Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34352e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e34352e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          q8eVILmDr97+/+VmNME8vkZ1LyDlcZ+fsv7Sd8Y98pY=
Subject key identifier:   29:C6:F2:71:44:FF:17:CA:83:9F:0A:FC:AE:77:12:EF:7C:7F:A2:01
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       1BE2DE86BD7D6550DDA4B8D38E085AA7079CB730
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34352e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 05:02:08 +0000
ROA not before:           Sat 01 Aug 2026 04:57:08 +0000
ROA not after:            Sat 31 Jul 2027 05:02:08 +0000
asID:                     8141
IP address blocks:        200.202.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e2:de:86:bd:7d:65:50:dd:a4:b8:d3:8e:08:5a:a7:07:9c:b7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 04:57:08 2026 GMT
            Not After : Jul 31 05:02:08 2027 GMT
        Subject: CN=29C6F27144FF17CA839F0AFCAE7712EF7C7FA201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0e:40:09:47:bc:89:1a:a9:5c:ad:62:0c:0a:
                    e8:45:61:25:b4:23:65:cf:f7:e1:de:18:cd:2f:01:
                    9d:13:55:d6:c0:ea:f7:3d:47:73:e0:32:c7:38:d2:
                    01:7e:b2:9f:9a:0d:0c:41:2c:65:2b:95:ec:ce:dd:
                    76:69:97:7d:ba:66:4d:ae:a0:e8:a7:3a:16:97:28:
                    c1:b1:86:6b:f5:b2:da:2f:8a:83:d4:61:12:39:2b:
                    de:54:dc:a4:44:75:e7:1c:c6:87:2f:43:86:3c:06:
                    bf:90:d2:5b:7b:90:ef:52:db:85:c9:93:c0:b5:ea:
                    db:06:9b:cc:35:0c:61:cc:78:67:ec:bd:47:58:66:
                    82:bf:48:5a:35:69:f3:af:fe:e2:ec:f1:8d:cc:45:
                    ef:87:e4:a4:e6:9a:a3:e3:12:82:26:e3:7a:d1:9a:
                    52:63:b9:07:f7:34:d4:d3:48:e0:42:15:41:9c:c6:
                    d1:f3:59:e1:ff:71:ba:1d:5f:42:9b:e9:4d:a2:d4:
                    38:34:ec:99:1b:86:da:98:ca:7f:c0:b2:8f:19:a4:
                    5d:68:57:dd:e7:18:75:1a:08:71:da:ae:08:2f:24:
                    7f:af:58:a2:d7:69:ff:e5:0a:15:a5:d2:db:cc:82:
                    1f:8a:48:c0:54:17:23:9a:6d:ca:00:96:06:a1:18:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C6:F2:71:44:FF:17:CA:83:9F:0A:FC:AE:77:12:EF:7C:7F:A2:01
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34352e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:05:e8:ee:37:c7:97:29:e6:f7:63:2f:3d:b0:bf:05:da:
         1e:db:fb:ab:da:05:37:20:43:6e:a9:54:0d:97:c7:90:b2:b7:
         1c:30:e5:86:89:d3:dd:a8:8f:39:16:b5:ed:0b:fa:ce:ac:74:
         60:42:e7:a5:52:5e:b2:f3:e8:c8:a6:6a:9e:b8:23:0d:36:28:
         a4:db:89:88:76:f5:29:96:06:22:14:81:b1:a2:b0:18:99:50:
         7b:0b:b7:c1:2a:c4:66:68:6c:0f:4c:bf:ae:bd:e5:ce:64:88:
         7b:13:30:fc:be:43:74:c5:4b:79:6b:bd:48:80:c3:78:c4:e9:
         92:f9:4f:70:08:92:cf:d4:a3:82:90:1a:5a:79:da:4c:a3:5a:
         1c:80:25:8b:41:ec:72:e8:a4:72:6d:ad:2d:7f:20:53:0d:93:
         dc:22:a7:b1:3c:21:39:8a:97:59:f5:fe:8d:57:9d:68:92:18:
         e2:1a:cd:ca:43:bb:e1:8a:f1:36:b1:29:2f:76:2a:19:40:62:
         8a:3b:7d:b0:30:eb:08:e6:be:61:f5:6e:e9:31:a0:55:a6:5a:
         ed:01:da:5e:90:d9:af:b7:49:e1:81:09:c3:c2:10:b1:6a:f1:
         dd:13:89:98:db:fe:9e:60:a4:51:c2:5e:b2:b4:47:4d:a1:d5:
         e7:8d:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:18:41 2026 by rpki-client