Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa
File:                     3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa (raw, json)
Hash identifier:          pZMFH8Ce4uMPgdoC2URm97aBQ45dMOROXvZOcNit4gs=
Subject key identifier:   94:69:42:2A:7C:C9:BE:88:9C:83:54:E0:9A:1B:0E:25:FC:86:5E:98
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       4EA0D58C17FA9BD9935CB579AD560FFDB66DEC3D
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:23 +0000
ROA not before:           Wed 10 Jun 2026 14:22:23 +0000
ROA not after:            Wed 09 Jun 2027 14:27:23 +0000
asID:                     262444
IP address blocks:        200.79.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a0:d5:8c:17:fa:9b:d9:93:5c:b5:79:ad:56:0f:fd:b6:6d:ec:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:23 2026 GMT
            Not After : Jun  9 14:27:23 2027 GMT
        Subject: CN=9469422A7CC9BE889C8354E09A1B0E25FC865E98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:3b:9b:1e:28:a6:52:5c:fa:92:26:59:25:
                    22:13:d6:ed:78:0e:c2:6e:06:f7:83:a6:fa:2b:92:
                    c7:6c:de:6e:f2:cf:f1:74:90:61:61:7f:0b:96:18:
                    4c:b0:49:e5:32:ce:f0:a6:3e:64:4b:31:e7:2c:99:
                    70:8a:21:da:8a:46:3f:af:74:03:36:1f:47:16:c1:
                    aa:c1:53:cc:8f:a0:f1:46:47:bf:18:5a:b3:d1:e6:
                    f8:76:fd:89:5d:bf:f6:f5:4a:0b:3b:cf:bc:11:4a:
                    d0:96:5f:f0:7a:dd:97:f7:c6:9b:8e:00:f5:18:fe:
                    22:b3:9d:ac:19:86:b9:9a:02:76:57:2d:47:11:0d:
                    32:09:87:0b:bb:e2:50:5b:b5:a5:dc:c5:fa:54:1d:
                    75:2a:23:08:0c:cb:14:92:46:d0:3b:c4:eb:d8:bd:
                    29:ec:3e:b4:8c:f6:70:71:26:b5:43:2a:89:f3:5f:
                    4c:db:92:13:6f:f8:68:cf:c9:cc:3c:ab:b9:f4:2a:
                    dd:ba:82:9f:03:5a:0c:e8:cb:6e:0d:1e:83:1f:35:
                    43:43:75:28:67:87:49:43:14:c2:42:62:71:ba:bf:
                    5c:1c:06:48:26:69:6a:c5:62:5a:ba:d5:c4:2c:6e:
                    5e:0b:22:db:e3:89:9c:04:fd:b4:eb:27:39:d9:97:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:69:42:2A:7C:C9:BE:88:9C:83:54:E0:9A:1B:0E:25:FC:86:5E:98
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138342e302f32312d3231203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:46:d0:57:23:63:d1:47:4c:de:13:ae:1d:7c:b0:55:8e:39:
         99:11:3c:46:46:1d:00:9a:41:53:52:14:39:17:bf:ba:c5:88:
         f0:e2:4d:a1:84:52:c7:7a:86:f8:93:f0:08:98:97:3f:7a:f8:
         6e:78:74:88:d2:98:eb:cd:0e:c5:43:01:48:99:f2:3c:6b:1e:
         6d:ba:bf:6c:e3:40:2b:11:09:e6:4b:33:51:47:25:78:da:da:
         d7:b5:39:91:4a:4b:c0:bc:01:b1:b6:09:61:1e:e6:ad:37:ac:
         48:06:60:4d:1e:bc:bb:34:de:db:c1:2f:0d:1f:05:dd:51:45:
         52:6b:40:04:fa:69:b4:0d:bd:3c:14:d3:60:2d:12:bb:67:52:
         12:f6:df:ea:08:6d:05:38:56:82:fa:d2:96:2d:02:18:ce:4f:
         58:3d:a2:ec:b3:7a:e0:67:58:b4:36:7c:f4:f2:2b:07:a6:6f:
         58:09:73:51:78:9a:8c:1d:91:6b:9b:19:56:90:65:b6:fa:9b:
         81:73:a5:83:16:1d:07:e6:31:f5:7d:c1:56:1c:23:8e:a6:ac:
         e7:f6:1e:be:61:5a:ff:24:21:4d:3c:4e:24:d7:0c:28:19:82:
         c0:29:cb:39:6d:4a:14:e9:74:11:f3:8b:9a:f3:1e:5b:33:1d:
         3f:90:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:43:05 2026 by rpki-client