Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
File:                     3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa (raw, json)
Hash identifier:          9zoLuThzGMPsq5VcJwQwBjKJuhRbFtXF0KE0Yy6PkUA=
Subject key identifier:   1B:95:1D:83:89:B9:3F:2F:04:D4:9F:25:FD:32:7C:68:2E:4B:64:9D
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       77E6FEFC1D6419575430BC502BA27FA75F687660
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa
Signing time:             Fri 10 Jul 2026 03:00:00 +0000
ROA not before:           Fri 10 Jul 2026 02:55:00 +0000
ROA not after:            Fri 09 Jul 2027 03:00:00 +0000
asID:                     271726
IP address blocks:        201.216.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e6:fe:fc:1d:64:19:57:54:30:bc:50:2b:a2:7f:a7:5f:68:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: Jul 10 02:55:00 2026 GMT
            Not After : Jul  9 03:00:00 2027 GMT
        Subject: CN=1B951D8389B93F2F04D49F25FD327C682E4B649D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:04:5a:7f:66:63:f2:80:67:f2:b8:21:51:
                    83:20:94:47:ae:47:1f:74:87:e6:21:93:c8:46:ab:
                    9f:d8:63:71:7c:91:57:6d:a2:c3:8f:be:a4:a1:7e:
                    09:5c:8c:2f:c5:5f:c8:e4:86:c9:da:14:74:40:ae:
                    1f:ba:b0:67:d5:18:94:60:c9:e8:7c:4e:27:69:df:
                    06:e9:31:17:db:3d:85:d1:98:88:1a:76:37:8f:62:
                    1a:3d:06:0e:97:ca:d4:a2:c9:cb:5b:0c:68:70:64:
                    24:d6:56:c8:92:18:ec:82:e9:09:29:9e:7a:86:81:
                    7c:97:fe:dd:f1:e8:16:78:c9:4d:4e:ce:0e:8f:70:
                    9e:96:63:6b:61:2e:0e:7b:15:7b:d8:be:a3:dd:a9:
                    01:34:be:c9:fa:22:d8:52:56:d7:b5:5f:93:44:ed:
                    ae:ef:a5:36:d4:a0:8c:98:e4:eb:0c:40:0c:5e:a8:
                    18:02:6f:c0:a0:9d:95:11:04:c0:81:31:89:7f:29:
                    c4:87:f2:0a:f3:46:7a:08:70:33:17:33:4e:ee:b8:
                    43:b0:5a:13:55:3c:75:b0:c6:e7:11:6a:5e:6c:34:
                    b3:47:65:c0:07:f4:b8:80:76:70:43:4e:d6:19:f4:
                    86:8d:71:3f:a0:e2:b1:85:96:2e:04:bb:db:5a:02:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:95:1D:83:89:B9:3F:2F:04:D4:9F:25:FD:32:7C:68:2E:4B:64:9D
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e39312e302f32342d3234203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:d7:89:e2:8b:c8:35:12:a5:38:9c:ae:7e:c1:a3:12:47:
         2f:ad:c6:b4:b8:52:39:c3:d7:dd:6a:66:86:63:37:63:6d:74:
         7c:f9:78:0a:84:89:37:fc:84:d5:1a:e9:c6:06:df:37:c3:35:
         00:26:67:b7:d9:53:b4:70:b9:ee:b1:26:4e:3e:b0:08:a8:f2:
         15:09:ad:c6:4e:57:a2:58:a8:12:31:c8:00:a6:62:14:8f:fa:
         af:19:b4:47:d3:cc:ab:18:5e:e6:13:cd:46:25:c7:34:05:9f:
         2f:6f:43:e9:76:ae:e3:91:67:da:9f:43:bc:43:5d:f7:e2:ee:
         2c:d3:dd:bb:f1:9e:ad:40:ef:85:b4:4b:45:84:88:95:97:7a:
         cd:a4:2b:02:d7:37:2c:f2:6d:d6:c3:ae:a8:aa:0c:93:4f:bf:
         49:67:77:71:5a:b8:b1:30:12:0e:a9:31:f1:6f:09:96:c2:83:
         cf:cd:94:82:99:e9:21:45:e0:35:26:8e:93:1c:e1:d7:f7:8c:
         7b:c8:11:8b:f0:8e:8c:28:2c:34:74:cb:2d:bf:f1:ad:8d:e2:
         91:ef:94:64:65:5b:19:50:1b:c6:79:cd:d7:4a:75:36:29:5c:
         25:87:d4:bd:26:14:bf:1c:5b:95:b0:ad:62:42:7b:55:bb:40:
         e4:8c:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:04:50 2026 by rpki-client