Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3131382e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          80nLzivnqr8D6HdoEfXTMqtHwkyOlYzYb3jii8Wi49g=
Subject key identifier:   13:53:AA:35:D2:DF:6F:B8:0D:3F:E7:A0:40:0A:BD:03:25:46:1F:41
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       6DD29081637A83EC723AFF699855E117FBE4EE82
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:05 +0000
ROA not before:           Mon 23 Feb 2026 15:41:05 +0000
ROA not after:            Mon 22 Feb 2027 15:46:05 +0000
asID:                     61923
IP address blocks:        200.7.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d2:90:81:63:7a:83:ec:72:3a:ff:69:98:55:e1:17:fb:e4:ee:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:05 2026 GMT
            Not After : Feb 22 15:46:05 2027 GMT
        Subject: CN=1353AA35D2DF6FB80D3FE7A0400ABD0325461F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:a6:c3:56:c4:04:91:b5:31:81:34:ab:0d:
                    d9:74:e3:0a:05:96:a3:22:f2:b4:53:22:a3:11:17:
                    e2:d1:9c:07:1e:32:37:50:4c:11:b0:54:af:82:9e:
                    db:de:f2:2f:20:5d:9c:c9:8d:0e:a6:80:4f:4f:dc:
                    da:1c:61:89:78:74:7d:b4:a8:c5:f7:85:75:0e:ad:
                    c4:31:eb:d3:16:c7:fe:60:4b:da:ad:72:6b:34:9d:
                    41:f7:d2:3a:60:d9:04:3b:66:8c:b0:76:56:98:ba:
                    74:c2:d9:f4:1d:93:ef:ec:cb:05:af:1c:d7:ee:87:
                    08:76:ed:54:a3:2c:dd:65:16:5a:0e:24:cc:af:70:
                    9d:17:d1:cb:44:74:51:78:d9:9e:e8:5a:39:b0:cb:
                    7f:c6:04:ad:8b:37:45:87:15:4c:8d:11:38:6f:33:
                    79:58:93:dc:da:56:9b:b8:dc:f8:f2:c9:9f:c2:93:
                    84:ea:6d:85:27:e4:bc:18:12:31:d0:34:8d:f2:58:
                    21:3d:3b:0e:ec:0d:e6:6b:53:9e:f0:e1:59:7b:03:
                    a5:fb:4b:db:c5:ed:2a:b2:24:f9:a2:e5:5a:3a:34:
                    5a:89:dd:2d:d8:e6:fc:4a:c1:81:44:54:0e:8b:8a:
                    2a:c5:66:00:c1:b0:3c:55:34:e2:d3:d0:0a:cf:fd:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:AA:35:D2:DF:6F:B8:0D:3F:E7:A0:40:0A:BD:03:25:46:1F:41
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3131382e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:d1:a9:10:56:0a:6a:c4:06:9c:ca:38:5d:51:75:ad:85:1b:
         75:25:19:42:b7:09:89:e1:1a:cb:a6:f2:65:7d:62:f4:22:2d:
         ad:b5:d7:19:2c:57:3b:a5:e9:1d:47:ea:a6:44:09:eb:c3:11:
         65:1a:e1:18:96:d2:ed:b2:ed:b6:9a:a0:52:d4:e4:62:30:84:
         cb:b0:48:72:88:65:41:f5:6d:a7:04:0a:8c:39:6e:23:df:db:
         c6:03:c7:1b:99:78:f5:0e:2b:0b:dd:44:28:4c:26:f1:92:22:
         18:60:a8:25:7d:f0:36:62:7e:20:b8:e3:e7:4e:ab:ec:4f:aa:
         29:d5:60:5a:9c:6a:c4:47:4e:cd:cc:2b:2e:b1:9d:fb:2e:04:
         c6:d9:31:7d:34:a9:e9:df:22:26:0b:34:45:dd:eb:39:26:be:
         c2:68:c7:8c:83:e5:c2:d0:94:d9:c1:a8:cd:ac:74:d9:76:c4:
         a4:95:97:07:58:f1:6d:fb:a0:b2:39:ed:5d:5b:5f:7e:e7:5c:
         9d:0d:f4:fb:de:8c:da:dc:70:f7:5b:1b:e2:d5:d1:3b:68:88:
         76:1d:23:35:3c:b3:ea:d3:57:67:7b:7c:92:97:32:71:b6:72:
         4c:bd:a9:f0:4e:a3:90:6d:60:e4:4c:4b:ee:9a:a0:e9:76:56:
         fe:cc:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:29:55 2026 by rpki-client