Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa
File:                     3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa (raw, json)
Hash identifier:          vKUi89yC8kdD+8/biRZHzVaMTsnkgYI33oul4/h622U=
Subject key identifier:   41:A1:8C:67:68:7F:01:9D:0A:B8:C0:67:60:9D:99:23:2B:D6:9E:0B
Certificate issuer:       /CN=7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50
Certificate serial:       4E04CA84EE176CC361F157505DBD102D1DC2C241
Authority key identifier: 7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa
Signing time:             Wed 08 Apr 2026 13:32:58 +0000
ROA not before:           Wed 08 Apr 2026 13:27:58 +0000
ROA not after:            Wed 07 Apr 2027 13:32:58 +0000
asID:                     61851
IP address blocks:        201.149.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.crl
                          rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 08:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:04:ca:84:ee:17:6c:c3:61:f1:57:50:5d:bd:10:2d:1d:c2:c2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50
        Validity
            Not Before: Apr  8 13:27:58 2026 GMT
            Not After : Apr  7 13:32:58 2027 GMT
        Subject: CN=41A18C67687F019D0AB8C067609D99232BD69E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:a0:be:30:df:c2:6e:8a:c2:a2:43:48:45:
                    99:14:02:7b:e3:50:38:bf:8c:b7:14:85:74:30:a2:
                    aa:a3:c4:7d:67:87:ec:4b:cb:b1:0a:26:80:f7:e6:
                    e1:0b:1b:0b:76:3d:b2:3e:3c:51:7c:d4:c7:5a:79:
                    95:f6:71:f5:9b:f8:b3:f1:63:aa:a4:91:fc:f9:51:
                    24:3e:f8:b1:1d:10:30:f2:19:6c:89:8c:83:62:7e:
                    56:8f:ce:af:3d:63:2f:01:87:06:83:9d:4d:1e:bb:
                    20:e5:f7:8c:3f:a6:0e:56:58:4d:75:ee:17:48:5b:
                    55:88:da:c5:4b:3c:2c:9c:4a:65:45:7e:21:59:d0:
                    88:01:05:40:9f:c0:2a:33:75:36:67:10:2c:53:87:
                    23:09:08:0b:4b:00:3d:17:0c:99:b2:e7:84:a0:29:
                    99:33:31:14:fe:a6:c6:01:35:63:07:18:c5:4d:95:
                    75:1e:41:0a:0c:69:e8:96:c5:9d:80:dc:6f:22:5e:
                    8e:60:ff:af:e0:95:53:c0:b8:98:f0:45:1f:ae:ea:
                    6a:04:53:dc:fd:12:49:24:38:4c:63:df:d4:24:60:
                    2c:9a:5c:6e:b3:b9:2d:6d:fd:70:28:68:15:74:c6:
                    fc:24:e2:9f:69:9c:d7:5d:58:8b:93:22:46:3f:39:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A1:8C:67:68:7F:01:9D:0A:B8:C0:67:60:9D:99:23:2B:D6:9E:0B
            X509v3 Authority Key Identifier:
                keyid:7A:FF:CC:C5:20:2F:DB:B1:C9:C2:40:E7:0F:D5:4C:CA:37:BD:9E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7AFFCCC5202FDBB1C9C240E70FD54CCA37BD9E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/3230312e3134392e3132342e302f32322d3332203d3e203631383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:47:d3:c9:15:25:68:76:e8:c2:69:0f:81:b2:e8:1d:de:3f:
         15:a5:b6:db:92:95:59:a1:4d:88:1d:c3:83:27:1f:16:89:c1:
         cc:45:b4:8d:d8:9f:31:4d:58:1a:52:70:dc:ac:21:c0:12:21:
         f6:30:1a:73:f2:fc:77:a3:19:f6:08:df:d3:68:f1:01:79:55:
         80:7a:98:bc:b7:46:ff:48:ed:98:63:e8:61:f1:d4:f7:30:72:
         18:b5:83:ba:97:23:f1:10:c5:1b:01:90:89:a9:34:21:57:3f:
         46:7d:ab:3c:4c:80:23:35:56:a0:7d:a8:02:67:47:f0:6d:bf:
         3d:fe:b8:f5:74:fc:93:16:9a:f6:3e:90:26:24:c5:79:7e:36:
         2e:98:4f:7f:30:12:26:c8:3d:cb:e0:bb:8a:df:df:81:fc:0d:
         35:30:78:85:55:f0:db:d5:76:86:eb:20:ca:26:58:83:fd:30:
         2c:b3:5f:18:a5:2e:49:53:fb:f6:74:ba:03:8c:36:db:b5:2e:
         21:19:61:9d:02:74:d2:16:29:41:27:ca:45:a5:90:19:85:af:
         2f:d2:17:55:e6:fa:98:ed:ee:de:16:bd:a7:15:7e:45:46:80:
         9d:4d:f7:30:db:17:1d:47:58:ec:e0:4e:e2:ab:ad:05:bc:7f:
         5c:ed:f3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 20:39:48 2026 by rpki-client