Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233302e302f32342d3234203d3e203532373635.roa
File:                     3136302e3233382e3233302e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          75J2zbsFEUhRMqmzDJ/qjM87ioL3s+ti4/ZRF+NkRE4=
Subject key identifier:   70:A5:65:83:84:B4:4B:BB:1A:1E:95:BC:9D:99:A0:42:0B:DA:6D:68
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       413FEBE5FC29184BFB40D67385E2B07DA670E6FD
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233302e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:04 +0000
ROA not before:           Wed 26 Aug 2026 02:02:04 +0000
ROA not after:            Wed 25 Aug 2027 02:07:04 +0000
asID:                     52765
IP address blocks:        160.238.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3f:eb:e5:fc:29:18:4b:fb:40:d6:73:85:e2:b0:7d:a6:70:e6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:04 2026 GMT
            Not After : Aug 25 02:07:04 2027 GMT
        Subject: CN=70A5658384B44BBB1A1E95BC9D99A0420BDA6D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:36:e0:0b:f8:13:82:c0:77:2a:1a:54:c4:
                    e4:5e:77:33:ad:51:7f:84:24:f6:22:ed:a0:d6:58:
                    92:1c:21:c0:aa:c3:84:51:44:2f:97:6d:81:3b:47:
                    d1:1a:24:7d:82:e7:ec:8b:3a:62:76:6d:d5:80:4c:
                    50:1e:40:c0:ef:65:53:4f:a9:e4:92:18:f9:71:5a:
                    74:25:e1:c7:ab:69:b7:85:42:d5:27:0f:be:5e:c0:
                    51:ea:20:bb:b1:84:cb:92:8e:df:d5:33:31:cb:a8:
                    66:63:7a:cc:c1:cc:cb:ec:18:3c:d1:b0:6b:f5:e3:
                    b1:8d:58:ae:18:a9:f2:b4:ec:0e:5d:4c:f2:91:35:
                    a4:33:6b:02:ed:97:67:70:c9:2c:3e:0d:c6:8c:f6:
                    26:ba:09:3a:93:e5:fa:e7:82:48:ac:fd:89:a4:d1:
                    0c:4e:5e:a6:39:ee:78:26:72:23:c3:94:f4:c3:b3:
                    86:cb:e9:c8:80:d2:0a:6d:83:2b:49:93:dd:2c:0e:
                    bf:fc:63:50:b0:78:af:23:5e:32:c4:fc:a3:fc:94:
                    26:07:43:3e:0d:25:cb:62:02:d5:d8:4a:98:af:68:
                    76:0e:b7:f4:97:55:03:aa:cd:06:80:40:2a:2d:20:
                    de:b4:c9:8b:91:13:25:f2:9c:0c:b2:54:a8:8b:ed:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:65:83:84:B4:4B:BB:1A:1E:95:BC:9D:99:A0:42:0B:DA:6D:68
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233302e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:7a:80:4b:eb:ae:95:94:bc:42:4d:46:92:1c:be:5d:4d:
         dd:bc:5f:b5:2e:55:f3:d1:90:7c:72:3d:bd:0d:db:ca:fd:77:
         cd:ce:68:1f:5a:b9:7f:47:f0:b4:a5:a4:f1:21:d0:30:dc:90:
         a0:34:ef:5f:bf:c2:d6:c8:f9:52:01:a3:66:e6:ff:50:ff:85:
         d8:89:d3:0d:bc:06:8e:5f:28:76:7b:12:05:a2:d5:9e:6f:c2:
         9a:be:65:7f:8c:25:2c:dd:52:70:65:e2:0a:08:00:85:d0:e1:
         8c:f4:42:89:9c:83:2c:29:81:b8:cc:f9:35:f9:92:be:a6:81:
         ed:14:d2:43:6a:bd:50:4d:e1:67:f4:fe:85:c8:ea:a2:72:3f:
         f7:ec:e7:7d:45:0c:56:0b:59:af:b3:0b:16:8f:41:33:78:0a:
         6d:ec:8c:03:dc:86:0d:3f:65:a8:46:47:ab:2a:c0:eb:0f:3b:
         4c:40:38:60:8f:09:23:ec:31:59:1e:91:a8:24:19:35:57:e2:
         bf:a9:dc:35:56:bd:89:7f:ef:a2:22:93:d2:2e:5c:99:69:b6:
         e5:c4:b0:9d:b7:3d:67:ee:01:ed:2d:83:ff:99:e7:80:1d:1e:
         81:00:91:c0:29:1b:65:af:a2:99:99:c7:37:e4:e8:ac:df:32:
         15:47:bf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:06:05 2026 by rpki-client