Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa
File:                     3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa (raw, json)
Hash identifier:          Rk0C3nrmxHub3fKIhGoMRif6ygZyYYqNphwWED1cq7Q=
Subject key identifier:   71:78:20:6A:61:F8:31:BE:94:38:2B:1F:A8:DB:10:1B:67:C3:93:87
Certificate issuer:       /CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
Certificate serial:       0230A7ABDBFD78BC5E7CA4572C35A892FEEC8387
Authority key identifier: E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa
Signing time:             Fri 29 May 2026 18:00:00 +0000
ROA not before:           Fri 29 May 2026 17:55:00 +0000
ROA not after:            Fri 28 May 2027 18:00:00 +0000
asID:                     271726
IP address blocks:        201.216.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl
                          rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 16:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:30:a7:ab:db:fd:78:bc:5e:7c:a4:57:2c:35:a8:92:fe:ec:83:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4A60880B8D4EC0024322D87A27CBCBDC2192A65
        Validity
            Not Before: May 29 17:55:00 2026 GMT
            Not After : May 28 18:00:00 2027 GMT
        Subject: CN=7178206A61F831BE94382B1FA8DB101B67C39387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:18:5d:73:45:f2:7a:d1:7d:3d:d7:47:62:1e:
                    34:c5:66:5e:dd:4e:e0:4e:10:cf:3c:4c:97:77:85:
                    6b:49:9b:7b:ab:ae:92:fb:29:ff:28:b5:fd:49:e2:
                    91:cb:fb:fa:a8:e2:2d:12:e2:d4:81:cf:1c:be:1d:
                    a0:78:d5:85:93:75:2a:3a:2d:a0:98:11:f4:96:1c:
                    63:69:0f:65:ac:d7:a5:90:94:20:db:f5:ce:17:67:
                    86:47:0e:e3:76:47:40:87:19:3f:1c:0c:7d:f3:ec:
                    a7:05:ec:ab:3a:43:e8:6f:4d:43:4d:55:78:e2:37:
                    c6:22:76:43:18:54:d4:8d:b0:cf:83:9a:cc:d0:bb:
                    70:4a:13:60:99:30:2a:37:3d:8d:83:67:c8:70:32:
                    2a:ec:d5:9d:91:b1:39:8b:a2:4f:88:db:ca:1a:38:
                    8c:d2:86:73:36:d5:78:ad:1c:9b:f2:c9:9c:38:24:
                    ea:32:23:e2:f3:80:fd:f8:70:6c:75:e4:3b:94:a5:
                    e4:c0:81:03:1f:e7:16:e7:1b:62:ad:3f:c0:5a:50:
                    cb:8b:49:4f:bb:0f:a0:7b:bd:1b:de:33:85:4b:07:
                    18:31:9f:80:31:be:a5:dc:c3:84:c0:60:44:50:61:
                    6e:a0:e8:53:73:33:26:cd:34:a3:a5:91:e5:2e:6c:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:20:6A:61:F8:31:BE:94:38:2B:1F:A8:DB:10:1B:67:C3:93:87
            X509v3 Authority Key Identifier:
                keyid:E4:A6:08:80:B8:D4:EC:00:24:32:2D:87:A2:7C:BC:BD:C2:19:2A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4A60880B8D4EC0024322D87A27CBCBDC2192A65.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/zmJR3chq5g8LZWTtSvQrBBC43EDMFgYBf7XSx9EWVHr/0/3230312e3231362e38382e302f32332d3233203d3e20323731373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:ed:c8:30:50:0b:45:98:49:2e:71:88:cb:d3:31:06:b6:
         93:cf:a0:55:59:66:fc:39:7c:7c:0d:aa:45:14:2a:ff:16:07:
         19:78:71:48:87:27:43:e5:c8:e3:09:4c:e8:ae:cc:fb:f4:5d:
         93:80:bf:dd:fd:1a:75:54:d6:37:e4:bc:89:d5:2c:41:8d:f9:
         c1:60:9c:bb:ff:f9:f4:c1:c8:ad:38:67:ee:15:a2:eb:4d:cb:
         2b:5f:73:68:47:4a:58:e4:64:3d:ed:50:4b:04:1b:26:91:95:
         73:55:fc:91:65:92:45:6c:5b:1a:fb:df:cf:69:02:e5:99:7d:
         c7:ab:09:21:ff:d6:9e:ae:6e:9a:a2:1c:b9:3f:c9:e8:9a:a6:
         28:88:92:46:16:4e:58:79:23:af:b7:b0:c4:85:f6:8e:5c:e0:
         16:41:72:23:f4:71:a2:cf:af:fa:b0:06:eb:35:d5:59:ee:3b:
         1f:16:5e:e0:e6:7e:7b:74:50:cc:11:0b:4f:f0:53:77:91:42:
         3f:d1:1b:c1:bb:55:7a:d6:13:1f:e8:84:63:6a:f2:94:e6:08:
         5d:2f:9a:2b:f6:30:b5:ea:d7:8c:5f:84:d9:72:d6:34:30:79:
         d8:9d:38:b1:0b:1a:c3:12:db:95:4f:e4:fd:58:e6:03:b7:4f:
         bd:92:22:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:14:03 2026 by rpki-client