Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3230302e322e3130302e302f32322d3234203d3e20323632363735.roa
File:                     3230302e322e3130302e302f32322d3234203d3e20323632363735.roa (raw, json)
Hash identifier:          cxMrVokwwFeO9e0FSOimBq0VF6CBBTMPcqurdQveTv0=
Subject key identifier:   68:10:2C:7E:92:8A:D1:46:CB:9D:7A:33:CF:FE:0F:38:66:33:4D:15
Certificate issuer:       /CN=F941A54E9C2DEE49C72D90951902E8AD2E877566
Certificate serial:       08011685DB00985943F25678BB437B1C673AD626
Authority key identifier: F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3230302e322e3130302e302f32322d3234203d3e20323632363735.roa
Signing time:             Sat 13 Jun 2026 11:29:57 +0000
ROA not before:           Sat 13 Jun 2026 11:24:57 +0000
ROA not after:            Sat 12 Jun 2027 11:29:57 +0000
asID:                     262675
IP address blocks:        200.2.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.crl
                          rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:01:16:85:db:00:98:59:43:f2:56:78:bb:43:7b:1c:67:3a:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F941A54E9C2DEE49C72D90951902E8AD2E877566
        Validity
            Not Before: Jun 13 11:24:57 2026 GMT
            Not After : Jun 12 11:29:57 2027 GMT
        Subject: CN=68102C7E928AD146CB9D7A33CFFE0F3866334D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:fe:4f:f3:05:f2:6f:63:3c:48:64:d0:67:
                    50:f5:11:00:c9:81:87:a1:74:ba:f5:73:3a:05:73:
                    b3:00:f1:c6:1f:32:1a:8b:2b:ce:b7:b3:e5:97:ba:
                    b9:31:e4:0b:0e:76:be:31:c7:4b:40:3b:7a:e6:b7:
                    76:90:b1:ad:40:a7:28:39:f5:4a:8f:9c:5b:04:de:
                    fe:fd:af:3e:f1:b3:65:ac:3c:9c:96:d8:7c:d8:a7:
                    cd:a5:a6:f3:7a:0f:0e:82:cf:ff:68:b6:9e:40:04:
                    08:e0:1c:53:c4:a0:6e:6b:a7:82:cc:7f:86:84:4b:
                    78:3d:56:0d:06:55:7d:c8:07:b1:5d:bd:34:f7:a0:
                    1d:73:ce:91:ad:78:d2:5c:f1:7d:f9:cd:7e:18:6b:
                    f3:7f:4a:64:ff:f3:a4:c2:28:95:5f:49:bb:a7:ed:
                    0c:9e:82:0e:6d:29:a2:4a:5d:11:d6:30:43:66:73:
                    43:d8:50:4c:bc:8b:18:f5:98:cf:80:83:58:07:3e:
                    8b:b6:f5:b7:a6:9a:aa:ba:84:d7:48:49:65:48:4d:
                    0e:da:cd:7b:35:df:4f:44:f1:0d:b6:d6:d9:4b:1e:
                    fd:4b:82:75:6b:5a:e2:df:be:ae:d2:f9:d8:36:fc:
                    07:f3:91:d6:ba:79:44:a0:36:83:7e:8b:a3:be:38:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:10:2C:7E:92:8A:D1:46:CB:9D:7A:33:CF:FE:0F:38:66:33:4D:15
            X509v3 Authority Key Identifier:
                keyid:F9:41:A5:4E:9C:2D:EE:49:C7:2D:90:95:19:02:E8:AD:2E:87:75:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/F941A54E9C2DEE49C72D90951902E8AD2E877566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F941A54E9C2DEE49C72D90951902E8AD2E877566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/3230302e322e3130302e302f32322d3234203d3e20323632363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9d:f4:ee:a5:ec:1c:e2:db:f2:e3:0b:46:50:b7:bf:75:15:
         08:e2:07:b1:e4:d6:84:58:87:6e:c4:8c:5a:ad:8f:d1:2d:6e:
         25:31:f1:2d:8f:c4:61:61:b3:88:6d:91:ae:05:c1:3d:19:16:
         37:31:0f:c1:8d:5c:b2:8b:98:b3:a5:b6:81:32:12:93:bf:da:
         d3:87:5e:f9:1f:db:53:49:1f:8e:52:63:f7:eb:f0:f4:b3:fd:
         c8:ab:f8:ac:12:dd:d0:6f:56:54:7b:34:b4:26:dd:62:e8:06:
         c1:14:95:a2:63:3b:45:41:28:14:93:10:f5:92:09:f4:ec:72:
         1c:5c:b3:32:94:f3:35:55:ff:e2:34:84:c3:d5:a9:89:9c:98:
         50:25:70:34:4a:32:25:65:ff:c0:78:67:47:f6:b5:0d:82:8c:
         44:8a:ba:62:5c:80:4c:2f:19:c3:e5:7d:1d:cc:dd:45:58:18:
         6f:9f:dd:ee:94:75:4b:fb:49:6a:17:5d:cf:f4:1a:f9:44:bd:
         26:48:ed:25:8c:93:7e:fb:04:d0:b1:f6:b1:35:29:3e:89:90:
         0b:ae:8b:6d:ec:e1:5e:0c:1a:6c:52:c5:fa:79:77:e8:08:fc:
         ef:09:80:7c:ae:75:41:85:7b:20:68:bd:e5:ee:93:8b:4b:3f:
         91:46:d4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:22 2026 by rpki-client