Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32332d3233203d3e203631393336.roa
File:                     3230312e3135382e31322e302f32332d3233203d3e203631393336.roa (raw, json)
Hash identifier:          IkdR4yNoz7g4vC+cNNrXLhzYMlIqBXU4yq+trsSy80w=
Subject key identifier:   5A:FE:44:E8:EF:05:D5:BB:77:AC:D3:DD:B8:F0:8C:31:29:BE:89:56
Certificate issuer:       /CN=422625563D5C776AFD91FC7267113152605F299D
Certificate serial:       30E2E6BD28A5BAEE39DACD0D69AB7B5220470830
Authority key identifier: 42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32332d3233203d3e203631393336.roa
Signing time:             Thu 19 Mar 2026 18:12:13 +0000
ROA not before:           Thu 19 Mar 2026 18:07:13 +0000
ROA not after:            Thu 18 Mar 2027 18:12:13 +0000
asID:                     61936
IP address blocks:        201.158.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl
                          rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Mar 2026 01:43:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e2:e6:bd:28:a5:ba:ee:39:da:cd:0d:69:ab:7b:52:20:47:08:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=422625563D5C776AFD91FC7267113152605F299D
        Validity
            Not Before: Mar 19 18:07:13 2026 GMT
            Not After : Mar 18 18:12:13 2027 GMT
        Subject: CN=5AFE44E8EF05D5BB77ACD3DDB8F08C3129BE8956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:48:12:43:2d:73:f4:50:11:b5:87:67:21:f1:
                    ee:fe:86:4d:34:df:7e:91:57:b8:ca:1a:97:f8:9d:
                    85:e3:19:a5:84:f5:9e:99:14:db:b5:19:fb:f1:d9:
                    b9:a3:7c:00:85:40:58:09:43:1c:7b:87:32:e0:ba:
                    51:26:b4:55:76:f6:62:9b:da:2d:1c:93:76:21:14:
                    38:95:9f:66:e0:3a:56:92:72:ab:69:c1:d6:e4:3e:
                    f8:2b:39:60:de:f9:02:79:9b:5a:db:d9:49:d4:2f:
                    fc:c3:55:64:31:9c:29:ea:8b:26:bd:8a:3e:86:b5:
                    2c:5b:4d:70:33:d1:56:04:fa:ee:af:2a:96:f7:25:
                    0c:11:0d:6d:a0:b7:e0:80:10:9c:48:a7:59:cb:38:
                    64:a5:2a:0a:87:16:6b:d4:f7:ee:8d:2f:6b:70:78:
                    c9:f8:d1:10:02:77:1e:44:65:de:03:54:ef:e1:8f:
                    e3:8e:cb:eb:d0:9d:4e:94:2a:49:27:39:7d:ea:a7:
                    df:5f:e6:40:b6:97:bd:4b:10:eb:0e:f7:6f:a7:08:
                    ca:c5:fb:de:5e:90:db:b7:8e:b7:24:d1:c9:1b:b9:
                    ef:09:f7:f5:8b:23:c4:82:91:86:0f:e4:ea:1f:af:
                    eb:75:b0:fd:26:2e:19:49:78:76:be:97:1e:00:69:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FE:44:E8:EF:05:D5:BB:77:AC:D3:DD:B8:F0:8C:31:29:BE:89:56
            X509v3 Authority Key Identifier:
                keyid:42:26:25:56:3D:5C:77:6A:FD:91:FC:72:67:11:31:52:60:5F:29:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/422625563D5C776AFD91FC7267113152605F299D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/422625563D5C776AFD91FC7267113152605F299D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCXvFUYv847M8KNAHFDJiouTqJBt2VQNqmENTqMxXFMN/0/3230312e3135382e31322e302f32332d3233203d3e203631393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.158.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:df:1f:6f:55:7f:7f:10:51:5f:0a:ea:97:c6:a1:7b:d0:
         5c:41:ca:e8:fb:97:ad:87:d1:5d:78:d4:ab:0f:e2:ec:01:e3:
         4d:12:0b:23:e7:08:38:a6:a7:eb:12:21:ee:db:31:cf:d5:fe:
         fc:2c:83:31:b4:53:43:b6:42:0f:c5:23:21:b5:39:57:1a:28:
         be:ba:2b:54:02:89:e2:b8:e7:b3:d7:04:7d:97:26:fe:23:25:
         b7:bd:32:56:66:c9:07:88:39:d4:8d:e1:ab:30:81:1c:a3:4b:
         ea:d5:4a:7a:1e:c0:5c:4a:c0:cb:6e:59:ad:74:42:7c:86:b9:
         12:c3:26:17:07:d0:49:7e:4d:ed:19:43:9c:21:fa:e3:dc:e0:
         10:9b:80:0c:27:35:a7:da:c4:ba:71:de:84:78:6d:23:27:1d:
         c8:a7:8d:d9:ab:01:6d:2d:7b:3a:40:d4:7a:a5:97:30:b0:61:
         b3:01:e0:4b:75:18:ce:21:da:43:4c:80:ff:44:bd:08:aa:55:
         dd:62:0f:de:5a:e0:dc:90:d2:55:54:f2:d9:9b:8d:f5:41:0a:
         ff:86:75:4e:40:ce:80:3f:6e:99:22:2d:44:9a:86:ea:b2:b4:
         af:fc:d8:c6:20:df:4c:52:f5:4b:9c:36:b9:7d:f6:78:a6:e4:
         19:1c:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:30:39 2026 by rpki-client