Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e382e302f32312d3234203d3e203631363236.roa
File:                     3230302e3230312e382e302f32312d3234203d3e203631363236.roa (raw, json)
Hash identifier:          rDAce/1PpcR2pmuxIWoaEPS+Zl+xzTf3w3cWCx1emzY=
Subject key identifier:   19:11:40:25:13:88:E0:02:CF:28:33:34:49:F2:F4:42:44:6F:13:1E
Certificate issuer:       /CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
Certificate serial:       019BE4805EFF3903482476FA0364901FFFF52F07
Authority key identifier: CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e382e302f32312d3234203d3e203631363236.roa
Signing time:             Thu 16 Apr 2026 18:10:47 +0000
ROA not before:           Thu 16 Apr 2026 18:05:47 +0000
ROA not after:            Thu 15 Apr 2027 18:10:47 +0000
asID:                     61626
IP address blocks:        200.201.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl
                          rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 14:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e4:80:5e:ff:39:03:48:24:76:fa:03:64:90:1f:ff:f5:2f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3
        Validity
            Not Before: Apr 16 18:05:47 2026 GMT
            Not After : Apr 15 18:10:47 2027 GMT
        Subject: CN=191140251388E002CF28333449F2F442446F131E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9f:fc:a9:9b:55:d9:e2:f1:7a:be:93:3a:7f:
                    32:47:65:fc:bd:9d:ab:e1:fe:83:d2:85:4a:4c:6f:
                    5a:97:c8:c3:f7:78:6e:b8:33:9e:9e:72:6e:af:1c:
                    72:60:ff:f9:27:9a:6c:cb:b7:59:32:50:a7:6e:95:
                    0a:eb:05:93:f7:4c:ed:01:e0:49:bd:d6:5c:ab:d6:
                    2c:17:51:dd:28:0c:29:24:36:15:d9:de:e1:61:b0:
                    b2:1b:f1:f7:00:c6:f3:04:59:d3:e4:b7:e8:07:2e:
                    b1:1a:eb:df:03:7d:9c:c2:5c:84:02:d8:d1:fe:56:
                    7e:34:40:f7:45:71:95:88:0a:eb:07:5b:36:a1:0b:
                    0b:c1:97:9a:97:48:59:34:f4:8c:ab:4e:f1:3d:7f:
                    ac:79:97:f5:b3:13:7b:7b:64:c4:ab:32:d5:2c:6a:
                    f6:29:1c:5d:8c:50:b0:c0:bc:24:b5:98:ad:92:40:
                    4d:f7:f4:6f:26:23:27:01:0d:be:92:77:9e:25:dc:
                    52:49:d1:fb:6c:23:3d:39:92:91:73:b1:af:24:8a:
                    71:f0:dc:c4:88:8b:ff:67:63:10:48:1b:39:93:fa:
                    33:02:42:5d:97:f6:80:e7:b4:e0:ac:a7:9a:ab:37:
                    cd:8d:7d:0a:43:b7:fa:57:f7:bc:9c:cb:21:d2:a4:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:11:40:25:13:88:E0:02:CF:28:33:34:49:F2:F4:42:44:6F:13:1E
            X509v3 Authority Key Identifier:
                keyid:CE:68:7B:DF:D3:E8:EB:AC:E7:EE:1E:A8:4F:7F:C1:BB:27:8B:3C:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE687BDFD3E8EBACE7EE1EA84F7FC1BB278B3CC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ncG9s2gupX8sELknXjoT2628XXVamFRqgmBaNXEmUYQ/0/3230302e3230312e382e302f32312d3234203d3e203631363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.201.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:81:88:36:d6:7a:32:d1:4a:90:04:9b:99:05:2e:2c:85:58:
         b1:b5:a9:dd:14:bb:4b:84:d0:a0:53:96:ec:82:93:1a:54:f3:
         33:cf:32:3c:06:0e:9e:e1:6f:fb:9e:ce:54:47:1b:6b:57:31:
         55:93:6d:10:69:0f:bb:c4:6f:25:39:ae:fd:e4:ea:40:bc:51:
         55:32:44:79:ed:fc:89:bd:68:49:b0:2c:59:12:f6:9a:e9:f1:
         85:d4:25:12:02:4e:48:95:c1:1e:34:c4:28:ca:88:27:11:ca:
         c5:07:4c:75:8d:a3:cb:66:24:24:16:a4:cd:d3:58:84:65:11:
         d0:a8:e0:82:b4:92:07:6d:32:64:1c:22:9d:4e:3e:df:bb:4f:
         22:d0:03:a1:bf:21:da:5f:8a:1d:63:7a:53:33:69:70:e1:a7:
         1e:19:d8:ba:35:aa:33:8b:e7:7a:f4:ca:1e:65:7b:fa:03:ac:
         66:01:f4:61:f8:62:b4:e3:32:d2:56:d0:bd:f1:cb:60:29:4d:
         0f:fa:b8:d2:41:17:6a:c2:8a:39:9a:5a:6c:43:23:08:d1:bf:
         f4:af:7d:9d:4f:e4:b8:e7:6e:a1:dc:aa:b4:39:0f:24:17:df:
         9f:2e:fb:28:c1:d3:eb:3c:de:b5:97:98:40:85:2a:2f:ec:95:
         ff:73:cc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:06:54 2026 by rpki-client