Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/3137302e3233332e3230312e302f32342d3234203d3e20323731323635.roa
File:                     3137302e3233332e3230312e302f32342d3234203d3e20323731323635.roa (raw, json)
Hash identifier:          hLKWJ3xnWTajep4X/KHiwazu7AipSshfN215AClaulI=
Subject key identifier:   D5:22:D5:5A:D7:28:E3:12:00:77:76:25:65:39:8F:9D:5C:C4:F7:CF
Certificate issuer:       /CN=2CAF6902D181D30E465C57A37B1E6CC2FF451CE2
Certificate serial:       66E0BA550B76F5F869F4BBAFEFD5382F762DA8C4
Authority key identifier: 2C:AF:69:02:D1:81:D3:0E:46:5C:57:A3:7B:1E:6C:C2:FF:45:1C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/3137302e3233332e3230312e302f32342d3234203d3e20323731323635.roa
Signing time:             Tue 11 Aug 2026 12:34:45 +0000
ROA not before:           Tue 11 Aug 2026 12:29:45 +0000
ROA not after:            Tue 10 Aug 2027 12:34:45 +0000
asID:                     271265
IP address blocks:        170.233.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.crl
                          rsync://rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 14 Aug 2026 04:17:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:e0:ba:55:0b:76:f5:f8:69:f4:bb:af:ef:d5:38:2f:76:2d:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAF6902D181D30E465C57A37B1E6CC2FF451CE2
        Validity
            Not Before: Aug 11 12:29:45 2026 GMT
            Not After : Aug 10 12:34:45 2027 GMT
        Subject: CN=D522D55AD728E3120077762565398F9D5CC4F7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:e1:c6:69:a2:6f:92:bb:ff:6b:46:4a:39:
                    09:9f:0e:c5:73:fa:89:ad:5e:2b:8e:d0:d3:19:0a:
                    3f:8d:96:88:d5:b3:b1:55:b6:e7:d8:6b:63:fc:c9:
                    35:c6:8a:85:47:f7:c3:51:91:49:0c:55:bf:5a:f9:
                    50:01:50:c7:d4:eb:9d:ba:18:ac:8f:dd:5d:99:ae:
                    b3:46:56:81:19:f4:12:05:7b:bc:ed:3c:3e:41:d3:
                    fe:0b:a8:ba:dd:37:55:e8:9d:ed:c4:d7:fa:98:86:
                    72:24:4f:be:4d:92:08:11:58:29:aa:2b:e5:f5:b1:
                    36:20:83:c4:da:c7:29:2d:fa:3d:86:59:97:e9:45:
                    db:d5:75:1d:70:f0:f7:56:40:53:34:6a:85:44:4d:
                    61:83:5c:0a:81:9c:5a:bd:aa:ff:9a:2f:1b:f6:e9:
                    90:f6:43:0f:3b:27:82:73:16:99:94:ac:6e:f1:81:
                    3d:80:ef:94:60:04:3f:19:28:01:b9:38:96:c1:52:
                    da:76:4f:83:3e:27:8b:5d:47:04:60:d1:da:a3:6d:
                    d9:5a:15:5d:f4:d6:7e:92:dd:b9:19:35:cd:35:b0:
                    5c:e7:5e:42:29:77:7e:37:47:ca:b3:f4:f1:54:96:
                    72:a4:b5:fb:40:98:57:d3:72:9b:cb:f6:c6:9a:07:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:D5:5A:D7:28:E3:12:00:77:76:25:65:39:8F:9D:5C:C4:F7:CF
            X509v3 Authority Key Identifier:
                keyid:2C:AF:69:02:D1:81:D3:0E:46:5C:57:A3:7B:1E:6C:C2:FF:45:1C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAF6902D181D30E465C57A37B1E6CC2FF451CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ZMq7meHwuz5Epjds7ZQBbUWaCHwFNn9U3bFBzQeDSeh/0/3137302e3233332e3230312e302f32342d3234203d3e20323731323635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:13:84:ef:b8:b6:a5:e9:7e:b5:be:43:db:42:9c:ef:2a:45:
         90:13:4e:7c:1f:31:f4:1b:0c:0b:8a:06:08:c3:a6:9e:10:da:
         01:99:30:6c:17:17:60:11:d4:c6:7f:28:a3:8d:cd:60:28:ab:
         4c:a1:81:72:94:35:ae:73:d7:f2:75:b1:86:fe:cf:b9:3b:b4:
         91:90:0c:d4:8b:1b:7b:4e:67:1b:25:67:fb:46:1b:1e:4c:fa:
         7b:dd:ac:9c:05:8a:fd:55:16:29:56:01:bc:4a:c7:d2:36:08:
         e6:4d:10:fe:7b:80:a4:e7:5d:fc:57:0a:0c:d6:19:71:0e:f4:
         04:46:9a:fd:94:99:0f:96:3b:2c:96:8e:b1:e9:a3:69:96:b3:
         83:ca:7c:e5:ea:77:ba:9a:d0:0f:83:c7:0f:9b:02:11:6b:2c:
         13:85:fa:88:b0:79:6c:0e:5b:46:96:7b:7e:6f:b3:a6:1b:93:
         e6:2f:d8:66:ce:4f:f6:65:cd:5d:7f:1b:31:c1:c8:47:35:a3:
         a1:9a:3b:db:21:20:1f:69:96:a9:af:c5:cf:52:67:e0:6e:7a:
         80:5c:64:9e:58:f5:5d:20:ba:d0:da:42:42:c3:b0:c7:f7:c2:
         ae:4d:01:f7:d4:db:a6:5d:63:9b:05:e6:35:49:92:3a:cf:41:
         be:17:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:48 2026 by rpki-client