Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230312e37312e3234302e302f32302d3332203d3e20323638393736.roa
File:                     3230312e37312e3234302e302f32302d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          jz4xYyBAm/6LgBoyuAgmqJLf8a32fBITmKNpfE/6zUI=
Subject key identifier:   0E:0F:43:56:5B:4C:E9:F0:E9:1B:69:32:9E:B7:30:08:F5:4F:D1:07
Certificate issuer:       /CN=81693D2B616AFC0CE814A28BA2622B591A667447
Certificate serial:       37D260544F0165E56745ED536FB1322A8CFF274B
Authority key identifier: 81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230312e37312e3234302e302f32302d3332203d3e20323638393736.roa
Signing time:             Mon 06 Apr 2026 18:04:34 +0000
ROA not before:           Mon 06 Apr 2026 17:59:34 +0000
ROA not after:            Mon 05 Apr 2027 18:04:34 +0000
asID:                     268976
IP address blocks:        201.71.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 Apr 2026 07:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d2:60:54:4f:01:65:e5:67:45:ed:53:6f:b1:32:2a:8c:ff:27:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81693D2B616AFC0CE814A28BA2622B591A667447
        Validity
            Not Before: Apr  6 17:59:34 2026 GMT
            Not After : Apr  5 18:04:34 2027 GMT
        Subject: CN=0E0F43565B4CE9F0E91B69329EB73008F54FD107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:99:c0:a7:3d:35:ce:13:3c:d5:62:ac:76:
                    84:17:1b:9e:f4:93:f5:cc:ae:1e:40:d2:8c:01:2c:
                    03:1c:45:75:92:22:7b:4d:91:a3:ef:a7:d0:05:b3:
                    2b:40:32:46:b7:71:5b:78:18:87:69:9f:10:65:87:
                    a9:15:2f:20:91:3b:1b:02:9d:ff:c5:39:b6:87:ec:
                    11:9f:bd:f4:f8:cc:75:0e:7d:25:3a:cd:75:13:ed:
                    80:bb:c8:f4:65:ae:5c:4b:21:82:7e:ca:2a:e8:8f:
                    39:4f:0e:a8:f6:e1:6e:ac:77:c5:99:38:56:c8:f1:
                    e6:1c:b6:de:01:01:2a:48:ef:a0:d7:e7:00:a6:1c:
                    af:73:fb:63:b4:e1:c6:46:52:a1:6f:1c:55:17:3f:
                    ce:00:bd:47:97:14:b4:5d:b5:d9:73:b6:28:94:b0:
                    8c:b6:b0:6f:aa:68:31:d0:ca:5f:a2:fe:9d:28:a6:
                    0c:af:95:e0:d8:d0:72:ac:5f:44:a6:43:d7:7e:f5:
                    95:3a:d7:0d:b8:a4:b2:c6:d8:a0:8f:a8:c0:46:a4:
                    aa:fb:76:a2:93:e9:0d:6a:b8:81:87:fa:dc:96:4b:
                    c0:6a:c6:d1:7b:c5:97:84:97:3a:a2:76:b1:82:8d:
                    68:72:e5:c4:2a:97:b5:82:f5:12:ba:ac:8d:97:68:
                    cf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:43:56:5B:4C:E9:F0:E9:1B:69:32:9E:B7:30:08:F5:4F:D1:07
            X509v3 Authority Key Identifier:
                keyid:81:69:3D:2B:61:6A:FC:0C:E8:14:A2:8B:A2:62:2B:59:1A:66:74:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/81693D2B616AFC0CE814A28BA2622B591A667447.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81693D2B616AFC0CE814A28BA2622B591A667447.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3230312e37312e3234302e302f32302d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:b8:4a:28:50:1f:f0:d2:8d:f5:bb:59:3d:70:06:ae:2f:2b:
