Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/3230302e3131352e3131322e302f32322d3234203d3e20323730323637.roa
File:                     3230302e3131352e3131322e302f32322d3234203d3e20323730323637.roa (raw, json)
Hash identifier:          bKDWn9pknZ+J/UIx03/BDeTJtgDA/AHC9lE8QZRJZJQ=
Subject key identifier:   81:B1:E9:D4:3D:C5:0F:CF:F3:72:65:D4:55:EA:9C:98:9E:44:B4:7A
Certificate issuer:       /CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
Certificate serial:       4F618FE2E8029177CD0AE956F88D14966EA7BF1D
Authority key identifier: 24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/3230302e3131352e3131322e302f32322d3234203d3e20323730323637.roa
Signing time:             Fri 24 Jul 2026 16:48:53 +0000
ROA not before:           Fri 24 Jul 2026 16:43:53 +0000
ROA not after:            Fri 23 Jul 2027 16:48:53 +0000
asID:                     270267
IP address blocks:        200.115.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl
                          rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 29 Jul 2026 22:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:61:8f:e2:e8:02:91:77:cd:0a:e9:56:f8:8d:14:96:6e:a7:bf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=243BD93183FA3EECE12AF566AC5DC14B07A64854
        Validity
            Not Before: Jul 24 16:43:53 2026 GMT
            Not After : Jul 23 16:48:53 2027 GMT
        Subject: CN=81B1E9D43DC50FCFF37265D455EA9C989E44B47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:a8:09:73:2e:e5:32:fc:f5:9a:66:6a:8c:
                    43:13:ad:c4:5c:85:f7:94:f2:eb:28:2e:ca:5b:2b:
                    f0:c9:ea:85:bb:43:5d:93:84:7f:db:bc:f1:21:c7:
                    9f:93:7c:01:a4:20:05:06:21:01:8c:20:13:1e:18:
                    44:64:be:22:37:8f:7f:d4:21:ce:3b:ce:34:84:94:
                    a6:10:34:78:32:47:21:da:8b:99:0c:82:eb:76:8e:
                    c6:62:df:d4:ac:ba:8c:51:87:4b:5d:cf:83:58:b9:
                    97:ce:ca:0d:94:5f:49:3a:c0:ef:97:c0:0b:07:de:
                    47:d4:e0:de:29:b8:ec:79:72:37:e6:eb:83:a2:7b:
                    85:a8:9e:d3:2c:51:d5:6c:84:43:fb:01:9c:82:d1:
                    31:87:85:9d:25:75:98:06:ba:bb:db:f3:e4:87:ed:
                    6f:e8:09:a3:05:4b:03:c7:40:a2:ac:3a:64:6b:f8:
                    c6:3a:08:b0:e2:0a:2b:9e:46:86:7f:79:62:aa:48:
                    ac:d0:80:b2:5b:91:ed:e7:49:b5:98:5b:8c:97:61:
                    88:3f:c9:9c:db:6b:23:9d:eb:c2:e5:ac:45:80:0f:
                    33:23:25:53:55:2e:35:4c:56:46:0a:3a:3a:9d:30:
                    61:3f:ab:1c:73:96:d1:44:9c:4d:14:4a:f4:14:1e:
                    57:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B1:E9:D4:3D:C5:0F:CF:F3:72:65:D4:55:EA:9C:98:9E:44:B4:7A
            X509v3 Authority Key Identifier:
                keyid:24:3B:D9:31:83:FA:3E:EC:E1:2A:F5:66:AC:5D:C1:4B:07:A6:48:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/243BD93183FA3EECE12AF566AC5DC14B07A64854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243BD93183FA3EECE12AF566AC5DC14B07A64854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6U7sQb4WoxSdMfNxqu9sBQRFYVMwkTjZjCGbe3KppkUi/0/3230302e3131352e3131322e302f32322d3234203d3e20323730323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:bc:b2:3a:00:a2:19:e1:bc:45:62:ab:99:aa:a1:21:f6:
         ee:29:3b:c8:2e:83:f1:f0:1a:b9:fa:76:b1:61:17:6b:8e:66:
         41:98:25:44:e2:55:7e:90:8f:40:3f:73:dd:b6:d4:a4:d9:1d:
         f4:ce:40:dc:82:10:7f:c0:5a:0f:e2:72:fe:22:6d:9a:c9:b7:
         0d:10:bc:bf:e1:9f:9c:8f:b1:3f:d8:73:8b:5f:e6:b3:b6:1a:
         ae:8f:77:42:82:54:a6:e4:d5:ef:1c:03:64:7f:fb:03:91:76:
         e4:bf:c9:52:68:54:5f:25:dc:cb:d8:2e:9d:8b:99:81:87:6c:
         f4:9b:eb:d0:93:d4:a8:1f:df:6b:3f:cf:c9:7a:5b:a5:73:26:
         57:97:3d:c0:a2:70:d4:00:5f:2e:9d:d1:8e:29:51:1c:a2:4d:
         37:fc:29:97:df:3f:4e:c8:79:9e:a1:49:b1:50:d1:db:52:1f:
         ad:67:d6:ee:48:42:4e:09:80:b7:51:e4:29:53:19:66:10:ce:
         88:ac:bc:f1:da:1e:76:46:7c:c4:d4:5a:95:34:e8:24:37:c4:
         92:42:f6:fb:80:0b:62:5d:7a:53:5c:54:c3:21:ed:a2:e7:50:
         f6:90:b2:4c:82:2c:8f:86:29:5c:12:f2:dc:ec:85:0c:f3:05:
         32:03:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:54 2026 by rpki-client