Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
File:                     3230312e372e3232302e302f32322d3234203d3e20323635303431.roa (raw, json)
Hash identifier:          w6cIL2XWmnVJVkIWG4gTyQ4siZsqGiMg/u7z3+avD9Q=
Subject key identifier:   10:BE:06:C7:CB:4C:F6:E3:95:49:52:DF:5F:5A:2B:EF:C9:1F:7B:76
Certificate issuer:       /CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
Certificate serial:       7189B4F5F7F0AA0C04142263CCFAE40136B7CCC3
Authority key identifier: A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa
Signing time:             Mon 03 Aug 2026 07:20:57 +0000
ROA not before:           Mon 03 Aug 2026 07:15:57 +0000
ROA not after:            Mon 02 Aug 2027 07:20:57 +0000
asID:                     265041
IP address blocks:        201.7.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl
                          rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 22:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:89:b4:f5:f7:f0:aa:0c:04:14:22:63:cc:fa:e4:01:36:b7:cc:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF
        Validity
            Not Before: Aug  3 07:15:57 2026 GMT
            Not After : Aug  2 07:20:57 2027 GMT
        Subject: CN=10BE06C7CB4CF6E3954952DF5F5A2BEFC91F7B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:56:6d:f7:0e:61:e7:c0:b4:79:98:13:07:
                    75:18:a4:8d:f8:7a:53:9a:d3:97:b6:6d:30:87:74:
                    74:3c:af:ec:82:3b:a0:ca:fc:b9:4d:2c:53:25:8d:
                    2a:f9:60:42:ff:88:a1:64:c9:c3:0a:88:85:51:a4:
                    ed:fc:f1:0b:e9:f2:ef:ba:68:26:26:9e:07:58:c6:
                    bc:09:14:fb:15:23:e4:a5:f8:99:74:e4:5a:1d:f8:
                    3d:9a:9f:fe:02:20:67:bb:04:1e:aa:75:f9:f4:ea:
                    bc:46:64:8a:2a:84:a5:e7:e7:b1:53:3a:1c:4a:49:
                    7e:ff:e6:c7:b6:ad:8b:05:b7:85:5d:1b:2e:3c:ac:
                    50:3c:93:2e:0f:9c:6b:58:e9:60:e8:ad:8b:c7:fb:
                    24:92:1d:79:aa:ec:d5:f1:e1:86:2c:a5:88:d8:fe:
                    d1:ed:64:d1:c4:dd:e8:9d:7f:c7:70:44:52:d5:37:
                    11:1f:c0:4b:4d:fb:72:cf:69:ef:de:96:f9:2d:67:
                    2c:43:15:56:7f:30:31:20:c2:e6:2e:ce:a6:96:d8:
                    80:19:9e:27:6e:af:8f:44:2c:4e:5b:98:9d:dc:cb:
                    e9:92:e5:ed:7d:99:ce:01:d1:8f:6b:5e:4a:be:f1:
                    3b:0f:26:ba:66:57:9e:57:1e:e5:f4:b3:be:c8:ec:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BE:06:C7:CB:4C:F6:E3:95:49:52:DF:5F:5A:2B:EF:C9:1F:7B:76
            X509v3 Authority Key Identifier:
                keyid:A7:BC:3B:DB:C2:87:71:E2:3B:6A:3A:F8:FB:D3:66:4A:C4:C0:EC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7BC3BDBC28771E23B6A3AF8FBD3664AC4C0ECBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/1/3230312e372e3232302e302f32322d3234203d3e20323635303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.7.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:14:cf:cc:a1:f1:44:e1:44:e9:ed:91:86:78:6d:b5:2d:4f:
