Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/3230302e3233342e342e302f32322d3332203d3e20323731373437.roa
File:                     3230302e3233342e342e302f32322d3332203d3e20323731373437.roa (raw, json)
Hash identifier:          1IsmcUnKXNjtDiVZOcuFJflDt+u0p9fVV78NDB9t38Y=
Subject key identifier:   08:A5:59:32:51:00:80:52:92:C5:28:98:7A:13:DA:6F:D1:1B:DF:B0
Certificate issuer:       /CN=56CC463B0A6E8648C66E1CC978FEABC05301F7E6
Certificate serial:       2201FF6C931D135593F11C2ABFBA7C44C41E43E3
Authority key identifier: 56:CC:46:3B:0A:6E:86:48:C6:6E:1C:C9:78:FE:AB:C0:53:01:F7:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/3230302e3233342e342e302f32322d3332203d3e20323731373437.roa
Signing time:             Mon 27 Jul 2026 12:58:31 +0000
ROA not before:           Mon 27 Jul 2026 12:53:31 +0000
ROA not after:            Mon 26 Jul 2027 12:58:31 +0000
asID:                     271747
IP address blocks:        200.234.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.crl
                          rsync://rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 09:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:01:ff:6c:93:1d:13:55:93:f1:1c:2a:bf:ba:7c:44:c4:1e:43:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56CC463B0A6E8648C66E1CC978FEABC05301F7E6
        Validity
            Not Before: Jul 27 12:53:31 2026 GMT
            Not After : Jul 26 12:58:31 2027 GMT
        Subject: CN=08A559325100805292C528987A13DA6FD11BDFB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:89:37:d0:e5:da:6f:1c:7b:4b:c4:23:1e:
                    6e:c5:80:c7:4d:39:b3:b3:d4:d6:7e:f2:f2:7f:c4:
                    38:ca:cd:70:e8:2e:a9:5e:f4:6a:98:b6:5b:3e:5a:
                    b5:76:79:ac:f2:17:d1:d5:f3:2c:f1:61:e1:34:a3:
                    9c:0b:41:29:9d:74:63:9b:05:d8:63:e3:76:6e:f2:
                    bb:6c:b2:eb:66:1a:67:ed:c2:8a:78:6b:81:1d:1f:
                    c2:31:d7:68:c8:38:4a:22:b4:db:94:ab:97:db:dd:
                    40:99:1a:02:13:2e:05:7b:7a:7c:5e:a8:4d:56:4a:
                    b2:b3:2d:11:3b:4b:e4:d6:26:31:6e:ea:c7:38:98:
                    23:96:a8:86:2c:90:60:2a:72:82:3d:0e:21:af:b2:
                    11:21:a5:ab:49:e5:c6:4d:22:0c:fd:bc:0c:96:0a:
                    34:80:75:66:47:d6:22:4d:c8:e7:44:92:86:4e:5e:
                    ee:8a:b9:2c:1c:68:ac:97:54:dd:bf:91:cd:a6:c1:
                    86:49:62:87:b6:a5:76:b3:a0:d5:c2:a2:a8:f8:23:
                    5f:fc:e7:95:d9:47:44:6d:3f:03:ed:11:bd:94:a7:
                    90:0b:6e:e1:8e:e3:cd:64:da:70:cb:4b:66:dd:23:
                    47:fb:27:5f:c2:ae:c2:fb:ee:68:a3:fe:9b:81:15:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A5:59:32:51:00:80:52:92:C5:28:98:7A:13:DA:6F:D1:1B:DF:B0
            X509v3 Authority Key Identifier:
