Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131322e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          juVS4nt+257HsGMOLHsvtRj3MegNFFP+Nyhvo5vAVss=
Subject key identifier:   70:E3:68:A3:43:71:DA:9D:CD:F8:63:C7:93:5B:9B:2F:C7:C3:02:F7
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       047F4FEF4DF3505BDA14002CF389C048A985A189
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:07 +0000
ROA not before:           Mon 23 Feb 2026 15:41:07 +0000
ROA not after:            Mon 22 Feb 2027 15:46:07 +0000
asID:                     61923
IP address blocks:        200.7.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:4f:ef:4d:f3:50:5b:da:14:00:2c:f3:89:c0:48:a9:85:a1:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:07 2026 GMT
            Not After : Feb 22 15:46:07 2027 GMT
        Subject: CN=70E368A34371DA9DCDF863C7935B9B2FC7C302F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:1b:b7:e2:e2:cf:e1:25:95:ec:a5:bd:b1:
                    0d:d1:e5:2a:bd:71:56:72:da:93:29:fc:97:f2:11:
                    b1:29:81:9d:15:f0:e6:c1:4f:23:c0:90:fb:88:e4:
                    54:0a:03:77:78:0a:99:e7:4c:26:7f:aa:38:42:fe:
                    68:0a:25:f0:23:b9:d9:79:51:1f:0c:ee:d6:2b:19:
                    62:52:66:69:7b:ce:38:dd:4e:1e:2d:01:a2:dc:35:
                    38:ff:31:50:08:97:40:22:60:57:11:4b:c2:30:80:
                    a0:9d:54:98:b3:42:b0:e4:95:42:d9:81:3f:53:39:
                    4f:eb:8b:86:4b:84:36:08:cb:79:91:e3:91:aa:33:
                    19:b3:08:7c:cb:34:de:40:28:df:70:b3:6e:36:ab:
                    9c:11:eb:17:35:ee:da:10:7e:9d:f3:a2:19:1c:3d:
                    19:bc:45:14:1a:ba:c8:e1:b9:3a:0e:d8:7c:63:be:
                    f1:e7:6c:72:3b:65:28:52:6b:27:9e:69:7d:f8:15:
                    f6:fe:29:17:c3:67:df:f1:33:3b:fc:16:8b:9c:8d:
                    e2:ad:74:42:33:19:2a:46:85:cf:11:dd:af:e6:a7:
                    1d:b1:73:ed:dd:b5:a0:d7:bc:be:a7:1f:b0:a9:0f:
                    f9:09:20:20:d5:7f:65:35:f3:c6:b8:d0:39:e3:8b:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:68:A3:43:71:DA:9D:CD:F8:63:C7:93:5B:9B:2F:C7:C3:02:F7
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131322e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:56:b2:ff:49:9b:6f:ec:15:ab:d9:51:5d:93:a9:c0:5b:
         1e:80:9c:2b:f9:fb:b7:f6:11:13:83:44:c1:b7:d1:d5:b5:45:
         0a:13:ad:39:29:8b:27:ea:e7:a3:7d:9e:9a:f1:af:6e:28:28:
         1d:70:cd:b2:3c:4a:ac:a4:eb:69:58:e0:d2:04:bf:92:c9:b5:
         b1:da:4f:c5:87:f0:15:08:14:20:fd:66:81:18:f5:a0:db:26:
         80:99:f5:61:79:25:0e:4a:ef:38:9e:3a:85:77:16:3b:fe:d4:
         59:95:2a:8a:23:d4:df:3b:cd:4a:14:0a:25:13:55:d0:ba:98:
         d7:e3:b8:2b:5a:cd:8d:90:c5:fb:73:2a:c6:d2:76:07:68:44:
         01:77:ca:27:3c:cd:cd:0f:4b:ed:b1:72:f7:b3:24:0e:30:65:
         76:f6:1a:5b:01:d0:c2:d5:e0:32:64:40:2e:85:a5:91:b7:4d:
         62:80:81:2f:28:1f:42:e8:0d:e3:f1:c5:dd:36:9e:dc:aa:f1:
         ee:50:3a:36:26:85:be:8c:11:93:7d:e3:df:35:c8:e5:7a:14:
         cc:c0:36:d0:44:3b:2a:df:81:69:59:16:de:e2:92:f4:4c:53:
         e0:e2:a3:a1:75:1f:4c:7e:f0:00:5c:1e:d7:ac:05:78:56:8c:
         e3:1b:ae:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:43:05 2026 by rpki-client