Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa
File:                     3230312e33332e3136302e302f32302d3332203d3e203533313831.roa (raw, json)
Hash identifier:          svh7vG+loC6TCTqm928Y6efCEwb8Muh8IpiBCDcVhlg=
Subject key identifier:   EC:7E:56:32:37:6C:A2:0B:D1:D5:8D:C0:3C:23:2C:5B:86:94:8D:7F
Certificate issuer:       /CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
Certificate serial:       7CB5D813107D57E39AA5FAF81248AF1F08E51D14
Authority key identifier: 5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa
Signing time:             Wed 09 Sep 2026 11:38:22 +0000
ROA not before:           Wed 09 Sep 2026 11:33:22 +0000
ROA not after:            Wed 08 Sep 2027 11:38:22 +0000
asID:                     53181
IP address blocks:        201.33.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl
                          rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 13:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b5:d8:13:10:7d:57:e3:9a:a5:fa:f8:12:48:af:1f:08:e5:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E
        Validity
            Not Before: Sep  9 11:33:22 2026 GMT
            Not After : Sep  8 11:38:22 2027 GMT
        Subject: CN=EC7E5632376CA20BD1D58DC03C232C5B86948D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:e9:5a:c9:40:72:35:78:b2:3a:7d:bd:80:
                    7d:20:51:a4:f9:07:1a:16:90:47:86:e5:f0:6f:dd:
                    41:f6:85:b2:8b:b1:1d:67:3a:ce:5b:25:cb:c3:76:
                    ca:ad:d2:44:1e:65:16:fe:0e:ed:36:7e:0c:94:11:
                    1c:85:1a:6f:6d:96:50:cc:0f:8a:c8:37:5a:d0:07:
                    73:01:25:4f:fb:d2:78:57:79:ef:da:3a:e8:f9:ff:
                    b4:8b:86:89:26:6b:3f:ef:fb:54:72:0e:2d:22:bc:
                    7c:77:65:d0:75:8c:f4:6a:a5:0b:5c:9c:e5:f1:a4:
                    e0:0c:08:46:59:d6:5b:f4:ed:98:a3:94:53:7a:97:
                    4d:75:a0:97:a6:03:8c:f4:e5:e1:ac:a8:9e:10:94:
                    9a:af:b3:a5:61:24:05:f2:02:9e:b2:c5:11:b5:49:
                    e0:e6:f1:e6:6f:9d:1e:8e:88:3e:0d:fc:b6:3c:51:
                    a0:98:9a:53:c0:cf:24:f4:30:03:9d:2a:fc:ef:55:
                    d7:a7:2d:34:f6:ea:4e:6d:31:dd:e3:8b:e7:75:68:
                    bb:87:1b:c1:cb:33:d5:3c:51:a3:ec:2f:19:fc:cb:
                    a7:69:17:e7:23:e2:31:6f:89:8c:f8:5a:f2:d8:5a:
                    80:0e:87:4c:13:6c:d1:f5:cf:1a:ab:25:5b:02:a4:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7E:56:32:37:6C:A2:0B:D1:D5:8D:C0:3C:23:2C:5B:86:94:8D:7F
            X509v3 Authority Key Identifier:
