Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33372e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e33372e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          n3guncmjj8FfiiD6kmPNIcvEbfOGlNhHJ3g9i7BrtGI=
Subject key identifier:   18:F9:89:C2:2D:3E:4C:BD:68:D6:30:58:C6:F5:EF:FA:C0:60:68:01
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       070E2210F81C641F17DD1C03E332C0A1CDD4C3EB
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33372e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 02:38:04 +0000
ROA not before:           Sat 01 Aug 2026 02:33:04 +0000
ROA not after:            Sat 31 Jul 2027 02:38:04 +0000
asID:                     8141
IP address blocks:        200.202.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0e:22:10:f8:1c:64:1f:17:dd:1c:03:e3:32:c0:a1:cd:d4:c3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 02:33:04 2026 GMT
            Not After : Jul 31 02:38:04 2027 GMT
        Subject: CN=18F989C22D3E4CBD68D63058C6F5EFFAC0606801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:01:2c:b1:75:94:1e:bf:7e:ba:4d:9d:14:
                    7b:7d:3d:16:2c:30:ce:ef:42:36:fd:b4:b2:21:eb:
                    e9:b7:05:87:79:0e:85:2d:8c:e5:40:12:79:3f:c0:
                    91:79:c6:ad:29:e1:e0:f4:6d:fe:72:78:ae:62:3e:
                    18:0f:fd:d7:5a:4a:a7:1e:8d:47:59:81:d2:18:00:
                    a7:5f:7c:4c:ce:7a:d6:ec:22:af:9b:6f:c2:4a:8b:
                    81:f8:52:27:b8:1d:78:10:75:3d:f5:aa:5a:db:8e:
                    16:22:d8:2f:71:41:41:06:12:f6:0d:e4:93:3a:1d:
                    8c:a0:51:f9:50:a9:cf:10:f3:0a:5f:97:64:02:3c:
                    80:14:3b:2e:7a:eb:f5:9d:3f:d1:fd:a8:1f:d4:b0:
                    dc:fb:ef:ce:e1:d0:af:f2:aa:e5:8b:85:3a:11:f4:
                    43:44:f7:c1:c1:22:5a:0e:27:fd:13:b9:4a:00:5d:
                    8b:be:0e:8c:76:3f:60:1d:f2:23:6b:c7:7d:07:ce:
                    55:8f:d2:c4:85:88:b8:2b:b9:79:a1:ba:0e:a7:68:
                    ef:9d:1e:25:5b:dc:d8:c9:94:f5:1d:67:66:2f:58:
                    11:97:59:0c:7f:5a:5d:aa:71:75:6a:42:cf:de:34:
                    6f:2b:01:96:c3:f7:82:08:79:d7:3a:ba:a6:a6:55:
                    19:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:89:C2:2D:3E:4C:BD:68:D6:30:58:C6:F5:EF:FA:C0:60:68:01
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e33372e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:d2:78:f1:1c:09:3e:33:ce:2f:fe:2e:97:6a:ad:55:ae:
         fd:5d:ca:92:f7:58:a6:42:dd:5d:b0:79:c7:5a:74:96:b2:4c:
         dc:8e:df:99:33:da:8f:84:25:a9:62:22:e1:42:02:28:56:0c:
         24:1f:02:bd:ad:96:dd:f0:bb:0d:c3:d1:5f:7f:ba:97:ac:da:
         90:dc:79:93:ca:f3:1f:0d:1a:ad:3d:83:b2:e4:04:e1:a5:93:
         30:b0:d6:e3:a1:02:dd:3e:d9:e1:16:93:32:87:3c:dd:15:ab:
         00:28:5a:9a:36:20:2c:7d:3b:6a:e2:48:24:18:12:da:69:d7:
         34:cd:23:d8:e0:8b:98:88:2c:58:6c:57:fb:1b:1e:55:29:70:
         ca:78:7c:1c:75:9c:9d:65:62:a3:ab:82:26:c4:fd:81:50:0d:
         0e:15:90:4d:49:93:95:87:49:c2:83:eb:e7:62:ff:b2:1b:cd:
         a6:d7:81:16:f3:a4:aa:3f:2c:01:01:34:2b:03:1d:50:21:1c:
         c5:50:4a:15:65:5b:40:33:2c:94:66:f5:99:27:03:db:ec:da:
         9a:41:8e:5d:fa:c4:32:77:3d:3c:b2:29:22:80:d8:65:6e:72:
         34:b5:dd:31:e6:e9:b8:84:8a:b7:ff:b0:8b:54:dc:09:8d:ab:
         1c:fb:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 18:13:23 2026 by rpki-client