Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233312e302f32342d3234203d3e203532373635.roa
File:                     3136302e3233382e3233312e302f32342d3234203d3e203532373635.roa (raw, json)
Hash identifier:          pa7oZLI0SIKX7bQdxVJrNWbHoVvmhWeWVkeCJAckb9c=
Subject key identifier:   07:CE:9C:19:BE:E2:3D:75:DE:34:E0:4D:0E:8A:D3:A1:A5:BC:6F:83
Certificate issuer:       /CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
Certificate serial:       037046AA98FCAF3766F77FC6800CA51A7B6E1C0F
Authority key identifier: 14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233312e302f32342d3234203d3e203532373635.roa
Signing time:             Wed 26 Aug 2026 02:07:03 +0000
ROA not before:           Wed 26 Aug 2026 02:02:03 +0000
ROA not after:            Wed 25 Aug 2027 02:07:03 +0000
asID:                     52765
IP address blocks:        160.238.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl
                          rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:46:aa:98:fc:af:37:66:f7:7f:c6:80:0c:a5:1a:7b:6e:1c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=140E27BF986433A8F763F3A4FB7BCCCC9A812F7E
        Validity
            Not Before: Aug 26 02:02:03 2026 GMT
            Not After : Aug 25 02:07:03 2027 GMT
        Subject: CN=07CE9C19BEE23D75DE34E04D0E8AD3A1A5BC6F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6e:c3:4f:cd:e9:df:b6:03:59:76:2b:fe:02:
                    cf:89:f8:4b:5a:fa:af:be:a7:05:24:b1:36:50:8b:
                    33:fa:32:e2:4c:04:99:43:6d:81:8d:9d:e1:4f:49:
                    2e:89:dd:88:c6:76:d7:57:ee:c8:bb:3d:11:ca:eb:
                    9a:47:d7:f3:e8:91:5b:7e:3a:85:7d:85:d3:a0:53:
                    95:75:67:58:b9:25:a0:47:9c:bf:1d:2a:cb:52:03:
                    df:9e:45:b0:9b:dc:40:82:ef:ec:8a:71:5d:68:8d:
                    3f:52:4c:0f:7c:83:68:11:30:2a:ee:fb:9d:6b:a7:
                    63:60:d3:02:18:20:f2:8f:60:6e:81:a3:bd:76:7c:
                    e1:5a:e4:a3:70:1f:e4:4c:0b:b3:24:ac:d1:8c:05:
                    29:78:ad:26:f1:f6:7e:30:8e:05:e0:25:b4:46:68:
                    d2:03:f9:b6:5a:ff:3f:1b:ce:3c:ca:a6:c6:60:a3:
                    83:cb:fa:41:de:79:b2:cd:72:40:c5:4d:c9:ed:27:
                    39:9d:76:72:30:ca:59:0e:61:e7:84:a0:d1:f1:7f:
                    96:ab:b6:29:11:71:ef:2d:60:dc:9e:ee:66:e9:3c:
                    8d:74:4b:ae:58:cf:14:33:30:64:4a:e1:9b:39:21:
                    c2:b8:35:c7:9d:ce:c5:06:80:fa:bb:76:0a:3a:75:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CE:9C:19:BE:E2:3D:75:DE:34:E0:4D:0E:8A:D3:A1:A5:BC:6F:83
            X509v3 Authority Key Identifier:
                keyid:14:0E:27:BF:98:64:33:A8:F7:63:F3:A4:FB:7B:CC:CC:9A:81:2F:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/140E27BF986433A8F763F3A4FB7BCCCC9A812F7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/3136302e3233382e3233312e302f32342d3234203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:57:ac:e1:b1:be:72:1e:69:3b:3d:c1:79:44:2f:ef:0a:5e:
         8c:05:60:df:f5:4f:86:ae:34:bf:b1:1c:94:dd:ab:17:d2:e0:
         21:eb:5e:51:3f:e4:db:34:81:87:1c:51:64:48:ce:26:aa:a7:
         c4:06:24:9e:2f:39:a3:18:0b:d1:6c:97:0c:ca:d2:03:74:e4:
         6d:52:9f:1e:9e:01:35:7f:90:1e:28:44:bf:f7:17:d8:87:8b:
         cb:17:f1:d3:f4:35:f9:20:7f:0a:ba:32:0c:a6:b4:34:40:12:
         68:51:b5:d6:51:5c:42:29:fd:7e:8b:0b:63:4d:42:54:e2:a8:
         16:a2:62:62:5e:54:3f:ea:23:9a:a5:ee:cb:81:4d:50:38:a6:
         d9:e7:fe:00:e3:eb:f4:2b:b0:06:14:17:77:e9:65:37:b5:13:
         77:1d:21:a5:d4:fa:91:4b:82:59:c2:eb:15:93:16:4e:67:9d:
         0c:76:38:52:76:6f:a1:92:d8:f3:93:e7:cd:8f:2a:9e:ef:28:
         81:c8:b8:c3:01:eb:b3:93:1d:dd:ee:e7:33:a6:cc:9d:bf:dc:
         32:bb:50:b9:d8:54:67:17:76:92:de:ab:c2:5b:38:08:c7:26:
         1c:35:de:a7:10:4c:ea:4c:a2:96:f1:57:fb:ca:c6:bb:47:da:
         57:bf:0b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 15:05:59 2026 by rpki-client