Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131362e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          p2CRbixf5oHTMLLVMSiTkXQOX71XI8L+f2wLFVKWf3s=
Subject key identifier:   2F:32:8A:71:04:A7:F2:38:2E:34:BE:B1:FB:E7:1E:DD:F5:F3:4F:A7
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       1160A78602584D829193129398EF3C95F6FFEFC3
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:06 +0000
ROA not before:           Mon 23 Feb 2026 15:41:06 +0000
ROA not after:            Mon 22 Feb 2027 15:46:06 +0000
asID:                     61923
IP address blocks:        200.7.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:60:a7:86:02:58:4d:82:91:93:12:93:98:ef:3c:95:f6:ff:ef:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:06 2026 GMT
            Not After : Feb 22 15:46:06 2027 GMT
        Subject: CN=2F328A7104A7F2382E34BEB1FBE71EDDF5F34FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:4a:11:64:eb:0b:7e:b9:23:f7:05:d7:b9:
                    b3:52:21:19:97:bf:4a:32:d6:c0:76:8f:7f:fc:26:
                    31:06:56:40:57:bb:39:56:6a:f8:6e:a5:21:08:96:
                    a5:b0:3b:1a:c6:0f:3c:86:9c:0b:f1:0f:e7:45:8d:
                    9e:52:a6:47:24:31:48:99:ea:95:4d:39:26:4f:b8:
                    66:fa:9b:15:e0:34:90:71:00:b2:e0:0f:64:2d:e0:
                    20:48:6f:3c:63:b3:25:90:ca:72:96:f8:7e:d9:f8:
                    57:be:02:13:89:48:9f:4a:70:2d:10:a9:1a:de:46:
                    94:1c:67:06:2d:06:1f:42:34:8d:8c:e3:3d:12:38:
                    f2:d6:4a:86:c5:e1:2c:2b:e6:f1:87:1d:dc:40:ed:
                    95:40:97:a5:90:65:73:c0:56:61:0e:06:e4:a7:d1:
                    53:cf:19:bd:68:22:60:21:03:86:49:68:6a:b9:f1:
                    3e:b0:bd:00:13:95:8e:8d:c5:6b:5b:d0:d2:83:26:
                    c7:6c:98:8d:dd:cd:79:8a:c6:4f:75:86:78:e3:e1:
                    cf:65:b8:31:74:90:10:d4:52:5c:e3:3e:fb:2e:16:
                    5f:58:98:3d:5d:24:a4:c4:07:04:e2:23:b0:ce:21:
                    2d:2b:47:5e:34:fd:16:fe:bc:79:a0:db:73:13:ac:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:32:8A:71:04:A7:F2:38:2E:34:BE:B1:FB:E7:1E:DD:F5:F3:4F:A7
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131362e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:fa:33:c1:93:b6:98:6b:93:db:1d:e9:3d:f4:a8:28:31:
         ab:09:50:6d:28:84:cd:7b:e6:ca:1c:af:3d:49:b1:71:09:e7:
         47:80:a6:28:1a:90:20:71:d5:7e:cf:ab:c7:79:20:5d:2f:e4:
         de:40:16:3b:86:69:35:25:5d:eb:5e:5d:bb:36:9b:df:7c:d7:
         08:68:2d:72:78:4d:bb:d0:50:38:5a:32:30:6d:fc:17:b7:29:
         86:90:7b:fb:e5:79:77:d1:e9:d4:3c:52:6b:c8:51:0a:83:a0:
         83:05:97:fa:f0:a6:52:ca:db:48:9d:b5:a5:5e:97:a3:3a:69:
         38:44:9f:ac:81:35:b0:7d:03:cf:96:85:25:55:97:f0:5f:46:
         94:3e:4f:87:37:6f:28:88:98:65:e3:38:5f:28:44:70:c0:5e:
         a3:a2:a8:c3:40:d2:ce:c9:32:a7:2a:74:1b:58:b3:66:30:bc:
         35:af:f9:aa:14:4e:f5:48:89:a4:17:46:9b:59:5b:85:5a:d2:
         40:3f:c2:5d:23:2c:f0:a6:41:68:72:05:ca:b3:2d:ef:ad:5a:
         97:94:d4:30:b3:a1:46:78:f3:c2:9f:84:db:72:65:2a:13:41:
         cb:4c:66:bd:b3:c5:38:6d:2e:e9:98:22:9b:94:08:44:fe:2f:
         bc:b5:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:48:20 2026 by rpki-client