Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa
File:                     3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (raw, json)
Hash identifier:          KrhAAU4cNicO+l+hNBnml/thEjeR1pJjbxjixaDlkps=
Subject key identifier:   EB:81:03:AC:65:EE:1F:57:88:15:49:42:81:E9:43:7A:DE:8C:41:46
Certificate issuer:       /CN=70BE7503F48CCC14271EE75026EB08184789273F
Certificate serial:       247FF4D9BE71A139BFF2C330B95146858342866B
Authority key identifier: 70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa
Signing time:             Sat 07 Mar 2026 21:18:15 +0000
ROA not before:           Sat 07 Mar 2026 21:13:15 +0000
ROA not after:            Sat 06 Mar 2027 21:18:15 +0000
asID:                     53181
IP address blocks:        201.33.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 15:43:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7f:f4:d9:be:71:a1:39:bf:f2:c3:30:b9:51:46:85:83:42:86:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Validity
            Not Before: Mar  7 21:13:15 2026 GMT
            Not After : Mar  6 21:18:15 2027 GMT
        Subject: CN=EB8103AC65EE1F578815494281E9437ADE8C4146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:ed:be:c5:1f:8e:f4:5a:50:1e:ba:24:a0:
                    78:0d:75:7a:48:b4:72:80:50:bf:fc:12:82:d6:7f:
                    73:7f:e4:83:bc:40:72:8b:55:f1:6a:32:96:7b:67:
                    d2:c1:04:7e:f1:1d:78:1f:97:af:2e:83:cb:4b:fe:
                    1f:64:95:e6:28:15:a6:0f:0f:dd:07:47:20:02:18:
                    60:4a:dd:7c:99:e3:67:28:09:27:d5:17:90:a9:21:
                    6f:69:1e:13:b5:98:40:e0:bd:2b:a1:41:96:17:2a:
                    bd:b3:d0:2f:27:14:51:f3:ec:25:5f:b3:8d:0b:69:
                    67:ec:7e:49:53:66:f4:86:94:07:4d:0f:80:06:95:
                    9a:fc:55:48:8e:53:9d:ee:3f:10:72:39:5e:9a:f2:
                    ee:04:0f:35:85:a9:d4:20:5e:73:35:90:84:6c:74:
                    68:b8:9e:3a:12:af:b0:95:43:fc:c5:21:b3:ed:3f:
                    c6:af:00:ee:36:52:8a:f0:c0:ce:ec:7e:a2:9b:3e:
                    87:6d:fb:53:80:d1:ff:ed:0f:93:92:fd:f9:1d:bc:
                    76:99:18:32:ad:34:8d:23:ef:32:3a:55:a7:18:8c:
                    f6:fb:7d:20:69:e2:2e:f8:23:11:8f:37:cc:3b:94:
                    c7:e3:a0:85:dd:4f:fb:ae:a8:53:4a:5a:1e:1b:7c:
                    9b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:81:03:AC:65:EE:1F:57:88:15:49:42:81:E9:43:7A:DE:8C:41:46
            X509v3 Authority Key Identifier:
                keyid:70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         89:1b:6f:bc:e5:aa:e3:68:5d:74:95:f4:d3:7a:25:e7:3c:fa:
         25:a0:d4:64:e9:fc:9e:97:70:8e:00:65:ab:0e:fe:d8:b5:94:
         a9:27:f5:36:45:28:eb:b4:c1:18:10:a1:62:0f:99:72:55:30:
         fe:75:e4:77:43:0b:ff:84:c8:59:23:5c:53:8d:31:16:32:96:
         8b:46:4e:cb:18:97:a3:a9:31:68:61:26:ec:8b:ac:8b:7a:87:
         be:c3:31:a2:81:91:81:66:ea:41:f6:cf:24:5d:c3:48:fd:cc:
         57:63:80:60:1e:ad:37:c4:c3:b9:87:07:3a:e2:0d:49:d7:61:
         52:f9:90:77:99:c1:b1:de:d8:ad:b1:1e:7e:c2:30:f2:f2:b8:
         ea:b7:21:f8:57:ac:09:58:d9:de:f9:1f:48:c6:77:09:8f:e7:
         d6:45:13:85:96:98:0e:b8:96:68:3f:69:f4:6e:56:14:2a:06:
         3d:65:82:8f:db:9a:db:4a:67:82:27:41:96:35:3d:09:67:07:
         36:71:c6:ef:b3:32:f2:c7:c3:d4:6b:8d:6c:f6:b6:e9:ee:64:
         03:8f:1d:cf:5c:3c:57:dd:65:2b:c1:b0:82:97:8f:bc:e2:11:
         6e:87:96:ef:c1:7a:13:a3:98:2b:20:09:bf:c0:c9:25:f9:2e:
         de:be:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:43:01 2026 by rpki-client