                keyid:5A:1A:65:2F:EE:32:8D:6F:3E:1B:47:CD:4C:84:23:2C:B2:EE:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A652FEE328D6F3E1B47CD4C84232CB2EEF95E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3230312e33332e3136302e302f32302d3332203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:d7:48:36:cd:13:5c:10:88:49:e2:3c:c5:64:2d:e5:00:f5:
         05:29:f4:f2:a5:38:2c:53:2e:34:bc:a7:72:86:6a:f9:b9:1e:
         fd:f7:81:c8:14:4d:0b:7c:25:d8:07:cb:84:07:1e:1d:7e:ab:
         4f:bc:88:f1:44:99:23:70:f9:c0:4a:47:c0:11:4f:c6:bf:44:
         1e:b5:24:bc:6c:3c:e7:ad:c8:1e:41:86:c7:fb:6e:de:de:fb:
         2a:3d:01:7d:2f:8a:17:d4:56:8e:99:5a:d0:17:81:41:59:26:
         60:c8:9c:a4:6d:bb:2b:16:74:55:ca:18:06:27:89:6c:48:43:
         bb:62:32:68:ae:b1:58:b4:2e:b6:40:0a:44:e9:a6:b6:80:bd:
         b5:1a:c4:be:11:74:17:03:ab:00:7c:5c:5c:fa:bc:6f:4c:37:
         91:5b:79:96:63:5c:42:d7:bd:c7:13:00:b3:c3:99:28:65:7a:
         22:64:34:b3:b9:fc:b8:b3:dd:91:58:7b:10:7b:c7:ca:30:ae:
         25:45:a8:39:34:f0:d6:89:ce:44:21:8e:8b:e4:24:84:c1:76:
         9d:b3:e8:e1:71:88:ca:44:2c:6e:80:2d:96:ce:88:ce:a6:00:
         82:6c:8b:35:14:72:2a:93:27:9e:fc:bd:0c:0c:8f:61:24:72:
         65:c6:7b:e4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfLXYExB9V+Oapfr4EkivHwjlHRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUExQTY1MkZFRTMyOEQ2RjNFMUI0N0NENEM4NDIzMkNC
MkVFRjk1RTAeFw0yNjA5MDkxMTMzMjJaFw0yNzA5MDgxMTM4MjJaMDMxMTAvBgNV
BAMTKEVDN0U1NjMyMzc2Q0EyMEJEMUQ1OERDMDNDMjMyQzVCODY5NDhEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWg+layUByNXiyOn29gH0gUaT5
BxoWkEeG5fBv3UH2hbKLsR1nOs5bJcvDdsqt0kQeZRb+Du02fgyUERyFGm9tllDM
D4rIN1rQB3MBJU/70nhXee/aOuj5/7SLhokmaz/v+1RyDi0ivHx3ZdB1jPRqpQtc
nOXxpOAMCEZZ1lv07ZijlFN6l011oJemA4z05eGsqJ4QlJqvs6VhJAXyAp6yxRG1
SeDm8eZvnR6OiD4N/LY8UaCYmlPAzyT0MAOdKvzvVdenLTT26k5tMd3ji+d1aLuH
G8HLM9U8UaPsLxn8y6dpF+cj4jFviYz4WvLYWoAOh0wTbNH1zxqrJVsCpCXjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7H5WMjdsogvR1Y3APCMsW4aUjX8wHwYDVR0j
BBgwFoAUWhplL+4yjW8+G0fNTIQjLLLu+V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMS81QTFBNjUyRkVFMzI4RDZGM0UxQjQ3Q0Q0Qzg0MjMyQ0IyRUVGOTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzVBMUE2NTJGRUUzMjhENkYz
RTFCNDdDRDRDODQyMzJDQjJFRUY5NUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzEv
MzIzMDMxMmUzMzMzMmUzMTM2MzAyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEySGgMA0GCSqGSIb3DQEBCwUAA4IBAQBa10g2zRNc
EIhJ4jzFZC3lAPUFKfTypTgsUy40vKdyhmr5uR7994HIFE0LfCXYB8uEBx4dfqtP
vIjxRJkjcPnASkfAEU/Gv0QetSS8bDznrcgeQYbH+27e3vsqPQF9L4oX1FaOmVrQ
F4FBWSZgyJykbbsrFnRVyhgGJ4lsSEO7YjJorrFYtC62QApE6aa2gL21GsS+EXQX
A6sAfFxc+rxvTDeRW3mWY1xC173HEwCzw5koZXoiZDSzufy4s92RWHsQe8fKMK4l
Rag5NPDWic5EIY6L5CSEwXads+jhcYjKRCxugC2WzojOpgCCbIs1FHIqkyee/L0M
DI9hJHJlxnvk
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:00:55 2026 by rpki-client