Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232382e302f32332d3233203d3e203532373635.roa
File:                     3136302e3233382e3232382e302f32332d3233203d3e203532373635.roa (raw, json)
Hash identifier:          R++FI3JNuNf2xypt25SUPi+F6l4hYCpgfY/qy3eNwio=
Subject key identifier:   85:99:66:15:A9:14:59:8B:64:A6:F2:58:F9:DD:06:1F:1A:67:ED:A9
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       7DC1E94271DE4066C69855A138121A095D1A4279
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232382e302f32332d3233203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:05 +0000
ROA not before:           Wed 26 Aug 2026 02:02:05 +0000
ROA not after:            Wed 25 Aug 2027 02:07:05 +0000
asID:                     52765
IP address blocks:        160.238.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:c1:e9:42:71:de:40:66:c6:98:55:a1:38:12:1a:09:5d:1a:42:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:05 2026 GMT
            Not After : Aug 25 02:07:05 2027 GMT
        Subject: CN=85996615A914598B64A6F258F9DD061F1A67EDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:e1:d9:4d:45:00:2d:5d:02:7d:da:11:38:
                    62:74:77:9f:3d:9f:93:7d:15:00:bf:9c:d8:5f:a7:
                    bf:a1:71:73:da:5d:cc:f1:91:81:dc:04:c8:e5:f3:
                    2d:40:22:0d:ef:ad:cd:6f:42:1f:65:47:24:9d:a1:
                    09:84:75:98:92:cf:d1:12:82:af:2a:9a:80:72:a0:
                    05:e2:05:bd:1f:0e:63:f6:c6:ed:88:80:71:0e:b5:
                    af:4f:b9:e4:c7:35:79:ca:73:72:2b:98:cf:c0:9e:
                    e3:d4:df:2c:fe:cf:64:1e:8f:09:32:ef:c2:4f:87:
                    fe:7e:8e:44:63:3d:ba:8c:e0:a2:45:0a:63:3b:fc:
                    6e:9e:fc:4e:07:b4:1b:f0:e4:16:2a:05:cb:ce:b6:
                    b5:9d:75:66:3b:ae:e1:94:21:ff:fd:25:35:bb:ec:
                    d8:9b:aa:b7:aa:e2:7a:61:44:67:ab:5f:f0:e0:22:
                    ff:51:b4:44:a8:81:57:08:63:b0:5d:6b:a0:87:02:
                    cb:a9:65:5a:8b:e5:6c:80:b8:33:df:e4:74:9e:15:
                    30:9e:e0:28:1e:62:5b:12:9a:42:51:ae:84:6a:59:
                    2a:75:8e:6f:6d:a9:ea:b0:9b:0c:1a:e5:25:5a:43:
                    a4:2c:00:df:4c:b5:3a:dd:0a:fe:2a:a4:ac:63:8d:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:99:66:15:A9:14:59:8B:64:A6:F2:58:F9:DD:06:1F:1A:67:ED:A9
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232382e302f32332d3233203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:31:d2:7b:0e:5d:37:ef:c9:3b:98:16:a2:fa:0c:c1:8d:8a:
         86:e1:1a:c8:bd:99:8b:77:c9:bf:b4:d9:e8:d2:c7:99:39:c5:
         d5:46:78:08:72:5f:6d:ef:04:e6:b2:92:f6:77:b6:48:ba:b7:
         27:ce:c6:a0:b1:36:18:fa:66:46:00:a4:cd:eb:96:39:86:62:
         b0:51:92:6a:5f:98:45:68:16:8c:81:c2:23:65:d6:94:4b:4b:
         4d:7b:be:ce:54:7e:93:fd:97:4f:85:53:36:64:b6:f3:ba:59:
         7a:e2:b6:a1:8a:18:54:1d:66:56:af:17:de:a4:d5:86:1a:5c:
         84:40:9a:d2:1f:a9:1e:dd:37:c1:a8:3c:bc:5b:32:ab:08:4a:
         ce:3e:3f:f5:a4:74:54:8b:bc:90:ce:ac:42:0d:63:92:86:3f:
         64:8e:cc:6a:fa:13:8d:31:81:fe:5b:2d:1c:5d:e4:27:08:16:
         b9:7e:1c:bf:5e:12:90:d8:bc:7e:95:aa:45:41:ea:5c:94:71:
         1a:aa:97:f5:a1:ad:c4:d1:44:ba:12:84:cc:05:5a:a0:a5:ad:
         64:f1:7c:a6:43:93:72:c1:e5:97:5d:64:e1:b6:c5:9d:19:bb:
         5e:4d:32:fa:5d:8b:9a:5d:22:7c:c2:15:48:f1:0e:7c:51:28:
         77:a9:8e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:05:54 2026 by rpki-client