Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33322e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e33322e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          RAv/hbPNBwojGXHkhV3VP/KN9WnXUtyeeYy9xMGMH90=
Subject key identifier:   8F:D2:57:AB:39:D8:33:9E:64:AC:0B:22:75:BC:C8:BF:32:BA:C7:E6
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       7B555265E2AC39E1EACB47136B282FEA0234BD4A
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33322e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 02:37:08 +0000
ROA not before:           Sat 01 Aug 2026 02:32:08 +0000
ROA not after:            Sat 31 Jul 2027 02:37:08 +0000
asID:                     8141
IP address blocks:        200.202.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 14:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:55:52:65:e2:ac:39:e1:ea:cb:47:13:6b:28:2f:ea:02:34:bd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 02:32:08 2026 GMT
            Not After : Jul 31 02:37:08 2027 GMT
        Subject: CN=8FD257AB39D8339E64AC0B2275BCC8BF32BAC7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:71:e2:b7:14:14:5d:60:04:2d:a9:5f:cd:00:
                    05:a4:6d:0c:a5:f0:ae:38:2d:22:29:68:38:58:7b:
                    9c:04:c8:e4:7a:1b:3b:9c:b8:bb:cd:5e:58:83:6c:
                    f0:23:12:84:a7:06:e5:9e:c9:0c:9f:d9:7c:08:5c:
                    34:02:82:36:02:e7:24:f1:27:7b:fd:f2:5b:36:7f:
                    41:15:fe:d6:59:77:39:02:0d:a7:b9:dd:cd:3b:c8:
                    ed:53:2d:a5:ac:13:b4:7e:f7:8c:f4:6d:0f:2c:6a:
                    f8:72:ae:a9:75:f1:3e:5d:9b:2e:6c:96:ea:dc:69:
                    64:ba:cb:b8:65:19:9c:99:07:c0:12:a8:af:72:c9:
                    93:b0:05:8d:c9:59:94:8d:08:01:33:61:f7:9c:aa:
                    80:07:cb:f8:54:85:99:a7:a8:00:5f:83:9e:4a:34:
                    6b:43:22:d4:bd:22:f6:cc:f6:30:97:15:41:77:56:
                    5a:94:6d:08:e7:dd:55:0f:c6:0d:7c:1b:6f:fb:2f:
                    0c:e3:c6:69:74:49:35:ce:7b:cb:77:cd:1e:e5:11:
                    a1:ca:42:a1:49:a0:a1:65:9c:46:9c:57:fe:89:49:
                    1f:a7:e9:19:be:bc:68:cb:10:c4:b4:b7:04:0f:00:
                    4e:c1:a9:94:9f:72:01:ad:b2:17:a9:00:a5:31:7c:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D2:57:AB:39:D8:33:9E:64:AC:0B:22:75:BC:C8:BF:32:BA:C7:E6
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33322e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:a5:ef:cb:3f:fe:a4:56:03:76:d7:d2:89:8d:e6:d4:56:f7:
         ad:f1:43:75:9a:14:ca:3b:96:9d:15:13:67:8e:38:63:01:7e:
         a6:06:34:e1:52:eb:15:c1:99:71:91:ab:94:a3:3a:a8:50:76:
         ef:7c:99:bb:6b:b4:df:d2:c5:73:d7:7d:48:65:4c:37:02:da:
         1e:75:f0:1b:eb:a0:c7:90:28:31:27:4c:f3:53:f1:db:59:05:
         19:f3:64:73:a9:0f:bb:b1:f3:a2:1f:b9:f9:97:2a:41:cb:c0:
         46:9a:b2:43:c7:75:8e:e8:a3:a5:19:94:e5:a6:33:20:36:da:
         cf:fc:7d:7b:79:4d:d4:20:1c:ab:80:25:eb:25:e3:95:6d:5d:
         3e:3a:78:41:95:f6:9a:5c:84:f9:aa:fb:d6:9f:d2:8f:e4:09:
         8b:1a:05:64:1c:89:18:21:71:3c:db:e9:ab:2f:12:0c:47:5d:
         0d:71:aa:e8:f2:34:33:3d:aa:82:93:3e:98:a4:0f:a0:ad:62:
         04:76:0d:8d:86:47:1b:38:bc:0e:45:4e:59:a1:d8:cb:1f:1e:
         f4:59:e5:fa:a7:d4:cd:a9:2e:17:14:ad:2f:db:86:f5:7a:bf:
         6c:a1:03:ed:b0:ea:28:ac:af:8b:39:d7:89:22:47:43:61:15:
         b3:17:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:49:57 2026 by rpki-client