Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa
File:                     3230302e372e3132362e302f32332d3233203d3e203631393233.roa (raw, json)
Hash identifier:          0C3ZLGzsd9rXjYgzpREdQA9XV23i6e6PbAP8lUxSaDw=
Subject key identifier:   13:71:2B:18:FE:B8:23:53:08:39:3C:AF:EF:91:F9:77:D2:84:85:48
Certificate issuer:       /CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
Certificate serial:       641DCA82A0BA8676D9D702A5FA9643BD29F1B9B2
Authority key identifier: 1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa
Signing time:             Mon 23 Feb 2026 15:46:08 +0000
ROA not before:           Mon 23 Feb 2026 15:41:08 +0000
ROA not after:            Mon 22 Feb 2027 15:46:08 +0000
asID:                     61923
IP address blocks:        200.7.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl
                          rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1d:ca:82:a0:ba:86:76:d9:d7:02:a5:fa:96:43:bd:29:f1:b9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Validity
            Not Before: Feb 23 15:41:08 2026 GMT
            Not After : Feb 22 15:46:08 2027 GMT
        Subject: CN=13712B18FEB8235308393CAFEF91F977D2848548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:0d:e7:ea:c1:d1:7a:f4:74:f1:09:39:77:
                    66:17:11:2a:80:1e:7b:47:6c:6d:bd:9f:8e:c2:6a:
                    a3:d7:cf:3b:8b:15:37:e6:4a:08:c1:91:47:af:1d:
                    36:d4:78:00:9f:7d:07:14:b5:4a:2b:67:b5:dd:8c:
                    49:d8:3a:12:a2:d5:fc:34:22:6a:62:9b:84:92:ca:
                    bb:39:3a:5a:89:1f:b6:a2:d8:d6:e3:47:f4:34:a4:
                    f9:1d:c8:0b:db:6f:cd:a1:9d:b5:de:39:81:ae:74:
                    4f:df:4d:16:f5:71:ee:f6:09:97:1f:b6:41:d7:c4:
                    95:33:f3:58:b5:6b:22:a6:ee:e8:37:8b:fc:4f:77:
                    3c:e5:58:05:e2:b0:ea:26:f2:1b:8c:64:bd:51:d8:
                    73:88:e9:59:d1:ca:1f:88:62:ed:4e:29:28:3a:bd:
                    f0:69:9a:f4:17:69:bf:88:de:dc:a1:06:d6:c6:f5:
                    ce:de:94:db:85:db:07:4d:c7:94:e4:89:27:ed:46:
                    12:fa:af:56:22:e8:30:29:8d:8d:98:fa:4f:ed:67:
                    51:39:94:8e:42:c7:1b:87:7c:26:9a:60:30:c0:b3:
                    d9:a1:1c:85:16:be:cf:35:51:55:2e:c3:bb:bf:a7:
                    77:1a:fd:63:b9:a8:f3:0b:b7:91:0c:39:df:da:85:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:71:2B:18:FE:B8:23:53:08:39:3C:AF:EF:91:F9:77:D2:84:85:48
            X509v3 Authority Key Identifier:
                keyid:1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/3230302e372e3132362e302f32332d3233203d3e203631393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:36:6c:54:2b:33:f8:8f:75:ab:8c:13:7d:04:2d:a2:d0:
         7c:60:28:41:8a:86:29:1a:25:9d:03:2c:7d:a4:e9:df:50:e5:
         2a:8e:8b:e1:14:6e:57:3c:36:22:4b:0d:2a:61:1b:ea:1b:d6:
         90:53:11:ca:2e:1c:cd:ff:7b:c4:2f:9b:ec:12:53:06:00:13:
         a7:25:43:e4:b7:0c:ea:90:3c:23:6d:89:0a:2f:49:d3:f7:fe:
         27:c0:ee:88:3d:59:65:1e:98:8c:63:ad:4c:f0:23:0e:6e:49:
         90:0d:83:ef:e8:e2:11:00:3b:f3:6e:d9:3e:48:de:23:56:13:
         15:1c:e2:df:26:7a:2c:5e:3e:12:35:f1:78:cc:28:b3:40:f0:
         4d:bd:0d:04:d6:3e:82:e9:6e:ad:ba:2e:35:5d:b8:14:18:70:
         be:9b:31:47:47:4c:13:1f:7d:d1:ae:37:09:b0:f7:30:32:01:
         56:db:27:9d:70:09:c1:43:b0:20:7e:13:0f:4e:c3:f9:a4:46:
         bd:3c:f3:12:8e:76:00:db:be:db:26:66:6c:11:78:58:8f:64:
         9f:40:0e:88:cb:f0:aa:33:f5:24:db:91:da:bc:27:e1:0d:d0:
         83:c4:af:8a:c4:c5:b7:78:22:35:18:39:f1:f8:22:ac:4d:f3:
         ca:74:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:18 2026 by rpki-client