Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
File:                     3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa (raw, json)
Hash identifier:          YPHQTr7O2FXVEYpeS/AjOmeURGgYORvjoLx68A6/imo=
Subject key identifier:   AE:E0:C2:5D:69:8E:15:8A:BA:DD:43:C2:89:70:C7:9A:D2:F1:8B:20
Certificate issuer:       /CN=B883529218840F471E398CF8F585B71D007A2B35
Certificate serial:       03971F4780D165D169DC618E1B02CB44D141AD41
Authority key identifier: B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa
Signing time:             Wed 10 Jun 2026 14:27:23 +0000
ROA not before:           Wed 10 Jun 2026 14:22:23 +0000
ROA not after:            Wed 09 Jun 2027 14:27:23 +0000
asID:                     262444
IP address blocks:        200.79.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl
                          rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:97:1f:47:80:d1:65:d1:69:dc:61:8e:1b:02:cb:44:d1:41:ad:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B883529218840F471E398CF8F585B71D007A2B35
        Validity
            Not Before: Jun 10 14:22:23 2026 GMT
            Not After : Jun  9 14:27:23 2027 GMT
        Subject: CN=AEE0C25D698E158ABADD43C28970C79AD2F18B20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:33:fe:3c:1d:22:4c:c7:45:24:28:76:46:
                    45:75:83:1f:b3:08:98:f2:1d:2e:e2:ca:c4:8f:8a:
                    ca:fb:da:e8:17:03:78:db:f7:2c:9e:9e:2c:f5:c6:
                    b8:17:4a:d4:fa:4f:8a:c0:2f:54:c1:21:2d:9b:56:
                    ba:a5:56:f3:34:bc:ee:26:63:92:bd:48:1c:0b:f0:
                    62:e7:5e:5a:e1:9c:d0:f7:83:b7:20:f4:4b:6a:bb:
                    17:8d:18:9c:ca:8e:28:35:2e:6c:3c:02:c9:33:f9:
                    e6:15:3e:69:8d:d1:f9:14:6b:bd:cb:7b:b8:cc:4f:
                    72:c7:c2:e0:50:1b:a5:77:e8:b6:fe:73:2b:22:5c:
                    b5:6c:1c:53:5b:da:40:e1:54:04:35:18:63:81:29:
                    d1:25:ca:78:95:18:1b:51:b6:a6:be:c6:82:6f:d2:
                    1e:01:f2:79:91:38:0e:1a:fd:5b:14:cb:28:3a:4e:
                    10:57:5c:74:a7:f4:d6:75:3d:c5:68:24:43:58:9a:
                    6d:5e:03:4b:c2:9f:1d:41:97:6e:53:86:e9:7f:3d:
                    c8:62:67:b0:54:30:57:cd:40:bb:d7:ef:49:80:06:
                    55:72:b1:71:ca:37:57:40:9e:84:49:ee:b6:de:25:
                    54:de:a6:a2:83:54:10:ae:b0:5a:09:b4:8d:79:f5:
                    ac:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E0:C2:5D:69:8E:15:8A:BA:DD:43:C2:89:70:C7:9A:D2:F1:8B:20
            X509v3 Authority Key Identifier:
                keyid:B8:83:52:92:18:84:0F:47:1E:39:8C:F8:F5:85:B7:1D:00:7A:2B:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/B883529218840F471E398CF8F585B71D007A2B35.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B883529218840F471E398CF8F585B71D007A2B35.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/1/3230302e37392e3139302e302f32332d3233203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:fc:b0:f1:df:6e:b2:5c:fd:68:3e:68:cf:4c:8e:ea:d3:76:
         6b:e3:fd:71:84:97:6d:1d:fa:4d:1f:1e:25:2a:29:00:a3:2c:
         45:c5:c3:db:4c:6c:4f:b3:c1:c4:91:06:2f:ea:6e:27:2b:bf:
         35:4c:8d:17:21:ea:83:ad:e3:69:c3:91:70:62:d4:e7:1f:a6:
         67:f1:23:f1:46:60:de:d9:06:fc:39:99:d8:93:c3:39:06:47:
         1a:f1:97:3f:72:51:9d:ec:a7:58:ca:46:fb:c0:51:17:f3:3f:
         15:53:66:3a:9c:1d:a7:6b:1e:64:fd:cd:a9:ac:f1:3c:68:cd:
         10:5e:e7:b4:5f:81:1d:67:a6:70:d7:60:74:58:d4:ce:30:0c:
         7b:4a:1e:17:98:d1:56:81:89:b5:0f:dc:cf:86:b2:cb:bf:1d:
         ae:f9:06:2c:89:99:fc:80:78:f0:ed:b7:37:e5:7f:17:6e:92:
         11:57:d7:dd:4c:9c:79:0b:d5:ba:5f:f9:8f:12:e6:c5:cf:3d:
         f5:0c:8f:1c:04:d6:53:7c:f2:f6:4d:30:61:60:dd:9c:17:d6:
         2b:2f:14:39:63:cf:a3:a6:84:f6:68:9c:4b:ec:37:9e:40:bc:
         3a:93:a1:b7:50:ff:17:1f:a7:6a:bb:6f:01:fc:cc:9e:5a:0a:
         3b:ee:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:27:02 2026 by rpki-client