Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/3230312e38372e3232342e302f32312d3232203d3e203238363630.roa
File:                     3230312e38372e3232342e302f32312d3232203d3e203238363630.roa (raw, json)
Hash identifier:          sI1KpAhtGqCczdEas2b/fVIdk0gHPWya2LOTYk5Ma/E=
Subject key identifier:   0F:05:0A:37:CA:B0:EA:85:63:83:2F:27:8B:E4:F6:30:F0:72:0E:38
Certificate issuer:       /CN=4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF
Certificate serial:       4B79AEF12AB66768D98101121D5B922E078C281D
Authority key identifier: 4A:6D:84:DD:14:D2:52:E9:B9:FD:A8:E2:B0:8D:4C:0B:0D:A7:A7:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/3230312e38372e3232342e302f32312d3232203d3e203238363630.roa
Signing time:             Mon 25 May 2026 19:04:09 +0000
ROA not before:           Mon 25 May 2026 18:59:09 +0000
ROA not after:            Mon 24 May 2027 19:04:09 +0000
asID:                     28660
IP address blocks:        201.87.224.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.crl
                          rsync://rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:79:ae:f1:2a:b6:67:68:d9:81:01:12:1d:5b:92:2e:07:8c:28:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF
        Validity
            Not Before: May 25 18:59:09 2026 GMT
            Not After : May 24 19:04:09 2027 GMT
        Subject: CN=0F050A37CAB0EA8563832F278BE4F630F0720E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f3:4e:c5:5a:7f:c6:4f:9a:a2:7b:1e:d0:e3:
                    9f:d8:e1:09:6d:bb:6c:71:22:b0:c1:d1:ea:cc:cb:
                    16:b0:53:0b:61:79:e9:fc:7c:ba:ff:80:e8:a7:ea:
                    67:22:fa:ab:a2:ea:bb:b2:15:b3:0e:01:6a:71:cf:
                    f0:80:4e:50:8a:5e:ac:d4:75:78:8e:e2:c1:83:52:
                    41:96:06:f1:8e:89:19:37:74:10:15:fc:ce:0f:bb:
                    f5:59:46:94:6c:62:05:97:a6:57:7c:d4:fb:c6:99:
                    81:f6:48:c2:46:6c:61:84:fe:fa:6d:4e:c0:be:eb:
                    14:f6:2f:d2:4c:60:65:54:78:76:71:be:ce:70:6a:
                    05:01:bc:12:0a:df:2c:e8:de:57:08:39:f9:b4:c4:
                    c4:1b:53:76:89:97:83:2e:eb:a6:b1:35:8d:2a:33:
                    86:f0:80:8b:6c:ab:6d:17:85:6e:d2:99:aa:7e:80:
                    43:53:af:a7:ec:26:6a:ad:d3:18:f8:46:71:7a:cf:
                    f5:f4:8a:b6:4c:e5:7b:4d:b3:03:c0:e2:ab:97:eb:
                    d7:b0:1d:26:f2:61:f9:bb:56:99:79:43:da:ee:20:
                    e7:8e:50:76:47:8d:5c:01:72:e1:e5:73:d8:f6:a3:
                    64:c0:22:4a:40:7a:2f:f8:ee:f6:35:ca:a0:6a:4c:
                    15:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:05:0A:37:CA:B0:EA:85:63:83:2F:27:8B:E4:F6:30:F0:72:0E:38
            X509v3 Authority Key Identifier:
                keyid:4A:6D:84:DD:14:D2:52:E9:B9:FD:A8:E2:B0:8D:4C:0B:0D:A7:A7:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A6D84DD14D252E9B9FDA8E2B08D4C0B0DA7A7EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3k4qu9X4H9HiXeCEh2j1qvmBtU1Xw8cbGy279tCaoeiF/0/3230312e38372e3232342e302f32312d3232203d3e203238363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:57:1f:6b:95:a9:a3:74:b6:49:48:b4:ec:f6:0d:15:05:32:
         a5:58:f8:2f:18:af:ba:f9:f0:ac:91:e9:00:b3:88:cc:09:3c:
         f0:98:ff:84:87:d4:04:68:33:90:de:46:68:c3:54:7d:65:8b:
         d9:f6:c7:9e:97:a7:7d:2b:b2:7b:b3:e9:82:40:49:0e:91:ae:
         51:87:67:e9:30:3d:38:d5:9e:98:6b:b0:db:1a:d0:96:3b:5b:
         87:84:dd:3f:70:bc:63:cb:f2:9c:e4:43:41:f6:bb:e1:d3:87:
         50:e7:2e:04:a7:43:eb:56:1c:d3:31:5f:7e:51:8e:c5:e7:f3:
         a7:87:70:60:2d:df:ae:37:cd:44:c4:64:4a:09:1f:55:46:39:
         4c:32:ce:d7:2d:66:e8:ff:d2:36:dc:c5:6d:bb:68:3e:f5:03:
         95:70:ec:b8:44:88:12:ab:9c:45:0d:43:c2:e9:ff:b3:fa:e3:
         7f:4e:88:0f:bd:ab:8b:cb:88:ac:b7:6b:b9:92:01:c4:fd:43:
         5d:f6:e6:02:cc:19:03:83:b0:17:f6:35:44:51:1d:b3:f1:fb:
         3a:0d:5c:10:6d:70:6b:f9:88:43:ad:d5:94:6c:b0:cd:43:af:
         f5:c3:92:81:2e:df:13:66:93:25:fd:b4:7e:07:40:d6:9e:39:
         64:f9:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:28:51 2026 by rpki-client