Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa
File:                     3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa (raw, json)
Hash identifier:          jGjxaUj+S3if2/88ZdKhONgpTTEvXHT55cgOsns96IM=
Subject key identifier:   B1:B4:FF:E2:29:07:A3:0F:1D:2F:DC:3C:9D:07:69:FE:39:BF:9A:C0
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       6740353C2FF556270E362739424E727A2264E40C
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa
Signing time:             Fri 29 May 2026 18:00:00 +0000
ROA not before:           Fri 29 May 2026 17:55:00 +0000
ROA not after:            Fri 28 May 2027 18:00:00 +0000
asID:                     271726
IP address blocks:        201.216.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:40:35:3c:2f:f5:56:27:0e:36:27:39:42:4e:72:7a:22:64:e4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: May 29 17:55:00 2026 GMT
            Not After : May 28 18:00:00 2027 GMT
        Subject: CN=B1B4FFE22907A30F1D2FDC3C9D0769FE39BF9AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:77:2d:b5:7a:20:74:fb:f5:da:fe:eb:4f:
                    1e:47:dc:11:ec:e7:c7:d6:1d:93:3f:38:e7:ee:be:
                    02:d3:7e:d6:14:39:9f:a0:34:8d:7c:4d:3f:db:dd:
                    43:6e:73:40:2d:a2:7e:59:37:8f:9f:44:85:2f:eb:
                    17:3b:ed:a9:f8:bd:d7:ee:67:e1:1d:d2:f9:6d:a2:
                    df:43:ee:20:8b:01:fe:b0:55:9f:4d:fd:70:65:fb:
                    80:9a:73:2f:6d:eb:b5:cb:32:f6:b2:6e:fa:48:72:
                    03:f1:6f:92:80:dd:50:45:ae:25:d0:f0:64:9d:f9:
                    a5:82:a7:e4:a7:de:31:b3:da:59:75:a1:60:9a:1b:
                    8e:7d:d7:06:14:60:81:d4:2f:41:fb:f9:2a:dc:5c:
                    1b:72:6f:b8:0c:e5:32:54:5c:1d:c5:0e:56:92:c2:
                    09:89:6c:07:79:1d:3b:45:b8:b4:dc:a9:32:6a:01:
                    15:31:85:6f:6e:f7:2c:ec:71:66:6c:da:d6:7d:18:
                    32:bb:8f:f6:58:4c:43:f4:ea:36:60:29:d6:42:b2:
                    ac:c4:01:8b:2e:49:30:c1:86:65:43:f4:cd:d3:34:
                    ff:1f:0b:9e:f1:08:c5:43:d9:54:db:45:dc:0f:2b:
                    81:db:92:ce:3b:32:67:cf:61:8e:6e:4f:ce:55:74:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B4:FF:E2:29:07:A3:0F:1D:2F:DC:3C:9D:07:69:FE:39:BF:9A:C0
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32322d3232203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:b9:99:f3:5d:e1:42:ef:bf:fe:f6:fc:c1:0d:92:3d:0d:
         94:b4:ca:d8:96:ae:54:20:ce:b4:66:a8:a2:78:fd:68:e2:26:
         4c:15:c8:2e:c2:19:98:e6:7d:5f:c9:7f:bb:5d:0e:c2:2e:1f:
         48:85:40:ea:5a:1f:1f:7a:39:d0:c8:b6:92:f4:ef:c8:35:ed:
         01:de:40:56:94:81:da:58:71:8d:77:f0:8c:a9:f5:13:00:08:
         16:e7:ef:a1:d4:e9:a3:8f:21:21:db:c9:71:6d:05:15:13:5a:
         98:fa:e5:2f:84:53:10:20:1c:dd:b7:37:80:28:43:ac:d7:55:
         c8:15:8a:b4:d0:31:ba:8a:f4:b4:ad:31:59:15:ea:7f:6a:98:
         d9:91:45:10:75:71:b0:5c:00:28:79:67:e2:21:70:3c:4a:f5:
         ee:92:ca:eb:6a:c2:7f:39:c3:8d:06:5f:88:b5:4a:41:bc:f3:
         eb:56:ba:67:49:f4:14:4f:f2:b1:a2:b9:97:b2:b4:0a:9c:9c:
         ad:1b:7d:53:bc:36:8a:05:a7:76:c1:e7:b1:69:99:e8:8b:d0:
         a3:f5:2c:08:28:95:7a:c4:4e:68:e2:bc:d3:dc:e8:b7:81:6c:
         08:3a:db:49:f1:57:e3:4f:22:d8:7b:ee:1c:63:41:f9:2c:13:
         45:70:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:40:16 2026 by rpki-client