Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa
File:                     3230302e35332e37392e302f32342d3234203d3e20323731333136.roa (raw, json)
Hash identifier:          7ik3yQm5HZ5jRFVgl37IWd8zFgda0cJUI+yQ0HU4XJk=
Subject key identifier:   88:15:C9:44:E4:EE:AA:50:8C:71:C7:8D:87:96:BB:45:26:E8:15:47
Certificate issuer:       /CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
Certificate serial:       1216D31544AD9B28D73C7EDA9E66CF685AD29626
Authority key identifier: 4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa
Signing time:             Tue 11 Aug 2026 13:56:12 +0000
ROA not before:           Tue 11 Aug 2026 13:51:12 +0000
ROA not after:            Tue 10 Aug 2027 13:56:12 +0000
asID:                     271316
IP address blocks:        200.53.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl
                          rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 18:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:d3:15:44:ad:9b:28:d7:3c:7e:da:9e:66:cf:68:5a:d2:96:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Validity
            Not Before: Aug 11 13:51:12 2026 GMT
            Not After : Aug 10 13:56:12 2027 GMT
        Subject: CN=8815C944E4EEAA508C71C78D8796BB4526E81547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:35:37:95:8e:ff:63:67:5c:ed:2a:2e:8e:
                    f6:80:b2:bf:ef:26:b4:ff:f7:ff:ee:b7:aa:bc:3a:
                    8b:98:f8:c1:a0:60:cb:71:3c:d9:c6:8f:d8:30:15:
                    f1:94:7e:cc:d0:c7:6e:f9:32:67:7a:4a:db:43:89:
                    e9:70:27:5a:63:b7:9f:ef:47:21:85:c0:63:6d:92:
                    5c:dc:e7:c5:62:c7:17:b8:8c:db:35:2f:46:13:b5:
                    96:e3:79:87:0f:df:49:9d:65:26:e2:8d:49:cc:04:
                    02:33:2f:41:3c:00:f0:74:db:40:de:8d:50:7f:3f:
                    ff:69:de:d9:c0:ab:d4:bd:9a:cf:6c:c6:23:bf:b8:
                    a6:7c:34:3b:5e:34:dd:85:b1:77:5d:47:fe:ea:25:
                    64:a6:f2:7f:45:c7:ee:25:56:61:5f:b0:37:dc:ba:
                    84:b9:ef:f8:e4:09:0a:fa:e6:f2:24:20:41:20:4a:
                    6a:2c:d9:ba:c3:08:7a:cb:3e:6a:80:db:ba:ee:03:
                    d1:ac:8d:15:15:60:b4:4c:e4:c8:a4:3f:87:7a:12:
                    ec:05:87:fb:94:6e:43:e3:23:e2:28:c4:ea:71:3b:
                    cd:f0:8b:d7:6b:a1:df:de:ce:95:41:27:83:34:44:
                    58:09:fb:fb:33:0f:ea:c7:ca:60:7e:0d:1b:4c:a3:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:15:C9:44:E4:EE:AA:50:8C:71:C7:8D:87:96:BB:45:26:E8:15:47
            X509v3 Authority Key Identifier:
                keyid:4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/3230302e35332e37392e302f32342d3234203d3e20323731333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:5c:f5:27:7c:9a:f3:78:6e:de:5f:88:71:f3:f0:e7:06:b3:
