Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa
File:                     3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa (raw, json)
Hash identifier:          0AUz1JG8GrbuvcyQMNpnha/UNwTEHs2j5JoUcacd6Oc=
Subject key identifier:   8F:4A:3C:2C:4C:83:44:ED:01:22:15:D9:94:26:FD:E1:70:8D:01:EB
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       3774C7753E31574F5BAC1489A385AE62F08EE04E
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:19 +0000
ROA not before:           Wed 10 Jun 2026 14:22:19 +0000
ROA not after:            Wed 09 Jun 2027 14:27:19 +0000
asID:                     262444
IP address blocks:        200.79.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:74:c7:75:3e:31:57:4f:5b:ac:14:89:a3:85:ae:62:f0:8e:e0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:19 2026 GMT
            Not After : Jun  9 14:27:19 2027 GMT
        Subject: CN=8F4A3C2C4C8344ED012215D99426FDE1708D01EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:15:a7:cc:c7:a2:76:c3:79:a9:82:25:7e:
                    62:95:00:3e:36:e4:ef:4a:ad:cb:64:9f:7e:75:24:
                    3c:14:9d:a0:c8:50:bc:33:a1:24:a8:08:43:06:05:
                    2e:9d:5b:60:b3:79:f0:fa:da:d4:59:7d:76:a7:b3:
                    e3:d2:29:f0:5f:81:1a:68:d0:68:ab:33:87:d0:07:
                    0e:4f:a6:d5:2f:1f:94:1d:be:67:b1:de:46:8d:e7:
                    8f:33:5a:7c:91:2b:81:39:e4:01:c8:4f:2e:9f:c3:
                    bb:b1:bf:49:7b:61:41:7a:c3:17:af:a9:db:8e:1b:
                    53:66:b9:72:7b:e3:74:be:c7:2e:6d:ec:9e:26:c4:
                    37:0a:b3:ae:7d:b4:1a:25:12:1f:f5:8d:c5:7d:b5:
                    63:65:d2:64:34:db:5a:e8:4c:b2:98:42:49:12:b3:
                    dd:64:a2:71:24:c4:91:13:d9:43:06:5f:da:7e:bb:
                    55:e6:ad:23:27:7b:53:25:ae:d3:97:09:fe:df:ba:
                    71:b7:27:02:29:63:bc:d4:e8:c9:cf:ec:a5:e3:cf:
                    c6:40:77:f8:d2:94:88:12:54:a4:39:e6:b6:92:9d:
                    3d:ab:75:fc:f9:e6:ed:1c:08:c6:a9:8a:48:6e:30:
                    74:bf:98:d1:da:01:6e:27:7d:8a:c5:e1:0c:62:47:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4A:3C:2C:4C:83:44:ED:01:22:15:D9:94:26:FD:E1:70:8D:01:EB
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3138382e302f32322d3232203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:87:9b:8e:df:cf:90:1b:77:b8:b9:06:b7:92:7f:ed:12:ef:
         ee:a9:56:44:ea:61:be:ac:9c:2a:23:32:ba:d6:39:42:ec:7c:
         1e:8d:15:b0:94:80:a1:02:2a:a3:b1:56:5f:8c:4f:f9:29:f3:
         f5:e1:00:97:7b:be:c7:05:d7:1e:60:a6:55:a2:9a:ae:d3:ea:
         b2:db:f9:63:e6:5c:c3:da:b2:80:11:c4:f1:2f:97:48:53:53:
         6e:63:42:2c:1e:8c:42:54:05:59:08:d1:ab:35:3e:07:11:a9:
         f7:60:f8:78:1d:1c:74:05:14:87:5e:36:17:51:54:f7:1c:d5:
         45:29:b8:7a:57:b7:d7:a5:02:3d:46:00:7f:33:4a:0f:56:bf:
         91:d8:06:4b:51:a1:e2:e3:a0:5b:a1:29:6e:b7:8b:09:2e:44:
         e1:fa:6c:3e:12:cb:39:22:3d:28:1c:33:68:00:39:f5:bf:15:
         77:f0:f1:f7:99:07:91:64:2d:cd:63:b6:30:87:9c:f8:30:6a:
         62:1b:bb:c5:81:31:68:8f:92:53:cb:df:03:52:7a:cd:15:89:
         80:99:9e:5f:fc:e9:9a:d5:7f:9a:62:8b:61:87:a0:48:38:7a:
         56:97:05:b8:8e:c1:10:29:ad:39:1e:2f:bb:8d:ee:43:8e:43:
         0c:90:27:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN3THdT4xV09brBSJo4WuYvCO4E4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MzUyOTIxODg0MEY0NzFFMzk4Q0Y4RjU4NUI3MUQw
MDdBMkIzNTAeFw0yNjA2MTAxNDIyMTlaFw0yNzA2MDkxNDI3MTlaMDMxMTAvBgNV
BAMTKDhGNEEzQzJDNEM4MzQ0RUQwMTIyMTVEOTk0MjZGREUxNzA4RDAxRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwqBWnzMeidsN5qYIlfmKVAD42
5O9Krctkn351JDwUnaDIULwzoSSoCEMGBS6dW2CzefD62tRZfXans+PSKfBfgRpo
0GirM4fQBw5PptUvH5Qdvmex3kaN548zWnyRK4E55AHITy6fw7uxv0l7YUF6wxev
qduOG1NmuXJ743S+xy5t7J4mxDcKs659tBolEh/1jcV9tWNl0mQ021roTLKYQkkS
s91konEkxJET2UMGX9p+u1XmrSMne1MlrtOXCf7funG3JwIpY7zU6MnP7KXjz8ZA
d/jSlIgSVKQ55raSnT2rdfz55u0cCMapikhuMHS/mNHaAW4nfYrF4QxiR8PrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUj0o8LEyDRO0BIhXZlCb94XCNAeswHwYDVR0j
BBgwFoAUuINSkhiED0ceOYz49YW3HQB6KzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlFlZFp0SFM5eXFONjNvMXJzVEFMblhhQmFtTnZ0OW1MQWdlQmFnTjVQ
bjQvMS9CODgzNTI5MjE4ODQwRjQ3MUUzOThDRjhGNTg1QjcxRDAwN0EyQjM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4ODM1MjkyMTg4NDBGNDcx
RTM5OENGOEY1ODVCNzFEMDA3QTJCMzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJRZWRadEhTOXlxTjYzbzFyc1RBTG5YYUJhbU52dDltTEFnZUJhZ041UG40LzEv
MzIzMDMwMmUzNzM5MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNDM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIT7wwDQYJKoZIhvcNAQELBQADggEBAKuHm47f
z5Abd7i5BreSf+0S7+6pVkTqYb6snCojMrrWOULsfB6NFbCUgKECKqOxVl+MT/kp
8/XhAJd7vscF1x5gplWimq7T6rLb+WPmXMPasoARxPEvl0hTU25jQiwejEJUBVkI
0as1PgcRqfdg+HgdHHQFFIdeNhdRVPcc1UUpuHpXt9elAj1GAH8zSg9Wv5HYBktR
oeLjoFuhKW63iwkuROH6bD4SyzkiPSgcM2gAOfW/FXfw8feZB5FkLc1jtjCHnPgw
amIbu8WBMWiPklPL3wNSes0ViYCZnl/86ZrVf5pii2GHoEg4elaXBbiOwRAprTke
L7uN7kOOQwyQJ2s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:42:53 2026 by rpki-client