Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa
File:                     3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa (raw, json)
Hash identifier:          vpB8zGTcZWtLbK9ByqGKMOgujc57KUunPl6zS81uIRo=
Subject key identifier:   2B:A4:E8:AB:90:F4:1A:C0:1E:69:9B:9C:FF:F3:C7:12:B5:C3:38:42
Certificate issuer:       /CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
Certificate serial:       699CF82CCF5D77A64C5391672C6B4423059B4484
Authority key identifier: 3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa
Signing time:             Mon 20 Apr 2026 20:13:03 +0000
ROA not before:           Mon 20 Apr 2026 20:08:03 +0000
ROA not after:            Mon 19 Apr 2027 20:13:03 +0000
asID:                     271239
IP address blocks:        201.46.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl
                          rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:9c:f8:2c:cf:5d:77:a6:4c:53:91:67:2c:6b:44:23:05:9b:44:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DDBBF9A0F76777000C65808DFCC56A24759E12B
        Validity
            Not Before: Apr 20 20:08:03 2026 GMT
            Not After : Apr 19 20:13:03 2027 GMT
        Subject: CN=2BA4E8AB90F41AC01E699B9CFFF3C712B5C33842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:ae:ac:20:ea:b7:b8:28:d8:3f:f5:c1:f2:
                    7b:2c:96:c1:96:0a:c7:bb:18:e3:23:76:01:1c:01:
                    6a:cf:d1:3a:6a:b9:9f:c7:6c:d8:a3:0c:af:27:1b:
                    7e:7e:1a:e4:21:6d:d9:0e:f3:7b:58:46:88:e2:79:
                    a3:f3:de:6b:19:4b:81:ab:b7:b0:81:2a:b3:f3:20:
                    0b:70:42:3e:56:8e:c5:b2:b5:69:22:ac:a7:22:b0:
                    f8:e1:7a:2c:c3:b3:c5:d4:1b:20:1c:bf:fb:37:74:
                    7e:98:21:27:ac:2e:da:24:46:bc:c0:ee:9a:d1:fc:
                    83:1c:41:0d:ff:92:a6:a7:28:48:b8:36:69:68:5f:
                    7b:7d:95:84:a6:82:67:cf:d3:30:79:54:1f:95:85:
                    ab:de:93:90:02:a6:ac:59:37:71:68:15:6e:30:5c:
                    a5:d5:00:a3:79:00:5c:d3:e3:fa:72:5e:1d:e2:37:
                    98:bf:94:2c:a9:c5:6c:5b:88:a7:f8:25:1a:04:1c:
                    78:6d:d5:e3:d4:04:c9:2e:32:8f:e1:ea:d9:64:1b:
                    bb:bc:64:75:de:fc:b7:00:0e:8e:d2:eb:c6:09:29:
                    ce:8e:fc:01:29:eb:1a:15:3c:7d:f4:82:ca:05:ca:
                    c2:43:bd:0d:cf:38:41:c5:6e:ef:93:85:a2:2f:1e:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:E8:AB:90:F4:1A:C0:1E:69:9B:9C:FF:F3:C7:12:B5:C3:38:42
            X509v3 Authority Key Identifier:
                keyid:3D:DB:BF:9A:0F:76:77:70:00:C6:58:08:DF:CC:56:A2:47:59:E1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3DDBBF9A0F76777000C65808DFCC56A24759E12B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DDBBF9A0F76777000C65808DFCC56A24759E12B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:c8:42:54:65:5d:c3:2b:ed:ba:27:5e:7a:9f:01:27:b0:
         0c:8d:f2:3b:2b:c2:38:f4:0a:d7:18:42:a0:ce:41:29:82:10:
         90:db:c7:69:87:4d:02:32:44:f4:a5:91:14:5b:e7:eb:e9:68:
         89:bb:bc:11:b9:fb:70:4d:55:3d:2f:48:6d:12:70:6b:c5:10:
         f0:94:9b:ba:b2:1e:e2:45:3d:24:6e:2c:dd:b1:bc:c4:9e:ea:
         5d:28:21:c1:aa:a2:4d:c3:ae:09:f1:99:8d:c7:fe:b5:34:09:
         f7:a0:bb:1d:61:30:90:63:da:0f:ab:d2:ec:4c:f8:cb:05:27:
         5a:ca:94:9b:59:6f:9d:2f:ee:21:84:2f:2f:ca:ef:48:dc:a9:
         ec:bb:d6:4f:bc:e4:85:f4:14:d6:18:36:39:5c:a0:94:f0:21:
         c7:2b:05:7d:57:d8:22:3a:24:0b:5e:77:f9:e0:67:d1:ca:21:
         08:c8:d4:fc:3f:1e:52:af:d2:09:e5:1c:3a:5d:91:65:c2:ff:
         59:c4:e2:05:b9:c9:11:28:30:84:ac:95:19:77:9c:dd:65:ae:
         ea:3a:64:15:db:0c:ff:7a:90:ef:0d:cc:11:11:ac:3b:31:78:
         16:d6:ba:b9:8f:2e:26:32:42:6f:49:7f:6f:06:5e:a2:7c:ca:
         76:55:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:08:31 2026 by rpki-client