                keyid:56:CC:46:3B:0A:6E:86:48:C6:6E:1C:C9:78:FE:AB:C0:53:01:F7:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56CC463B0A6E8648C66E1CC978FEABC05301F7E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Lkb5ECsFysoB9zvJo86kNmLFQ1qBKaH2Vr9aEAdMcvi/0/3230302e3233342e342e302f32322d3332203d3e20323731373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:91:91:65:f6:a3:93:d9:fb:88:6b:65:0c:25:c1:12:44:43:
         3b:86:4d:1e:71:55:b7:02:f5:ab:2f:99:0b:52:16:ca:f8:1e:
         ef:c0:27:31:bd:ee:2d:f2:8c:cc:95:8d:69:12:a8:33:1b:18:
         30:bc:22:0b:2c:87:7f:34:10:1c:ca:08:42:f3:7f:13:d3:7f:
         98:f7:92:21:85:e0:30:a6:7f:cb:36:af:28:51:2b:a7:36:5b:
         47:59:9d:4c:3a:54:f2:3b:48:8f:55:9d:76:1f:9c:4d:8e:f8:
         ea:6e:06:83:80:7f:71:67:0b:36:48:43:ab:a1:b4:9f:75:23:
         3a:ff:fe:70:e4:93:84:99:66:87:56:65:d4:f5:d2:ab:2b:1b:
         83:f6:a3:38:fd:50:5d:bd:ac:c9:b4:fa:6c:7f:2c:6c:4a:90:
         1f:a2:50:8a:1a:c2:f6:2d:99:1a:99:4b:65:4f:be:00:1c:3d:
         b2:4d:5e:d9:f8:f7:8a:ca:1a:01:fb:6b:4a:91:6d:c2:71:4c:
         76:1d:26:f5:d5:54:ff:b2:e1:71:7c:66:02:80:34:8f:40:63:
         1a:02:85:29:ec:16:59:98:f9:3b:74:7e:95:8d:34:88:42:61:
         ca:49:33:3b:47:59:39:e0:ad:d5:0f:bf:02:f9:7a:bc:4a:ea:
         6b:49:75:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIgH/bJMdE1WT8Rwqv7p8RMQeQ+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZDQzQ2M0IwQTZFODY0OEM2NkUxQ0M5NzhGRUFCQzA1
MzAxRjdFNjAeFw0yNjA3MjcxMjUzMzFaFw0yNzA3MjYxMjU4MzFaMDMxMTAvBgNV
BAMTKDA4QTU1OTMyNTEwMDgwNTI5MkM1Mjg5ODdBMTNEQTZGRDExQkRGQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7ok30OXabxx7S8QjHm7FgMdN
ObOz1NZ+8vJ/xDjKzXDoLqle9GqYtls+WrV2eazyF9HV8yzxYeE0o5wLQSmddGOb
Bdhj43Zu8rtssutmGmftwop4a4EdH8Ix12jIOEoitNuUq5fb3UCZGgITLgV7enxe
qE1WSrKzLRE7S+TWJjFu6sc4mCOWqIYskGAqcoI9DiGvshEhpatJ5cZNIgz9vAyW
CjSAdWZH1iJNyOdEkoZOXu6KuSwcaKyXVN2/kc2mwYZJYoe2pXazoNXCoqj4I1/8
55XZR0RtPwPtEb2Up5ALbuGO481k2nDLS2bdI0f7J1/CrsL77mij/puBFTmJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCKVZMlEAgFKSxSiYehPab9Eb37AwHwYDVR0j
BBgwFoAUVsxGOwpuhkjGbhzJeP6rwFMB9+YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxrYjVFQ3NGeXNvQjl6dkpvODZrTm1MRlExcUJLYUgyVnI5YUVBZE1j
dmkvMC81NkNDNDYzQjBBNkU4NjQ4QzY2RTFDQzk3OEZFQUJDMDUzMDFGN0U2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU2Q0M0NjNCMEE2RTg2NDhD
NjZFMUNDOTc4RkVBQkMwNTMwMUY3RTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMa2I1RUNzRnlzb0I5enZKbzg2a05tTEZRMXFCS2FIMlZyOWFFQWRNY3ZpLzAv
MzIzMDMwMmUzMjMzMzQyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNzMx
MzczNDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyOoEMA0GCSqGSIb3DQEBCwUAA4IBAQBmkZFl9qOT
2fuIa2UMJcESREM7hk0ecVW3AvWrL5kLUhbK+B7vwCcxve4t8ozMlY1pEqgzGxgw
vCILLId/NBAcyghC838T03+Y95IhheAwpn/LNq8oUSunNltHWZ1MOlTyO0iPVZ12
H5xNjvjqbgaDgH9xZws2SEOrobSfdSM6//5w5JOEmWaHVmXU9dKrKxuD9qM4/VBd
vazJtPpsfyxsSpAfolCKGsL2LZkamUtlT74AHD2yTV7Z+PeKyhoB+2tKkW3CcUx2
HSb11VT/suFxfGYCgDSPQGMaAoUp7BZZmPk7dH6VjTSIQmHKSTM7R1k54K3VD78C
+Xq8SuprSXV3
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:03:29 2026 by rpki-client