Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa
File:                     3230312e32302e3136302e302f32342d3234203d3e203238363036.roa (raw, json)
Hash identifier:          QgOK7K7XFai8AWmmkxLbbgK6VvLO0tnzz9b+5JcD8Bk=
Subject key identifier:   FA:18:06:12:A4:71:6F:BC:35:09:72:F6:9D:DD:A6:29:4E:E4:98:63
Certificate issuer:       /CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
Certificate serial:       6F4CCD13D664937E79766C7EA12C8E5D4C2A75E1
Authority key identifier: E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa
Signing time:             Thu 30 Jul 2026 22:26:55 +0000
ROA not before:           Thu 30 Jul 2026 22:21:55 +0000
ROA not after:            Thu 29 Jul 2027 22:26:55 +0000
asID:                     28606
IP address blocks:        201.20.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl
                          rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 06:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4c:cd:13:d6:64:93:7e:79:76:6c:7e:a1:2c:8e:5d:4c:2a:75:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7BD7FB5338C0533B7C507F4CA3932E8D54C7040
        Validity
            Not Before: Jul 30 22:21:55 2026 GMT
            Not After : Jul 29 22:26:55 2027 GMT
        Subject: CN=FA180612A4716FBC350972F69DDDA6294EE49863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:cd:ab:02:86:bf:18:e3:37:a0:c1:c7:f4:
                    80:d6:de:65:8f:dd:60:07:67:61:a6:b7:a0:81:e3:
                    c4:32:54:8b:79:62:18:79:73:fb:c8:5a:17:c4:77:
                    d9:a4:8d:aa:ae:d9:16:4f:fb:45:87:90:4a:53:d9:
                    66:5b:23:3d:a7:10:35:f3:f0:0b:54:b6:9f:f1:c4:
                    36:95:87:d7:b3:5e:67:51:88:8c:19:74:7d:33:d3:
                    42:31:49:4f:a7:25:d7:06:97:ce:a6:2c:23:a4:75:
                    83:18:a5:52:a7:95:ff:ac:1c:cd:44:38:82:1b:87:
                    cf:31:d5:63:16:a2:03:c1:b7:41:ae:17:cd:b2:db:
                    24:36:19:a2:c4:e2:75:6f:f7:7a:74:0a:01:42:21:
                    26:da:b5:fd:d1:a9:b6:fb:f9:1c:2f:a9:1e:72:38:
                    0e:f3:0d:85:49:b9:20:8e:66:e9:f1:18:55:b3:98:
                    46:88:25:bc:34:1f:51:9d:33:74:d5:c7:e7:42:81:
                    e6:31:e7:a5:af:69:38:0b:41:0a:65:2f:8e:18:ba:
                    7f:97:ee:a0:14:6d:f1:cc:da:75:cf:76:cf:d2:bd:
                    5d:b0:11:85:92:2f:1c:c0:cf:ee:06:77:34:02:0d:
                    fa:fe:59:e4:f2:fb:79:de:d9:87:42:36:45:6e:c7:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:18:06:12:A4:71:6F:BC:35:09:72:F6:9D:DD:A6:29:4E:E4:98:63
            X509v3 Authority Key Identifier:
