Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa
File:                     3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa (raw, json)
Hash identifier:          B+/3G+PhdEhiOUG1MnlSsGZ+YLMB49aZNWJkioNfOFg=
Subject key identifier:   DE:EF:25:47:1C:6A:4B:B4:EC:41:39:EF:34:18:20:6A:5C:E4:69:4E
Certificate issuer:       /CN=02841926F957B15864E9B2B024AD350B3F57EC78
Certificate serial:       4CB71BA2772FE11B283264354DDB95D908FC155A
Authority key identifier: 02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa
Signing time:             Tue 25 Aug 2026 13:29:02 +0000
ROA not before:           Tue 25 Aug 2026 13:24:02 +0000
ROA not after:            Tue 24 Aug 2027 13:29:02 +0000
asID:                     264889
IP address blocks:        168.227.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl
                          rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 07:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:b7:1b:a2:77:2f:e1:1b:28:32:64:35:4d:db:95:d9:08:fc:15:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02841926F957B15864E9B2B024AD350B3F57EC78
        Validity
            Not Before: Aug 25 13:24:02 2026 GMT
            Not After : Aug 24 13:29:02 2027 GMT
        Subject: CN=DEEF25471C6A4BB4EC4139EF3418206A5CE4694E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a2:3e:a6:f3:b8:29:cc:c9:9d:5c:2b:74:0d:
                    c1:08:cc:49:10:07:dc:37:b7:6d:c0:32:8f:35:24:
                    a4:11:bf:5b:9a:6d:67:52:cf:25:58:aa:7a:43:13:
                    15:db:85:c4:4e:2f:09:06:32:ad:ac:f2:c2:af:63:
                    96:42:86:1c:41:4a:35:96:f4:96:8f:1f:d5:a7:2b:
                    1b:af:da:96:35:2d:77:40:8e:c7:df:b5:82:c0:b8:
                    23:74:26:62:0a:ac:89:3a:f5:65:db:c4:89:ea:bd:
                    43:2d:79:e8:b1:12:5e:be:cd:38:e7:30:bb:2c:52:
                    25:62:2e:6d:ce:3c:40:96:c8:67:51:eb:61:1d:2e:
                    8e:0c:2b:e7:f4:e8:ca:a0:b3:fd:0b:8f:88:fe:50:
                    84:48:ea:9a:45:11:22:2d:72:24:8f:75:49:a8:0f:
                    72:4d:87:44:db:b4:cf:18:64:19:6d:ba:73:49:15:
                    fb:e9:7a:be:24:cd:b2:ab:a8:de:02:18:8b:89:61:
                    c5:f2:1e:d7:59:af:b3:30:80:13:ff:f8:da:ff:d0:
                    eb:be:9a:af:aa:53:51:0c:9d:e8:b0:de:11:d1:5f:
                    5b:11:d6:65:b7:be:87:e2:51:15:b0:fe:d1:50:38:
                    cf:f1:86:b9:b0:4b:aa:7e:a9:6b:fb:19:8a:76:c8:
                    a8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EF:25:47:1C:6A:4B:B4:EC:41:39:EF:34:18:20:6A:5C:E4:69:4E
            X509v3 Authority Key Identifier:
                keyid:02:84:19:26:F9:57:B1:58:64:E9:B2:B0:24:AD:35:0B:3F:57:EC:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/02841926F957B15864E9B2B024AD350B3F57EC78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02841926F957B15864E9B2B024AD350B3F57EC78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/3136382e3232372e3232302e302f32322d3332203d3e20323634383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:b9:c1:2f:12:a1:83:1c:81:66:3c:e9:87:ba:27:0c:cf:
         3c:86:63:75:df:7b:b0:8e:11:94:85:78:87:fa:74:d7:e7:ed:
         be:c6:5a:c8:92:a5:7f:4f:8e:eb:2f:6c:1a:05:6d:f1:04:6b:
         ec:85:ab:21:8d:e7:be:41:3d:8b:ef:06:f8:5b:34:54:d3:85:
         e0:95:9d:7f:62:e7:2e:5b:7a:43:3f:dd:39:70:3b:d4:e7:49:
         d5:68:4f:a3:7b:24:b0:fa:73:d7:7d:fa:ff:d8:e6:55:d5:9a:
         6d:a2:c2:8f:fa:a6:03:dc:e6:24:38:0e:29:a2:27:18:6a:4c:
         69:09:7c:c8:64:08:38:e7:2d:db:c0:46:a2:63:06:12:e4:b5:
         13:5c:69:f9:55:a7:68:6f:df:ca:60:fb:8e:8e:91:18:25:33:
         f2:91:67:b4:3c:c0:77:08:e9:5f:56:e4:f9:5b:ae:a3:10:9f:
         27:6b:20:f5:9a:57:6f:31:3a:d0:19:7e:c5:6c:04:8c:ce:d3:
         d6:fb:a1:3a:ab:2d:a3:eb:31:a7:62:fb:74:1b:b5:ff:44:62:
         f9:a4:e0:84:36:b5:4c:6a:d5:af:b6:19:6a:5f:93:be:a1:86:
         51:b1:22:3a:9d:4e:4b:75:fb:fe:99:07:ef:49:5e:df:70:09:
         2e:0d:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----