Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34302e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e34302e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          V1lChVc+9y/48rf5Po+4GRPgKQSYZYmAg0kOCd3zAZw=
Subject key identifier:   30:B2:CB:5B:73:47:25:FF:E6:FC:31:D5:0B:1A:09:F0:5A:E4:1A:EC
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       6DD0C590461FC2E9C4418197ABCC0334548AE51B
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34302e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 05:00:28 +0000
ROA not before:           Sat 01 Aug 2026 04:55:28 +0000
ROA not after:            Sat 31 Jul 2027 05:00:28 +0000
asID:                     8141
IP address blocks:        200.202.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:c5:90:46:1f:c2:e9:c4:41:81:97:ab:cc:03:34:54:8a:e5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 04:55:28 2026 GMT
            Not After : Jul 31 05:00:28 2027 GMT
        Subject: CN=30B2CB5B734725FFE6FC31D50B1A09F05AE41AEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:7a:5f:09:31:76:09:17:59:aa:e9:c0:a3:
                    99:be:20:30:54:be:7f:58:50:89:09:c5:8f:a1:47:
                    fc:6f:e9:e4:be:cf:74:55:2e:c8:54:a9:5a:df:2e:
                    1a:e0:3a:c1:14:82:fd:d1:d0:8c:8f:8c:fa:52:9e:
                    dd:c6:9c:90:ff:1b:bb:af:45:49:c6:a5:80:8f:ff:
                    36:ba:0e:76:08:ad:ff:00:13:97:66:72:d0:15:a8:
                    58:eb:20:d3:54:7a:c2:96:f5:6f:cc:89:5f:6c:45:
                    d4:8e:2a:04:c2:30:1a:25:73:bd:95:7f:b1:07:d9:
                    7b:e0:bd:bc:5e:ff:b6:64:78:90:4a:95:4e:aa:2f:
                    b6:61:ab:73:2a:88:53:93:3f:6d:f5:42:96:d1:42:
                    e3:88:9a:d6:27:43:8a:e6:6c:4a:c8:f4:2b:da:37:
                    a5:1e:34:3a:0d:32:45:52:2d:94:30:34:bb:e4:6c:
                    1f:b8:5a:39:75:86:c8:8b:64:9f:3c:52:d1:2a:2b:
                    8f:27:e4:21:78:0f:fa:32:af:81:31:9d:60:b3:0b:
                    b8:d4:18:6a:5d:f1:3a:35:4d:3d:7f:cc:60:42:c0:
                    7c:8d:32:a0:6a:6e:e4:5b:4f:8a:1b:01:fc:41:82:
                    ea:8f:f4:40:46:56:2e:2e:79:2d:c0:21:68:58:0c:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B2:CB:5B:73:47:25:FF:E6:FC:31:D5:0B:1A:09:F0:5A:E4:1A:EC
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34302e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:c8:5b:56:14:a1:d7:c7:36:ce:03:98:0b:01:6a:ff:d8:5b:
         91:b7:4e:63:fa:8f:e4:90:e6:8c:35:c7:5f:7b:12:3e:17:18:
         b3:4a:30:25:65:34:cf:3d:f9:ab:01:af:2a:61:ce:a8:e9:6d:
         40:ff:4b:57:56:48:d8:2c:39:01:bb:0d:4d:a8:e9:ac:9b:48:
         a4:83:e2:b6:80:02:43:ee:da:bc:87:a1:00:b8:1b:63:4a:fc:
         2f:c7:eb:5e:95:5b:81:b7:b4:ef:79:fc:98:13:4b:fd:37:96:
         ad:a6:db:e4:95:b7:bc:de:a0:48:b3:3a:69:f9:c1:fe:1d:53:
         9e:05:72:0a:d0:ba:90:3b:7d:90:cb:a7:85:a2:79:f6:97:46:
         c2:7e:33:83:e2:0f:b9:55:cc:5e:1c:2a:fb:66:8e:e4:47:a8:
         c6:46:6e:3f:54:9d:f4:96:2b:af:2c:f0:39:60:25:86:67:ba:
         ae:ad:40:87:28:2c:6f:72:de:ce:93:0d:ed:14:2c:5f:52:00:
         a9:9c:db:c8:22:fb:dd:b6:1f:1e:28:e1:ce:49:aa:d5:74:c0:
         a8:70:4d:b0:9c:bd:6e:ce:d8:47:cd:6e:00:4b:40:7f:48:5f:
         75:47:f0:0d:b2:ce:2b:d7:66:6b:9e:72:20:ba:76:6e:79:17:
         72:32:88:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:26:04 2026 by rpki-client