Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32342d3234203d3e20323731323938.roa
File:                     3230302e35332e38342e302f32342d3234203d3e20323731323938.roa (raw, json)
Hash identifier:          NGnlHjYmMdBJmwYvN0Amjo7rM3GP1gVIVxxuQmJZjNA=
Subject key identifier:   7B:67:3E:32:68:8B:D9:EB:3C:52:8F:85:26:8D:B1:A4:E8:1B:06:06
Certificate issuer:       /CN=315DDEA82F4151678E22C7DE6D37282137387EEA
Certificate serial:       7AD23F9AD02CB9E632014F37B85024186E2F80EC
Authority key identifier: 31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32342d3234203d3e20323731323938.roa
Signing time:             Mon 13 Apr 2026 19:26:00 +0000
ROA not before:           Mon 13 Apr 2026 19:21:00 +0000
ROA not after:            Mon 12 Apr 2027 19:26:00 +0000
asID:                     271298
IP address blocks:        200.53.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl
                          rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:24:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d2:3f:9a:d0:2c:b9:e6:32:01:4f:37:b8:50:24:18:6e:2f:80:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=315DDEA82F4151678E22C7DE6D37282137387EEA
        Validity
            Not Before: Apr 13 19:21:00 2026 GMT
            Not After : Apr 12 19:26:00 2027 GMT
        Subject: CN=7B673E32688BD9EB3C528F85268DB1A4E81B0606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:21:8e:67:97:31:58:23:44:5e:20:37:7c:
                    3c:03:e6:d1:b6:44:95:38:0b:b8:46:36:7d:ff:2f:
                    02:64:0e:da:56:64:4b:96:0e:23:57:9a:07:50:50:
                    b6:bc:c9:b5:c2:41:97:42:59:00:24:e3:67:71:64:
                    31:a2:7a:ff:66:71:fd:e0:a2:e1:a2:a5:5d:94:0e:
                    f4:1d:87:05:d8:00:d8:0a:f6:6a:92:4c:74:7e:26:
                    9d:13:76:64:2a:34:c1:d5:04:e1:50:99:0a:5a:41:
                    a3:fc:39:99:a4:10:93:8d:03:e6:44:3a:96:86:46:
                    4d:df:e0:96:0a:49:74:33:b2:57:6c:71:51:00:4f:
                    e3:b5:dc:ea:13:d0:e1:be:be:67:ad:f8:2c:36:78:
                    4b:52:2b:ba:65:c9:13:cf:6f:a0:53:61:9b:96:f1:
                    25:1c:37:d2:8c:7f:95:28:4e:49:f3:2d:78:15:1d:
                    68:ab:17:e0:74:10:7d:99:5a:0b:a2:62:ad:68:1a:
                    5d:27:0c:fe:2d:a1:78:84:43:86:cb:9d:d4:50:2d:
                    3d:62:bf:21:fb:c8:a8:52:67:dc:f8:26:90:46:99:
                    de:22:c4:4c:48:20:9b:de:ea:c4:fa:67:ba:ac:6f:
                    94:da:5c:d6:aa:db:db:ce:c1:7c:07:81:91:3a:92:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:3E:32:68:8B:D9:EB:3C:52:8F:85:26:8D:B1:A4:E8:1B:06:06
            X509v3 Authority Key Identifier:
                keyid:31:5D:DE:A8:2F:41:51:67:8E:22:C7:DE:6D:37:28:21:37:38:7E:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/315DDEA82F4151678E22C7DE6D37282137387EEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/315DDEA82F4151678E22C7DE6D37282137387EEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/2/3230302e35332e38342e302f32342d3234203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:d8:77:76:8f:15:81:42:25:ae:25:54:bf:dd:48:68:02:52:
         d6:bd:e1:76:bd:91:75:37:f4:df:7f:4a:e3:22:79:52:67:da:
         56:8a:81:bc:c8:6d:8f:83:92:0e:ce:03:bf:48:45:e3:1e:a6:
         0e:1e:43:05:a4:23:15:ca:20:45:91:7a:6e:7b:06:32:84:a3:
         1e:0a:c6:c5:7c:82:f5:b8:6f:af:9d:d3:31:e9:a9:18:95:28:
         ff:16:5e:1c:e3:9d:44:9a:86:09:b6:20:02:bc:ac:b5:f4:e2:
         ac:22:7b:ea:0a:55:ab:1e:08:c5:d3:66:8d:9b:09:fa:62:45:
         4e:72:10:0d:2c:c4:f0:50:96:90:dc:f6:4b:45:20:bc:61:de:
         3e:03:65:53:57:39:4a:f4:1f:b9:7b:08:5b:0d:a6:d9:03:d9:
         14:7f:cc:cc:2d:86:50:39:6a:69:67:a5:42:c6:69:be:1d:25:
         f1:f6:c3:65:30:ac:b6:f4:d0:ad:7a:ba:b3:e7:2f:2b:c9:6f:
         45:45:69:d0:14:fa:8e:94:99:e1:3c:c2:01:ff:24:59:c1:13:
         e7:24:67:15:27:7f:40:07:aa:35:d0:33:a3:3d:b9:f2:68:9c:
         21:dd:f7:86:87:93:e9:a8:26:16:8b:e4:3c:5d:b6:4c:96:04:
         ac:ef:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:09 2026 by rpki-client