49:03:56:38:77:95:7c:41:eb:7f:9d:dd:0a:af:
                    bc:69:2b:b3:52:71:f1:85:7e:44:3c:9b:40:42:4d:
                    ba:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:73:B3:93:23:33:D1:A4:B3:10:FB:D5:8B:9C:77:26:20:EE:07:7E
            X509v3 Authority Key Identifier:
                keyid:40:3F:35:E2:DE:61:DE:F8:24:92:B3:0E:9C:C2:E1:5B:83:77:9A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/403F35E2DE61DEF82492B30E9CC2E15B83779A45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403F35E2DE61DEF82492B30E9CC2E15B83779A45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/3132382e3230312e3234332e302f32342d3234203d3e20323635393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1d:84:0e:7a:d9:c3:53:6b:a4:ee:d2:1d:ac:0d:90:29:9f:
         a5:b9:fa:fa:3d:ca:84:fb:9a:cf:82:ad:2c:ef:9c:5f:94:1d:
         ae:fd:37:89:aa:bf:e8:83:10:21:bb:64:82:3b:d4:a6:7f:3a:
         aa:e3:10:ff:a6:ab:3a:9a:4d:d1:ba:a0:c2:55:52:bb:62:8c:
         73:1d:e6:3a:0d:ca:27:3d:8b:11:37:3e:c8:fa:1b:49:f3:c4:
         36:fa:95:bf:b3:9f:62:5e:80:22:5b:e5:31:46:86:8b:08:7f:
         7f:78:69:09:b7:1b:d5:a7:7b:ec:b1:32:2e:21:ea:4d:7b:89:
         ea:27:a8:a6:a4:38:bf:5d:30:5d:9b:8f:03:7d:9f:17:e4:df:
         60:42:e1:ee:68:4a:b9:6d:00:e6:f3:e0:08:f3:b3:9f:bb:ef:
         0b:44:18:52:eb:b1:be:c0:ea:c0:d2:17:55:21:74:d4:03:07:
         3f:06:0d:bb:d9:7e:4a:4d:25:29:d2:e3:a9:c6:10:1a:54:65:
         ad:b2:3d:9e:e7:6e:52:37:d7:98:3a:8c:ee:9e:51:57:32:9a:
         ce:10:38:87:cf:2c:5e:2b:25:48:6d:12:27:f7:bb:18:53:3c:
         d4:e4:ab:9d:fa:53:19:0f:00:35:07:15:1e:5c:77:e6:5a:8e:
         15:2a:77:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:09 2026 by rpki-client