                keyid:E7:BD:7F:B5:33:8C:05:33:B7:C5:07:F4:CA:39:32:E8:D5:4C:70:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E7BD7FB5338C0533B7C507F4CA3932E8D54C7040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/2/3230312e32302e3136302e302f32342d3234203d3e203238363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.20.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:a8:af:ec:8c:c6:51:98:67:db:ef:fa:6b:ae:6e:c2:05:ce:
         b4:36:44:4f:83:93:9c:b6:78:da:4b:51:da:ea:a7:24:d4:58:
         24:86:dc:47:3e:8a:44:29:e5:71:f2:c4:b7:1b:c0:12:c0:0f:
         c1:68:b9:51:85:bd:0d:f4:85:89:1b:89:99:03:55:76:48:b7:
         3b:f8:11:d2:40:5e:51:13:3d:34:e6:4d:68:73:8c:ed:33:bb:
         5b:b6:f7:ed:7b:fb:22:89:57:20:49:d9:61:bb:67:18:05:5f:
         7a:f1:cf:3e:0c:5e:94:af:9b:31:34:9f:25:b5:35:7c:0f:e4:
         f9:2b:56:e7:ee:91:1b:fa:3f:eb:50:ae:c1:53:3f:db:d3:12:
         81:c2:1c:23:e1:f5:46:c8:81:a7:4b:46:d6:f1:df:66:f5:9a:
         6f:96:04:f7:f3:9b:9a:05:73:12:1b:df:d6:30:dc:04:8a:ad:
         29:f6:c7:ce:a5:71:16:bd:2a:d6:64:f7:f1:9a:ef:de:49:42:
         6b:e0:d5:1c:8f:b8:58:2f:5b:af:a9:30:a7:d6:1c:0d:68:d3:
         6f:e8:67:9d:30:0a:82:26:54:cf:b4:d8:05:0d:0f:8f:be:f3:
         2e:41:05:b0:78:65:38:1a:f5:eb:53:e0:c8:f5:dd:e2:dc:1b:
         d3:9f:bc:83
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb0zNE9Zkk355dmx+oSyOXUwqdeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTdCRDdGQjUzMzhDMDUzM0I3QzUwN0Y0Q0EzOTMyRThE
NTRDNzA0MDAeFw0yNjA3MzAyMjIxNTVaFw0yNzA3MjkyMjI2NTVaMDMxMTAvBgNV
BAMTKEZBMTgwNjEyQTQ3MTZGQkMzNTA5NzJGNjlERERBNjI5NEVFNDk4NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvl82rAoa/GOM3oMHH9IDW3mWP
3WAHZ2Gmt6CB48QyVIt5Yhh5c/vIWhfEd9mkjaqu2RZP+0WHkEpT2WZbIz2nEDXz
8AtUtp/xxDaVh9ezXmdRiIwZdH0z00IxSU+nJdcGl86mLCOkdYMYpVKnlf+sHM1E
OIIbh88x1WMWogPBt0GuF82y2yQ2GaLE4nVv93p0CgFCISbatf3Rqbb7+RwvqR5y
OA7zDYVJuSCOZunxGFWzmEaIJbw0H1GdM3TVx+dCgeYx56WvaTgLQQplL44Yun+X
7qAUbfHM2nXPds/SvV2wEYWSLxzAz+4GdzQCDfr+WeTy+3ne2YdCNkVuxySFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+hgGEqRxb7w1CXL2nd2mKU7kmGMwHwYDVR0j
BBgwFoAU571/tTOMBTO3xQf0yjky6NVMcEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ0hveGpkZ3pvOW1pRmFrVzh3UDh1dmNaMUZucEc4NXBVTmh5Tm9RR0hu
MlUvMi9FN0JEN0ZCNTMzOEMwNTMzQjdDNTA3RjRDQTM5MzJFOEQ1NEM3MDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U3QkQ3RkI1MzM4QzA1MzNC
N0M1MDdGNENBMzkzMkU4RDU0QzcwNDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NIb3hqZGd6bzltaUZha1c4d1A4dXZjWjFGbnBHODVwVU5oeU5vUUdIbjJVLzIv
MzIzMDMxMmUzMjMwMmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyRSgMA0GCSqGSIb3DQEBCwUAA4IBAQBLqK/sjMZR
mGfb7/prrm7CBc60NkRPg5OctnjaS1Ha6qck1FgkhtxHPopEKeVx8sS3G8ASwA/B
aLlRhb0N9IWJG4mZA1V2SLc7+BHSQF5REz005k1oc4ztM7tbtvfte/siiVcgSdlh
u2cYBV968c8+DF6Ur5sxNJ8ltTV8D+T5K1bn7pEb+j/rUK7BUz/b0xKBwhwj4fVG
yIGnS0bW8d9m9ZpvlgT385uaBXMSG9/WMNwEiq0p9sfOpXEWvSrWZPfxmu/eSUJr
4NUcj7hYL1uvqTCn1hwNaNNv6GedMAqCJlTPtNgFDQ+PvvMuQQWweGU4GvXrU+DI
9d3i3BvTn7yD
-----END CERTIFICATE-----
Generated at Wed Aug 26 22:55:14 2026 by rpki-client