Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa
File:                     3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa (raw, json)
Hash identifier:          rnT8foYtyAKGwOcY0chmV2wivfr7dLg1ms0Sl26JGH4=
Subject key identifier:   FC:AB:91:7B:20:75:E1:AA:BA:E2:F9:4C:F7:BA:CF:1D:A4:2A:D5:D2
Certificate issuer:       /CN=A1096A3507847863AC3D36DC43D51BC604CAAE7A
Certificate serial:       2D4650E29D7D83D8405DB652573666B6B5892AD3
Authority key identifier: A1:09:6A:35:07:84:78:63:AC:3D:36:DC:43:D5:1B:C6:04:CA:AE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa
Signing time:             Thu 16 Apr 2026 15:15:38 +0000
ROA not before:           Thu 16 Apr 2026 15:10:38 +0000
ROA not after:            Thu 15 Apr 2027 15:15:38 +0000
asID:                     271383
IP address blocks:        200.36.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:46:50:e2:9d:7d:83:d8:40:5d:b6:52:57:36:66:b6:b5:89:2a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1096A3507847863AC3D36DC43D51BC604CAAE7A
        Validity
            Not Before: Apr 16 15:10:38 2026 GMT
            Not After : Apr 15 15:15:38 2027 GMT
        Subject: CN=FCAB917B2075E1AABAE2F94CF7BACF1DA42AD5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:19:17:e0:d6:0b:9d:b3:a5:8c:13:05:be:
                    43:47:17:f8:2b:29:0e:3a:be:fa:c2:23:26:9e:a4:
                    ad:ce:c1:07:b2:76:99:98:f1:42:d3:c9:0d:b6:a5:
                    ac:1f:e4:17:4b:b5:46:7f:ee:d0:6e:81:56:04:6c:
                    2f:84:a9:27:50:44:48:b5:80:94:4a:2e:ee:a3:7a:
                    a3:1c:15:77:2e:11:fd:a7:3a:f5:d0:72:bd:90:1e:
                    e7:54:61:82:1a:4e:ed:4a:ed:88:bb:d3:45:51:38:
                    37:03:21:d3:b2:0c:cb:f0:52:01:4a:90:44:32:08:
                    a4:f6:e4:77:5f:65:aa:e4:3b:ca:15:61:62:52:ed:
                    43:24:27:54:49:c9:75:69:b2:c5:61:1c:84:df:c2:
                    15:a6:20:c4:d0:9c:29:2c:a0:77:22:a5:5b:91:3b:
                    8d:04:7f:e2:91:ed:02:5b:f1:40:12:f5:df:d3:39:
                    5c:ef:88:0b:3c:a4:22:a6:31:0d:ad:e5:d8:94:e8:
                    18:eb:3d:fe:54:02:26:d5:93:9b:e3:8e:16:a7:42:
                    3f:bd:88:35:a7:73:22:5f:76:d9:92:78:ae:4d:be:
                    8a:ed:53:da:a6:10:ef:9b:be:e7:ae:9e:c8:11:48:
                    9e:42:a0:f4:e8:40:62:ce:26:17:b2:53:6c:cc:1d:
                    f7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:91:7B:20:75:E1:AA:BA:E2:F9:4C:F7:BA:CF:1D:A4:2A:D5:D2
            X509v3 Authority Key Identifier:
                keyid:A1:09:6A:35:07:84:78:63:AC:3D:36:DC:43:D5:1B:C6:04:CA:AE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231332e302f32342d3234203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:b0:af:87:08:ff:34:b4:b7:cd:f4:5e:64:3a:f0:0a:b5:
         a7:b3:50:18:63:45:fd:24:c8:5a:b8:6a:fc:df:5a:8c:88:72:
         bc:da:c9:1c:41:ef:11:53:d2:0f:18:98:86:ba:ed:51:ab:7a:
         df:ba:3a:11:32:e0:14:41:5d:91:2c:ee:da:2d:0c:06:61:79:
         3e:a2:31:7f:d8:63:8e:46:18:f4:2e:34:74:04:ca:14:c5:b1:
         70:53:2a:d7:1f:73:80:c3:59:da:cd:54:6f:5d:d1:cd:f2:be:
         46:d3:e1:8c:59:80:ad:c8:e0:3f:7c:72:fa:84:7c:fc:9a:49:
         e3:69:e6:09:f4:26:23:0d:1f:3b:dc:80:f6:8b:5b:94:91:df:
         c5:9a:0b:d3:2a:8c:f5:88:fc:e7:b7:94:c6:2e:54:ef:c7:95:
         11:7c:49:03:bb:69:53:c6:24:7b:38:f9:98:7b:eb:90:d0:1c:
         f1:5e:79:ce:ab:60:67:24:b4:98:87:9d:ce:a5:bb:4e:4e:9a:
         1e:bf:d9:50:58:9f:c6:e3:d3:80:05:8c:11:d7:ae:02:af:51:
         de:85:9a:24:33:91:db:48:32:58:da:97:d7:22:5d:a5:76:e5:
         24:2c:e6:21:a0:b5:6a:92:40:0a:eb:20:f0:2f:9c:f5:35:16:
         8a:35:76:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:52:33 2026 by rpki-client