Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa
File:                     3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa (raw, json)
Hash identifier:          gbH4bDq94f5rNiD6cTFTQqLMOz+WlT1qVPXZu5j2YZg=
Subject key identifier:   D3:CE:3D:9F:EC:C6:42:A5:9B:41:EF:52:F2:03:CE:82:9A:6F:88:DF
Certificate issuer:       /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial:       2654276DF14E6229D5AADBFADDA0B893FE3A8F9B
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa
Signing time:             Wed 26 Aug 2026 14:09:03 +0000
ROA not before:           Wed 26 Aug 2026 14:04:03 +0000
ROA not after:            Wed 25 Aug 2027 14:09:03 +0000
asID:                     52871
IP address blocks:        201.157.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
                          rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 12:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:54:27:6d:f1:4e:62:29:d5:aa:db:fa:dd:a0:b8:93:fe:3a:8f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
        Validity
            Not Before: Aug 26 14:04:03 2026 GMT
            Not After : Aug 25 14:09:03 2027 GMT
        Subject: CN=D3CE3D9FECC642A59B41EF52F203CE829A6F88DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:02:82:c1:b5:5d:98:d2:45:ee:eb:0c:c3:
                    00:b2:0a:37:32:0d:1b:17:ff:af:fe:90:41:e6:98:
                    6b:51:82:e8:06:82:78:04:b3:5f:70:68:d0:89:2a:
                    70:36:75:ad:6c:60:d8:08:db:25:37:da:10:22:81:
                    a0:55:50:e8:fd:1e:da:55:8a:34:78:ef:cd:3f:55:
                    1a:d9:35:a4:f4:91:b8:7b:ff:df:d2:53:2d:b2:5c:
                    95:99:4c:f2:1f:e1:b7:46:25:b3:c3:b9:bb:f1:38:
                    94:1a:58:5d:58:79:25:55:dc:d9:d3:cf:75:bb:2e:
                    2d:cc:99:a6:51:98:41:65:fe:42:5b:e1:b0:e0:84:
                    b7:08:9a:ee:74:e2:3f:e6:db:db:a0:fd:58:a3:7b:
                    8c:20:e5:f7:5d:e3:62:83:e7:fb:8f:f6:57:01:f7:
                    1c:f3:25:5b:14:91:bd:64:f0:96:60:d9:ae:89:1a:
                    41:17:2c:63:bb:c6:b6:06:30:a7:33:29:60:f7:89:
                    0e:a1:26:3a:dd:d3:6c:af:01:bc:fd:20:06:27:3d:
                    1a:db:59:4a:8c:15:0f:e5:33:94:c1:07:8f:82:d0:
                    fa:9c:f1:38:01:40:46:2f:04:a8:cb:69:0b:6e:93:
                    d2:c3:0b:d5:55:8b:06:1d:50:41:7a:47:f9:22:8d:
                    9f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:3D:9F:EC:C6:42:A5:9B:41:EF:52:F2:03:CE:82:9A:6F:88:DF
            X509v3 Authority Key Identifier:
                keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32332d3233203d3e203532383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.157.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:97:21:07:e4:d3:c7:69:49:41:7e:23:87:0f:ea:46:67:3b:
         58:a4:16:ea:78:ab:9a:17:85:e6:4a:f3:33:20:2c:13:7f:ec:
         b3:07:06:ea:fb:38:3e:a9:ca:d9:cf:d4:ac:21:78:1e:3e:44:
         cc:24:2e:73:ac:4d:29:4e:ce:5c:26:ea:d2:f6:47:89:2b:2b:
         0a:cc:55:0a:02:81:5d:33:49:24:cd:fe:85:2c:d9:15:e3:53:
         61:af:ef:c6:a1:2e:32:e7:2b:dc:d0:91:b7:64:ca:28:6c:1b:
         fa:22:7e:0b:91:78:49:98:59:41:b5:90:a9:52:34:7a:1e:92:
         68:6c:5b:f5:25:43:03:df:08:1d:a9:89:d4:42:1e:e4:b5:2e:
         3d:c2:6a:d8:93:57:2b:5f:f5:d0:d0:47:e8:2f:9e:e0:13:34:
         28:1f:65:0c:97:7f:88:ce:0b:0f:5c:5f:b3:24:ce:34:60:82:
         aa:02:a7:38:e4:8a:fa:06:34:52:e8:0b:f6:19:4b:f0:59:3a:
         7f:be:6d:11:fd:48:c9:fb:af:c7:a0:8a:38:2f:92:e4:80:c9:
         86:a3:62:19:96:e1:95:4e:6a:8f:99:74:15:a3:c0:ce:c8:9b:
         c9:5f:3c:48:cb:d6:58:ac:9b:37:70:89:4c:c2:5e:b4:49:f4:
         da:44:04:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:20:36 2026 by rpki-client