Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa
File:                     3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa (raw, json)
Hash identifier:          ueygy7U0hH5hHhFJnZoP77ipIx6MG+fJ74ZGsWLzjhc=
Subject key identifier:   68:C7:E7:15:0F:B2:F8:FF:B9:E9:C8:D8:88:76:F8:4E:D8:F0:32:BC
Certificate issuer:       /CN=0F72F9CFDA53B5506CE548E017FBD16AF5772457
Certificate serial:       4B1A87282BB52A1B32F2AA536A518E2DCDA151EA
Authority key identifier: 0F:72:F9:CF:DA:53:B5:50:6C:E5:48:E0:17:FB:D1:6A:F5:77:24:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa
Signing time:             Thu 08 Oct 2026 16:36:56 +0000
ROA not before:           Thu 08 Oct 2026 16:31:56 +0000
ROA not after:            Thu 07 Oct 2027 16:36:56 +0000
asID:                     7361
IP address blocks:        200.160.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.crl
                          rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 07:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:1a:87:28:2b:b5:2a:1b:32:f2:aa:53:6a:51:8e:2d:cd:a1:51:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F72F9CFDA53B5506CE548E017FBD16AF5772457
        Validity
            Not Before: Oct  8 16:31:56 2026 GMT
            Not After : Oct  7 16:36:56 2027 GMT
        Subject: CN=68C7E7150FB2F8FFB9E9C8D88876F84ED8F032BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:dc:d2:8d:ab:bb:ed:50:70:dd:54:d1:23:
                    c2:9e:f5:81:cd:dd:18:24:df:da:3e:6f:c7:e4:58:
                    cc:80:dc:23:d8:cd:cc:99:ab:46:b6:28:9e:ba:36:
                    57:18:3c:2b:11:f3:9a:86:82:d7:2f:c2:ae:e6:e8:
                    d9:ec:84:db:af:a0:c0:3d:dd:93:dc:18:95:91:36:
                    3e:86:c3:d6:f8:12:9b:d3:6c:c4:06:ec:d6:91:c9:
                    18:e4:3c:e1:5e:63:a4:fd:1c:fc:97:e6:de:27:ec:
                    d2:55:7c:9d:28:a9:8a:d4:e2:aa:54:34:e4:0a:7b:
                    55:88:9e:51:81:34:f9:0b:14:bb:6c:2c:7c:a4:b9:
                    96:4e:17:2a:3c:18:23:ba:e8:3f:6f:d0:54:c8:89:
                    f5:eb:03:50:ff:e5:a5:53:79:57:5a:51:64:75:b3:
                    41:5b:9e:96:fd:bd:bb:3f:2f:97:6a:de:c5:01:f1:
                    01:16:7b:05:a5:6f:ce:4d:3d:c1:e6:46:be:b3:b4:
                    59:36:e0:5f:3a:6a:c9:49:3f:b6:d8:4c:c2:ce:d7:
                    fb:5f:5e:54:78:34:f9:4a:36:eb:30:f2:05:ab:23:
                    00:85:04:f4:d0:d3:3c:20:49:69:de:a2:31:34:73:
                    f0:d4:88:2f:a6:b4:59:14:28:4e:e5:80:1f:98:75:
                    18:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C7:E7:15:0F:B2:F8:FF:B9:E9:C8:D8:88:76:F8:4E:D8:F0:32:BC
            X509v3 Authority Key Identifier:
                keyid:0F:72:F9:CF:DA:53:B5:50:6C:E5:48:E0:17:FB:D1:6A:F5:77:24:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/0F72F9CFDA53B5506CE548E017FBD16AF5772457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F72F9CFDA53B5506CE548E017FBD16AF5772457.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/0/3230302e3136302e3230382e302f32302d3234203d3e2037333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:20:ab:bc:f3:c4:a0:de:33:bd:ff:ab:6b:ab:b9:48:69:71:
         e3:90:35:3d:63:0f:d8:cf:8d:93:c4:77:0a:84:e5:88:9c:6f:
         da:92:e3:da:ae:d1:0a:e0:95:6e:8b:0c:03:14:90:55:3f:6b:
         ff:ff:ee:ea:af:9c:27:4e:b6:76:50:1a:d2:ca:90:d0:ee:fd:
         ea:86:9b:c9:ad:01:ab:3c:c7:bd:9e:bc:8a:37:51:28:73:54:
         74:80:c3:3f:3d:6f:4e:dd:b3:bc:71:c2:16:7d:07:62:d5:9b:
         72:8d:bb:e1:77:4b:a9:f8:d6:83:df:7c:9c:19:36:25:fd:7d:
         ad:e8:e4:1e:0d:af:cb:f4:83:10:4e:a7:71:b0:ed:5e:f8:df:
         74:a0:a2:e8:88:eb:55:96:49:7c:be:e4:fd:0c:0d:5d:b4:be:
         2e:19:3a:2d:13:ad:19:32:85:02:7c:1b:79:6f:44:59:5f:d8:
         41:66:92:ea:66:2c:65:f6:5d:6e:d5:38:93:ae:a1:4d:83:26:
         1d:8c:99:52:1c:f1:87:e5:67:77:41:60:bb:a2:f8:cc:e4:ac:
         de:92:7d:7b:2a:e5:b1:8b:89:f9:ef:a2:4b:70:f7:39:58:b5:
         0f:e4:17:28:52:8a:74:9d:98:54:37:9b:56:2f:d2:35:4c:53:
         08:9d:34:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:21:57 2026 by rpki-client