Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
File:                     3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa (raw, json)
Hash identifier:          neLDLxoA7Qh2iy+WwgpFav7BGrCV/fuOmrMo/OfWIKw=
Subject key identifier:   48:B9:44:D9:8D:46:CB:A0:16:66:BF:E1:73:69:3D:10:6C:5B:D1:C4
Certificate issuer:       /CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
Certificate serial:       2DAB4C1C88B5F2A075C60F614FB68268BD4B8A99
Authority key identifier: 24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa
Signing time:             Thu 26 Mar 2026 13:23:36 +0000
ROA not before:           Thu 26 Mar 2026 13:18:36 +0000
ROA not after:            Thu 25 Mar 2027 13:23:36 +0000
asID:                     270915
IP address blocks:        201.140.216.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl
                          rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 03:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ab:4c:1c:88:b5:f2:a0:75:c6:0f:61:4f:b6:82:68:bd:4b:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24433D21977FD690D9A22FE9B7A0D866F38A662D
        Validity
            Not Before: Mar 26 13:18:36 2026 GMT
            Not After : Mar 25 13:23:36 2027 GMT
        Subject: CN=48B944D98D46CBA01666BFE173693D106C5BD1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:24:41:76:0a:30:f0:df:b0:5c:27:41:d7:
                    c0:d1:76:ae:cd:f0:85:75:4a:1e:ef:a6:05:70:07:
                    f1:47:1b:ad:00:d9:59:f2:b4:97:47:86:92:31:4a:
                    65:4b:93:e5:e0:83:0a:78:82:6b:1a:4c:30:ea:58:
                    95:b1:e9:b1:ea:02:b7:f4:fb:b8:c4:bd:e8:b5:d6:
                    9a:15:c6:68:8b:60:94:ef:19:34:c7:5c:fe:9c:d5:
                    1a:c1:a3:f7:a8:54:96:0f:69:59:f3:da:ea:18:9d:
                    36:63:fa:5c:a7:35:ab:26:06:a4:02:b0:24:3e:97:
                    71:70:44:d7:58:ec:99:d5:dc:96:42:2d:62:3f:d5:
                    15:a0:39:16:38:9f:96:76:fa:0f:4d:b1:10:e0:5e:
                    8d:17:c1:1e:51:df:dc:cc:d3:d8:ad:cd:84:5b:50:
                    90:bb:f1:26:eb:93:57:49:4b:89:ab:dc:88:42:f8:
                    70:0b:05:f5:b6:2c:13:4e:1f:bd:88:18:74:23:e4:
                    0f:94:6d:ff:a1:5c:e4:42:9a:2b:8a:69:fc:67:f9:
                    e0:0e:e8:b6:44:4b:03:8c:b2:a6:18:39:a9:a2:db:
                    ac:f5:b3:71:3d:50:5d:dd:25:bb:77:7a:57:5a:45:
                    c6:a8:a0:57:fa:d1:e4:7f:26:00:b5:ea:e7:f7:1e:
                    d2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:44:D9:8D:46:CB:A0:16:66:BF:E1:73:69:3D:10:6C:5B:D1:C4
            X509v3 Authority Key Identifier:
                keyid:24:43:3D:21:97:7F:D6:90:D9:A2:2F:E9:B7:A0:D8:66:F3:8A:66:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/24433D21977FD690D9A22FE9B7A0D866F38A662D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24433D21977FD690D9A22FE9B7A0D866F38A662D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5WBPPM1omEM4Hf3FZTy8LXBdA6QgLfqPdp5eX3q8DWkU/0/3230312e3134302e3231362e302f32322d3332203d3e20323730393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:43:b5:ce:52:92:e5:c7:ca:72:9f:16:b4:cb:c0:75:f6:61:
         a8:0c:77:07:d5:9b:75:38:3e:c8:c3:25:4a:92:1a:45:3e:36:
         79:04:18:a8:c4:ba:ff:0d:5e:ca:62:b2:32:ca:33:cd:e1:6a:
         53:6a:6b:0b:26:cf:f4:d8:51:70:a4:3a:aa:06:ba:12:71:6c:
         f6:b7:ee:27:5a:18:b2:ba:d6:3e:e7:cd:5c:8b:60:d6:ef:75:
         b1:2b:93:e1:3f:46:f7:5f:14:98:47:ba:a4:3d:0c:0e:33:66:
         ca:d4:3c:9a:8a:ff:cc:44:b2:33:f7:df:11:58:b2:0a:ae:fb:
         05:37:cb:8a:bc:cf:57:1b:1a:98:8d:fe:08:30:a1:cf:3f:43:
         72:b0:bb:59:53:26:33:7e:ec:68:ca:98:41:b3:36:e7:14:3c:
         e8:e5:e0:3e:6c:34:a9:60:4f:61:62:71:9e:af:e1:b4:19:42:
         fd:96:47:a9:cf:d0:8b:19:c7:5b:de:70:72:48:33:ac:21:e8:
         cc:5e:ac:cc:ae:bb:cd:02:36:49:bd:f6:0d:0c:a0:42:c9:e5:
         11:da:d7:4b:d6:27:65:2f:9c:49:6d:a1:3f:85:93:38:81:46:
         be:28:53:6f:60:97:c2:b3:c7:40:f5:dd:02:95:a6:f3:c1:6c:
         e1:24:68:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 19:13:07 2026 by rpki-client