Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa
File:                     3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa (raw, json)
Hash identifier:          Op5Vc+ZApvuWrmEY6qpI9OemxVewvwESkgfxchVjU4g=
Subject key identifier:   F5:C9:74:23:7D:C0:B7:66:21:6F:5D:C8:5B:04:D1:5F:F8:58:ED:2E
Certificate issuer:       /CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
Certificate serial:       48B51D1CE268B0603F7D315505EF8EE7A48D21AC
Authority key identifier: 4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa
Signing time:             Wed 28 Oct 2026 12:23:55 +0000
ROA not before:           Wed 28 Oct 2026 12:18:55 +0000
ROA not after:            Wed 27 Oct 2027 12:23:55 +0000
asID:                     271679
IP address blocks:        200.24.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl
                          rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 03:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b5:1d:1c:e2:68:b0:60:3f:7d:31:55:05:ef:8e:e7:a4:8d:21:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A3AF97837ED9A918FA75D4960FC2047B2CF81FF
        Validity
            Not Before: Oct 28 12:18:55 2026 GMT
            Not After : Oct 27 12:23:55 2027 GMT
        Subject: CN=F5C974237DC0B766216F5DC85B04D15FF858ED2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c6:2f:37:c8:00:13:b2:d1:90:43:f9:9d:d1:
                    fd:8b:2c:4a:f9:6d:47:cb:14:2e:c4:bc:21:c5:dc:
                    87:95:ca:47:6d:f9:46:5b:b8:65:51:b1:a8:58:f5:
                    95:82:e2:cf:49:10:ec:40:96:02:1c:88:a2:24:dd:
                    1c:fe:ae:ca:dc:a6:e7:84:15:4f:53:5c:04:94:26:
                    89:42:6a:08:8a:7b:13:7c:54:35:38:fd:9f:db:c0:
                    bf:e2:64:2c:8c:15:77:71:07:21:5d:73:1e:a3:12:
                    1c:11:d9:3a:79:21:bd:7e:12:f9:eb:e7:e5:58:b7:
                    17:cb:b0:bb:71:88:04:0a:df:21:e1:e7:77:27:bd:
                    8e:96:05:89:f5:51:23:ba:c2:28:a0:27:18:09:64:
                    fc:37:70:79:4c:de:1e:90:25:d9:b9:31:15:d5:23:
                    7d:ca:00:f3:3a:f5:b8:0e:23:e1:0b:83:26:34:b4:
                    29:e1:1f:df:c9:cc:f1:ce:43:5b:ed:f0:db:44:db:
                    cb:a2:ad:27:5b:1b:a2:4d:d5:52:34:1b:6f:ae:2b:
                    37:aa:86:e6:c4:c9:a5:dd:5e:8a:f3:29:6a:ea:19:
                    90:b4:27:04:f8:5b:b0:1a:25:05:26:14:38:5c:78:
                    98:39:62:89:44:18:a0:4a:44:f8:dc:5c:e5:f6:4d:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:74:23:7D:C0:B7:66:21:6F:5D:C8:5B:04:D1:5F:F8:58:ED:2E
            X509v3 Authority Key Identifier:
                keyid:4A:3A:F9:78:37:ED:9A:91:8F:A7:5D:49:60:FC:20:47:B2:CF:81:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3AF97837ED9A918FA75D4960FC2047B2CF81FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DNPQJQcjZCkrDyWsJY6Zxh5roFMRKbzbpxjTXpAoAJn/0/3230302e32342e3131382e302f32332d3234203d3e20323731363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:a4:66:b2:df:6b:c7:85:7f:aa:eb:cf:42:5c:31:84:44:60:
         61:54:26:73:07:47:64:ab:17:b0:74:c7:7d:6a:5e:c3:ed:a6:
         40:f7:51:16:c8:07:de:4d:ab:0a:52:7d:57:9b:24:08:cf:a6:
         9e:03:85:dd:d8:0d:74:ac:85:66:9c:46:74:ea:62:52:df:29:
         f9:98:8d:82:f7:02:62:af:d1:a7:ba:41:c3:56:c9:68:66:cb:
         f0:ae:c9:80:f7:b8:39:92:2b:38:2e:1a:5c:72:ac:a3:f9:be:
         63:23:06:ad:46:b8:48:fe:f0:29:b2:b3:38:ec:2c:62:8f:5a:
         c4:1f:24:ed:f6:90:cd:16:93:e5:70:44:df:11:8c:21:ae:5d:
         0a:4c:1f:74:7d:ef:d9:2d:31:b6:3b:0a:ef:b4:6b:37:d4:28:
         11:23:85:4f:68:03:97:53:59:11:37:01:49:70:d0:e8:57:21:
         96:32:1b:85:cd:4e:de:c5:01:ed:3e:7d:83:ed:d3:2c:cc:17:
         fb:8e:15:fc:fe:a4:e2:f6:0e:0f:44:24:4a:a4:53:72:dd:62:
         f5:8b:4d:4f:cb:db:85:5b:5a:e5:98:6c:df:1e:44:88:c6:93:
         a5:46:2f:d0:5b:53:ff:db:0f:29:c1:8a:25:66:3a:c2:74:a0:
         71:ad:50:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 12:25:29 2026 by rpki-client