Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          d062nV4GmO74p5992ZQASDeFCpG0jU/8wiiNvx274Ew=
Subject key identifier:   25:EE:36:99:6D:3D:3A:66:20:3D:F3:3D:B6:47:9A:26:26:5A:DB:01
Certificate issuer:       /CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
Certificate serial:       027D13317B2CDD58FE0BC0F44C555143143F68D2
Authority key identifier: 5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 16 Sep 2026 13:21:07 +0000
ROA not before:           Wed 16 Sep 2026 13:16:07 +0000
ROA not after:            Wed 15 Sep 2027 13:21:07 +0000
asID:                     271466
IP address blocks:        201.49.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 16:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7d:13:31:7b:2c:dd:58:fe:0b:c0:f4:4c:55:51:43:14:3f:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
        Validity
            Not Before: Sep 16 13:16:07 2026 GMT
            Not After : Sep 15 13:21:07 2027 GMT
        Subject: CN=25EE36996D3D3A66203DF33DB6479A26265ADB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:73:34:55:3a:84:7f:a4:82:16:39:22:5f:
                    bc:62:0e:67:2e:d8:d6:3b:11:9b:83:68:66:82:b1:
                    5d:57:ad:6a:5f:4a:91:fd:36:ae:2f:c1:72:b4:4d:
                    83:c8:28:21:d1:9f:48:8d:d2:01:9e:75:a7:01:fd:
                    99:f4:9e:a3:03:c5:84:2d:61:ea:e6:5d:1e:fe:cc:
                    ad:13:bc:24:80:b3:d3:11:f2:52:67:4c:c3:34:55:
                    a9:8c:47:79:0a:f2:de:e5:aa:9d:0a:92:ea:8a:92:
                    5b:ea:d8:04:70:b6:7e:d1:84:63:22:1d:15:87:8c:
                    9d:dd:2e:fe:f1:00:3f:15:6f:93:25:5e:38:f0:cb:
                    13:32:ac:d1:9c:1a:d0:94:05:69:70:c6:07:37:ac:
                    72:68:4c:74:ce:43:7f:1b:b0:7a:76:19:33:9c:01:
                    ba:36:87:94:37:8b:32:ba:df:1d:58:2b:2a:ec:11:
                    bc:30:92:ae:cf:23:23:3b:71:32:df:3b:f3:06:ef:
                    e1:08:f4:5c:9e:bb:67:d3:2a:a0:38:01:64:80:5b:
                    53:ee:bb:a3:c1:c7:e4:67:b5:fe:bb:5d:5c:b7:36:
                    e7:e4:7a:16:4d:83:7c:c0:ed:de:90:2f:73:3f:73:
                    b0:a5:69:df:86:6c:78:21:d2:42:30:ba:fa:c8:bd:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:36:99:6D:3D:3A:66:20:3D:F3:3D:B6:47:9A:26:26:5A:DB:01
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138302e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:ad:72:5d:fd:2a:41:76:bd:c2:ac:1f:a1:46:0d:30:14:
         10:55:c3:62:a2:f9:61:58:1f:fb:79:f3:42:8c:96:0f:3b:7c:
         40:ee:6f:dc:90:4b:87:1a:cd:ea:37:58:8f:51:36:bb:fd:02:
         c0:24:3b:bf:86:5c:73:32:23:31:44:96:f8:0e:ae:bf:72:7b:
         9b:02:e3:7b:d8:fd:59:ce:22:91:8f:86:ef:97:55:a2:9b:87:
         a3:fb:5d:e7:3c:72:c2:35:58:ec:37:bf:bf:6c:d8:b3:0b:f2:
         fe:83:1c:9a:63:a5:cb:d3:51:4a:50:89:8b:2b:bb:cd:a3:80:
         aa:a4:23:f8:5f:0e:fa:3e:37:20:72:92:73:94:f1:b1:cb:96:
         45:48:58:7e:53:63:35:52:6c:f2:bf:aa:19:c1:85:a1:a2:8b:
         e8:03:59:7b:49:47:85:75:3f:7a:e8:54:38:8f:fd:aa:b9:d3:
         c0:b5:41:81:0a:61:bd:7c:d2:ac:d0:2f:b9:91:46:78:6f:b2:
         94:fa:81:04:b6:d2:6d:d0:27:16:a3:aa:cc:04:4c:ce:cd:83:
         6b:8f:bb:8c:33:f2:2b:59:18:18:3a:58:16:be:53:ee:72:1b:
         e4:fd:d5:df:83:ca:28:94:6a:22:22:4c:76:b1:02:b8:a1:fc:
         3a:4f:98:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:57:53 2026 by rpki-client