Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232392e302f32342d3234203d3e203532373635.roa
File:                     3136302e3233382e3232392e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          hmQ+GTalJt7r4sNO0mX5XB3qJ8tnH5FrvryfFEr3kw4=
Subject key identifier:   A0:BA:2F:C7:7A:CC:B1:A6:0F:ED:03:D5:48:77:D4:24:29:3D:0B:D3
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       5C5DB62465E3A2F97EE3FE1449200E84C931B54C
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232392e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:04 +0000
ROA not before:           Wed 26 Aug 2026 02:02:04 +0000
ROA not after:            Wed 25 Aug 2027 02:07:04 +0000
asID:                     52765
IP address blocks:        160.238.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5d:b6:24:65:e3:a2:f9:7e:e3:fe:14:49:20:0e:84:c9:31:b5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:04 2026 GMT
            Not After : Aug 25 02:07:04 2027 GMT
        Subject: CN=A0BA2FC77ACCB1A60FED03D54877D424293D0BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:2a:31:b4:4f:5c:32:bc:6a:35:b9:ed:f1:
                    fb:54:98:d4:b8:42:2c:88:0e:16:ed:09:44:00:80:
                    6d:c7:47:31:f6:f9:c3:ae:9e:7d:be:1d:ed:ec:8b:
                    4f:d4:93:ac:5b:91:97:de:20:8a:8a:bb:93:20:5b:
                    95:7c:58:92:32:17:5d:41:1e:ca:e6:5c:8f:07:6b:
                    40:c5:61:5c:97:67:00:d5:43:9e:34:78:9a:d7:0a:
                    40:a9:88:03:f8:45:7b:f0:6d:6e:e2:f8:83:63:eb:
                    39:df:79:75:40:34:90:e6:c5:7e:97:ff:a3:8f:21:
                    d3:9c:c8:47:07:25:22:b5:61:00:99:ff:fe:6d:52:
                    6b:20:44:e0:f0:f9:78:8c:8c:bc:99:d4:9b:1a:fc:
                    69:13:1a:0b:71:4a:3f:fe:1a:97:55:30:da:b3:73:
                    ec:e1:6a:2c:47:d4:e3:cb:6f:40:c6:b5:a5:68:f4:
                    9c:8a:69:f3:6c:04:b8:88:4d:a1:f4:a7:99:65:29:
                    86:af:4b:5f:93:a2:30:1a:71:63:00:6b:a8:76:00:
                    5e:60:34:93:20:aa:b3:a7:fa:08:8c:f7:9b:19:47:
                    04:6b:9c:42:b3:eb:b0:d3:fc:5d:8f:61:48:d6:93:
                    2a:9b:62:eb:6b:02:17:5c:3c:8d:9d:03:e6:32:71:
                    02:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BA:2F:C7:7A:CC:B1:A6:0F:ED:03:D5:48:77:D4:24:29:3D:0B:D3
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3232392e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:32:8f:61:8b:c3:50:3f:54:6d:e0:3b:86:e1:c8:b3:82:
         be:81:52:f4:a5:65:a9:61:80:ad:9d:0c:76:75:1c:71:79:76:
         2c:f1:ee:24:da:5d:56:ea:20:1d:06:aa:22:13:f3:73:5f:11:
         f7:64:53:f8:fa:86:a9:5f:90:a8:e7:18:8d:e2:0f:04:4c:b6:
         b1:58:dd:ee:b0:bc:16:87:fa:b6:1e:8d:04:dd:24:09:f5:fb:
         df:08:34:a4:59:ac:3f:e9:29:59:50:48:5d:de:ce:f4:4a:a7:
         fd:5c:86:d9:16:fe:32:3e:47:b3:c0:a6:04:c4:15:22:5b:5f:
         58:2e:74:b7:15:fa:8f:42:c1:a9:78:10:3b:e0:5b:51:cf:56:
         12:b6:df:ee:83:5f:ba:05:b3:04:72:17:f9:ed:ae:de:22:1c:
         e5:27:fc:04:16:b6:72:54:91:0c:c8:91:1b:a3:a1:89:b7:6f:
         8d:88:69:6c:ff:e7:1d:ee:d3:5c:b0:30:ca:3d:48:e2:48:7e:
         e0:4a:7c:3c:b5:19:2e:73:22:90:1e:88:ab:07:89:8d:e1:cc:
         99:a6:fa:97:1d:a0:db:67:8e:64:a6:dd:f4:52:9d:b4:e5:3c:
         12:06:b6:65:32:c2:d1:38:11:e7:df:b5:87:f2:6e:ea:dc:b7:
         95:0f:f9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:08 2026 by rpki-client