Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          P7vGRRMCg+oPr+XYjl61Memq1sfL0vwdVUE94kTUuqM=
Subject key identifier:   7A:E7:06:38:98:98:A8:CE:DA:8F:1B:AD:75:AA:CC:60:69:11:6F:FD
Certificate issuer:       /CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
Certificate serial:       342C3B6B485855B13BD4C0AE56109BD45BF778D1
Authority key identifier: 4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa
Signing time:             Tue 04 Aug 2026 17:29:37 +0000
ROA not before:           Tue 04 Aug 2026 17:24:37 +0000
ROA not after:            Tue 03 Aug 2027 17:29:37 +0000
asID:                     270793
IP address blocks:        201.159.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 18:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2c:3b:6b:48:58:55:b1:3b:d4:c0:ae:56:10:9b:d4:5b:f7:78:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A
        Validity
            Not Before: Aug  4 17:24:37 2026 GMT
            Not After : Aug  3 17:29:37 2027 GMT
        Subject: CN=7AE706389898A8CEDA8F1BAD75AACC6069116FFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:9c:34:a7:df:78:b6:78:08:d8:97:6a:75:
                    c8:a8:99:c2:be:f2:2f:7e:bc:b7:1a:03:f5:19:71:
                    d6:ac:eb:5e:74:e6:31:3f:a6:86:c4:9a:a4:93:76:
                    1f:2f:e0:e3:71:f7:1f:3c:6a:57:f0:79:d6:2a:6d:
                    58:6b:05:e2:c8:85:1f:13:18:1e:63:81:04:2a:f4:
                    e6:87:55:6a:f2:70:7b:3a:e3:ae:4d:d3:e4:6d:8b:
                    2f:27:c1:75:31:30:e8:a0:65:cd:b7:cd:9a:fe:d2:
                    3e:7e:f8:1a:d9:dd:c9:19:12:f3:f5:f9:78:f7:87:
                    7a:d4:d1:63:e2:9c:24:f2:85:fa:6a:e1:14:3b:29:
                    cc:5c:01:18:d6:5f:26:cf:6c:fa:a7:02:9d:2c:61:
                    d4:eb:31:3e:44:e5:fc:1a:33:f6:d2:18:ec:f0:18:
                    9b:d0:bd:76:20:a0:69:67:60:a2:c4:6e:e7:85:44:
                    16:c9:74:56:c4:1e:e1:32:df:ef:79:0a:ee:32:5e:
                    85:35:dc:2d:57:44:81:90:df:8d:8f:4c:71:ad:ad:
                    bf:61:3c:a0:c1:42:04:b4:38:f5:ed:bd:23:86:be:
                    97:50:41:b9:11:49:d4:aa:da:cc:ee:bd:4a:0d:93:
                    0f:d0:cd:c8:ff:82:82:7f:60:11:31:85:d8:b6:9c:
                    36:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E7:06:38:98:98:A8:CE:DA:8F:1B:AD:75:AA:CC:60:69:11:6F:FD
            X509v3 Authority Key Identifier:
                keyid:4D:9A:BE:49:0C:47:DC:C6:63:99:2B:BA:24:BD:5A:0F:B7:C1:00:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9ABE490C47DCC663992BBA24BD5A0FB7C1009A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32322d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:a7:ca:4e:54:72:8d:e9:d0:fc:9f:10:5e:8f:33:d6:c2:
         f2:58:f0:65:c8:a0:e3:b4:30:e8:49:b5:7b:3b:90:ef:be:ba:
         06:1e:a8:da:d3:45:6a:fa:c6:d7:ce:01:c6:79:be:f2:21:7b:
         9e:f7:2c:6b:81:e1:57:96:e3:13:d1:90:44:64:ee:59:18:24:
         03:39:6c:61:8b:49:e0:8a:47:83:b6:44:ac:3c:02:93:ad:56:
         f9:27:21:6d:46:e0:7a:1c:b6:af:3f:0e:85:3a:81:cd:ed:db:
         b0:db:0f:ac:ad:df:8c:b6:07:df:75:16:ca:ef:99:cc:18:16:
         17:3b:1b:04:5e:2b:e3:f8:41:39:56:dd:fb:20:22:3e:90:a4:
         94:b5:ad:8e:4c:ef:25:2d:91:0c:87:67:cc:e8:28:13:b3:63:
         5d:46:08:0b:77:5d:81:3d:d3:63:59:8d:94:4e:e1:e6:31:22:
         55:3d:23:3c:97:cf:a4:a3:28:30:05:02:ff:c5:e9:0c:5b:64:
         6a:f0:2f:19:69:c9:17:de:ac:8b:6b:db:e0:92:68:ef:67:ff:
         0a:a3:39:f7:b6:66:71:d3:0e:35:b2:0e:2e:c4:f5:0e:8a:41:
         94:1d:48:be:91:58:5d:44:d2:44:0e:92:4b:8e:e7:86:0b:99:
         42:67:f8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:23:28 2026 by rpki-client