Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa
File:                     3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa (raw, json)
Hash identifier:          xtIxjfkyAcW7jE6lNFxHlX2DDbON32u22jesSATKlXg=
Subject key identifier:   F7:AF:6B:B2:6A:49:8B:CA:20:4E:7F:8B:97:19:FB:00:7E:56:F1:97
Certificate issuer:       /CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
Certificate serial:       7132CC266CEF6EBF02D5132EF98AA5EB20CF7D3F
Authority key identifier: F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa
Signing time:             Mon 25 May 2026 13:26:00 +0000
ROA not before:           Mon 25 May 2026 13:21:00 +0000
ROA not after:            Mon 24 May 2027 13:26:00 +0000
asID:                     61873
IP address blocks:        201.149.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl
                          rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:08:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:cc:26:6c:ef:6e:bf:02:d5:13:2e:f9:8a:a5:eb:20:cf:7d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8FCC9D0A386F207C9FD886E269D8F44B338578D
        Validity
            Not Before: May 25 13:21:00 2026 GMT
            Not After : May 24 13:26:00 2027 GMT
        Subject: CN=F7AF6BB26A498BCA204E7F8B9719FB007E56F197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:65:f4:ae:38:e2:d3:37:a1:7c:c3:f2:1e:
                    a0:a3:08:75:9c:c7:f6:02:76:9a:02:77:1b:73:50:
                    b6:ff:31:48:2a:2b:2c:f0:a7:fa:2f:ba:20:f8:81:
                    ee:59:18:f1:e6:7c:39:65:e2:58:65:a3:9e:09:43:
                    6f:ce:dd:cb:b6:1f:74:bd:0a:b2:af:da:44:67:8c:
                    42:f5:0f:a8:93:84:cb:25:8e:95:82:a1:49:84:0c:
                    08:0a:b6:62:ab:e7:08:e4:0c:31:8d:f4:cd:d6:f8:
                    51:f0:65:9a:b3:b0:b1:7c:97:34:dd:af:f8:1e:0b:
                    da:49:80:a7:16:bd:c3:8b:04:07:9e:5b:6a:b5:e1:
                    d6:bd:2a:56:cc:0f:da:b9:68:75:f8:3a:4c:80:ab:
                    1c:ea:50:cb:bb:ff:98:db:3b:4e:0d:43:97:70:6e:
                    84:da:32:fe:62:37:5b:7e:80:a2:67:24:19:db:19:
                    d0:98:72:61:81:43:35:b7:05:e1:01:27:fe:2e:64:
                    d9:c0:38:5c:8d:16:79:22:55:38:36:61:e8:dd:4f:
                    64:89:e6:0d:55:64:a2:6d:39:91:9a:ca:24:a0:a9:
                    d8:fe:8f:23:f4:13:ba:1c:db:7d:e0:0c:e6:f3:8e:
                    07:ae:ee:30:59:ac:ed:cc:23:7b:26:d9:52:e8:fd:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AF:6B:B2:6A:49:8B:CA:20:4E:7F:8B:97:19:FB:00:7E:56:F1:97
            X509v3 Authority Key Identifier:
                keyid:F8:FC:C9:D0:A3:86:F2:07:C9:FD:88:6E:26:9D:8F:44:B3:38:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/F8FCC9D0A386F207C9FD886E269D8F44B338578D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F8FCC9D0A386F207C9FD886E269D8F44B338578D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CoJMWfwoZHGpjCuNS4seRHQJEJSEo2pk9HS4efPVvt7/0/3230312e3134392e3130382e302f32322d3234203d3e203631383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:f3:b3:7c:e0:a6:af:22:db:f9:6b:54:54:0a:0a:86:aa:04:
         3c:11:55:88:c0:26:f7:fe:b0:06:e9:d9:b2:98:f4:b9:aa:09:
         af:88:43:2d:9d:1b:8f:b6:cb:99:f9:36:8b:75:cb:ee:51:57:
         a3:10:c0:07:15:c3:1f:11:2a:1c:73:a3:b1:c8:52:f6:b0:35:
         c0:2d:66:9e:b6:7c:ff:80:1a:2b:ce:41:45:b7:32:1e:9e:a0:
         ca:ca:5d:ee:1d:79:29:b0:77:74:30:c1:da:28:53:ca:3b:70:
         a9:76:27:3e:23:5f:cb:3b:df:85:b0:f4:34:5a:d9:5a:97:ee:
         e3:b2:42:8d:ee:b8:39:b0:d2:95:8a:2e:b0:d1:81:64:fd:b7:
         28:e1:5f:0d:c2:e9:fd:18:44:07:f4:63:dd:b3:0e:5d:d9:d6:
         b1:56:84:48:9d:74:aa:f9:d3:35:81:d0:3a:9a:dd:27:71:93:
         a8:76:a6:99:40:dd:57:d8:42:f0:6d:af:3d:cf:a3:b1:26:8e:
         80:a1:05:05:e9:ce:ac:c2:a7:d1:1a:6f:5e:5b:17:41:34:38:
         93:47:46:36:8d:c8:b0:9d:c7:5b:fa:d7:a3:29:32:4a:ce:c1:
         61:6f:c4:f5:e5:c8:bb:66:27:c2:74:b0:dd:8b:aa:96:46:ce:
         96:06:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:05 2026 by rpki-client