Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa
File:                     3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa (raw, json)
Hash identifier:          1y2UQan2A4mcFcGv8VF1OGX5pxSaD9qrVxirKMjO0Go=
Subject key identifier:   CA:C6:45:3E:31:DC:B7:86:6D:AA:F8:4F:08:79:E8:97:AF:A1:FA:1A
Certificate issuer:       /CN=29A96793452E2B32144979041E6B16BCE919E3D7
Certificate serial:       3F6C4875071FCFB1F418AD68687E1F751B5B00D6
Authority key identifier: 29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa
Signing time:             Sun 31 May 2026 11:26:41 +0000
ROA not before:           Sun 31 May 2026 11:21:41 +0000
ROA not after:            Sun 30 May 2027 11:26:41 +0000
asID:                     270684
IP address blocks:        200.187.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl
                          rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 01:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6c:48:75:07:1f:cf:b1:f4:18:ad:68:68:7e:1f:75:1b:5b:00:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A96793452E2B32144979041E6B16BCE919E3D7
        Validity
            Not Before: May 31 11:21:41 2026 GMT
            Not After : May 30 11:26:41 2027 GMT
        Subject: CN=CAC6453E31DCB7866DAAF84F0879E897AFA1FA1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:2b:e2:93:f8:7d:a6:83:a1:f8:8c:09:16:
                    ea:f6:7d:52:b3:37:ff:2e:90:bb:ed:c2:20:c2:af:
                    55:3a:82:9a:31:56:e7:fa:f5:21:1d:35:f7:3d:0a:
                    ec:f1:09:33:46:ee:6c:75:e2:f6:87:01:e9:2f:06:
                    ae:9e:b4:f0:d5:94:07:0b:1c:9a:c5:58:d9:9c:19:
                    79:5d:12:62:15:c7:a7:fe:26:07:ea:8d:cc:00:15:
                    57:bf:ef:54:64:e1:fb:23:a7:65:92:2a:a9:d3:d1:
                    78:88:75:c3:1d:14:e4:6a:5e:2c:b6:5d:ac:d7:0c:
                    12:4a:84:a4:ef:e7:9c:61:1a:b3:61:74:f3:3d:5b:
                    7f:5e:47:e3:ae:e9:a0:2e:10:3c:cf:33:8b:2d:8d:
                    57:bb:02:04:fd:03:f6:4e:44:ae:0d:b3:23:92:76:
                    56:39:5f:b4:7c:d1:0c:fd:af:77:3e:0b:05:2e:28:
                    20:71:0e:e4:5c:76:33:9b:aa:ce:7c:48:cb:88:ff:
                    1a:56:dc:51:f0:7c:a8:68:a9:7f:ab:e2:d2:ce:bd:
                    43:6e:6c:a3:1d:fc:08:94:0d:a6:d0:00:07:c9:81:
                    35:fa:58:96:de:55:6d:2f:70:ac:6d:c9:52:d2:ac:
                    91:67:f9:13:25:01:c3:3f:04:40:19:c0:c3:9c:dd:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C6:45:3E:31:DC:B7:86:6D:AA:F8:4F:08:79:E8:97:AF:A1:FA:1A
            X509v3 Authority Key Identifier:
                keyid:29:A9:67:93:45:2E:2B:32:14:49:79:04:1E:6B:16:BC:E9:19:E3:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/29A96793452E2B32144979041E6B16BCE919E3D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29A96793452E2B32144979041E6B16BCE919E3D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SfwJX1KYy12VgJYEPNR8dRYJeZg3rkb7VtK6LWXZiQS/0/3230302e3138372e3130372e302f32342d3234203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.187.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:a2:45:cc:e0:96:95:df:48:9c:0a:c3:0f:53:c0:14:2b:
         95:c2:ef:e4:0d:99:80:88:44:e4:fe:e8:63:ab:6d:7a:96:0c:
         ef:1e:ab:9a:50:cb:91:f5:68:0c:97:a2:d5:ef:ba:d9:3c:1b:
         5a:6f:ee:ad:41:0d:f6:fe:44:e2:a7:68:f4:45:12:ec:34:2c:
         fa:40:15:7f:60:5f:54:1c:12:fe:d9:28:98:96:73:9b:b6:09:
         90:e5:03:08:18:15:0b:78:0a:dd:a4:8b:d9:d7:ad:d6:d1:92:
         ac:a8:3a:bf:75:fb:9f:15:22:22:33:08:8e:04:de:0f:03:23:
         f6:f0:e7:1c:7f:95:7c:e0:dc:14:24:1f:a2:12:9d:33:9c:02:
         c9:49:d0:b6:81:2f:8e:e9:d8:69:20:82:7b:4d:f1:ce:25:ef:
         0f:b5:b5:3d:c7:cb:d0:26:52:e9:57:14:2d:0e:2c:6a:94:bd:
         c9:a2:b6:08:27:eb:2f:11:17:ee:b5:ad:61:bf:d8:97:3b:b4:
         8a:66:be:9f:63:1a:62:78:ab:89:03:3c:56:50:a8:f1:6e:7c:
         26:7c:18:fb:d9:35:64:81:d3:55:22:46:9b:c9:01:46:2b:8f:
         3f:4c:5b:b9:91:0e:32:fc:83:07:53:3e:e8:44:25:ad:a1:2f:
         b7:13:d0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:40:52 2026 by rpki-client