Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3139362e302f32322d3233203d3e203134383638.roa
File:                     3230302e3139352e3139362e302f32322d3233203d3e203134383638.roa (raw, json)
Hash identifier:          tvDE6lu1fcRrrGoseXcH8D8fB5cjh7ZtOC8MzYT9miQ=
Subject key identifier:   87:A8:04:61:E0:DC:77:AE:DF:F4:EA:C5:EA:10:12:28:3E:92:46:CC
Certificate issuer:       /CN=9920657508D9060C3C6E939427883A471F4DA34F
Certificate serial:       3D206D35C2C745C424EFAF78F5A31E1919CE5402
Authority key identifier: 99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3139362e302f32322d3233203d3e203134383638.roa
Signing time:             Mon 17 Aug 2026 17:48:33 +0000
ROA not before:           Mon 17 Aug 2026 17:43:33 +0000
ROA not after:            Mon 16 Aug 2027 17:48:33 +0000
asID:                     14868
IP address blocks:        200.195.196.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl
                          rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:20:6d:35:c2:c7:45:c4:24:ef:af:78:f5:a3:1e:19:19:ce:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9920657508D9060C3C6E939427883A471F4DA34F
        Validity
            Not Before: Aug 17 17:43:33 2026 GMT
            Not After : Aug 16 17:48:33 2027 GMT
        Subject: CN=87A80461E0DC77AEDFF4EAC5EA1012283E9246CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:15:ef:0c:5e:54:8d:df:29:e8:8e:14:9e:c7:
                    61:49:9e:77:fe:08:ac:9b:8d:29:1b:9c:fb:b8:74:
                    52:19:bf:02:18:56:c5:d8:14:dd:bd:18:d8:8a:a9:
                    e6:3a:b5:82:46:1f:6a:30:a0:42:70:f4:41:17:51:
                    5b:dd:ed:11:83:7b:00:fd:e7:45:54:de:b5:f4:d3:
                    0d:e1:a4:34:15:91:2f:ec:34:6b:24:11:b8:a4:a5:
                    5d:a1:7a:9c:e6:af:e2:ec:b3:48:13:f1:da:4c:10:
                    fc:32:a7:ac:e9:38:88:e9:59:81:14:4b:a5:96:2a:
                    4e:85:18:5d:b5:3a:63:fe:42:31:ce:1b:d8:15:98:
                    68:6c:49:9d:57:69:6b:45:6d:5f:15:9b:83:32:80:
                    c1:0e:b2:cc:13:aa:38:cb:3c:30:af:69:fa:ab:dd:
                    5f:69:8d:45:dd:dc:90:b0:6f:78:47:eb:71:f6:de:
                    0d:69:f4:e2:5f:84:00:6e:fb:fc:26:da:bb:e1:16:
                    a9:39:42:31:c9:90:84:12:e9:99:cc:27:81:c0:94:
                    9d:12:c9:00:84:38:ea:9b:84:fd:45:cd:6c:41:aa:
                    2f:66:63:8b:e3:9e:ef:f1:c3:62:73:19:64:84:54:
                    ce:60:4e:6c:35:7a:91:f4:38:ee:35:cf:50:46:22:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A8:04:61:E0:DC:77:AE:DF:F4:EA:C5:EA:10:12:28:3E:92:46:CC
            X509v3 Authority Key Identifier:
                keyid:99:20:65:75:08:D9:06:0C:3C:6E:93:94:27:88:3A:47:1F:4D:A3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/9920657508D9060C3C6E939427883A471F4DA34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9920657508D9060C3C6E939427883A471F4DA34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kfLLshNA8KBV1miJMgjv95vgfkva8WzgvKU4Aohc7Yj/2/3230302e3139352e3139362e302f32322d3233203d3e203134383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.195.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:85:a3:8c:99:27:95:19:6d:13:ac:10:cc:0f:4b:53:ba:b2:
         e5:87:13:66:3b:eb:25:99:24:b5:7f:a2:1f:cf:2b:32:93:e8:
         f3:5f:08:7f:8c:e8:62:d9:b0:a3:7b:d4:a5:27:6f:ed:63:a3:
         00:3d:e7:7f:ff:ba:0c:71:64:a7:8d:a2:4f:1f:8a:5c:9a:05:
         23:9e:f3:dc:33:7d:c2:58:3e:09:7d:1e:34:a8:72:ef:b3:1e:
         7f:c3:e2:4c:05:64:b9:18:f1:63:c5:e5:72:f5:4c:e7:41:78:
         02:8f:5b:ac:55:99:52:c8:f9:f5:25:df:b1:64:20:96:5c:06:
         51:3e:b5:89:87:89:bf:06:43:e3:a5:64:4c:92:3e:18:b1:d6:
         0a:af:e6:e7:5b:f3:02:3f:36:f5:87:00:50:a4:89:fe:e7:aa:
         4f:35:94:d8:cd:ff:4d:58:92:1c:5a:54:7d:0d:4f:de:0a:1b:
         1a:01:40:ff:df:9e:b2:97:d7:b4:47:3f:ab:6c:47:1e:2a:ed:
         17:37:26:d8:86:a3:7c:c6:db:f8:76:12:65:eb:32:08:23:42:
         9a:dc:3d:46:64:60:f2:18:a4:65:e5:ee:32:a5:f2:38:82:fb:
         ee:a4:ab:be:26:00:78:92:65:5f:b0:a8:82:a4:27:91:aa:46:
         03:54:df:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 04:33:31 2026 by rpki-client