Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa
File:                     3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa (raw, json)
Hash identifier:          u0Xji8q66Av5NLKKIE30Aphh+cA7fe+dZZQj5E5IBd0=
Subject key identifier:   F8:1A:A8:D0:B2:B3:93:5B:4B:26:1D:6A:D5:64:FD:64:74:11:66:83
Certificate issuer:       /CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
Certificate serial:       2458C60091E9029DA94E7618193813FCAD434B0D
Authority key identifier: D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa
Signing time:             Wed 08 Jul 2026 12:10:19 +0000
ROA not before:           Wed 08 Jul 2026 12:05:19 +0000
ROA not after:            Wed 07 Jul 2027 12:10:19 +0000
asID:                     61796
IP address blocks:        201.159.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl
                          rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 13:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:58:c6:00:91:e9:02:9d:a9:4e:76:18:19:38:13:fc:ad:43:4b:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D989D3713FC48432F0421F20BB448E9CAD4BBCB8
        Validity
            Not Before: Jul  8 12:05:19 2026 GMT
            Not After : Jul  7 12:10:19 2027 GMT
        Subject: CN=F81AA8D0B2B3935B4B261D6AD564FD6474116683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8b:bc:e3:cf:03:5f:3c:54:23:d3:3f:f6:fc:
                    0c:2c:44:f5:2e:5a:12:ee:12:6f:1b:4b:8b:bd:33:
                    59:84:01:37:c9:7d:0c:f2:9a:34:36:8f:bb:b7:7e:
                    4f:74:5d:ab:5e:c1:7b:1b:6c:e3:12:d9:1d:9d:cc:
                    31:b1:c8:d3:e7:d4:f5:86:79:d7:f7:ab:9f:1c:d4:
                    c3:3c:1d:da:08:15:49:de:e2:ad:16:1d:59:51:3e:
                    3a:f4:1c:c7:84:71:cb:a1:bd:0d:a7:b5:8d:5a:c2:
                    d8:97:a4:4c:ff:56:5e:c5:ec:0e:9e:cf:26:e1:f2:
                    23:3a:d9:45:fb:a1:77:80:22:53:b2:13:02:0e:d1:
                    ec:e2:15:d7:b3:d4:07:f1:db:32:fc:56:f3:08:cd:
                    60:7c:8e:1e:3e:83:a7:56:58:92:d5:95:9f:66:fb:
                    af:a5:2b:14:8b:83:ef:a4:24:a6:af:cb:10:d1:f4:
                    2a:fe:fa:ae:49:14:8e:d4:04:80:b2:fb:82:90:8d:
                    9f:cf:f8:16:b4:d8:13:6d:78:41:41:e8:ce:2f:24:
                    a8:04:7f:8a:b4:dc:12:0c:31:1b:a5:f9:c4:5e:72:
                    81:96:33:e0:dc:10:12:b7:97:17:7c:66:1c:00:d1:
                    82:03:6d:ff:9a:c5:52:c8:17:a8:5e:9d:56:0b:53:
                    a2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1A:A8:D0:B2:B3:93:5B:4B:26:1D:6A:D5:64:FD:64:74:11:66:83
            X509v3 Authority Key Identifier:
                keyid:D9:89:D3:71:3F:C4:84:32:F0:42:1F:20:BB:44:8E:9C:AD:4B:BC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D989D3713FC48432F0421F20BB448E9CAD4BBCB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1MaWubknsWEfw7vFhHzwwdu4yqdk3nMQRHShw56Unmc/0/3230312e3135392e3138302e302f32322d3332203d3e203631373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:f8:27:d6:b7:0d:82:e5:9f:6c:d7:b3:31:6c:00:1b:16:
         15:d4:89:1e:3b:e2:5a:82:70:ce:ad:06:ce:63:04:02:93:08:
         4b:e8:33:50:2a:f7:81:5b:f7:13:12:b9:97:fe:c5:33:c7:1d:
         42:9d:db:de:20:76:72:93:fd:22:7b:32:6c:84:be:8e:4a:de:
         64:67:98:c4:3f:0b:b4:4e:ab:d4:df:1f:85:12:db:8b:1d:8b:
         ee:5c:c7:36:ea:02:96:32:ab:6f:1a:cc:73:1d:98:d1:eb:82:
         b7:d8:5e:61:89:e9:a6:2b:61:48:aa:52:f5:9a:97:78:64:cb:
         e9:63:41:29:81:79:14:48:63:6c:9b:b7:09:17:81:9c:c9:8d:
         83:a7:44:27:c5:57:fb:98:6b:d0:7d:95:03:bb:33:8e:9f:17:
         6f:94:26:e9:5b:ff:4a:d4:b2:f7:64:b0:27:ea:e2:35:87:0a:
         22:75:80:10:7a:27:0b:5e:fc:03:bd:5f:3b:0c:7e:e5:c0:ac:
         ac:8f:7d:80:cc:28:88:ca:fe:ba:47:44:28:ed:55:ca:0e:39:
         7c:e9:f9:39:fa:4c:f0:cc:c4:30:f4:64:74:35:de:51:bc:dd:
         83:25:e3:81:ca:38:7c:07:f1:f2:fa:9d:80:f6:ae:12:72:9c:
         fb:2b:83:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:09:29 2026 by rpki-client