Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          H/7NNhy0uxDVNKm8KPxpg4IMAoW5kOKLJKzK89jJsiA=
Subject key identifier:   CF:8E:04:83:55:A7:0C:02:F2:F9:49:31:82:7F:34:72:B4:0E:DF:17
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       5FBB2324D5F09B9C8077C62C0442418D2B0DF94B
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 10 Jul 2026 03:00:00 +0000
ROA not before:           Fri 10 Jul 2026 02:55:00 +0000
ROA not after:            Fri 09 Jul 2027 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:bb:23:24:d5:f0:9b:9c:80:77:c6:2c:04:42:41:8d:2b:0d:f9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jul 10 02:55:00 2026 GMT
            Not After : Jul  9 03:00:00 2027 GMT
        Subject: CN=CF8E048355A70C02F2F94931827F3472B40EDF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:26:b4:03:eb:33:12:51:0c:8b:46:70:e9:
                    7f:d9:95:d3:83:c7:fc:55:50:b1:b3:2c:ea:8c:b2:
                    81:c8:0f:a9:30:7a:96:23:1d:2a:15:77:8f:97:7d:
                    0c:97:91:2b:13:50:72:f9:4b:0c:4e:a7:e9:49:4e:
                    ea:e5:f1:1f:47:72:20:ab:c0:d5:23:a9:4b:02:a8:
                    c8:9d:20:f7:1a:27:db:a2:a8:0c:95:bf:b7:09:db:
                    ed:77:f8:cc:7b:a8:8c:b0:b8:51:e2:70:fc:a4:d7:
                    76:ab:47:de:b4:bd:ea:c5:37:8b:f9:99:2e:e0:03:
                    0d:1a:c1:62:ea:9c:76:d7:a3:42:02:64:27:ef:b6:
                    6a:c9:01:14:a5:29:10:e4:09:32:81:52:f8:5b:c0:
                    ce:72:0b:64:10:6a:01:18:6b:32:a6:8d:0a:04:21:
                    e6:28:b4:68:ab:e9:32:69:de:b3:10:34:bb:05:1c:
                    14:ed:05:16:1e:8f:02:87:ca:e2:28:ca:24:9a:2f:
                    7a:01:59:89:91:7d:e3:5b:4f:09:dc:54:72:29:1a:
                    4c:a9:2f:99:b9:5a:bf:3b:8a:8d:7a:fa:ec:bd:12:
                    85:f6:06:00:6e:68:0c:47:77:2d:8c:c9:ff:e6:d4:
                    15:35:02:e8:48:06:f2:0f:96:76:6c:f2:2a:6d:d5:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:8E:04:83:55:A7:0C:02:F2:F9:49:31:82:7F:34:72:B4:0E:DF:17
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38392e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:df:95:f8:25:7d:8f:e0:97:6b:94:3b:4e:d3:28:b8:36:77:
         75:78:a8:c6:e8:0a:c1:52:f5:97:97:ad:41:d0:be:b5:2d:99:
         11:9c:ae:cf:de:0c:bf:91:08:8f:cb:72:63:7a:b0:f3:ab:6c:
         16:89:e9:03:15:25:a7:f8:1a:b5:b7:2d:65:8e:85:a7:11:85:
         cd:73:21:7b:ec:b6:b5:b4:5c:37:4f:bd:3d:56:62:07:8e:cc:
         e2:cc:2d:23:99:f0:da:c0:56:6e:62:4e:b1:c2:35:67:7a:7b:
         13:f8:2e:c0:47:b0:d3:6a:4a:51:ce:a9:88:67:93:cd:53:c3:
         f4:61:1d:3c:69:38:d3:f3:e2:e6:98:6f:57:e8:0c:a4:9e:c1:
         fe:16:50:eb:38:63:44:60:66:70:6a:2d:3a:38:48:f0:a5:ff:
         69:cc:b3:58:fe:3b:f0:33:97:9d:64:73:6f:25:21:ec:97:ac:
         a3:90:ce:be:32:88:96:1d:09:31:5c:82:3f:d3:d6:c9:0c:6f:
         6f:52:77:20:82:5e:fe:8c:c4:ef:13:e0:8d:b4:2b:3c:47:5f:
         65:26:ae:e6:f1:db:27:35:5b:60:31:87:3a:d3:85:d3:db:3b:
         a7:d7:5f:7e:e7:ba:0e:ab:44:9f:f6:61:b2:0f:72:89:0a:0c:
         d1:18:61:98
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUX7sjJNXwm5yAd8YsBEJBjSsN+UswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRD
MjE5MkE2NTAeFw0yNjA3MTAwMjU1MDBaFw0yNzA3MDkwMzAwMDBaMDMxMTAvBgNV
BAMTKENGOEUwNDgzNTVBNzBDMDJGMkY5NDkzMTgyN0YzNDcyQjQwRURGMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9Sa0A+szElEMi0Zw6X/ZldOD
x/xVULGzLOqMsoHID6kwepYjHSoVd4+XfQyXkSsTUHL5SwxOp+lJTurl8R9HciCr
wNUjqUsCqMidIPcaJ9uiqAyVv7cJ2+13+Mx7qIywuFHicPyk13arR960verFN4v5
mS7gAw0awWLqnHbXo0ICZCfvtmrJARSlKRDkCTKBUvhbwM5yC2QQagEYazKmjQoE
IeYotGir6TJp3rMQNLsFHBTtBRYejwKHyuIoyiSaL3oBWYmRfeNbTwncVHIpGkyp
L5m5Wr87io16+uy9EoX2BgBuaAxHdy2Myf/m1BU1AuhIBvIPlnZs8ipt1X5TAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUz44Eg1WnDALy+Ukxgn80crQO3xcwHwYDVR0j
BBgwFoAU5KYIgLjU7AAkMi2Hony8vcIZKmUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby96bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhy
LzAvRTRBNjA4ODBCOEQ0RUMwMDI0MzIyRDg3QTI3Q0JDQkRDMjE5MkE2NS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNEE2MDg4MEI4RDRFQzAwMjQz
MjJEODdBMjdDQkNCREMyMTkyQTY1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby96
bUpSM2NocTVnOExaV1R0U3ZRckJCQzQzRURNRmdZQmY3WFN4OUVXVkhyLzAvMzIz
MDMxMmUzMjMxMzYyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzEz
NzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADJ2FkwDQYJKoZIhvcNAQELBQADggEBAMfflfglfY/g
l2uUO07TKLg2d3V4qMboCsFS9ZeXrUHQvrUtmRGcrs/eDL+RCI/LcmN6sPOrbBaJ
6QMVJaf4GrW3LWWOhacRhc1zIXvstrW0XDdPvT1WYgeOzOLMLSOZ8NrAVm5iTrHC
NWd6exP4LsBHsNNqSlHOqYhnk81Tw/RhHTxpONPz4uaYb1foDKSewf4WUOs4Y0Rg
ZnBqLTo4SPCl/2nMs1j+O/Azl51kc28lIeyXrKOQzr4yiJYdCTFcgj/T1skMb29S
dyCCXv6MxO8T4I20KzxHX2Umrubx2yc1W2AxhzrThdPbO6fXX37nug6rRJ/2YbIP
cokKDNEYYZg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:18:57 2026 by rpki-client