Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34312e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e34312e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          gDtTlarPKEAEOwwpHKQPK1k9iCvMjzoFQBoDs3Cd8y0=
Subject key identifier:   F1:73:DC:49:8C:34:92:69:44:0D:D6:6B:AD:18:33:39:6E:10:B6:86
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       66D531BEBFFC5D3817B7BCD3DCF653E7D64F5373
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34312e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 02:38:33 +0000
ROA not before:           Sat 01 Aug 2026 02:33:33 +0000
ROA not after:            Sat 31 Jul 2027 02:38:33 +0000
asID:                     8141
IP address blocks:        200.202.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:31:be:bf:fc:5d:38:17:b7:bc:d3:dc:f6:53:e7:d6:4f:53:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 02:33:33 2026 GMT
            Not After : Jul 31 02:38:33 2027 GMT
        Subject: CN=F173DC498C349269440DD66BAD1833396E10B686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:b3:47:fa:93:e8:9f:ab:a0:ec:4c:ca:18:
                    c0:7e:b9:f7:3a:c7:cf:25:01:c5:6e:6c:67:28:24:
                    02:bd:f7:c2:8f:2f:5e:cf:6d:ec:22:48:a6:cb:87:
                    0f:31:c0:56:c0:3b:48:04:81:82:7e:6e:46:0a:7e:
                    02:d7:1d:8e:08:ca:06:78:49:8d:d6:34:5b:de:e6:
                    0f:c9:7a:d1:83:3a:a0:3c:87:3a:b8:b6:d4:24:0a:
                    c4:59:79:5d:ca:88:77:1b:a0:a8:cc:ba:3a:dd:d7:
                    46:a9:e9:30:92:e6:1d:8a:3b:55:4b:97:17:96:f5:
                    76:27:95:12:13:c7:80:3e:23:67:57:4f:32:98:42:
                    b1:cc:9e:b8:d8:a9:2a:9e:c1:19:3c:f9:68:95:8e:
                    96:04:35:6c:a1:ec:42:c3:2e:48:31:a1:13:03:ef:
                    5c:5a:31:aa:66:ce:72:72:73:24:b2:22:93:94:b8:
                    95:3a:07:2b:d3:a9:82:b7:d7:78:fe:63:e0:2e:35:
                    cc:90:a2:1f:8f:58:03:2c:8e:0b:a7:f0:52:ed:e1:
                    9d:31:b8:fb:51:24:f6:aa:54:32:e8:e2:bd:ec:4e:
                    f2:0f:52:fc:f7:8a:33:2d:3c:c9:69:f4:f1:c4:bb:
                    12:30:ab:f5:16:85:a0:e9:68:d2:35:f9:c5:5a:26:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:DC:49:8C:34:92:69:44:0D:D6:6B:AD:18:33:39:6E:10:B6:86
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34312e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:41:70:4f:c4:16:34:ac:e6:bb:99:74:81:bc:97:5a:51:a2:
         38:65:32:5e:3e:3a:5a:c6:ee:cf:80:dc:99:6b:a1:1d:a6:55:
         0f:56:14:62:fb:eb:df:22:d9:34:02:39:69:eb:01:14:4d:93:
         a4:4a:f2:79:71:87:c3:9f:00:ea:a0:24:ff:48:1b:1a:4a:ca:
         c9:a1:ab:d0:2a:f7:89:00:af:74:2b:08:7b:15:e3:ec:fd:cc:
         5a:77:95:38:7d:3a:5a:5e:09:fa:d2:99:96:70:16:1e:23:33:
         9a:c3:72:98:c7:7a:59:86:48:3d:de:64:81:09:30:d8:ab:31:
         d1:47:3c:77:7f:00:35:1f:ef:c2:d2:4a:e2:14:c6:28:f4:68:
         69:d4:b8:3b:c9:16:f9:a8:5f:f5:fc:91:3a:75:91:9e:5f:7c:
         65:57:09:b4:5d:01:26:9e:fa:5e:67:96:ee:d1:7b:24:63:97:
         b2:c3:4e:67:33:72:93:99:7b:00:3e:bc:fc:f1:86:8f:80:21:
         f2:22:d8:55:da:e7:f1:d3:38:41:e0:1c:13:df:e3:0b:d1:70:
         77:c4:88:6e:49:45:8e:41:0b:e2:e4:f3:2a:86:47:a6:48:3c:
         d5:b9:96:dd:93:06:86:fd:4f:22:b2:34:3f:5a:bd:75:ec:92:
         21:98:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:32 2026 by rpki-client