         93:f7:04:2c:6b:dd:00:21:58:23:38:6e:3d:1a:c7:67:08:1f:
         5f:f4:98:b6:25:9a:39:0c:f0:60:dc:33:16:65:29:f4:a3:3b:
         ea:78:06:a3:ec:49:ee:21:b2:08:0f:8e:78:e7:4f:76:0f:e2:
         b4:7c:72:b5:17:f0:f5:ec:2a:8a:25:a4:14:b3:7b:20:65:f1:
         97:f8:3e:60:b3:25:60:73:df:20:13:94:81:9c:a7:b8:ca:77:
         db:b7:60:c5:bc:67:36:41:a4:12:21:0f:e3:da:e4:99:49:e3:
         56:37:01:79:82:97:1e:f2:1e:50:4d:24:1c:fb:e6:4c:41:cb:
         12:f9:8d:12:0b:9e:fc:fa:aa:e1:17:73:44:ae:a5:5a:72:2b:
         8a:01:d6:57:69:5e:a7:4b:cf:0b:4f:ea:17:e3:07:1a:89:5f:
         bc:e9:2f:95:d4:04:93:f2:90:ec:ba:67:05:f2:d1:22:7d:74:
         96:90:2e:4b:e6:1a:40:12:ce:ad:ba:83:f7:4f:2d:54:cc:64:
         90:b1:c1:45:91:7b:cd:33:44:ca:fd:e1:18:78:59:16:fb:a6:
         d6:30:8e:f7:74:fc:20:47:f9:f7:ff:47:92:b9:3d:46:aa:4a:
         c4:c5:2e:44
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN9JgVE8BZeVnRe1Tb7EyKoz/J0swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2OTNEMkI2MTZBRkMwQ0U4MTRBMjhCQTI2MjJCNTkx
QTY2NzQ0NzAeFw0yNjA0MDYxNzU5MzRaFw0yNzA0MDUxODA0MzRaMDMxMTAvBgNV
BAMTKDBFMEY0MzU2NUI0Q0U5RjBFOTFCNjkzMjlFQjczMDA4RjU0RkQxMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4/5nApz01zhM81WKsdoQXG570
k/XMrh5A0owBLAMcRXWSIntNkaPvp9AFsytAMka3cVt4GIdpnxBlh6kVLyCROxsC
nf/FObaH7BGfvfT4zHUOfSU6zXUT7YC7yPRlrlxLIYJ+yirojzlPDqj24W6sd8WZ
OFbI8eYctt4BASpI76DX5wCmHK9z+2O04cZGUqFvHFUXP84AvUeXFLRdtdlztiiU
sIy2sG+qaDHQyl+i/p0opgyvleDY0HKsX0SmQ9d+9ZU61w24pLLG2KCPqMBGpKr7
dqKT6Q1quIGH+tyWS8BqxtF7xZeElzqidrGCjWhy5cQql7WC9RK6rI2XaM/fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDg9DVltM6fDpG2kynrcwCPVP0QcwHwYDVR0j
BBgwFoAUgWk9K2Fq/AzoFKKLomIrWRpmdEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1dFQUZOS1lERkpSdWtuZW1QWTk1clZSYWJSNzZ5V1pxVFhVSjN5NkFk
N1QvMC84MTY5M0QyQjYxNkFGQzBDRTgxNEEyOEJBMjYyMkI1OTFBNjY3NDQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxNjkzRDJCNjE2QUZDMENF
ODE0QTI4QkEyNjIyQjU5MUE2Njc0NDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNXRUFGTktZREZKUnVrbmVtUFk5NXJWUmFiUjc2eVdacVRYVUozeTZBZDdULzAv
MzIzMDMxMmUzNzMxMmUzMjM0MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMjM2
MzgzOTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBATJR/AwDQYJKoZIhvcNAQELBQADggEBAG64SihQ
H/DSjfW7WT1wBq4vK5P3BCxr3QAhWCM4bj0ax2cIH1/0mLYlmjkM8GDcMxZlKfSj
O+p4BqPsSe4hsggPjnjnT3YP4rR8crUX8PXsKoolpBSzeyBl8Zf4PmCzJWBz3yAT
lIGcp7jKd9u3YMW8ZzZBpBIhD+Pa5JlJ41Y3AXmClx7yHlBNJBz75kxByxL5jRIL
nvz6quEXc0SupVpyK4oB1ldpXqdLzwtP6hfjBxqJX7zpL5XUBJPykOy6ZwXy0SJ9
dJaQLkvmGkASzq26g/dPLVTMZJCxwUWRe80zRMr94Rh4WRb7ptYwjvd0/CBH+ff/
R5K5PUaqSsTFLkQ=
-----END CERTIFICATE-----
Generated at Sat Apr 11 09:20:00 2026 by rpki-client