Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38352e302f32342d3234203d3e20323734333431.roa
File:                     3230312e33332e38352e302f32342d3234203d3e20323734333431.roa (raw, json)
Hash identifier:          BcyGJqCDqoaZF7DCyB00NOUR/vd1YanNkOPrMiTD4sg=
Subject key identifier:   42:A0:8D:C7:9C:DA:ED:E8:F6:B0:50:BF:98:2E:FB:AF:A8:0A:1C:79
Certificate issuer:       /CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
Certificate serial:       7A5FED212063C411B3BCB5381518E834EF0CD645
Authority key identifier: 42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38352e302f32342d3234203d3e20323734333431.roa
Signing time:             Fri 10 Apr 2026 19:27:10 +0000
ROA not before:           Fri 10 Apr 2026 19:22:10 +0000
ROA not after:            Fri 09 Apr 2027 19:27:10 +0000
asID:                     274341
IP address blocks:        201.33.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl
                          rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 12:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:5f:ed:21:20:63:c4:11:b3:bc:b5:38:15:18:e8:34:ef:0c:d6:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CF8AF950150224F27B677F4A1AD4BA306A610F
        Validity
            Not Before: Apr 10 19:22:10 2026 GMT
            Not After : Apr  9 19:27:10 2027 GMT
        Subject: CN=42A08DC79CDAEDE8F6B050BF982EFBAFA80A1C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:1c:21:a2:34:6f:15:af:33:c0:f0:5b:ff:
                    7f:38:6c:6a:13:1e:dd:fc:99:49:41:ca:89:d1:e1:
                    90:c5:15:84:4a:f5:21:a2:89:e3:37:06:a0:51:9d:
                    da:b6:94:ca:7f:1d:23:40:65:e0:e5:78:ea:5a:41:
                    e9:53:62:39:42:34:dd:7d:fa:fb:71:38:39:f0:6e:
                    f4:11:80:3e:ca:39:ce:25:b7:08:3a:e6:2c:c8:00:
                    68:5d:86:43:f4:3c:43:8f:80:a2:3a:7f:ed:74:f6:
                    bb:0e:c9:ea:0a:2d:e4:da:13:c6:b0:77:fb:36:c4:
                    15:34:1a:9b:a7:fe:e9:72:6f:50:28:8d:21:a4:e7:
                    c1:9c:6d:38:f7:43:8d:38:20:d9:f4:1a:ec:cc:35:
                    d7:2a:b7:d0:0b:7b:27:0c:98:30:49:35:ca:43:83:
                    8c:35:d9:1e:d2:5f:ab:d6:32:c0:6a:b2:0e:e2:c2:
                    2b:cb:9d:3e:e4:b3:5f:fc:64:b0:20:53:c9:6a:50:
                    8a:87:5f:6d:5d:7c:b6:ff:04:bb:90:3e:f9:a7:28:
                    fc:0c:3d:29:ac:46:13:5d:6b:7d:0c:ba:a0:99:a8:
                    b4:ab:9b:6e:fd:bf:4d:a4:eb:e3:d2:87:88:1e:60:
                    3f:85:89:43:a9:0d:bd:20:e4:f3:fc:44:ee:37:3f:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:8D:C7:9C:DA:ED:E8:F6:B0:50:BF:98:2E:FB:AF:A8:0A:1C:79
            X509v3 Authority Key Identifier:
                keyid:42:CF:8A:F9:50:15:02:24:F2:7B:67:7F:4A:1A:D4:BA:30:6A:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/42CF8AF950150224F27B677F4A1AD4BA306A610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42CF8AF950150224F27B677F4A1AD4BA306A610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GpvdAJ1QK9WdS5MwtWm9YjCKPmQmn5iyM7uzwDcnFuL/0/3230312e33332e38352e302f32342d3234203d3e20323734333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:25:57:37:fb:46:e9:2d:a1:4b:35:87:22:b2:d6:71:f0:5d:
         be:c3:f8:84:e7:3f:80:87:b4:59:69:76:00:8c:b1:cb:3f:0c:
         f5:4a:1b:a3:a7:5a:dc:f0:f4:68:52:65:15:8a:f8:00:d9:d3:
         c0:c8:05:ef:0a:13:d1:4f:fc:57:53:e9:f9:83:87:e9:8b:65:
         e5:db:5e:62:31:91:e8:b8:9e:f9:7a:1b:e5:0e:85:f6:e5:82:
         c0:b6:ce:5e:f2:8e:1f:66:73:f4:5d:96:75:40:20:07:f2:c4:
         33:2f:d6:fd:23:44:43:c7:cf:1c:4b:d9:5f:2f:fd:c7:2f:68:
         5d:da:b5:9a:60:27:11:6e:40:ff:fe:03:d2:19:e2:fa:eb:e1:
         88:72:24:28:80:31:f1:e6:31:49:01:e7:92:26:98:f9:66:81:
         5c:b2:3d:df:c0:ba:4c:19:50:b2:af:fd:17:a0:ae:bf:c1:c6:
         33:a3:87:81:96:34:5d:4f:4d:05:70:b9:1f:18:f0:57:e0:c9:
         0c:9f:a8:0f:03:0e:cf:11:e4:26:d8:ac:33:c2:d5:df:9e:ce:
         f0:ef:b3:3c:ca:e5:5b:cf:7e:05:08:3a:83:f0:a8:f3:83:d2:
         eb:c5:5e:32:29:33:a2:f8:06:72:32:40:c7:ab:1a:04:f7:01:
         8e:d0:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:56:01 2026 by rpki-client