Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e342e302f32342d3234203d3e20323730323832.roa
File:                     3230312e37312e342e302f32342d3234203d3e20323730323832.roa (raw, json)
Hash identifier:          /i+KARCo8rUZvYdWOU+RR/5Y9E0E1TaLUhEeW8+hLzU=
Subject key identifier:   4A:8A:5C:EC:33:8F:1A:76:68:AD:2E:BF:CE:F7:95:1A:6A:24:73:7D
Certificate issuer:       /CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
Certificate serial:       573A0AD1C33B990A4D7DB62F8EF6AE3956E7C08F
Authority key identifier: 95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e342e302f32342d3234203d3e20323730323832.roa
Signing time:             Thu 14 May 2026 14:47:47 +0000
ROA not before:           Thu 14 May 2026 14:42:47 +0000
ROA not after:            Thu 13 May 2027 14:47:47 +0000
asID:                     270282
IP address blocks:        201.71.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl
                          rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 06:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:0a:d1:c3:3b:99:0a:4d:7d:b6:2f:8e:f6:ae:39:56:e7:c0:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
        Validity
            Not Before: May 14 14:42:47 2026 GMT
            Not After : May 13 14:47:47 2027 GMT
        Subject: CN=4A8A5CEC338F1A7668AD2EBFCEF7951A6A24737D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:d8:57:af:35:36:0f:bf:99:58:2b:8b:de:
                    ea:6f:a9:4b:54:8f:96:1b:81:9f:68:b4:8a:50:af:
                    e1:ab:4c:eb:12:d6:84:24:78:3c:6f:19:1d:f2:ba:
                    d5:de:dc:40:07:0b:e0:61:5d:26:8f:c6:c6:76:50:
                    eb:5f:6d:72:f9:03:3b:2f:1e:92:6a:f1:94:17:72:
                    de:fd:bd:ff:4c:05:7a:c1:c1:0f:4f:f6:4a:80:0e:
                    a0:2d:59:45:be:f3:10:f7:18:03:72:31:42:fd:96:
                    69:bc:90:9d:6b:48:f3:bc:d9:7a:5c:9b:49:b8:66:
                    ee:14:1b:82:25:8a:eb:9c:90:fa:54:e2:77:a1:e2:
                    08:4c:11:b2:8c:44:16:8f:e4:85:40:0f:a6:4b:22:
                    a5:56:ca:7c:57:d5:97:e1:83:69:41:c5:3f:55:df:
                    7a:7b:59:68:d3:76:87:56:42:3b:bb:86:a2:07:61:
                    0d:89:79:f6:e9:a1:93:2e:eb:63:fa:0c:b7:e1:23:
                    4d:87:e0:96:06:49:15:a0:f2:75:f8:f1:16:c3:97:
                    34:65:dc:74:c8:e6:3d:71:5b:b4:4a:84:cf:d9:12:
                    19:54:bc:46:41:94:56:d7:16:d2:ac:be:f0:03:bf:
                    86:b2:64:55:82:56:c3:62:b2:8f:11:7a:33:59:72:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8A:5C:EC:33:8F:1A:76:68:AD:2E:BF:CE:F7:95:1A:6A:24:73:7D
            X509v3 Authority Key Identifier:
                keyid:95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/3230312e37312e342e302f32342d3234203d3e20323730323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:96:7b:88:b3:79:7a:ff:37:d2:f5:9e:59:ff:09:68:a8:9d:
         48:1f:ea:7a:41:37:9a:2b:d0:56:9f:1f:4f:3a:cb:56:7f:4b:
         98:84:5c:34:38:6a:46:69:2d:bf:a7:cf:ec:bb:ba:c4:c9:be:
         33:42:82:8c:ca:60:c9:1a:92:e2:3e:d6:07:9e:77:57:87:26:
         df:2d:86:d5:82:8c:2d:92:cd:4e:87:4b:a1:84:c9:57:88:84:
         85:82:fc:f0:48:58:36:7b:9b:ae:f9:be:05:f6:12:00:91:74:
         3e:f1:c5:f2:7d:c7:c3:02:0c:41:3f:7c:2a:0f:47:66:1b:0a:
         14:d6:9e:d2:9b:d3:dc:f8:61:00:2d:43:e9:35:fa:bb:4a:d0:
         46:0d:fd:e5:82:16:20:e8:5d:4e:37:c6:68:95:04:32:7f:d5:
         17:6c:1f:1b:9b:a6:71:ef:be:bf:bd:7a:85:47:1e:37:56:a4:
         06:0c:6c:04:b8:60:90:41:1a:a8:e4:88:71:c1:d6:c6:4b:59:
         31:28:8c:d6:88:44:e1:f2:0a:14:bf:14:8f:d2:c2:3f:98:4e:
         a4:38:98:fd:72:27:76:e1:5f:63:f5:6c:d7:1f:78:d3:d2:7c:
         36:9d:bd:09:05:4d:52:2c:7c:10:92:88:84:e0:c2:3c:d7:c6:
         e9:c3:ce:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:03:23 2026 by rpki-client