Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/3230312e3134382e3230382e302f32322d3233203d3e203631383033.roa
File:                     3230312e3134382e3230382e302f32322d3233203d3e203631383033.roa (raw, json)
Hash identifier:          xV1Qr0JhpjWdTExK5NwIpYUL6Y84i/7tVwK7JqnXe+0=
Subject key identifier:   70:B6:27:A7:E4:B3:BB:33:81:EA:DC:BB:5A:5F:5E:35:19:5B:ED:A0
Certificate issuer:       /CN=D64747AF7EF5FA19149F0E7E47116B18191BD499
Certificate serial:       495053429CCFD2E0FB6EE2BAFD9BB85CE402CDE1
Authority key identifier: D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/3230312e3134382e3230382e302f32322d3233203d3e203631383033.roa
Signing time:             Fri 17 Apr 2026 22:36:18 +0000
ROA not before:           Fri 17 Apr 2026 22:31:18 +0000
ROA not after:            Fri 16 Apr 2027 22:36:18 +0000
asID:                     61803
IP address blocks:        201.148.208.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.crl
                          rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 01:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:50:53:42:9c:cf:d2:e0:fb:6e:e2:ba:fd:9b:b8:5c:e4:02:cd:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D64747AF7EF5FA19149F0E7E47116B18191BD499
        Validity
            Not Before: Apr 17 22:31:18 2026 GMT
            Not After : Apr 16 22:36:18 2027 GMT
        Subject: CN=70B627A7E4B3BB3381EADCBB5A5F5E35195BEDA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:50:ac:c0:52:e2:13:91:4f:54:7e:40:1c:
                    33:78:53:de:c7:2d:7c:02:1e:dd:84:ac:26:1f:3b:
                    2e:36:cb:bf:94:59:82:a9:71:b1:7b:7f:0b:f9:d9:
                    a5:77:0c:e5:e4:4d:d7:1b:38:67:c5:ba:a3:fe:f6:
                    a7:00:f6:0d:92:25:3d:5d:9d:35:26:8e:9a:18:2f:
                    9f:67:62:0b:85:9f:e2:1e:92:fa:f7:8f:0d:30:e7:
                    f1:d5:bf:29:80:de:c9:ac:3e:90:11:90:2a:62:ae:
                    b6:2a:c3:bd:cf:0d:43:80:0e:7e:99:74:8e:f4:5f:
                    ca:6c:89:61:25:cc:34:46:40:a8:54:82:43:89:60:
                    be:c7:dd:58:65:60:83:5c:f7:17:2f:da:12:a2:11:
                    d0:e5:8a:a0:ac:46:41:be:c3:ba:2b:bd:6a:23:27:
                    97:ee:5a:f5:67:64:5c:cb:ba:d0:42:2a:68:fd:79:
                    e1:58:a0:70:d6:74:da:7b:a0:c9:72:f6:c5:39:3f:
                    15:25:82:4a:81:fd:3d:f8:70:5c:7c:8d:4f:ea:e6:
                    79:51:e9:ab:c8:48:73:97:9d:76:9d:cf:15:92:2f:
                    f8:18:0b:c0:90:22:b1:5b:54:4c:e1:9f:50:28:ab:
                    1e:d1:a4:30:7c:57:f8:1b:ac:a7:7f:03:16:0c:3a:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:27:A7:E4:B3:BB:33:81:EA:DC:BB:5A:5F:5E:35:19:5B:ED:A0
            X509v3 Authority Key Identifier:
