Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          7QuQj4EbmiK28c+vy+QfbizTd7Y8L/CfpXYXfiRxF8Q=
Subject key identifier:   FF:99:BA:B9:E0:65:E8:85:B8:C8:99:86:A0:EA:0C:DB:7C:15:5A:68
Certificate issuer:       /CN=29A96793452E2B32144979041E6B16BCE919E3D7
Certificate serial:       7B2C42E8E2F252A33481F06DC25959437858421B
Authority key identifier: 29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa
Signing time:             Sun 31 May 2026 11:26:35 +0000
ROA not before:           Sun 31 May 2026 11:21:35 +0000
ROA not after:            Sun 30 May 2027 11:26:35 +0000
asID:                     270684
IP address blocks:        200.187.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 13:41:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2c:42:e8:e2:f2:52:a3:34:81:f0:6d:c2:59:59:43:78:58:42:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A96793452E2B32144979041E6B16BCE919E3D7
        Validity
            Not Before: May 31 11:21:35 2026 GMT
            Not After : May 30 11:26:35 2027 GMT
        Subject: CN=FF99BAB9E065E885B8C89986A0EA0CDB7C155A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:be:0e:d9:53:8a:ec:2b:19:12:9e:58:b1:
                    a8:94:b5:cc:e4:07:91:e1:d2:6a:11:bf:50:43:bb:
                    59:46:59:18:60:68:08:6d:f5:81:c5:e3:3c:4e:ba:
                    05:87:ab:17:8e:3d:64:6d:6e:f8:7e:aa:bf:b1:d2:
                    fc:fa:fa:75:aa:14:b7:7c:4c:bc:fe:44:82:85:b1:
                    01:f2:42:ec:ac:24:3a:39:c1:74:4f:e2:c9:ce:7e:
                    98:4d:12:6d:07:06:dd:23:54:c5:4d:c4:93:13:5f:
                    34:79:e6:e6:e3:bb:b5:1e:fe:2e:23:5e:ea:2b:28:
                    69:84:5d:28:c0:85:8b:0a:74:da:07:b1:82:63:b0:
                    3f:d4:7b:d1:ef:72:d1:08:67:f1:1e:b8:4b:0f:a2:
                    9d:a3:ca:16:bc:f6:03:ef:62:46:eb:d8:7e:d6:75:
                    f5:94:75:3f:2e:ad:63:a2:d3:9b:72:13:45:09:2b:
                    97:19:18:e2:be:71:d3:89:3c:e1:ec:91:62:b1:20:
                    5a:34:49:19:99:40:02:e8:40:e7:0b:ea:71:77:2e:
                    83:b2:ac:97:36:4a:25:83:9f:5e:8d:f5:93:bb:01:
                    f5:a9:ff:6f:f6:22:a0:ac:0e:e7:4e:57:28:31:b6:
                    37:14:6f:63:25:59:7b:67:ff:70:f4:4f:77:76:21:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:99:BA:B9:E0:65:E8:85:B8:C8:99:86:A0:EA:0C:DB:7C:15:5A:68
            X509v3 Authority Key Identifier:
                keyid:29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130342e302f32342d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:13:c9:58:f8:b1:ab:62:2c:2d:4a:81:ce:16:f2:d3:73:fe:
         12:6c:19:5d:d1:49:fc:c0:97:a9:77:bc:3d:8c:96:f2:f0:ff:
         aa:c3:ab:0c:e6:42:b4:c8:c6:d7:c9:a1:f5:e9:f1:ca:63:22:
         61:bc:67:6c:86:47:f0:45:cb:33:d7:ef:5e:e4:f9:4d:0c:53:
         86:f1:d2:6c:bd:16:d2:3f:d1:57:bb:c8:8c:55:45:c7:db:d3:
         6c:c8:f4:dc:6b:07:ad:e1:56:28:e8:09:91:bd:b5:e3:91:10:
         a4:e6:3e:ee:b3:d5:fd:2f:37:25:7a:26:58:84:eb:11:81:90:
         a1:27:1c:c4:a9:27:09:e4:bf:a0:b3:44:61:f2:a5:43:77:38:
         36:64:e9:bf:02:7c:6f:06:b7:c4:50:45:c3:e6:86:a8:02:30:
         3a:fb:11:64:01:38:6a:1b:23:8e:98:a7:4a:53:9c:47:ca:4d:
         4c:bc:60:12:69:c6:39:2d:08:d1:81:02:35:6c:ac:a3:54:98:
         01:19:01:32:4a:be:a1:c7:fd:f8:d7:af:a1:2e:79:22:71:8f:
         a4:62:4e:42:5d:4e:b7:4c:f4:1b:af:10:92:1d:d1:7e:5c:8a:
         15:70:53:fa:dd:ce:a2:0b:9d:0b:46:e7:9b:23:e4:fa:32:f1:
         a9:c7:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:39:21 2026 by rpki-client