Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa
File:                     3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa (raw, json)
Hash identifier:          PkhOhyNjp4S9w8/03A519NdNiO9T5+w36N8LXUw79ds=
Subject key identifier:   7A:6A:BE:8D:08:68:DD:71:00:A9:C8:6E:34:84:44:41:5A:3C:56:C0
Certificate issuer:       /CN=D0E3E736CE1273E56A6025C4706E33EA67F0D0A6
Certificate serial:       712C9B4C9CEFE440B75105365EEE14ABD5304189
Authority key identifier: D0:E3:E7:36:CE:12:73:E5:6A:60:25:C4:70:6E:33:EA:67:F0:D0:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa
Signing time:             Tue 18 Aug 2026 12:02:06 +0000
ROA not before:           Tue 18 Aug 2026 11:57:06 +0000
ROA not after:            Tue 17 Aug 2027 12:02:06 +0000
asID:                     271673
IP address blocks:        201.218.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.crl
                          rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 00:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:2c:9b:4c:9c:ef:e4:40:b7:51:05:36:5e:ee:14:ab:d5:30:41:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0E3E736CE1273E56A6025C4706E33EA67F0D0A6
        Validity
            Not Before: Aug 18 11:57:06 2026 GMT
            Not After : Aug 17 12:02:06 2027 GMT
        Subject: CN=7A6ABE8D0868DD7100A9C86E348444415A3C56C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:4b:e8:fd:87:65:80:44:cc:b2:90:40:29:
                    de:bc:0d:b9:1c:a6:3d:50:48:48:52:6d:14:0a:d0:
                    d5:8c:36:76:55:d5:09:38:ec:be:83:01:7e:d0:df:
                    b9:50:5b:f7:9c:68:01:f8:36:31:83:21:59:c3:94:
                    b2:69:8e:6b:d8:77:a1:db:06:8a:59:9d:a8:61:21:
                    d5:66:30:25:e7:91:78:84:43:ca:5d:70:06:c2:ab:
                    33:04:57:db:51:5c:48:3d:b2:81:de:b7:1e:d4:d7:
                    21:2e:57:ef:e7:ce:6b:a0:70:4b:8f:57:8d:cd:a7:
                    cd:f8:bb:0b:f6:87:a4:fb:71:13:9a:d9:d7:56:60:
                    bf:da:b0:33:0f:20:9f:d9:52:be:85:4b:b9:60:63:
                    1c:e0:3d:6f:1e:b2:d0:55:14:6d:2f:12:5c:34:e8:
                    46:f5:de:e9:e7:8e:7e:a4:dc:b1:6f:68:ed:49:f1:
                    3f:d0:ea:f3:7b:13:55:2a:9f:86:8f:6e:6a:bd:63:
                    af:c2:9d:1f:c4:c8:f1:23:ed:c6:c4:a2:5a:ca:31:
                    32:dd:c2:09:be:d0:28:9f:59:86:21:79:1c:71:b9:
                    db:d3:ae:e1:5f:cf:c7:89:36:32:69:5d:23:55:65:
                    ca:ae:bc:1c:1d:a0:7f:41:20:1e:71:3c:cd:59:d6:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:BE:8D:08:68:DD:71:00:A9:C8:6E:34:84:44:41:5A:3C:56:C0
            X509v3 Authority Key Identifier:
                keyid:D0:E3:E7:36:CE:12:73:E5:6A:60:25:C4:70:6E:33:EA:67:F0:D0:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0E3E736CE1273E56A6025C4706E33EA67F0D0A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/w7Ru1NCChTdoP95njCnfUZDw7eSimv34VzxZ1RoAbyM/0/3230312e3231382e3139312e302f32342d3234203d3e20323731363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:25:0f:81:d3:a3:3e:58:9c:33:bd:7e:22:7d:ea:28:12:d2:
         11:ee:b2:ba:23:89:2c:77:31:07:60:66:e9:c4:6d:14:67:5c:
         a9:26:34:e4:db:30:d2:fb:04:fc:97:10:de:42:e4:36:58:e4:
         d2:53:1f:73:b6:b2:5d:2f:cd:d3:9c:0e:c6:86:82:eb:cc:f5:
         bb:2c:9d:ce:dc:d3:27:35:45:9f:0f:c6:ab:7c:a2:09:64:90:
         38:f3:55:06:ba:0a:e3:89:5f:05:7a:0a:4c:3d:89:f9:b9:37:
         2c:ba:61:cb:99:92:49:e4:5e:c3:fe:f9:1c:71:93:79:cd:49:
         2f:f8:2a:2a:00:9f:f5:a3:cd:66:0d:af:f0:78:5e:c7:7c:97:
         40:23:a4:ce:aa:26:ce:2f:ed:c3:af:e5:2f:22:37:64:dd:b5:
         4f:6b:72:30:35:59:57:81:f8:d4:6b:1b:49:1b:ad:0b:a9:c0:
         3d:d3:d8:b5:91:83:05:56:7e:38:06:b7:00:39:b9:a9:8e:f4:
         81:eb:6c:69:ff:8d:4e:cc:37:74:bc:93:c4:15:61:d2:07:c8:
         32:0f:d4:cb:ab:17:ed:c8:f6:ed:3c:eb:23:e8:11:31:7c:e3:
         15:6e:62:55:14:30:6a:f0:33:96:75:35:54:76:cb:9c:e7:e2:
         9e:b9:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:08:23 2026 by rpki-client