Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
File:                     3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa (raw, json)
Hash identifier:          adSzE3xjrjf7TYa8uX6sO13WgwI/EBn/kQs3rB0Mo8k=
Subject key identifier:   6A:DF:06:95:11:85:09:2E:90:87:78:67:F3:9C:71:BB:DE:D6:89:E6
Certificate issuer:       /CN=E066B97193F54796970FC225B48A67CD25FD8932
Certificate serial:       6710402CB43258109D7995DA416A18BD04AD2BCA
Authority key identifier: E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa
Signing time:             Fri 03 Jul 2026 19:18:52 +0000
ROA not before:           Fri 03 Jul 2026 19:13:52 +0000
ROA not after:            Fri 02 Jul 2027 19:18:52 +0000
asID:                     267540
IP address blocks:        201.182.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl
                          rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 08:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:40:2c:b4:32:58:10:9d:79:95:da:41:6a:18:bd:04:ad:2b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E066B97193F54796970FC225B48A67CD25FD8932
        Validity
            Not Before: Jul  3 19:13:52 2026 GMT
            Not After : Jul  2 19:18:52 2027 GMT
        Subject: CN=6ADF06951185092E90877867F39C71BBDED689E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:f2:dd:75:4a:9c:fd:f3:c5:60:b7:85:50:
                    58:e7:68:b3:76:ef:ea:38:cf:c6:b3:92:79:21:de:
                    c7:57:4f:37:1d:76:fe:2f:2c:c8:b8:69:20:a4:bf:
                    b5:34:30:37:dd:54:b5:30:a4:18:7e:71:ae:a2:67:
                    4b:a6:b6:c0:21:81:19:23:6a:1d:d2:cb:d2:05:27:
                    a9:de:d2:7c:c6:f1:9d:a3:ca:c6:a5:f1:1f:0e:49:
                    c6:31:79:9a:fe:10:87:dc:02:7d:7a:bd:84:85:f5:
                    37:53:18:8c:5a:bd:a6:ef:93:35:26:ff:77:a3:05:
                    3b:e1:35:5c:f8:0b:e6:7b:c9:c6:6b:e9:18:fc:4c:
                    08:46:4d:0a:a6:7f:fb:1c:be:5d:65:70:40:6a:80:
                    af:5e:b4:78:b6:77:9f:15:60:12:10:5f:a0:ef:32:
                    29:d1:6e:5e:9d:c1:2e:14:75:29:bf:f1:36:bb:a9:
                    1f:c7:e8:a2:e0:81:60:04:80:48:2f:05:c9:76:8e:
                    8b:b1:70:83:4e:fa:ec:75:64:d4:5c:8d:f9:6f:7b:
                    68:3e:c3:57:96:f0:f8:72:8a:0f:5b:2a:0c:e4:7e:
                    cd:78:ec:8e:30:59:55:d3:57:eb:1d:5c:fc:70:ee:
                    c7:1c:c1:e7:05:7e:dc:85:f2:0b:7b:34:8a:2c:7c:
                    c7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DF:06:95:11:85:09:2E:90:87:78:67:F3:9C:71:BB:DE:D6:89:E6
            X509v3 Authority Key Identifier:
                keyid:E0:66:B9:71:93:F5:47:96:97:0F:C2:25:B4:8A:67:CD:25:FD:89:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/E066B97193F54796970FC225B48A67CD25FD8932.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E066B97193F54796970FC225B48A67CD25FD8932.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/3230312e3138322e3231362e302f32322d3234203d3e20323637353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:fe:8a:e3:d1:29:30:93:d0:7b:b6:b7:07:5a:cc:f5:15:e6:
         ce:56:77:41:98:60:0c:f0:f0:05:6b:57:ce:bd:ea:15:b6:d2:
         f5:f3:19:f9:24:d2:7b:59:3d:e6:d5:b3:3b:ce:34:d6:40:c5:
         4d:d6:11:1a:7a:24:1b:44:4c:ab:09:fb:01:d6:b8:02:e1:5b:
         4a:03:e5:18:f6:b8:fe:b7:26:0b:b4:1e:ee:53:e8:c7:28:fe:
         f2:c1:c9:de:6c:e7:a3:04:61:68:d7:93:21:56:12:4d:2e:ec:
         35:c4:50:6e:64:87:34:82:00:7b:cc:71:df:2d:50:46:6a:c0:
         ee:04:e9:fc:37:96:88:d9:6c:f1:c8:15:70:e0:15:7c:f8:0a:
         57:69:6d:05:87:74:6e:9d:64:70:69:da:bf:a8:8e:8f:9c:67:
         91:5f:cf:0a:75:25:61:f2:28:72:6b:9c:a1:b8:d2:4a:13:cd:
         41:5b:c8:bb:77:dd:d5:89:be:f1:b0:ee:a5:3f:fd:6b:0f:6b:
         0c:30:52:b9:ed:b9:ea:4e:93:77:40:4f:86:02:4f:42:17:45:
         3a:65:37:f7:d1:77:13:30:03:22:ea:e7:28:1f:e6:ef:d2:4d:
         98:91:76:9a:b4:a3:af:83:53:c7:6e:1a:dc:45:1b:5d:dc:04:
         27:77:0f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:46:36 2026 by rpki-client