Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e31362e302f32302d3234203d3e203631363236.roa
File:                     3230302e3230312e31362e302f32302d3234203d3e203631363236.roa (raw, json)
Hash identifier:          soDWQaTH+jnBrZuS5ar/ZloNIVZlkUcpTqIdj/Eqwyw=
Subject key identifier:   AD:6A:A8:0D:35:07:80:C9:A4:A3:31:5C:BA:69:4B:EE:7E:FB:21:02
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       15805AE197CE06F256B2BE570B8782B4A267FCF9
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e31362e302f32302d3234203d3e203631363236.roa
Signing time:             Thu 16 Apr 2026 18:10:58 +0000
ROA not before:           Thu 16 Apr 2026 18:05:58 +0000
ROA not after:            Thu 15 Apr 2027 18:10:58 +0000
asID:                     61626
IP address blocks:        200.201.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:80:5a:e1:97:ce:06:f2:56:b2:be:57:0b:87:82:b4:a2:67:fc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr 16 18:05:58 2026 GMT
            Not After : Apr 15 18:10:58 2027 GMT
        Subject: CN=AD6AA80D350780C9A4A3315CBA694BEE7EFB2102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:17:c1:d1:b4:4c:5c:93:da:47:d6:17:dd:18:
                    f7:e4:ff:8b:49:dc:48:ef:5e:c6:a6:0e:b0:14:85:
                    e7:13:df:f1:52:78:cf:5b:f4:ef:b6:e1:43:d5:6e:
                    09:83:ff:b5:a7:ce:13:ea:77:d0:a6:5c:2f:79:49:
                    65:cb:82:a1:f3:b8:ac:5b:46:85:7f:97:91:bb:1b:
                    dd:62:40:3b:6b:c2:03:76:01:80:8d:a3:fa:aa:8e:
                    03:fd:0f:a1:7d:4b:1c:ee:d6:b4:d1:f9:35:68:ca:
                    40:af:83:c8:e0:0e:3f:59:2c:25:c9:25:b1:e7:cb:
                    da:e7:ca:07:3b:aa:67:af:ad:95:60:b2:a5:9a:ba:
                    6f:ce:14:cf:19:ca:f4:78:d5:eb:63:bf:21:52:5c:
                    04:09:ab:ac:5e:29:d9:62:75:d2:83:8a:73:12:47:
                    4d:17:95:58:2f:38:37:27:07:d3:e3:5d:61:df:47:
                    73:62:14:e5:fd:2c:fa:5f:35:b3:23:ec:12:38:bd:
                    11:f9:6b:0a:a6:3c:b0:1e:13:2c:61:95:56:ea:c5:
                    ef:3f:aa:c0:7d:e7:1c:c0:0f:23:14:d4:16:10:73:
                    5c:dc:8e:a6:99:4b:ff:1d:e6:e2:6d:d0:4c:44:4d:
                    11:79:be:cf:b5:6e:d4:48:66:40:25:75:b4:d5:21:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:A8:0D:35:07:80:C9:A4:A3:31:5C:BA:69:4B:EE:7E:FB:21:02
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e31362e302f32302d3234203d3e203631363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:80:3b:f4:57:51:b3:e3:45:2b:8d:fd:44:03:98:d4:26:
         2a:c0:b3:22:aa:77:46:d2:f4:4d:f9:96:0a:8d:74:71:cf:96:
         32:6a:08:a3:57:92:21:62:b6:7c:7e:ca:ea:35:fc:64:02:4d:
         a2:0d:2b:09:bf:d7:af:ce:23:2b:32:fe:eb:7c:91:51:9a:98:
         d3:92:c9:f7:b3:12:cd:8a:ad:e0:08:7a:40:76:0b:58:cb:20:
         d2:2b:0c:df:4c:48:60:71:4d:f6:ff:a8:a6:81:c6:26:cf:85:
         13:7d:df:01:41:e0:2d:a0:44:f5:ac:53:99:68:30:18:1a:b6:
         73:31:7a:1f:6f:a1:fe:53:8f:be:67:6b:02:53:b4:f2:a9:d3:
         f8:81:e3:0d:5f:8a:09:6a:64:8f:74:6d:62:a6:c3:bb:c7:d2:
         60:02:c3:f8:18:39:a3:52:bd:ec:5a:09:a8:ed:aa:df:7a:e5:
         30:78:ae:2b:99:f3:f0:aa:a5:61:83:cf:da:32:b2:ac:b1:eb:
         93:d1:81:89:2e:47:9e:4b:f6:0d:b4:69:58:5d:14:e7:11:8b:
         1f:29:bd:36:84:5c:0f:55:bb:e6:4c:f6:ba:39:84:ca:bf:29:
         d6:46:41:6a:7b:9c:ec:14:bb:6c:d3:fd:56:14:91:ff:cc:39:
         76:7f:f2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:55 2026 by rpki-client