Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3230312e3134382e3234302e302f32322d3234203d3e20323632353537.roa
File:                     3230312e3134382e3234302e302f32322d3234203d3e20323632353537.roa (raw, json)
Hash identifier:          bcy1pK/HGynVOserpHeQAF4evNeIHPVZN9rZ94aHoFc=
Subject key identifier:   AB:34:83:25:5D:DD:E8:A1:C3:7C:49:17:1D:D8:E9:EA:01:D0:33:10
Certificate issuer:       /CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
Certificate serial:       0CC1AC3983E94785F5D7F34C8BCED2F087FBA404
Authority key identifier: C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3230312e3134382e3234302e302f32322d3234203d3e20323632353537.roa
Signing time:             Mon 05 Oct 2026 17:05:45 +0000
ROA not before:           Mon 05 Oct 2026 17:00:45 +0000
ROA not after:            Mon 04 Oct 2027 17:05:45 +0000
asID:                     262557
IP address blocks:        201.148.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.crl
                          rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 08:43:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c1:ac:39:83:e9:47:85:f5:d7:f3:4c:8b:ce:d2:f0:87:fb:a4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C57966A16E39D735A9BDF6F90443F39F52BF1CF0
        Validity
            Not Before: Oct  5 17:00:45 2026 GMT
            Not After : Oct  4 17:05:45 2027 GMT
        Subject: CN=AB3483255DDDE8A1C37C49171DD8E9EA01D03310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:e8:35:c6:6e:75:04:ca:25:71:42:18:ed:
                    87:e1:b9:c8:08:8c:0a:ef:b0:54:44:eb:6a:ec:36:
                    a8:56:1a:be:4b:9c:70:fb:e1:ca:9b:f4:f2:48:72:
                    6c:2e:cf:8f:d7:f5:0e:24:4d:61:91:6f:d7:0f:e0:
                    1d:78:da:84:ce:75:1b:e0:2e:9a:11:c6:03:97:e7:
                    be:a8:ca:3f:b3:9c:cd:53:bf:8c:5b:fe:97:fa:88:
                    3f:ae:38:90:e6:a1:9f:f3:46:46:ec:32:10:fc:63:
                    06:a3:23:63:1d:df:e6:ce:87:f4:14:d4:80:91:7c:
                    23:44:64:3b:98:7b:fa:55:5e:f8:75:41:46:79:a7:
                    81:cc:34:37:e9:24:d4:04:4c:e9:9c:d7:47:4e:8f:
                    13:f8:a7:2b:4a:a5:21:cf:e9:0f:3e:7b:eb:31:61:
                    d8:fb:0c:72:b9:d6:7c:ca:fe:c1:4d:2c:e9:59:14:
                    06:e6:ca:ae:fe:84:2b:73:35:ff:43:47:25:18:f5:
                    ff:fc:85:b5:e3:fb:66:25:e6:41:fd:13:d2:40:fa:
                    8f:fb:9a:a2:31:e4:f7:d9:c3:a7:04:cc:c0:6b:bb:
                    47:d5:aa:fb:b3:cf:a4:08:9d:4f:ca:ae:11:98:5a:
                    ca:a5:ae:bd:4e:8e:87:c5:60:f0:a6:ba:9f:92:cc:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:34:83:25:5D:DD:E8:A1:C3:7C:49:17:1D:D8:E9:EA:01:D0:33:10
            X509v3 Authority Key Identifier:
                keyid:C5:79:66:A1:6E:39:D7:35:A9:BD:F6:F9:04:43:F3:9F:52:BF:1C:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C57966A16E39D735A9BDF6F90443F39F52BF1CF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FhaukURqdx1a7pMk7fBqDXVJC72PRLrnGHyGSbaM68g3/0/3230312e3134382e3234302e302f32322d3234203d3e20323632353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:bf:7e:69:71:1a:1b:3f:d9:94:20:d7:5d:be:49:a4:5c:44:
         d8:cd:95:3f:f3:dd:39:bb:11:e4:88:74:13:87:b7:e5:eb:ef:
         aa:6f:51:75:8d:0c:6c:87:99:78:cc:9b:74:70:5b:1c:c2:a7:
         96:b6:47:c0:54:8c:e4:e4:8d:a9:2c:32:fe:f0:17:9e:14:8b:
         74:78:62:9e:47:a3:f3:7a:db:05:a4:8f:42:c2:d9:aa:a5:42:
         ad:e4:0d:33:30:79:57:67:d9:c7:8e:4c:9d:07:a9:d2:84:d5:
         2e:3b:48:13:46:33:5d:20:9d:89:9c:c4:7c:31:24:ba:17:67:
         7a:2b:d0:30:cf:bd:18:20:b0:06:12:71:c7:cf:76:e1:d9:80:
         6a:60:24:13:c7:45:41:e6:58:09:a7:c8:16:b9:c0:dd:da:33:
         e0:86:89:12:4a:62:fd:1a:7c:02:57:1e:45:0e:f0:ba:ed:d7:
         c1:29:df:5d:5a:2d:0b:33:00:b4:36:d7:d2:fd:08:a7:96:99:
         72:c3:1f:2f:0d:73:04:b9:3b:19:fd:c4:3e:33:8a:20:2a:f2:
         fa:5c:98:98:30:3b:55:fd:48:1a:ce:dc:47:ee:c9:78:5b:77:
         df:78:7e:4c:55:60:b6:72:fa:14:07:a1:20:26:f8:80:c7:84:
         e7:00:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:16:40 2026 by rpki-client