Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232302e302f32342d3234203d3e20323731313135.roa
File:                     3230312e37312e3232302e302f32342d3234203d3e20323731313135.roa (raw, json)
Hash identifier:          nmEUu1m8QcQpHPHaH0UxKtv6kGxGErh2ATANfRLek/U=
Subject key identifier:   41:AF:FD:6A:2C:93:C9:EE:A6:F4:18:43:F4:EF:9F:AD:3A:21:8A:F4
Certificate issuer:       /CN=AF2099B22162363B1833ADC628B78CB7C15DF31C
Certificate serial:       1AF140F2E80A4708A528385B96EC74A6B28387A1
Authority key identifier: AF:20:99:B2:21:62:36:3B:18:33:AD:C6:28:B7:8C:B7:C1:5D:F3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2099B22162363B1833ADC628B78CB7C15DF31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232302e302f32342d3234203d3e20323731313135.roa
Signing time:             Sun 12 Jul 2026 18:04:06 +0000
ROA not before:           Sun 12 Jul 2026 17:59:06 +0000
ROA not after:            Sun 11 Jul 2027 18:04:06 +0000
asID:                     271115
IP address blocks:        201.71.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/AF2099B22162363B1833ADC628B78CB7C15DF31C.crl
                          rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/AF2099B22162363B1833ADC628B78CB7C15DF31C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2099B22162363B1833ADC628B78CB7C15DF31C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 17:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f1:40:f2:e8:0a:47:08:a5:28:38:5b:96:ec:74:a6:b2:83:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF2099B22162363B1833ADC628B78CB7C15DF31C
        Validity
            Not Before: Jul 12 17:59:06 2026 GMT
            Not After : Jul 11 18:04:06 2027 GMT
        Subject: CN=41AFFD6A2C93C9EEA6F41843F4EF9FAD3A218AF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:74:1f:3e:c5:51:56:a9:61:4b:89:88:58:
                    7f:69:f7:71:e2:30:60:6a:c7:db:a9:d6:db:6c:44:
                    05:1b:65:e6:ef:e1:d3:b2:76:60:68:c3:a5:61:f3:
                    fe:48:87:d3:2f:83:fa:ff:9e:43:ff:e2:50:c1:27:
                    48:17:70:e5:3a:2a:30:5e:74:ca:e5:e6:84:8f:d5:
                    85:64:29:86:23:3a:1c:43:cb:ce:b5:2b:dc:dc:dc:
                    a3:28:0b:cf:ab:24:14:66:6e:39:a0:6b:c2:2f:57:
                    61:e4:9d:42:a0:2f:e2:1d:3d:54:f9:4b:bc:db:a8:
                    b5:34:54:0c:9c:ab:ca:9a:7f:6a:9a:de:6b:07:2d:
                    e9:4c:99:03:2a:c9:fd:3b:5b:71:7f:0b:03:98:55:
                    5a:90:4c:7f:b9:bd:aa:45:d1:d0:10:70:14:04:16:
                    a6:48:ba:ad:a5:43:93:b3:c8:a0:d3:42:92:47:6d:
                    38:9b:ab:8a:c3:bb:f2:fa:01:58:e5:8f:24:0c:9f:
                    0e:15:f7:f9:2c:43:29:8b:81:c1:85:c7:bc:86:2c:
                    f3:23:e1:56:a0:e2:72:b2:cc:52:f0:9f:ee:70:85:
                    f6:ed:51:be:29:04:fb:72:9e:91:90:04:d7:41:8f:
                    d5:e2:b8:87:1e:a4:99:6d:03:94:42:01:41:1b:99:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:FD:6A:2C:93:C9:EE:A6:F4:18:43:F4:EF:9F:AD:3A:21:8A:F4
            X509v3 Authority Key Identifier:
                keyid:AF:20:99:B2:21:62:36:3B:18:33:AD:C6:28:B7:8C:B7:C1:5D:F3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/AF2099B22162363B1833ADC628B78CB7C15DF31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF2099B22162363B1833ADC628B78CB7C15DF31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyLVzFMWSPvpkLVDSUVfuRZ89Y5jsddoVMTpENVouy2w/0/3230312e37312e3232302e302f32342d3234203d3e20323731313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:f1:f1:f4:53:d8:e6:8b:35:07:a9:e9:ef:74:1c:af:e6:
         7d:79:bc:3e:5c:4f:b7:55:4c:56:a1:e1:82:bc:6a:cc:80:a5:
         f4:cb:25:fa:06:2f:7f:0e:25:70:1e:5b:5a:cb:cc:67:4d:6a:
         e8:f2:76:ed:ad:3d:7e:0f:1f:47:49:80:a8:e2:d2:41:7b:96:
         30:bd:e2:98:c2:d7:b6:e7:f9:db:cd:51:f8:75:3d:ea:e0:d9:
         0e:a6:a3:92:41:e1:3b:2a:ac:60:1f:35:a6:ec:66:63:af:74:
         00:30:8b:bf:ea:87:88:8f:d7:da:c2:e8:02:37:a1:3f:b7:f9:
         fb:3a:d8:43:80:a1:1d:5f:97:27:13:fb:65:ed:16:8e:0b:50:
         20:10:cd:1e:65:d2:44:86:76:07:03:c9:8a:6e:1d:53:72:eb:
         2c:79:55:63:ae:06:73:c7:d9:0e:f4:b9:17:cb:54:f4:ee:aa:
         77:65:a6:9d:d3:7c:a8:41:65:74:de:07:6f:33:fb:e6:12:29:
         74:41:16:cc:f4:f6:53:64:c8:6a:98:0a:a8:dd:d0:df:28:54:
         6d:00:c8:91:1d:47:48:ce:e0:65:35:6c:5d:96:be:9f:9b:5b:
         d4:57:79:49:fe:c8:65:4c:27:7c:24:b8:9a:1c:e8:9c:9f:30:
         76:4c:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:53 2026 by rpki-client