Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34392e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e34392e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          cDfhyLWRk/8mmyW+ppwnjz1c073kDM+2TI6bAZwgmcg=
Subject key identifier:   EC:0A:45:41:D3:8E:A6:B6:AE:A6:8E:09:34:82:3B:DB:25:90:88:8F
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       18A56C76495E8C6BA321E4D87B39D0C3C0D0FE3A
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34392e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 05:02:54 +0000
ROA not before:           Sat 01 Aug 2026 04:57:54 +0000
ROA not after:            Sat 31 Jul 2027 05:02:54 +0000
asID:                     8141
IP address blocks:        200.202.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a5:6c:76:49:5e:8c:6b:a3:21:e4:d8:7b:39:d0:c3:c0:d0:fe:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 04:57:54 2026 GMT
            Not After : Jul 31 05:02:54 2027 GMT
        Subject: CN=EC0A4541D38EA6B6AEA68E0934823BDB2590888F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b2:17:ed:ad:ca:f1:83:e5:29:b2:47:c2:4d:
                    f1:58:53:5d:90:9e:ca:b5:0d:a0:4d:c8:14:f2:b1:
                    88:eb:bc:8b:cd:67:39:a9:53:d9:ef:4a:fd:e1:b6:
                    44:8b:d4:d3:03:56:ec:ba:d3:b1:01:2a:26:e5:ad:
                    2c:0e:4c:aa:5a:14:03:4f:4f:bd:bf:e7:d2:cf:6e:
                    19:ff:58:00:13:2b:ba:cd:08:bf:f1:ba:85:22:0d:
                    dc:97:a4:89:0e:6e:22:b0:fd:9c:5f:79:df:2a:01:
                    5c:ee:d0:32:66:36:d7:dd:0f:43:ed:d2:12:fc:66:
                    79:cc:a1:66:6c:0b:72:2d:33:19:e2:a0:a3:bd:25:
                    80:91:80:14:76:7e:44:23:00:16:3e:17:a4:09:3a:
                    05:58:f6:ca:41:21:6b:e0:3b:46:e3:4d:b6:85:19:
                    d6:a6:fc:ac:e2:78:79:f0:d0:a5:92:bb:f3:24:10:
                    8b:4e:59:62:8f:5a:5c:4a:2c:c1:2f:6e:ef:e0:59:
                    be:38:a4:c1:12:61:9d:6a:77:46:69:ed:c0:37:cb:
                    b7:28:61:4c:b4:25:bd:1e:43:28:83:dd:cf:64:3f:
                    52:d5:6f:e7:e8:85:8c:e8:7a:09:42:cf:2b:02:94:
                    83:0d:4e:f3:1e:c8:69:09:f9:f9:87:66:61:9a:6a:
                    ba:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:45:41:D3:8E:A6:B6:AE:A6:8E:09:34:82:3B:DB:25:90:88:8F
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e34392e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:5e:43:d0:c3:f3:63:27:70:99:7a:68:6e:31:5f:c0:4f:70:
         c5:b6:bf:ed:fc:be:d9:ab:85:69:b1:64:65:f8:94:9d:4b:cb:
         af:96:20:bd:ed:07:9a:39:84:87:53:c0:bb:98:8b:d0:af:83:
         a2:0c:05:94:d8:05:e1:d7:5e:44:1e:9c:85:de:0b:64:14:ac:
         01:18:7c:82:b5:b7:16:44:26:3b:82:8c:b7:6b:fa:69:36:44:
         04:43:11:61:b9:0d:e0:5a:e4:9c:70:ae:1a:bc:ee:10:23:c0:
         2a:cf:dd:dd:e4:82:c1:4d:bb:99:98:10:2d:ff:ea:d5:fe:aa:
         04:c0:89:b6:db:5a:6d:80:4b:38:91:f6:27:87:cb:c5:55:48:
         77:27:ff:02:e7:80:a0:94:45:82:9d:5b:cc:b8:8c:1f:05:bf:
         d6:26:da:8a:ea:f0:a2:b7:81:09:9d:98:cc:ec:c5:7e:98:a2:
         c3:ce:bc:06:fd:d4:95:61:95:4f:ee:e1:04:b5:20:3b:56:93:
         c0:d5:fc:96:ba:92:7c:e9:6f:b2:b2:e8:15:19:7c:65:1b:95:
         b3:a3:aa:66:1b:79:9a:4f:36:c2:66:52:a3:7a:63:dc:54:54:
         27:0c:93:e1:0c:22:87:a5:d4:bd:7b:9a:39:67:fa:86:2d:30:
         ce:80:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:15:26 2026 by rpki-client