         a5:56:e8:d9:0b:ab:fd:30:d3:23:17:71:da:6c:10:26:d9:e7:
         3c:8d:c5:07:1e:e5:e6:36:5b:d6:dd:57:b9:38:69:df:3c:12:
         40:a4:05:0e:b2:1c:7d:5f:1f:db:00:e2:e0:fe:bf:be:dc:a3:
         8f:d8:44:4c:df:af:05:5b:2e:f2:2a:ae:6a:9d:b8:a6:6e:da:
         e7:84:9a:63:41:e4:9f:10:8f:ed:d2:5d:f8:3e:8b:5d:b4:63:
         2d:32:61:6d:a4:1f:c4:2f:51:f3:d8:f1:9d:d8:bf:8d:a2:ba:
         3b:68:da:4f:03:eb:fe:2b:58:40:6e:68:ad:14:1f:75:6c:59:
         8a:ee:73:17:7f:cb:22:36:2d:08:8c:8b:21:29:0b:fb:43:06:
         64:b0:cf:47:17:33:9e:48:04:25:02:3b:69:ba:72:a7:e9:5a:
         29:9c:a1:5c:3f:5f:ad:8a:b3:0c:45:34:b6:66:dc:5a:0c:e7:
         7d:f0:37:25:1f:29:85:b7:8d:3a:b2:cd:be:20:e4:2e:84:cc:
         9b:55:82:45:2e:8d:84:c6:fd:08:52:3b:8b:07:e0:b4:f4:52:
         09:36:0f:9d:2a:7d:b3:29:21:1b:f9:85:55:f8:43:34:ee:64:
         1c:ba:a2:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcYm09ffwqgwEFCJjzPrkATa3zMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdCQzNCREJDMjg3NzFFMjNCNkEzQUY4RkJEMzY2NEFD
NEMwRUNCRjAeFw0yNjA4MDMwNzE1NTdaFw0yNzA4MDIwNzIwNTdaMDMxMTAvBgNV
BAMTKDEwQkUwNkM3Q0I0Q0Y2RTM5NTQ5NTJERjVGNUEyQkVGQzkxRjdCNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlnVZt9w5h58C0eZgTB3UYpI34
elOa05e2bTCHdHQ8r+yCO6DK/LlNLFMljSr5YEL/iKFkycMKiIVRpO388Qvp8u+6
aCYmngdYxrwJFPsVI+Sl+Jl05Fod+D2an/4CIGe7BB6qdfn06rxGZIoqhKXn57FT
OhxKSX7/5se2rYsFt4VdGy48rFA8ky4PnGtY6WDorYvH+ySSHXmq7NXx4YYspYjY
/tHtZNHE3eidf8dwRFLVNxEfwEtN+3LPae/elvktZyxDFVZ/MDEgwuYuzqaW2IAZ
nidur49ELE5bmJ3cy+mS5e19mc4B0Y9rXkq+8TsPJrpmV55XHuX0s77I7M0bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEL4Gx8tM9uOVSVLfX1or78kfe3YwHwYDVR0j
BBgwFoAUp7w728KHceI7ajr4+9NmSsTA7L8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEJTcEtGZERzNTlyUkJYZGVKeGFXRHNDNzN5WnBQZmNzZWN6WlNlaVJB
Yk4vMS9BN0JDM0JEQkMyODc3MUUyM0I2QTNBRjhGQkQzNjY0QUM0QzBFQ0JGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E3QkMzQkRCQzI4NzcxRTIz
QjZBM0FGOEZCRDM2NjRBQzRDMEVDQkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhCU3BLRmREczU5clJCWGRlSnhhV0RzQzczeVpwUGZjc2VjelpTZWlSQWJOLzEv
MzIzMDMxMmUzNzJlMzIzMjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1
MzAzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyQfcMA0GCSqGSIb3DQEBCwUAA4IBAQCYFM/MofFE
4UTp7ZGGeG21LU+lVujZC6v9MNMjF3HabBAm2ec8jcUHHuXmNlvW3Ve5OGnfPBJA
pAUOshx9Xx/bAOLg/r++3KOP2ERM368FWy7yKq5qnbimbtrnhJpjQeSfEI/t0l34
PotdtGMtMmFtpB/EL1Hz2PGd2L+Noro7aNpPA+v+K1hAbmitFB91bFmK7nMXf8si
Ni0IjIshKQv7QwZksM9HFzOeSAQlAjtpunKn6VopnKFcP1+tirMMRTS2ZtxaDOd9
8DclHymFt406ss2+IOQuhMybVYJFLo2Exv0IUjuLB+C09FIJNg+dKn2zKSEb+YVV
+EM07mQcuqKJ
-----END CERTIFICATE-----
Generated at Fri Sep 4 02:17:28 2026 by rpki-client