Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa
File:                     3230302e372e3131362e302f32322d3232203d3e203631393233.roa (raw, json)
Hash identifier:          pJcNX3vulp2cXLBfXCFLQOtDwuNvq5jbBFnojazb5Kg=
Subject key identifier:   B7:A4:63:7A:9A:62:DD:32:A4:3D:91:49:D9:72:FF:BD:2F:C0:AE:E2
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       0B7AFD609999166ADFD3C1B765F2150E39C90EB8
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:05 +0000
ROA not before:           Mon 23 Feb 2026 15:41:05 +0000
ROA not after:            Mon 22 Feb 2027 15:46:05 +0000
asID:                     61923
IP address blocks:        200.7.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7a:fd:60:99:99:16:6a:df:d3:c1:b7:65:f2:15:0e:39:c9:0e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:05 2026 GMT
            Not After : Feb 22 15:46:05 2027 GMT
        Subject: CN=B7A4637A9A62DD32A43D9149D972FFBD2FC0AEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:b4:ca:d9:35:d6:ed:9a:46:23:8d:3b:1c:
                    7a:7d:c5:2b:63:79:2c:90:9e:fb:7c:d4:1e:bc:37:
                    d9:a3:62:b9:5a:a1:b6:39:14:48:67:d0:86:6d:bc:
                    74:99:0c:6c:fa:e5:7b:4b:6a:13:9a:4c:79:0f:13:
                    f5:fd:c9:3f:c6:73:7a:71:b9:55:ea:28:3e:c8:f1:
                    61:fc:84:11:96:a6:ef:de:f3:3a:5b:6e:a5:23:d5:
                    e8:4d:0b:6c:46:f0:b2:d2:d3:ae:89:c3:7a:cf:5c:
                    9f:f7:69:b8:3c:27:6a:13:ac:d4:3b:22:a0:71:3f:
                    ee:3d:4c:b2:a3:9c:d5:52:9f:86:18:54:4d:79:ab:
                    fc:fd:85:39:66:67:55:52:9f:d0:8e:44:b4:b6:94:
                    61:c4:3c:9e:26:ae:f4:34:d0:0c:69:bc:50:52:aa:
                    2e:91:8a:bf:41:1c:85:22:cd:f8:cf:1f:17:14:26:
                    7c:f1:27:1f:8f:80:f3:fb:f1:28:bc:0b:21:cd:81:
                    73:7b:44:05:f2:50:be:d8:4e:9a:23:79:35:bc:5f:
                    c3:e5:09:e2:39:fc:bc:13:ee:f8:2d:a0:6a:c4:b2:
                    d4:fd:d3:e0:b3:5c:34:59:2d:d1:25:d2:e6:57:52:
                    5e:8b:86:55:82:d5:bb:5c:c5:2e:df:1e:1e:70:18:
                    4a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:63:7A:9A:62:DD:32:A4:3D:91:49:D9:72:FF:BD:2F:C0:AE:E2
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32322d3232203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:7e:78:29:02:a1:7c:5b:d5:0c:07:10:54:ed:b1:c4:54:3e:
         a8:67:fc:8c:0a:c2:ea:64:09:dc:75:bb:ab:0b:4f:8d:47:f1:
         94:e1:3d:a6:43:f5:ff:d3:f4:ae:6c:8a:31:e3:9f:e6:a5:ed:
         9a:11:6d:fb:2b:b2:dc:3c:9b:fd:1a:a6:2d:60:66:29:df:23:
         fe:4d:ae:59:94:fd:ff:93:bb:ba:1b:4b:6e:75:ff:a2:55:16:
         29:ea:59:e9:7f:2f:03:e5:4b:ae:dd:34:50:55:d8:a5:c3:5f:
         42:5c:d2:38:6b:bc:69:c0:c2:67:e4:95:8f:33:69:e7:42:64:
         c3:47:72:24:3c:c7:9d:96:a2:aa:7b:1d:38:24:ce:79:64:33:
         7c:7c:b7:4a:30:a6:e3:46:84:66:66:a8:13:f4:6f:d0:01:50:
         fa:e2:cb:1f:ed:f8:7a:51:97:38:0a:08:c3:5f:e4:68:bd:1f:
         ce:ac:2f:6e:72:be:a0:85:d0:63:77:1a:6c:31:76:57:7f:27:
         a0:5a:d9:d0:cd:1d:ae:52:e6:cc:0d:16:70:a4:21:e8:a9:09:
         fb:14:5c:39:ef:3d:9a:80:f0:bd:5b:81:ed:0d:ba:c3:e2:f1:
         b8:42:47:a4:aa:4f:26:56:c3:bf:d1:76:81:9b:30:c9:58:02:
         4f:ca:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:46:40 2026 by rpki-client