Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa
File:                     3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa (raw, json)
Hash identifier:          WI9ddNEdRLvcO8spVmxoA+KgYosVaqGRpE1EHKaqlNc=
Subject key identifier:   9F:B3:DA:98:F3:F3:1A:81:E6:77:90:1F:AA:76:21:B2:D3:EE:7A:64
Certificate issuer:       /CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
Certificate serial:       490B2A26B030D1616A5C0A62F42B5CB2EC7B904B
Authority key identifier: F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa
Signing time:             Thu 09 Apr 2026 18:53:03 +0000
ROA not before:           Thu 09 Apr 2026 18:48:03 +0000
ROA not after:            Thu 08 Apr 2027 18:53:03 +0000
asID:                     273663
IP address blocks:        200.124.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl
                          rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 19 Apr 2026 02:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0b:2a:26:b0:30:d1:61:6a:5c:0a:62:f4:2b:5c:b2:ec:7b:90:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB
        Validity
            Not Before: Apr  9 18:48:03 2026 GMT
            Not After : Apr  8 18:53:03 2027 GMT
        Subject: CN=9FB3DA98F3F31A81E677901FAA7621B2D3EE7A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:6c:92:82:12:cc:81:81:a5:53:ab:ed:d2:
                    18:02:15:55:03:e4:63:f3:b5:69:c8:72:37:5e:19:
                    4f:95:e7:6b:e3:83:cd:c2:56:57:ed:7d:d8:83:9a:
                    52:68:c1:70:a4:78:cc:a4:7a:f1:d4:50:67:99:0f:
                    57:ff:21:a7:82:29:fb:25:2b:14:d3:f9:ba:bb:cd:
                    83:48:c3:47:98:10:86:05:8f:e0:4d:ca:55:89:9a:
                    f0:b8:c5:75:64:be:8e:3a:fa:34:f4:8a:40:6b:77:
                    db:f6:e1:e4:6c:73:6e:13:42:cc:b2:81:82:ac:32:
                    08:0c:ba:4f:45:da:84:9a:47:5a:13:7a:2b:81:f1:
                    fe:8e:99:47:d1:28:b9:e3:6d:e1:4a:02:34:20:79:
                    b1:72:85:1f:e6:f4:6d:63:3e:76:1a:1b:91:a7:39:
                    ec:af:e6:5b:bd:af:7d:fc:e2:0e:13:9c:25:0a:58:
                    6c:13:de:1d:6f:af:3e:48:60:a7:86:36:e0:05:d4:
                    6c:7d:3a:b1:a6:82:93:ac:50:a0:24:2f:2a:ba:38:
                    31:0d:4c:a9:46:be:8f:02:20:f1:a7:50:3b:19:c1:
                    a4:92:4a:d2:8d:80:e0:25:50:c0:e0:b4:03:0d:93:
                    6b:89:c3:82:24:51:94:69:f8:92:a6:b8:dd:ce:7a:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:DA:98:F3:F3:1A:81:E6:77:90:1F:AA:76:21:B2:D3:EE:7A:64
            X509v3 Authority Key Identifier:
                keyid:F1:0D:AA:50:8B:BA:C5:E2:87:A9:5F:8A:AB:B8:FA:54:2C:15:EC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F10DAA508BBAC5E287A95F8AABB8FA542C15ECCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/3230302e3132342e37382e302f32332d3233203d3e20323733363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:56:00:52:99:59:6c:d6:b9:66:5b:2d:76:29:0e:74:f6:
         e9:29:10:44:40:7a:38:b7:dc:2d:30:b9:1d:43:47:ac:5d:36:
         30:27:bf:82:7c:92:7f:99:83:93:e3:33:e9:79:cf:71:1f:26:
         29:56:5d:21:6e:d4:41:b9:47:14:56:fe:3e:f7:2c:82:cd:e8:
         c8:31:c2:db:91:53:47:27:4e:67:20:7b:e5:a5:e6:84:04:58:
         79:44:26:9e:57:7c:49:84:5d:35:c1:23:7a:e6:99:2b:d5:6d:
         04:0f:b1:4b:61:0e:75:10:1f:8d:5e:40:35:a1:5e:2d:9e:61:
         73:dd:1b:4f:57:61:64:32:7c:f7:3c:a3:e8:f9:00:05:16:f0:
         47:02:53:dc:50:e7:b7:db:27:8a:0f:3f:e2:5d:33:6f:40:23:
         da:1b:7f:59:68:13:b0:b0:c9:9d:26:fb:f6:c8:33:24:3a:15:
         d0:fb:a7:e0:3f:b8:d8:de:e6:7f:e2:47:29:7f:10:57:23:7f:
         f3:92:6b:14:a1:48:21:53:da:47:02:9e:65:61:a2:cf:d2:cc:
         de:33:ea:67:bd:cc:a9:1c:0e:1d:ea:4e:26:ab:90:2c:da:b3:
         5c:fd:65:8f:5d:b7:92:92:8f:0b:04:2e:80:07:16:60:b0:70:
         c9:88:1b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:09:16 2026 by rpki-client