Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138392e302f32342d3234203d3e203238353839.roa
File:                     3230302e3135322e3138392e302f32342d3234203d3e203238353839.roa (raw, json)
Hash identifier:          56ns/uRxH6SwGURFHy1ISrCinMmYwPJ8hQrRhnlHSic=
Subject key identifier:   FE:C9:23:13:31:D4:2F:60:A2:4E:95:7C:AC:5A:43:E8:B0:42:90:28
Certificate issuer:       /CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
Certificate serial:       66435C36E2E156946429B1ACBBC1F49BA4D1D675
Authority key identifier: AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138392e302f32342d3234203d3e203238353839.roa
Signing time:             Fri 29 May 2026 21:01:48 +0000
ROA not before:           Fri 29 May 2026 20:56:48 +0000
ROA not after:            Fri 28 May 2027 21:01:48 +0000
asID:                     28589
IP address blocks:        200.152.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl
                          rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 19:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:43:5c:36:e2:e1:56:94:64:29:b1:ac:bb:c1:f4:9b:a4:d1:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABEDCE5CA2A73752E848B305E7DCB48075860E71
        Validity
            Not Before: May 29 20:56:48 2026 GMT
            Not After : May 28 21:01:48 2027 GMT
        Subject: CN=FEC9231331D42F60A24E957CAC5A43E8B0429028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1e:a5:38:3f:cf:e5:88:c2:f8:6e:a1:d7:72:
                    03:66:00:34:10:1b:f3:90:99:be:c7:61:56:71:f1:
                    77:66:e9:b7:00:92:99:35:4b:3c:28:01:02:78:c7:
                    66:23:06:1e:5b:3d:bc:28:dd:26:41:5a:07:a8:26:
                    1b:a1:8b:47:14:85:b3:cf:7c:36:c8:f9:47:62:ee:
                    bb:f2:d3:08:f0:b7:86:8b:a5:71:d0:84:30:9f:96:
                    44:3e:10:83:7f:84:56:48:6e:48:f7:84:9c:d9:43:
                    2e:71:ba:ae:0e:b7:d7:4b:aa:28:f3:3c:8e:bb:f5:
                    03:30:ea:2d:25:6d:96:99:f1:52:9f:55:15:fb:3c:
                    04:a1:71:a1:4c:1d:72:9e:11:15:be:5e:d1:0c:19:
                    02:81:d3:8c:4f:c6:6e:0c:61:32:39:c0:8b:70:1b:
                    36:e7:f9:d7:37:ae:de:70:45:1a:9f:ad:40:4b:1a:
                    31:1e:0a:28:16:59:87:63:4e:16:b7:6e:cc:c7:b3:
                    4c:f2:a0:06:0c:c5:2c:87:28:d5:8e:69:e9:48:da:
                    cf:58:ff:d3:5d:a6:98:8b:23:c2:23:e1:b1:c4:b1:
                    33:b8:f1:57:1e:c7:54:66:50:37:87:48:7b:7e:b2:
                    b8:0d:72:82:fb:64:58:73:a5:f4:9b:f1:8f:ac:9d:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C9:23:13:31:D4:2F:60:A2:4E:95:7C:AC:5A:43:E8:B0:42:90:28
            X509v3 Authority Key Identifier:
                keyid:AB:ED:CE:5C:A2:A7:37:52:E8:48:B3:05:E7:DC:B4:80:75:86:0E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/ABEDCE5CA2A73752E848B305E7DCB48075860E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABEDCE5CA2A73752E848B305E7DCB48075860E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48obX3ABQLiQ7mx8J5nWat4dfdFf3nToYW3uVMjy8PsM/0/3230302e3135322e3138392e302f32342d3234203d3e203238353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:3a:1d:98:94:c5:82:16:06:0e:af:d9:67:1c:1a:f4:0b:
         8c:e7:23:23:07:de:4c:a0:5c:73:64:87:49:12:7c:e4:cc:38:
         f6:42:2c:a4:e4:85:b6:dd:4e:87:b5:8f:f2:37:de:0d:cf:cf:
         c4:70:6e:14:b3:49:9b:9a:5d:8e:e3:0e:44:be:99:ea:3a:ba:
         28:e2:ab:30:ee:12:63:7d:d6:50:9e:e9:b8:7b:c1:a5:73:c8:
         3f:4f:dc:2a:5e:3c:9a:9e:f3:11:84:6e:c8:58:ce:4e:f5:4a:
         ed:1f:15:3a:42:be:39:f6:cf:11:54:46:dc:e8:75:b4:a5:a6:
         c1:52:86:a4:72:29:3c:e9:81:27:95:22:f9:bf:6c:ae:db:6b:
         11:60:ac:df:0c:31:7e:57:32:06:43:f8:41:87:c3:e6:35:10:
         28:87:40:d4:8d:5a:7e:ee:53:a6:90:c5:c1:aa:00:01:26:96:
         29:f0:ce:b4:a2:dd:09:3c:9e:b5:5f:c2:f2:83:db:f5:dd:2f:
         c6:66:da:31:24:c0:db:8a:7d:b0:ee:64:96:3e:a8:07:e6:26:
         fa:b4:b0:af:20:48:31:fc:b9:91:db:e3:97:69:b8:66:34:8b:
         0e:5c:b0:c4:d6:a8:7c:b4:7d:de:7d:6f:dd:45:0f:03:81:a4:
         b9:b9:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:56 2026 by rpki-client