Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa
File:                     3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa (raw, json)
Hash identifier:          0KG2xbqUUB9HJ4m9ohdLgdIbh7xlWBdHwKgvTo//dE4=
Subject key identifier:   F5:2E:1E:D9:24:CE:24:F5:A6:3E:8A:44:C6:A7:61:BE:B6:54:69:AF
Certificate issuer:       /CN=A1096A3507847863AC3D36DC43D51BC604CAAE7A
Certificate serial:       509B4FCE3EC98E7D8A535F48139E9F5BFB029E72
Authority key identifier: A1:09:6A:35:07:84:78:63:AC:3D:36:DC:43:D5:1B:C6:04:CA:AE:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa
Signing time:             Thu 16 Apr 2026 15:15:38 +0000
ROA not before:           Thu 16 Apr 2026 15:10:38 +0000
ROA not after:            Thu 15 Apr 2027 15:15:38 +0000
asID:                     271383
IP address blocks:        200.36.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.crl
                          rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 13:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9b:4f:ce:3e:c9:8e:7d:8a:53:5f:48:13:9e:9f:5b:fb:02:9e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1096A3507847863AC3D36DC43D51BC604CAAE7A
        Validity
            Not Before: Apr 16 15:10:38 2026 GMT
            Not After : Apr 15 15:15:38 2027 GMT
        Subject: CN=F52E1ED924CE24F5A63E8A44C6A761BEB65469AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dc:e6:35:78:64:29:66:47:40:d3:5a:72:41:
                    dc:96:0c:1e:47:c3:13:0c:f8:3e:0c:a6:69:45:4e:
                    b5:c3:44:23:4d:d3:a8:69:5a:8d:09:78:5f:ff:39:
                    fb:af:dd:17:88:d3:54:9a:e8:3b:45:bb:ee:6c:a6:
                    b8:4e:45:c3:07:fd:02:9c:e4:9f:51:19:b8:33:61:
                    02:84:3e:c9:1b:6f:ce:91:32:ed:44:40:3a:b6:f4:
                    19:0c:f1:ca:f1:ed:a2:f8:54:a5:d9:77:e2:d2:2c:
                    9c:7d:93:fb:95:a4:30:42:e4:fc:5a:44:a0:e4:aa:
                    a8:6d:5c:85:0e:48:e4:5d:35:77:23:01:41:1d:96:
                    55:58:a9:b3:8d:88:a0:66:b9:44:69:6c:51:03:28:
                    a5:f3:77:10:6e:90:00:c4:dc:3c:32:76:65:98:e0:
                    4f:e9:a3:53:d4:b1:fc:59:5d:6c:8e:f9:52:a8:7c:
                    76:33:80:09:63:21:d7:d6:00:d6:f0:6e:96:0a:d9:
                    e1:34:f0:26:1e:3f:e7:4b:23:a1:4e:6d:65:49:24:
                    bc:c7:4e:3c:cb:dc:6f:23:2c:23:2e:f4:d8:e6:ff:
                    87:34:dd:f2:1f:66:17:f4:f4:8f:74:c7:2c:25:03:
                    6f:aa:b9:8d:39:3e:47:d9:e5:4d:d1:ec:4f:74:38:
                    60:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2E:1E:D9:24:CE:24:F5:A6:3E:8A:44:C6:A7:61:BE:B6:54:69:AF
            X509v3 Authority Key Identifier:
                keyid:A1:09:6A:35:07:84:78:63:AC:3D:36:DC:43:D5:1B:C6:04:CA:AE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/A1096A3507847863AC3D36DC43D51BC604CAAE7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1096A3507847863AC3D36DC43D51BC604CAAE7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FYZSM5ruE1Bnv6jV1rSsPZP8oTZinQNsZRM1KAPCz1r/0/3230302e33362e3231342e302f32332d3233203d3e20323731333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:5f:e5:52:75:98:b2:2f:cc:1b:b8:3d:d6:2c:45:14:a9:
         08:38:18:d8:4d:7d:35:2b:2f:2c:c6:61:da:24:69:8a:f6:9b:
         c9:09:6d:30:2a:c8:81:a2:f5:19:e2:a5:ad:f2:2c:ad:74:a1:
         4c:a2:94:4d:2e:74:c2:9e:87:1e:77:1b:62:67:0b:51:df:f3:
         1b:0f:71:3b:6a:ec:64:d5:2f:54:4e:29:08:e7:73:b6:ea:04:
         f3:32:f5:95:75:02:3f:d2:75:ee:a6:f9:5f:37:60:98:6d:54:
         c8:bc:7b:42:91:32:2a:b9:40:67:9c:71:20:4e:c1:1b:61:86:
         6a:f2:45:6e:fd:21:56:6c:32:e9:57:e3:f3:a3:d6:f5:9d:0a:
         ea:89:99:7b:4d:91:1f:a7:e0:71:b2:49:8f:2f:1a:89:80:83:
         8f:2b:33:79:b9:3b:34:9d:cb:d2:7a:3d:ad:a0:78:6d:8d:4a:
         4b:36:9b:dd:3b:78:ec:3f:a2:c9:95:48:75:c0:57:17:08:0c:
         ec:fb:2f:8d:fa:13:ce:04:6b:00:69:9c:7b:18:7c:3f:28:9e:
         0a:3a:06:b6:af:5b:dd:60:f1:9e:4b:5f:e3:c7:20:10:a9:c6:
         09:9d:91:0c:12:6d:31:48:12:60:b3:fd:4f:41:3a:dd:05:fd:
         f1:a0:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:52:07 2026 by rpki-client