                keyid:D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/3230312e3134382e3230382e302f32322d3233203d3e203631383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:67:30:af:a2:73:2a:0d:1e:6a:f4:0b:27:31:8c:ba:3d:
         7b:4d:c6:5f:11:a7:3a:7a:3d:72:ec:34:e5:10:ca:25:0b:10:
         9d:a0:f7:a9:f0:f3:b4:88:d4:10:98:03:2c:31:61:1b:c7:91:
         68:b4:78:f8:87:ae:10:dc:c7:9d:28:be:5f:7f:2f:1d:50:92:
         a1:b5:f8:11:2f:6d:0f:de:36:ff:f0:ff:45:c9:c5:f8:4e:c6:
         29:da:58:92:e8:34:3f:23:89:51:03:1d:e1:8e:bf:45:b3:11:
         81:39:dd:ba:2f:92:c4:67:f2:56:87:69:25:7f:67:4e:38:38:
         0b:6a:7f:35:9d:c1:b4:11:94:2b:ca:5d:ab:83:36:44:99:cc:
         8b:d9:a8:6b:6c:8f:bd:22:db:b8:a2:8c:39:8b:b0:96:a8:cd:
         06:b7:e8:5c:8a:2d:fe:5e:89:23:75:40:18:93:64:97:a7:22:
         8e:7c:b3:67:cf:b0:45:45:cb:21:98:f9:b0:e8:8c:4f:03:be:
         96:92:f2:05:7f:e0:56:7e:d8:35:a8:6d:53:64:ea:67:63:d6:
         f5:57:1d:69:7a:64:13:85:fa:35:1e:98:94:4f:dd:bb:5c:3e:
         b5:8e:cf:ac:23:42:68:29:39:f9:7c:51:4b:88:1d:39:84:82:
         a7:f4:34:f2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSVBTQpzP0uD7buK6/Zu4XOQCzeEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY0NzQ3QUY3RUY1RkExOTE0OUYwRTdFNDcxMTZCMTgx
OTFCRDQ5OTAeFw0yNjA0MTcyMjMxMThaFw0yNzA0MTYyMjM2MThaMDMxMTAvBgNV
BAMTKDcwQjYyN0E3RTRCM0JCMzM4MUVBRENCQjVBNUY1RTM1MTk1QkVEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHVCswFLiE5FPVH5AHDN4U97H
LXwCHt2ErCYfOy42y7+UWYKpcbF7fwv52aV3DOXkTdcbOGfFuqP+9qcA9g2SJT1d
nTUmjpoYL59nYguFn+Iekvr3jw0w5/HVvymA3smsPpARkCpirrYqw73PDUOADn6Z
dI70X8psiWElzDRGQKhUgkOJYL7H3VhlYINc9xcv2hKiEdDliqCsRkG+w7orvWoj
J5fuWvVnZFzLutBCKmj9eeFYoHDWdNp7oMly9sU5PxUlgkqB/T34cFx8jU/q5nlR
6avISHOXnXadzxWSL/gYC8CQIrFbVEzhn1Aoqx7RpDB8V/gbrKd/AxYMOlWjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcLYnp+SzuzOB6ty7Wl9eNRlb7aAwHwYDVR0j
BBgwFoAU1kdHr371+hkUnw5+RxFrGBkb1JkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm9Xb3IycjNvN3RHRGtwY3BDWU1UZWp3QkdOQW5iTE5nYkE3OWh5Vlpo
VFIvMC9ENjQ3NDdBRjdFRjVGQTE5MTQ5RjBFN0U0NzExNkIxODE5MUJENDk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q2NDc0N0FGN0VGNUZBMTkx
NDlGMEU3RTQ3MTE2QjE4MTkxQkQ0OTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JvV29yMnIzbzd0R0RrcGNwQ1lNVGVqd0JHTkFuYkxOZ2JBNzloeVZaaFRSLzAv
MzIzMDMxMmUzMTM0MzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDM2
MzEzODMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALJlNAwDQYJKoZIhvcNAQELBQADggEBAHuiZzCv
onMqDR5q9AsnMYy6PXtNxl8Rpzp6PXLsNOUQyiULEJ2g96nw87SI1BCYAywxYRvH
kWi0ePiHrhDcx50ovl9/Lx1QkqG1+BEvbQ/eNv/w/0XJxfhOxinaWJLoND8jiVED
HeGOv0WzEYE53bovksRn8laHaSV/Z044OAtqfzWdwbQRlCvKXauDNkSZzIvZqGts
j70i27iijDmLsJaozQa36FyKLf5eiSN1QBiTZJenIo58s2fPsEVFyyGY+bDojE8D
vpaS8gV/4FZ+2DWobVNk6mdj1vVXHWl6ZBOF+jUemJRP3btcPrWOz6wjQmgpOfl8
UUuIHTmEgqf0NPI=
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:49:17 2026 by rpki-client