Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa
File:                     3230302e372e3131322e302f32322d3232203d3e203631393233.roa (raw, json)
Hash identifier:          3P6W2u/JXk189zuKNHT0vP+lbcqIiYs4AsB1PpEEDD4=
Subject key identifier:   AA:50:02:96:E8:CC:97:EA:66:F8:E3:BC:58:A9:BB:7C:23:FF:75:0B
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       69A52FB2BA5D50897321FCE12CE9FBE9620CE065
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:06 +0000
ROA not before:           Mon 23 Feb 2026 15:41:06 +0000
ROA not after:            Mon 22 Feb 2027 15:46:06 +0000
asID:                     61923
IP address blocks:        200.7.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:a5:2f:b2:ba:5d:50:89:73:21:fc:e1:2c:e9:fb:e9:62:0c:e0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:06 2026 GMT
            Not After : Feb 22 15:46:06 2027 GMT
        Subject: CN=AA500296E8CC97EA66F8E3BC58A9BB7C23FF750B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:2e:84:dc:44:8d:bc:bb:dd:de:20:38:c5:
                    fc:5d:14:45:38:85:b9:66:f9:2c:5e:d0:cc:a9:5f:
                    a7:97:b7:a1:09:31:c4:b1:26:27:6d:24:8e:04:3e:
                    d4:e2:0a:b5:01:e0:10:98:39:b1:29:54:43:64:86:
                    8c:9e:1b:a9:4f:8a:40:dc:21:f7:6b:df:09:9d:2c:
                    cb:ef:3c:3b:12:0e:33:13:9f:11:62:ba:92:ac:74:
                    3f:0b:ec:a8:27:3b:6d:f0:1b:d1:81:28:21:08:f1:
                    c2:5f:55:0e:76:99:54:12:7a:8a:67:9e:f8:c5:12:
                    f6:ca:b0:ad:23:45:a6:70:a4:98:84:81:e9:c6:3b:
                    b5:df:1e:99:0f:92:34:3b:1e:a9:11:a3:17:06:75:
                    a3:9c:de:aa:2d:40:44:33:fe:23:4e:63:ec:10:18:
                    38:50:be:44:5e:2d:a3:67:5a:10:00:e3:47:d1:0f:
                    84:3b:c8:c5:a1:a8:8f:2f:d8:95:7b:6a:4e:12:bc:
                    c8:fc:a9:d9:db:92:6f:18:ef:40:fd:e6:47:99:d2:
                    db:66:6d:97:88:d3:22:a5:01:56:c0:fd:71:59:8b:
                    49:30:2f:90:17:a3:3b:91:00:fb:e7:b3:dd:06:6a:
                    0a:3e:b6:10:2c:32:79:41:04:92:d7:08:bd:41:68:
                    62:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:50:02:96:E8:CC:97:EA:66:F8:E3:BC:58:A9:BB:7C:23:FF:75:0B
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32322d3232203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:55:84:15:36:42:07:f5:ec:81:00:2b:dc:1c:a3:0d:f5:26:
         27:54:52:9a:16:eb:06:2f:3f:5e:19:9c:d4:6c:12:fc:8c:55:
         e0:e2:b2:f3:36:da:4b:50:0f:74:1e:2b:1b:28:62:f6:76:02:
         32:56:de:a8:4c:ce:91:86:f5:0a:6d:a8:25:0d:0b:f8:45:c7:
         b5:d8:0b:af:36:34:07:df:c0:68:7d:03:ba:c4:ee:68:75:22:
         07:2d:66:c7:19:31:1d:cb:15:c1:cb:38:34:89:ed:bb:e5:db:
         5e:3a:6b:fb:31:11:0a:1d:0f:94:2a:60:82:68:44:0d:34:50:
         3e:41:46:a0:98:71:33:92:4e:06:b0:97:ea:91:7e:49:9f:63:
         b6:3d:ec:6c:5c:ee:6f:37:91:79:19:fc:ad:8a:13:b4:23:f3:
         00:a3:d3:ed:e3:5b:97:ef:cc:7a:b2:18:03:d9:b7:89:52:57:
         63:62:a6:48:30:a4:a8:69:c5:b1:93:42:aa:0a:0b:b9:a6:cb:
         ba:69:08:10:da:d2:65:14:69:2a:ec:a1:66:2b:d4:9f:34:6d:
         81:73:8d:04:4f:68:49:9e:98:98:85:b4:05:cf:2a:6b:8f:75:
         fb:4e:dc:3e:14:76:e9:2a:7f:a4:00:e0:1e:c9:1c:b3:47:20:
         a1:e4:2d:8b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaaUvsrpdUIlzIfzhLOn76WIM4GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1RjgzMUU5ODgzQUVGOEI3NkRBMTk0QTFFNUMxREYw
NzE3RDNFMTAeFw0yNjAyMjMxNTQxMDZaFw0yNzAyMjIxNTQ2MDZaMDMxMTAvBgNV
BAMTKEFBNTAwMjk2RThDQzk3RUE2NkY4RTNCQzU4QTlCQjdDMjNGRjc1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjS6E3ESNvLvd3iA4xfxdFEU4
hblm+Sxe0MypX6eXt6EJMcSxJidtJI4EPtTiCrUB4BCYObEpVENkhoyeG6lPikDc
Ifdr3wmdLMvvPDsSDjMTnxFiupKsdD8L7KgnO23wG9GBKCEI8cJfVQ52mVQSeopn
nvjFEvbKsK0jRaZwpJiEgenGO7XfHpkPkjQ7HqkRoxcGdaOc3qotQEQz/iNOY+wQ
GDhQvkReLaNnWhAA40fRD4Q7yMWhqI8v2JV7ak4SvMj8qdnbkm8Y70D95keZ0ttm
bZeI0yKlAVbA/XFZi0kwL5AXozuRAPvns90Gago+thAsMnlBBJLXCL1BaGLRAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqlAClujMl+pm+OO8WKm7fCP/dQswHwYDVR0j
BBgwFoAUH1+DHpiDrvi3baGUoeXB3wcX0+EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTdZeEF2aXNEU2FCaVlkdllnekRGVEF0eDNkc1JianFaVjdRYkxYNnVt
cDEvMC8xRjVGODMxRTk4ODNBRUY4Qjc2REExOTRBMUU1QzFERjA3MTdEM0UxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFGNUY4MzFFOTg4M0FFRjhC
NzZEQTE5NEExRTVDMURGMDcxN0QzRTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU3WXhBdmlzRFNhQmlZZHZZZ3pERlRBdHgzZHNSYmpxWlY3UWJMWDZ1bXAxLzAv
MzIzMDMwMmUzNzJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMTM5
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAsgHcDANBgkqhkiG9w0BAQsFAAOCAQEAb1WEFTZCB/Xs
gQAr3ByjDfUmJ1RSmhbrBi8/Xhmc1GwS/IxV4OKy8zbaS1APdB4rGyhi9nYCMlbe
qEzOkYb1Cm2oJQ0L+EXHtdgLrzY0B9/AaH0DusTuaHUiBy1mxxkxHcsVwcs4NInt
u+XbXjpr+zERCh0PlCpggmhEDTRQPkFGoJhxM5JOBrCX6pF+SZ9jtj3sbFzubzeR
eRn8rYoTtCPzAKPT7eNbl+/MerIYA9m3iVJXY2KmSDCkqGnFsZNCqgoLuabLumkI
ENrSZRRpKuyhZivUnzRtgXONBE9oSZ6YmIW0Bc8qa491+07cPhR26Sp/pADgHskc
s0cgoeQtiw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:46:39 2026 by rpki-client