         e2:73:4e:58:d8:99:10:e4:68:7f:9a:2b:6c:2d:72:1b:bb:82:
         2a:3c:93:31:40:04:65:ba:f3:67:7d:41:7b:61:18:af:63:36:
         4e:8e:4c:09:98:77:8c:68:be:75:c7:be:12:d2:24:5b:62:5d:
         3e:82:1b:8e:79:72:ca:38:7d:28:41:c0:65:ac:e1:4a:ae:47:
         10:ef:2b:1d:c2:71:af:92:e3:d6:32:b1:ed:0b:b4:f7:98:82:
         de:1b:29:d9:46:90:93:f9:d8:2d:28:22:95:8c:42:95:a1:56:
         2e:a9:16:18:ca:2a:bc:e1:22:36:63:ac:d7:80:ce:81:e0:e7:
         f8:64:2c:5d:4c:c7:ba:90:e7:63:1b:1a:16:23:f1:1f:89:7a:
         9f:b1:3d:26:53:a7:1b:99:76:14:c0:17:d5:59:d7:ca:3a:bf:
         fb:21:86:83:7a:b1:b0:4d:96:89:56:e1:09:c4:85:f3:07:45:
         0f:fb:db:b5:3a:14:8e:fd:a1:5f:39:31:f1:fb:c5:d0:9e:a9:
         7c:1d:47:ee:52:5d:b3:ce:73:fd:02:bb:61:4b:2c:32:a5:ae:
         0b:1b:70:2c:d3:8f:e4:c5:bc:64:e0:da:62:da:60:86:be:d4:
         52:c1:6b:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEhbTFUStmyjXPH7anmbPaFrSliYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENFODAxMjJENkRERkNBQzkwMzMyNzY5OEU3NUVGMTQw
N0ZBODE5NTAeFw0yNjA4MTExMzUxMTJaFw0yNzA4MTAxMzU2MTJaMDMxMTAvBgNV
BAMTKDg4MTVDOTQ0RTRFRUFBNTA4QzcxQzc4RDg3OTZCQjQ1MjZFODE1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMzU3lY7/Y2dc7SoujvaAsr/v
JrT/9//ut6q8OouY+MGgYMtxPNnGj9gwFfGUfszQx275Mmd6SttDielwJ1pjt5/v
RyGFwGNtklzc58Vixxe4jNs1L0YTtZbjeYcP30mdZSbijUnMBAIzL0E8APB020De
jVB/P/9p3tnAq9S9ms9sxiO/uKZ8NDteNN2FsXddR/7qJWSm8n9Fx+4lVmFfsDfc
uoS57/jkCQr65vIkIEEgSmos2brDCHrLPmqA27ruA9GsjRUVYLRM5MikP4d6EuwF
h/uUbkPjI+IoxOpxO83wi9drod/ezpVBJ4M0RFgJ+/szD+rHymB+DRtMoycVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiBXJROTuqlCMcceNh5a7RSboFUcwHwYDVR0j
BBgwFoAUTOgBItbd/KyQMydpjnXvFAf6gZUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEc0RVhvNnA1N0xDdWF4Z0hLUnNGRXZuaFAzZURVajdOaUhIR0M3MlZB
Z3MvMC80Q0U4MDEyMkQ2RERGQ0FDOTAzMzI3Njk4RTc1RUYxNDA3RkE4MTk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRDRTgwMTIyRDZEREZDQUM5
MDMzMjc2OThFNzVFRjE0MDdGQTgxOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHNEVYbzZwNTdMQ3VheGdIS1JzRkV2bmhQM2VEVWo3TmlISEdDNzJWQWdzLzAv
MzIzMDMwMmUzNTMzMmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzMzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyDVPMA0GCSqGSIb3DQEBCwUAA4IBAQAuXPUnfJrz
eG7eX4hx8/DnBrPic05Y2JkQ5Gh/mitsLXIbu4IqPJMxQARluvNnfUF7YRivYzZO
jkwJmHeMaL51x74S0iRbYl0+ghuOeXLKOH0oQcBlrOFKrkcQ7ysdwnGvkuPWMrHt
C7T3mILeGynZRpCT+dgtKCKVjEKVoVYuqRYYyiq84SI2Y6zXgM6B4Of4ZCxdTMe6
kOdjGxoWI/EfiXqfsT0mU6cbmXYUwBfVWdfKOr/7IYaDerGwTZaJVuEJxIXzB0UP
+9u1OhSO/aFfOTHx+8XQnql8HUfuUl2zznP9ArthSywypa4LG3As04/kxbxk4Npi
2mCGvtRSwWvu
-----END CERTIFICATE-----
Generated at Tue Aug 25 22:25:49 2026 by rpki-client