Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
File:                     3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa (raw, json)
Hash identifier:          D48hNOO1gbO2EjZfOePFV6kBtRUAqmnyKC5j151p+4E=
Subject key identifier:   80:4C:07:80:75:73:B3:72:21:35:FD:62:21:44:0F:EF:74:02:11:21
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       3D7839BCD73CA52B57CD401FBA89A1058E3641AD
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa
Signing time:             Fri 14 Aug 2026 20:09:03 +0000
ROA not before:           Fri 14 Aug 2026 20:04:03 +0000
ROA not after:            Fri 13 Aug 2027 20:09:03 +0000
asID:                     272654
IP address blocks:        201.157.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 20 Oct 2026 14:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:78:39:bc:d7:3c:a5:2b:57:cd:40:1f:ba:89:a1:05:8e:36:41:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Aug 14 20:04:03 2026 GMT
            Not After : Aug 13 20:09:03 2027 GMT
        Subject: CN=804C07807573B3722135FD6221440FEF74021121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:22:49:ae:1d:8f:4a:d3:a0:5c:04:93:30:9c:
                    4d:08:50:b4:03:a2:4a:13:7b:37:b7:d6:e9:38:43:
                    2c:4b:c0:97:93:76:26:f7:12:ba:20:69:e5:e5:1b:
                    f4:f0:a0:7b:f4:5c:01:6c:6e:2f:09:42:f8:d5:05:
                    6a:05:e5:16:0e:c2:fa:83:dd:14:96:e2:f6:b7:df:
                    8e:53:5c:c6:56:8c:1e:9a:b8:cd:b1:bd:82:85:db:
                    0f:ef:89:40:82:4c:9b:fe:f3:5d:91:f4:ec:95:17:
                    5b:e5:10:88:f0:35:82:2e:54:c6:08:d9:63:7d:c1:
                    be:8a:46:c4:d6:95:62:75:94:d1:47:42:c3:cc:0b:
                    d3:36:61:ea:16:16:c1:9d:a5:75:85:ff:f1:cc:c9:
                    cb:08:49:96:af:1d:c3:78:b8:ad:91:3b:3d:13:b7:
                    95:f4:70:38:8e:2f:9e:1c:03:e3:68:d0:27:17:8c:
                    27:a4:40:d2:1b:5b:b3:dc:8a:5b:99:53:e7:dd:fe:
                    38:68:df:a9:a6:99:2e:c9:14:1f:2f:d2:86:98:0e:
                    ad:10:b4:bd:f0:bf:5a:07:81:de:bb:06:52:f2:bf:
                    e4:31:20:cc:88:5d:bd:75:a2:9c:54:0e:fa:d7:cb:
                    fe:45:2c:e2:1f:2e:3b:f1:93:29:40:1c:34:d8:64:
                    61:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4C:07:80:75:73:B3:72:21:35:FD:62:21:44:0F:EF:74:02:11:21
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3234362e302f32342d3234203d3e20323732363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:93:73:53:2a:77:07:b5:33:c0:9e:62:7e:72:be:e5:fc:5b:
         a7:d2:a6:d3:c2:4e:25:eb:a4:66:63:da:37:08:da:61:ec:39:
         a0:7e:89:32:62:4a:a6:e5:60:28:a1:b8:84:3d:41:b7:30:69:
         0b:6b:ee:96:e4:43:9a:b3:f2:41:5f:a8:71:33:99:1b:e3:ca:
         90:4f:c4:52:72:09:4b:e9:00:0e:5d:85:0b:fe:bd:ba:74:5e:
         be:61:5f:85:97:54:d2:20:d8:06:5b:b0:18:ee:03:32:fd:b2:
         7b:d2:8c:02:88:81:0e:19:e0:26:28:0e:21:d6:80:3b:93:cf:
         ed:86:a2:5c:ae:e6:97:26:ef:d1:8d:ca:a9:3c:0a:e7:7b:51:
         cd:1c:6b:8a:c0:61:5e:b6:24:61:f2:c3:76:06:70:3a:f2:ee:
         be:e6:32:a4:80:ae:c1:67:61:e4:36:a4:b6:03:d9:64:2d:b8:
         6d:fd:ee:5d:ff:12:1d:dd:23:78:0a:ed:5d:4a:06:e1:5c:0e:
         a0:6d:db:68:9f:0d:3a:d5:c3:ac:f0:d9:d0:3c:20:fe:87:dd:
         1b:da:6a:5e:b8:01:7d:11:d7:b0:a7:c6:67:6e:e4:65:b6:f8:
         e4:46:78:89:4f:13:24:9e:b1:f6:ee:08:3d:fd:d6:d1:6f:78:
         92:a1:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:35:12 2026 by rpki-client