Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          USkyhYcAFzXRIeH+GkfnM8GAlmwYqFmyCW/4EmF9OGc=
Subject key identifier:   B7:4D:9F:B4:EE:8A:07:BE:E0:6B:8F:A0:77:6C:27:15:B3:28:63:43
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       20A6D5F4B18422C11A6A1634E676E24648969983
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 10 Jul 2026 03:00:00 +0000
ROA not before:           Fri 10 Jul 2026 02:55:00 +0000
ROA not after:            Fri 09 Jul 2027 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a6:d5:f4:b1:84:22:c1:1a:6a:16:34:e6:76:e2:46:48:96:99:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jul 10 02:55:00 2026 GMT
            Not After : Jul  9 03:00:00 2027 GMT
        Subject: CN=B74D9FB4EE8A07BEE06B8FA0776C2715B3286343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:be:c9:3c:6d:a5:ad:81:94:97:d5:bb:80:
                    fe:4b:47:7b:47:04:03:92:cd:db:95:4c:ef:6e:36:
                    10:99:c6:73:ee:10:5d:8f:b0:53:19:79:c9:9e:04:
                    3e:0e:f6:0f:b0:14:74:99:d4:7b:ae:d8:f4:fd:91:
                    9f:c8:13:1e:65:cf:c7:de:66:ff:26:1b:37:f5:e5:
                    30:ca:1a:88:66:96:0e:9c:13:9b:88:8c:fc:83:22:
                    68:6c:cd:f9:cd:93:e4:f4:16:15:a1:5e:c1:3a:ed:
                    26:31:12:35:65:27:9b:a6:c9:58:95:75:d9:88:05:
                    49:87:8a:20:80:51:f6:51:1e:fd:23:65:31:42:d2:
                    1d:d5:3b:d6:a6:e8:49:50:c8:5f:2a:02:ba:26:a6:
                    5e:aa:8b:de:43:f2:b0:fd:45:cb:80:11:29:80:08:
                    88:f9:aa:16:f2:2a:99:03:79:f5:30:46:58:e3:33:
                    b1:e6:8d:77:b1:0d:3e:7d:39:db:da:45:0a:62:ba:
                    5f:89:9c:98:be:dd:45:da:34:b5:f0:23:2f:3e:4e:
                    61:de:78:e2:25:0a:28:2e:9e:8a:ea:4d:41:b8:31:
                    59:ed:5d:04:c0:fb:02:e2:ea:b2:16:17:a5:21:1f:
                    79:dd:a6:79:9c:23:4f:03:13:b0:5c:56:68:52:e9:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4D:9F:B4:EE:8A:07:BE:E0:6B:8F:A0:77:6C:27:15:B3:28:63:43
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39302e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:4f:53:01:a7:28:d2:ad:7b:43:5a:02:31:09:b5:03:44:d4:
         5b:18:2a:9c:05:20:58:3f:e2:00:bc:f1:af:99:a2:56:cb:9a:
         e4:4a:1b:4d:da:08:ff:ae:f5:d8:2b:f8:e2:8e:e6:45:de:c7:
         a8:37:42:ce:13:d2:9f:f0:67:30:99:5f:cb:38:c9:77:ab:26:
         5e:3b:b0:65:53:19:cf:c2:91:d8:35:25:67:22:6b:43:10:88:
         d1:08:d6:75:e8:05:6a:9c:78:0d:bc:7a:77:03:e8:10:70:79:
         e0:68:8f:93:95:0b:8d:2f:b5:dd:8a:6b:03:36:7b:b2:ad:b5:
         a0:2a:19:a2:f6:2f:89:af:6e:4d:be:66:88:b1:8f:32:5e:c2:
         ce:57:1e:a4:dd:c3:c7:a4:31:c6:87:17:5a:22:39:a5:5e:e9:
         87:a3:8a:47:b0:67:06:23:9b:f5:41:ff:bf:90:c5:fd:1c:69:
         21:ea:ff:5a:19:ce:70:30:04:2d:c2:2b:83:c4:4e:c8:f2:f0:
         da:94:94:26:a0:92:f8:e2:73:e4:9a:67:79:59:c6:16:7a:ca:
         d7:9f:fc:64:75:9f:57:42:4f:91:82:fd:9f:7f:16:5e:73:9a:
         4f:f3:34:e7:1b:5c:2b:ca:97:06:72:56:64:9e:d4:e8:cc:47:
         fc:85:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:19:31 2026 by rpki-client