Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
File:                     3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa (raw, json)
Hash identifier:          GXlNK/QePaoIEM2f5kuIntFX1ltE33JiQ89inffrhUE=
Subject key identifier:   B5:97:BF:95:EA:DF:71:20:80:40:78:7C:73:0C:7C:87:64:36:00:A8
Certificate issuer:       /CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
Certificate serial:       433AFB936847B4ED77E9980C7C384DA98A3BF086
Authority key identifier: 5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa
Signing time:             Wed 16 Sep 2026 13:21:09 +0000
ROA not before:           Wed 16 Sep 2026 13:16:09 +0000
ROA not after:            Wed 15 Sep 2027 13:21:09 +0000
asID:                     271466
IP address blocks:        201.49.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 10:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3a:fb:93:68:47:b4:ed:77:e9:98:0c:7c:38:4d:a9:8a:3b:f0:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBBD46F46AAD33267364B457DBF26525E4469A5
        Validity
            Not Before: Sep 16 13:16:09 2026 GMT
            Not After : Sep 15 13:21:09 2027 GMT
        Subject: CN=B597BF95EADF71208040787C730C7C87643600A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:05:fe:46:c1:54:68:98:cb:ec:ba:ec:fd:
                    f8:a4:9e:89:77:68:e7:d8:02:66:76:b2:dd:d9:9b:
                    c0:10:1c:b2:3b:84:3b:22:3c:94:31:37:47:49:f8:
                    95:3a:93:22:8f:ed:3e:24:9c:3c:38:d7:79:ad:ef:
                    57:01:c7:96:52:d7:92:f0:37:d4:a0:b4:5f:e5:92:
                    3f:bb:21:94:83:d9:1f:61:f4:6b:19:2c:05:42:59:
                    f4:2e:9f:df:36:29:02:f3:4b:76:a3:fb:8b:03:3a:
                    6f:aa:e7:6b:3e:98:9e:04:d2:53:39:6a:35:48:06:
                    5d:3f:7a:2f:05:54:85:bf:7b:b1:3f:88:85:57:3f:
                    6f:10:55:c7:e3:20:f3:0a:2d:2e:17:91:44:0e:90:
                    a2:a4:6f:c3:a2:42:0c:e5:27:06:8d:60:1a:62:2c:
                    b1:41:84:a3:e2:3b:0e:84:12:14:cf:0d:66:78:b6:
                    65:b3:3c:3d:e6:ce:5a:a4:ef:2b:eb:d6:f2:6a:7d:
                    6d:af:3a:57:3b:51:06:c2:84:77:11:c6:ea:ea:86:
                    f5:2a:65:02:37:8d:cb:05:f8:2d:52:e6:7e:7c:85:
                    10:51:34:ab:f7:9c:cc:dc:a2:c8:88:8e:87:95:63:
                    76:22:3a:c5:3e:be:d8:1a:9e:c6:8a:2d:e8:01:a9:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:97:BF:95:EA:DF:71:20:80:40:78:7C:73:0C:7C:87:64:36:00:A8
            X509v3 Authority Key Identifier:
                keyid:5F:BB:D4:6F:46:AA:D3:32:67:36:4B:45:7D:BF:26:52:5E:44:69:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/5FBBD46F46AAD33267364B457DBF26525E4469A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBBD46F46AAD33267364B457DBF26525E4469A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/3230312e34392e3138322e302f32332d3233203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:fe:df:77:39:11:d1:b8:ba:87:e3:c2:fc:ae:16:41:04:67:
         55:42:9e:e6:09:a9:14:18:bf:42:53:d3:c1:84:ae:81:0e:7a:
         c4:fb:5e:9f:60:30:89:16:07:79:2e:b0:76:6e:a5:3b:8d:2f:
         e5:2a:2b:b6:df:02:2e:e9:4b:51:68:3f:9c:95:7d:c1:97:14:
         3c:bb:7f:15:16:42:f3:35:a9:47:82:16:ca:1f:61:c9:d1:df:
         10:77:4e:1a:e7:42:04:50:24:70:68:28:fe:f7:51:a1:a6:83:
         e7:44:b5:28:11:5a:c6:36:d9:c6:3b:d1:ef:52:b3:f6:39:74:
         b3:3c:99:01:6c:96:eb:6b:0d:7b:e5:9d:14:4b:98:85:2c:3b:
         d2:12:d4:b3:89:81:d3:00:dc:e8:6a:66:90:bf:91:bd:13:be:
         ba:6a:9d:5b:94:79:e5:2b:1b:aa:89:ae:eb:c6:36:5d:7c:62:
         76:48:ea:28:e5:48:bd:31:e6:7c:b3:61:92:53:ab:3c:82:02:
         aa:ac:f7:42:7b:41:5d:65:ab:02:55:36:9c:5d:05:93:1e:98:
         e5:b5:d5:c0:20:d4:66:bc:31:74:68:3e:c0:b6:0a:43:1f:1c:
         58:08:f8:87:c2:e1:15:ea:b4:65:47:d4:f7:4b:81:89:d5:cd:
         f5:68:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:26:46 2026 by rpki-client