Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa
File:                     3230302e362e34392e302f32342d3234203d3e20323730363831.roa (raw, json)
Hash identifier:          CdbJY9OPxvfdw3wFXxqPPy6vqFGV+JS/iqWhschPySg=
Subject key identifier:   00:00:5C:EB:B4:84:90:9F:1D:13:9D:2D:F3:A8:15:98:CE:70:BA:78
Certificate issuer:       /CN=68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0
Certificate serial:       6C29D4ED4AE4F0EA5A437CD868A579986391825C
Authority key identifier: 68:B5:15:03:FA:FB:C8:07:A3:C2:2E:B9:8D:1C:A8:BC:9D:9C:0D:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa
Signing time:             Mon 25 May 2026 14:04:40 +0000
ROA not before:           Mon 25 May 2026 13:59:40 +0000
ROA not after:            Mon 24 May 2027 14:04:40 +0000
asID:                     270681
IP address blocks:        200.6.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.crl
                          rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 17:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:29:d4:ed:4a:e4:f0:ea:5a:43:7c:d8:68:a5:79:98:63:91:82:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0
        Validity
            Not Before: May 25 13:59:40 2026 GMT
            Not After : May 24 14:04:40 2027 GMT
        Subject: CN=00005CEBB484909F1D139D2DF3A81598CE70BA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:1e:7e:30:e4:f1:bb:70:35:73:ec:e4:3b:
                    00:aa:09:3d:2e:a8:46:8b:f9:87:7b:0f:15:c2:92:
                    eb:a6:b2:7e:57:1f:6f:f3:0a:0c:77:a3:34:f9:ab:
                    99:d2:5b:e6:49:d6:81:bf:56:b7:50:dd:d6:2b:ac:
                    de:c0:73:32:cf:28:e7:7b:29:f0:67:3d:a0:15:0c:
                    d3:d4:b0:98:5b:33:e3:1c:f3:97:d5:2d:5d:07:46:
                    d5:1c:df:b6:d9:64:e1:a1:f6:06:e0:89:4d:bd:c4:
                    2b:44:9f:d2:ce:4e:58:d7:b8:b6:70:35:3d:a0:24:
                    87:57:c9:73:18:bf:d1:29:26:22:7a:8a:6d:ba:0f:
                    22:75:1f:94:a7:d6:13:62:d8:00:e8:bd:82:09:86:
                    75:ea:05:43:ab:e1:db:b8:37:a2:bc:d5:99:ce:65:
                    0d:b1:c6:73:1d:7b:9c:3a:8a:ac:92:eb:cf:1d:72:
                    2e:1d:64:53:2b:96:1c:72:03:c8:51:a4:ca:83:5c:
                    58:0f:d8:3f:f5:80:3d:01:83:bc:3b:81:ef:e3:dd:
                    1b:94:09:e1:2d:ea:6c:0e:eb:6c:6b:b0:59:04:95:
                    8e:45:83:db:63:05:a1:bf:6c:57:0a:95:dd:2d:2d:
                    bf:d8:42:92:8f:99:ae:49:11:13:eb:cb:0b:eb:65:
                    e0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:5C:EB:B4:84:90:9F:1D:13:9D:2D:F3:A8:15:98:CE:70:BA:78
            X509v3 Authority Key Identifier:
                keyid:68:B5:15:03:FA:FB:C8:07:A3:C2:2E:B9:8D:1C:A8:BC:9D:9C:0D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B51503FAFBC807A3C22EB98D1CA8BC9D9C0DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HowpC7DeQe2zh5HqVSvgbXLZUr5nUYYXeP6cZeB9Hji/0/3230302e362e34392e302f32342d3234203d3e20323730363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:ad:41:0b:50:86:fc:12:72:67:36:3d:d4:c4:e7:07:2b:82:
         6c:7c:fd:40:bb:88:fd:0d:ee:71:0e:9e:2d:a1:cf:51:e9:d1:
         7c:ab:8a:de:93:6d:d9:21:79:d0:bc:6b:ab:c3:40:a2:db:f8:
         5f:8a:21:c1:ce:a5:86:e0:db:f5:03:4b:63:c6:d2:c0:ac:ff:
         74:ea:2a:48:0d:aa:18:cc:bf:b9:c4:46:09:76:cb:85:4a:cb:
         d0:eb:d1:b6:89:8e:3a:ee:77:fe:3d:a7:cc:0c:61:d8:3e:e8:
         8f:a8:37:d1:3e:83:25:37:ba:2f:10:6d:b8:5f:e8:cc:8b:58:
         8d:2c:72:df:04:ab:ac:e3:99:33:16:0d:0a:fc:26:42:c4:6d:
         ef:76:e9:3f:85:92:7b:ae:d9:c8:8e:af:d7:54:f5:85:a7:86:
         aa:c1:08:e7:d5:a6:de:10:49:2b:95:7d:b4:4e:92:7c:32:83:
         89:92:62:ca:e7:00:d1:08:62:46:a4:97:82:fd:57:1e:a0:bf:
         2e:8a:2f:62:3d:cd:dd:d7:89:ca:5b:5b:94:51:11:94:14:86:
         18:6a:32:5e:96:3e:02:30:31:03:98:5a:df:e2:f6:89:63:67:
         cc:1c:3a:3f:d1:4b:67:71:3a:93:0d:77:62:75:41:1e:76:c6:
         56:c5:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:16:48 2026 by rpki-client