Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33342e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e33342e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          JmtfhQlbqTxE34642vWqgKc1Toci/WY3mzEQAX0HFo0=
Subject key identifier:   F8:B7:4A:22:DB:F3:93:AA:6D:B8:4D:8D:25:55:6A:69:E9:E5:1E:D8
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       16B5556AEC45CBB2F69ACBDF9500F3E3BA76E1A8
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33342e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 04:59:48 +0000
ROA not before:           Sat 01 Aug 2026 04:54:48 +0000
ROA not after:            Sat 31 Jul 2027 04:59:48 +0000
asID:                     8141
IP address blocks:        200.202.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:55:6a:ec:45:cb:b2:f6:9a:cb:df:95:00:f3:e3:ba:76:e1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 04:54:48 2026 GMT
            Not After : Jul 31 04:59:48 2027 GMT
        Subject: CN=F8B74A22DBF393AA6DB84D8D25556A69E9E51ED8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:26:85:bc:89:b8:62:4b:51:20:40:a2:47:
                    7f:0a:b7:6c:7d:4a:10:20:d1:62:aa:21:e2:46:17:
                    00:64:27:12:b6:ea:5a:0d:90:d9:98:57:b6:72:91:
                    05:55:f7:c0:cb:d6:6e:6b:e9:e8:e4:a2:b9:49:42:
                    c9:d9:47:d0:2c:0c:f6:fd:5e:04:38:1f:4c:ca:07:
                    cf:96:5d:17:a5:31:c3:fb:9a:9d:16:93:3f:65:fc:
                    df:97:60:68:bc:23:2c:b1:e7:d9:8d:41:76:fa:6a:
                    53:6b:7b:8b:04:ca:cb:8f:97:5d:40:a8:50:2a:db:
                    8d:25:4b:5c:71:05:35:68:8d:c5:3f:7b:34:c9:51:
                    0a:04:a0:2e:75:cd:24:ae:f7:dd:b0:f5:29:e5:4a:
                    c7:0c:33:84:85:aa:43:9e:d8:f9:c3:11:b4:51:00:
                    7b:48:ab:3f:c2:07:e2:2a:c6:de:1c:d9:20:ce:53:
                    77:7a:9b:32:5f:b8:9d:93:45:b1:9c:35:b0:9a:ff:
                    5c:07:ac:01:4b:25:3c:4c:2f:64:e2:a3:4e:c5:b9:
                    ef:d0:ea:94:73:2e:50:e7:44:e0:df:0d:4a:51:4d:
                    6e:f0:79:cb:90:9e:fe:12:54:c4:66:4e:c6:0d:85:
                    e8:6e:04:3e:82:5c:71:65:b3:08:ca:cf:eb:26:63:
                    bf:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B7:4A:22:DB:F3:93:AA:6D:B8:4D:8D:25:55:6A:69:E9:E5:1E:D8
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33342e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:17:22:b5:6d:e3:5d:85:69:88:53:48:78:29:f3:f2:79:92:
         42:b3:63:54:c1:5d:a6:ca:34:80:af:b7:71:cd:45:ac:e8:d5:
         69:da:fd:0b:fe:19:58:50:c0:1a:10:39:6d:8f:18:77:41:ed:
         ca:f7:c7:b8:41:63:87:ac:fb:10:66:fa:92:3a:e3:65:2d:50:
         cc:db:34:61:bb:b5:32:dd:98:ac:8b:19:c9:4f:ef:9b:fb:6b:
         1c:91:01:e5:e8:fd:5d:fa:32:2a:32:bf:42:f0:b9:b5:ce:47:
         5a:c8:bb:26:d7:73:0f:eb:de:0d:83:4d:4a:b7:c2:66:ec:b7:
         88:58:6f:ea:c6:7d:88:31:da:7c:69:46:60:09:72:1a:09:d3:
         f0:66:eb:69:83:f3:71:81:cc:bb:00:33:f5:53:a4:39:6d:ea:
         c5:42:fd:0f:61:39:bd:4c:85:b6:15:ec:50:8c:53:01:df:ab:
         a4:71:e9:3b:04:44:ad:3f:e7:59:f9:9b:8c:8a:52:f0:df:fb:
         fe:40:d6:9d:78:f1:c1:83:d7:1d:e2:85:ee:5d:08:f7:d4:b7:
         a8:47:3b:d1:ff:ae:d0:35:fc:16:c1:8f:99:cb:d2:ce:46:db:
         59:08:a6:fd:c8:74:df:f1:33:b2:8a:79:5b:46:2c:bb:b5:29:
         55:ad:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:25:34 2026 by rpki-client