Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132342e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          jMk9e6ZOFM4oNtaXdaK0H/odyFKN0RDb3wI0WeaehAE=
Subject key identifier:   3F:7B:F2:8B:A9:76:3E:24:D7:D0:EB:F6:9E:1C:59:9B:B5:1D:C0:01
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       6446F6A5F05B6171D2A8E6F64EE588A82839EF55
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:06 +0000
ROA not before:           Mon 23 Feb 2026 15:41:06 +0000
ROA not after:            Mon 22 Feb 2027 15:46:06 +0000
asID:                     61923
IP address blocks:        200.7.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:46:f6:a5:f0:5b:61:71:d2:a8:e6:f6:4e:e5:88:a8:28:39:ef:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:06 2026 GMT
            Not After : Feb 22 15:46:06 2027 GMT
        Subject: CN=3F7BF28BA9763E24D7D0EBF69E1C599BB51DC001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:44:1f:ce:4b:ae:2f:81:1e:ef:a9:e2:4e:ab:
                    db:20:f1:83:64:ed:f0:20:d8:9f:08:18:f2:63:7a:
                    26:c7:be:e4:71:9e:e6:ea:e2:fb:68:bf:d0:2a:62:
                    d2:63:73:ad:85:0a:5a:fc:1d:62:c7:f1:52:06:f7:
                    5d:40:d2:d0:b1:2e:09:7e:3f:21:75:9a:0d:f3:fb:
                    35:4e:67:e8:d0:0c:75:3c:cb:ed:29:3d:1c:10:f8:
                    f2:fa:56:9b:05:2e:18:df:84:16:be:9c:7c:85:dd:
                    7f:90:ea:c0:e7:93:06:04:e4:3e:00:8d:40:73:1f:
                    c9:f7:34:41:8f:aa:4b:90:d5:18:dd:58:5c:ef:7d:
                    74:cc:59:b2:d9:cc:f5:45:16:f7:ec:2f:99:1c:53:
                    19:fd:2c:30:9d:b1:4b:f2:54:4b:31:b5:4f:52:3d:
                    96:3f:b6:b6:01:3e:18:1e:40:a3:78:d0:82:f0:ea:
                    d1:d5:7b:3e:ca:fa:b9:c5:72:a8:0c:3b:ab:2c:0d:
                    75:fa:84:e7:21:21:ff:b7:a7:6f:84:8e:13:e3:d9:
                    84:05:d7:c3:55:f3:9a:a0:72:a3:59:38:3d:91:4f:
                    de:f2:2b:e9:50:ba:3b:27:08:b8:80:f4:d1:65:de:
                    03:51:74:5a:12:75:96:f1:0b:61:72:03:26:1d:5d:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7B:F2:8B:A9:76:3E:24:D7:D0:EB:F6:9E:1C:59:9B:B5:1D:C0:01
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132342e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:ba:0e:4d:bf:86:83:01:13:a9:70:33:1f:ed:de:f2:14:
         39:c1:bc:74:26:e3:2d:f8:e6:2f:21:7f:03:d6:74:3d:08:69:
         9c:d6:16:a1:6e:2d:b6:0f:0c:7f:5a:1c:d4:fe:ab:ff:aa:ab:
         5a:9b:0d:a8:09:1a:3a:73:33:b6:f3:6e:23:66:c5:b7:6f:b8:
         b0:40:62:70:14:28:8d:f1:c3:6d:a9:b1:71:a1:5e:a7:04:c2:
         54:2c:40:59:3f:1f:20:be:bd:28:fa:e1:7c:32:20:84:e1:d1:
         18:9d:2c:4c:3a:c3:d8:e6:cb:81:ac:01:9a:6c:f2:87:7a:35:
         25:71:58:ba:31:13:dc:f4:da:a1:c8:f6:bb:c3:14:fd:c6:ac:
         c0:21:f0:d6:b0:ce:61:42:d4:f2:a0:c4:59:cf:9a:ed:52:b9:
         1a:7a:b7:f5:be:c8:c2:aa:f5:93:80:0f:00:cf:09:c8:ed:f1:
         55:52:03:5d:19:22:ea:d1:84:fe:22:a5:77:a1:75:c5:a8:fa:
         be:81:fd:32:67:54:96:36:07:34:60:46:3d:4d:56:d9:c3:66:
         21:18:9b:d6:db:b7:ab:cd:6e:ea:a5:16:6e:ef:d4:e2:e1:a4:
         af:ca:7e:00:03:45:88:92:19:a0:c1:43:56:84:11:2d:4a:e0:
         7e:2a:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:44 2026 by rpki-client