Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e35362e302f32342d3234203d3e2038313431.roa
File:                     3230302e3230322e35362e302f32342d3234203d3e2038313431.roa (raw, json)
Hash identifier:          ucbit3gyX0BDZOh6B+Lc+o97mBpTDlaHRa1+bvQ1q/0=
Subject key identifier:   A7:A5:4A:4B:EB:C9:99:9B:2F:B3:21:A3:47:91:0E:3A:29:C1:F3:40
Certificate issuer:       /CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
Certificate serial:       13B11F72B311394DA67916F4DAE07FBA5DF7FE18
Authority key identifier: 02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e35362e302f32342d3234203d3e2038313431.roa
Signing time:             Sat 01 Aug 2026 05:04:06 +0000
ROA not before:           Sat 01 Aug 2026 04:59:06 +0000
ROA not after:            Sat 31 Jul 2027 05:04:06 +0000
asID:                     8141
IP address blocks:        200.202.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl
                          rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 09:40:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b1:1f:72:b3:11:39:4d:a6:79:16:f4:da:e0:7f:ba:5d:f7:fe:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02145CB9D2610F30261A5E2C4CB7A3003AFE8F72
        Validity
            Not Before: Aug  1 04:59:06 2026 GMT
            Not After : Jul 31 05:04:06 2027 GMT
        Subject: CN=A7A54A4BEBC9999B2FB321A347910E3A29C1F340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:1d:14:66:ea:53:5e:48:55:19:12:74:5e:
                    d1:7f:63:4e:19:41:b7:60:fb:25:30:7d:d9:68:07:
                    67:f3:4a:96:bb:09:90:82:af:53:ef:d3:14:27:89:
                    97:b5:b6:00:1c:f3:70:2c:a0:8d:14:d1:51:49:f5:
                    ef:4b:6c:fb:b4:93:87:eb:14:28:e3:c8:3c:61:ec:
                    f3:5b:67:1f:31:de:bc:1e:7b:2f:d2:4d:b1:9b:61:
                    9a:f8:03:fc:7b:b1:d0:46:45:70:0f:0d:23:9f:f8:
                    aa:e1:34:0f:00:9d:21:c6:ad:45:d3:97:ac:48:f5:
                    55:d3:2d:73:e0:e7:6c:45:50:11:9e:96:9d:a9:db:
                    8e:e7:67:59:3f:b5:4c:e6:2c:e3:4e:2a:92:89:b9:
                    33:1f:f7:61:c2:bd:33:ba:39:8f:71:63:68:62:5f:
                    ce:11:fa:82:02:1f:fe:a6:fe:5e:4f:9b:30:26:4d:
                    38:63:ae:cb:13:77:e4:ae:3a:f5:a9:90:1c:bb:95:
                    3c:74:11:fb:30:8c:2f:75:d7:5d:88:f9:0b:03:0a:
                    8f:31:19:61:93:60:c8:cb:b0:45:58:d5:1a:c0:ec:
                    03:8d:5c:56:36:ac:31:cb:6a:e5:96:67:d5:ff:2c:
                    cd:70:85:ed:ef:da:49:5d:b1:4f:97:a0:b9:52:bb:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A5:4A:4B:EB:C9:99:9B:2F:B3:21:A3:47:91:0E:3A:29:C1:F3:40
            X509v3 Authority Key Identifier:
                keyid:02:14:5C:B9:D2:61:0F:30:26:1A:5E:2C:4C:B7:A3:00:3A:FE:8F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02145CB9D2610F30261A5E2C4CB7A3003AFE8F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NhV9BrTgvdr72E23Njdrpi5Qm1gLWH7JKbVQthkwE5T/0/3230302e3230322e35362e302f32342d3234203d3e2038313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.202.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6c:7b:d4:53:35:21:2d:87:19:3f:1f:05:e4:9e:ad:00:bd:
         58:5f:c8:0d:7f:9a:06:2f:f2:55:f4:17:08:ec:ba:d2:4c:50:
         23:e5:42:52:bc:50:6a:d1:f2:73:7a:c5:13:9f:eb:74:1d:ed:
         9f:0c:96:a9:76:cc:db:f8:32:cb:2b:98:e8:ef:7e:39:b5:57:
         be:61:d4:af:33:d1:09:80:1b:ba:a1:0f:50:7b:3e:62:95:78:
         1b:51:28:05:69:bd:23:e7:d2:6e:88:4f:a9:49:e9:c2:b6:9b:
         c8:3c:fc:f3:f9:2c:56:4a:12:10:36:ff:68:0c:e1:68:29:17:
         cf:a9:9a:ba:58:6d:17:41:d8:bb:2e:c7:37:4e:1c:1f:52:69:
         1f:2d:93:9e:3e:48:ea:53:4e:8f:14:dc:e9:1c:4e:c4:22:af:
         36:13:63:2e:43:f3:d3:93:ef:a8:a2:2a:88:de:18:e5:ed:20:
         06:85:da:05:ed:4c:4d:1d:aa:70:71:b2:b3:2a:fd:71:33:b1:
         66:8d:ec:ee:34:2a:fa:f7:18:a4:f9:e7:14:ba:65:21:12:76:
         9a:0f:02:63:57:11:69:e8:27:74:6d:9f:a4:de:9d:22:b7:1e:
         ca:9d:33:cc:88:7b:f8:3c:df:85:fd:ce:df:2a:e9:82:f8:ef:
         ef:58:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 08:36:20 2026 by rpki-client