Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130352e302f32342d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130352e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          mqOnuPtQf6TJ9mM92lkoz0H0T4ZJYWEgOyB4tV+Jbqs=
Subject key identifier:   A1:9A:3F:2B:0B:9C:31:77:B2:7B:05:F6:36:78:8E:23:50:1B:D2:B2
Certificate issuer:       /CN=29A96793452E2B32144979041E6B16BCE919E3D7
Certificate serial:       02F0CA9B532B17B1FD32F1CBAAA0DA396C59213D
Authority key identifier: 29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130352e302f32342d3234203d3e20323730363834.roa
Signing time:             Sun 31 May 2026 11:26:37 +0000
ROA not before:           Sun 31 May 2026 11:21:37 +0000
ROA not after:            Sun 30 May 2027 11:26:37 +0000
asID:                     270684
IP address blocks:        200.187.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:f0:ca:9b:53:2b:17:b1:fd:32:f1:cb:aa:a0:da:39:6c:59:21:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A96793452E2B32144979041E6B16BCE919E3D7
        Validity
            Not Before: May 31 11:21:37 2026 GMT
            Not After : May 30 11:26:37 2027 GMT
        Subject: CN=A19A3F2B0B9C3177B27B05F636788E23501BD2B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fe:a9:e1:7c:bd:75:6e:b3:9b:ec:81:38:da:
                    a3:1a:39:88:b4:c3:e5:ff:ac:e8:2e:10:88:46:94:
                    0b:35:13:cc:97:da:d7:fd:91:94:2e:88:2c:6f:24:
                    2f:6e:c8:4d:82:6a:30:43:d7:9d:12:e7:48:53:82:
                    4d:fa:ca:51:0a:6c:ea:a5:09:d2:4d:78:de:64:39:
                    64:e9:e7:7e:f8:a8:5f:65:8c:c5:31:a8:94:31:91:
                    60:61:c1:0a:39:26:4d:4b:7d:69:91:54:61:f8:8d:
                    24:58:8a:e1:08:92:61:9c:36:57:f9:ee:5e:b2:62:
                    6b:20:61:ed:53:05:83:6c:28:5b:40:39:eb:db:15:
                    19:b6:48:bd:5d:0e:7c:1b:d7:69:c9:59:8c:96:29:
                    ca:bd:68:5a:4d:f8:a5:6b:05:06:b9:29:4d:3e:cc:
                    ad:39:26:88:13:47:42:7c:da:0b:a0:f4:69:73:77:
                    cd:26:7a:0c:bc:38:5e:f7:77:84:84:ea:b0:c0:78:
                    25:da:5e:0f:8b:ce:c4:8a:2c:88:92:0f:be:c9:7f:
                    89:4a:39:a3:e2:7f:21:e8:e6:52:7c:4e:f5:af:b2:
                    08:56:eb:8b:a3:59:f6:d2:50:b3:a5:da:c5:9b:7c:
                    45:ce:59:ff:05:72:2f:8a:13:8f:b7:c0:c1:85:5f:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:3F:2B:0B:9C:31:77:B2:7B:05:F6:36:78:8E:23:50:1B:D2:B2
            X509v3 Authority Key Identifier:
                keyid:29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130352e302f32342d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:6b:8b:c0:f2:0e:5c:4f:9c:1a:74:24:b2:dc:10:70:2e:1e:
         a3:76:09:2e:ca:07:58:f8:52:31:4d:6d:25:df:01:0d:d6:91:
         65:08:ba:94:46:e1:67:98:df:f2:44:6f:a9:bf:45:d1:48:31:
         11:12:43:c1:17:be:a4:04:c9:f5:1f:44:3c:5c:e1:6a:4d:bb:
         c9:c3:de:a7:8b:29:12:df:39:0a:72:fe:56:37:54:83:17:4b:
         8a:c2:a8:ca:95:04:cb:ed:52:93:df:3e:33:ff:d4:46:f5:72:
         6e:fc:99:63:9b:42:64:39:33:87:a3:c5:a7:32:8a:9e:3e:04:
         26:dc:95:68:e7:0d:07:a0:6d:52:8f:50:ab:e3:59:4b:dc:f7:
         4e:3c:f2:89:1b:c9:7f:31:b7:16:eb:6c:6c:59:92:eb:fc:ba:
         6f:c9:5f:77:1b:e0:89:64:b7:cf:14:d1:46:dc:1e:a5:1b:a8:
         f7:b1:6d:97:09:82:9d:c0:7e:1a:50:f3:37:23:12:54:1e:fc:
         f1:13:9b:5e:62:e7:dd:14:0a:52:dc:ef:c8:d8:b5:5b:11:d5:
         ff:fa:4f:ed:1f:ae:58:4b:46:62:ae:26:41:1f:79:0e:19:01:
         11:b2:93:4a:2e:50:78:44:e6:34:da:3e:b1:b2:bb:1e:95:75:
         5a:55:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:54:43 2026 by rpki-client