Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa
File:                     3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa (raw, json)
Hash identifier:          qlUjHpjAWKMnQPffdQJn3eCpwFflll7j8Xky9+T9Cfs=
Subject key identifier:   FC:4D:8E:06:12:CE:CC:7C:83:19:B4:39:57:3A:CB:FD:7B:AA:6B:C2
Certificate issuer:       /CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
Certificate serial:       7BB807088D1EE19DAFFFDC715176E54F73CBB868
Authority key identifier: D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa
Signing time:             Mon 03 Nov 2025 19:19:11 +0000
ROA not before:           Mon 03 Nov 2025 19:14:11 +0000
ROA not after:            Mon 02 Nov 2026 19:19:11 +0000
asID:                     271237
IP address blocks:        201.182.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl
                          rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 06:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b8:07:08:8d:1e:e1:9d:af:ff:dc:71:51:76:e5:4f:73:cb:b8:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8974FE3803B34D073F25B6E9C453E2ABCEFAA94
        Validity
            Not Before: Nov  3 19:14:11 2025 GMT
            Not After : Nov  2 19:19:11 2026 GMT
        Subject: CN=FC4D8E0612CECC7C8319B439573ACBFD7BAA6BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e8:4a:11:d6:8a:b1:b8:aa:80:92:16:fe:00:
                    59:bd:79:3c:d1:0c:2a:6d:38:5c:da:08:d1:d3:48:
                    91:a1:f6:77:d8:86:0f:7c:b3:fb:dc:23:2b:3c:24:
                    59:5b:44:15:3a:9f:f5:13:5c:4c:a6:7b:fe:3b:27:
                    50:f0:c9:80:d3:e3:4f:e8:f8:50:78:2d:8b:6d:88:
                    5a:16:35:3a:23:c6:0f:ce:cd:35:c8:fa:3b:07:94:
                    fa:b0:46:41:d1:79:8f:29:ea:48:9e:f3:01:ee:b2:
                    21:48:c0:94:59:7f:50:40:02:3b:a1:f2:ec:d2:26:
                    f0:28:b6:6a:a3:3e:b1:0d:48:e6:3f:c7:01:74:dc:
                    52:fb:ed:7d:f9:76:52:6e:5d:3d:91:84:d4:92:42:
                    b4:8e:46:5f:b6:b2:87:34:ee:6a:5b:36:ff:8e:1f:
                    78:9f:52:4b:ba:49:88:29:dd:53:77:08:9d:75:63:
                    5f:1f:b1:e5:f4:87:14:1c:73:54:cd:7d:dd:cc:c9:
                    01:ff:62:2c:1a:a7:11:34:db:1c:a2:70:47:e8:bf:
                    28:85:53:b6:06:fe:0c:15:9a:96:af:7a:6f:92:0f:
                    68:b1:f4:d9:94:f1:2a:fd:35:d5:20:78:1d:14:59:
                    ee:2c:53:64:3e:75:0b:ba:a9:5a:ff:a3:6e:99:5b:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4D:8E:06:12:CE:CC:7C:83:19:B4:39:57:3A:CB:FD:7B:AA:6B:C2
            X509v3 Authority Key Identifier:
                keyid:D8:97:4F:E3:80:3B:34:D0:73:F2:5B:6E:9C:45:3E:2A:BC:EF:AA:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8974FE3803B34D073F25B6E9C453E2ABCEFAA94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AxP26QEQmoNTg4V11kzpFkMnazpzMLsXBCy1agtzgAhs/0/3230312e3138322e3135362e302f32322d3234203d3e20323731323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:08:06:d4:1c:12:19:dd:ae:e4:86:76:74:4e:e5:d0:58:5b:
         b5:b7:13:29:09:dd:09:f4:e4:77:2b:d7:26:b4:96:8e:b0:7f:
         f0:4a:a4:dc:85:1b:9d:6f:91:02:79:11:2e:5b:0f:d1:b2:31:
         9a:83:88:7c:06:64:f3:76:bc:9d:74:b5:6f:bb:a1:bb:f6:a8:
         5d:c3:d6:93:9d:18:b1:59:2a:22:ef:05:2b:ad:4a:f9:d5:92:
         fe:22:2a:80:33:e9:80:81:78:97:29:ee:03:78:6b:de:13:62:
         9f:78:97:32:58:97:15:2a:60:6d:99:31:f9:fd:5c:ee:95:a7:
         a4:d4:8d:73:a9:2b:5e:b3:80:8a:24:46:e8:c5:24:64:97:61:
         04:26:4b:1c:a0:e4:cf:ad:f4:a8:1f:9f:18:a7:5b:e4:1b:ab:
         8d:1d:38:a7:2b:42:df:09:16:8f:84:2f:fa:eb:87:a4:7b:c3:
         10:3a:1f:75:fd:7a:c1:46:5d:17:3a:d3:f2:1e:c3:4c:74:5b:
         73:b3:47:88:46:31:d9:7a:54:59:53:02:66:c6:4a:6c:0a:4b:
         99:e4:e6:12:6c:82:80:bb:f9:8e:e3:66:f6:d9:1c:8a:69:de:
         7a:b5:54:b1:a3:11:e6:eb:1f:b5:11:75:ed:e5:7b:e9:78:ee:
         d3:01:1d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:57:47 2025 by rpki-client