Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131342e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          MWhRtawQUKa+yFN1lu8WRJ7+qR/HnErfLs0HE+FDxJY=
Subject key identifier:   29:9E:41:62:2F:66:9B:1B:7A:EE:6C:10:6F:59:FB:85:2D:7D:4D:38
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       2AB944577DC92B6C9BB79837E502386907A5A0FA
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:05 +0000
ROA not before:           Mon 23 Feb 2026 15:41:05 +0000
ROA not after:            Mon 22 Feb 2027 15:46:05 +0000
asID:                     61923
IP address blocks:        200.7.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b9:44:57:7d:c9:2b:6c:9b:b7:98:37:e5:02:38:69:07:a5:a0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:05 2026 GMT
            Not After : Feb 22 15:46:05 2027 GMT
        Subject: CN=299E41622F669B1B7AEE6C106F59FB852D7D4D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:fa:0b:7e:ee:c3:96:ce:46:d2:8f:f0:5d:
                    12:8c:92:5d:8d:92:aa:9d:d5:00:93:27:5c:66:61:
                    90:9e:75:b1:d0:c2:d9:d4:fe:cf:c1:f7:fd:c8:48:
                    25:c3:76:b7:eb:92:f4:1c:5b:de:7c:8e:d5:b8:95:
                    1f:07:f1:2f:21:b1:ce:1f:a5:73:5a:20:1d:9c:1c:
                    83:0f:5c:e4:56:94:6f:61:d2:ea:3d:62:d8:3b:7a:
                    ef:e7:f2:31:fe:86:f2:e5:51:c4:89:53:d2:e6:ea:
                    16:a4:fa:4b:f0:59:ae:41:c1:ce:54:41:3c:e5:f7:
                    d1:d1:b2:04:0a:c3:0c:4f:68:68:02:2f:e9:4e:3d:
                    f9:8f:4f:16:4a:80:c0:f9:b2:42:aa:1a:6a:e9:d7:
                    84:cc:28:56:3f:0b:27:ee:64:56:c8:d2:e1:4a:1e:
                    2c:be:c7:3e:05:1d:86:09:60:fe:b4:21:11:27:b1:
                    62:25:20:71:5c:b5:e2:07:c0:aa:36:27:a7:e6:8f:
                    1e:46:40:19:2a:31:6e:4c:96:5e:09:63:15:1e:8c:
                    f4:c7:83:8b:51:85:42:96:50:0a:af:d9:4f:cb:4b:
                    66:f3:de:8c:99:d7:d3:7b:4d:91:c5:f5:dc:bf:83:
                    d5:bd:f4:76:ef:2f:1c:ef:50:a9:fc:85:e0:6f:bf:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9E:41:62:2F:66:9B:1B:7A:EE:6C:10:6F:59:FB:85:2D:7D:4D:38
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131342e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:4b:c2:3b:08:b6:d1:27:b4:23:93:83:5e:65:66:58:eb:c5:
         2a:d8:92:e3:73:b5:60:b9:1f:2a:fb:34:6f:00:e7:5d:d9:b1:
         2c:f4:37:41:25:f3:79:d2:2a:36:6b:d1:ae:90:f8:53:55:a2:
         d6:21:ae:7b:ab:66:96:d6:fa:2a:f9:4b:9d:7a:3f:54:0d:ad:
         37:4b:94:bb:1a:c2:bc:00:99:af:24:60:34:45:4b:76:4a:be:
         45:6d:1a:96:2b:15:47:d0:e2:ac:6c:41:cf:7b:35:3c:ed:44:
         50:1e:be:a9:1e:ee:38:e4:77:d2:28:3d:00:44:5e:9e:db:f2:
         b2:d0:9c:79:6d:d5:36:71:e0:a0:60:29:c1:5a:61:9a:1e:48:
         27:2f:db:4b:5b:29:2a:7c:8c:3d:68:89:62:44:5c:8a:76:d9:
         31:4f:c9:57:63:26:3e:12:f8:e9:32:6e:75:99:fe:7c:64:62:
         45:cb:3c:c8:cd:7d:a6:32:c5:a5:7e:54:3e:34:6b:1f:f9:0c:
         9f:5c:e4:44:d2:29:ac:e8:81:d0:92:25:4d:4a:35:9b:c0:f9:
         5d:3f:f8:2f:79:bb:59:80:f5:0f:28:9c:21:2c:64:ca:16:bb:
         60:15:68:6e:8c:5b:ac:91:9d:b9:04:b1:34:0f:05:6b:81:00:
         3b:2c:25:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:43 2026 by rpki-client