Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa
File:                     3230302e362e34382e302f32342d3332203d3e20323731313838.roa (raw, json)
Hash identifier:          UxNjSQ5nEyS2KkK+oh+iJMuMDy1PjbYvkQVCSGSux8c=
Subject key identifier:   F3:86:6C:2F:05:00:F6:25:80:23:77:AD:0B:38:B0:36:5A:2C:06:18
Certificate issuer:       /CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
Certificate serial:       27F4C74D3C8AB2EDE09D281169ACBF7A05C129CC
Authority key identifier: C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa
Signing time:             Wed 20 May 2026 21:05:09 +0000
ROA not before:           Wed 20 May 2026 21:00:09 +0000
ROA not after:            Wed 19 May 2027 21:05:09 +0000
asID:                     271188
IP address blocks:        200.6.48.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl
                          rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f4:c7:4d:3c:8a:b2:ed:e0:9d:28:11:69:ac:bf:7a:05:c1:29:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9DB8EA11F6A5A485AEC29556143815DB2507A3B
        Validity
            Not Before: May 20 21:00:09 2026 GMT
            Not After : May 19 21:05:09 2027 GMT
        Subject: CN=F3866C2F0500F625802377AD0B38B0365A2C0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2a:0a:0e:f4:6a:e7:b2:14:40:20:c0:26:1b:
                    82:ab:b0:8d:8c:71:6f:53:65:42:23:86:9c:69:e5:
                    79:42:b6:46:ae:ff:44:97:a4:33:94:9e:24:aa:22:
                    09:0a:d3:65:e4:bb:c1:2c:75:39:34:f7:66:64:79:
                    0b:bb:b1:d1:4c:f9:39:f0:2a:b7:28:08:75:84:44:
                    5c:c8:4d:43:21:41:09:e9:84:af:f2:dd:43:79:33:
                    07:a1:0e:92:03:f8:22:cb:c9:b4:75:a0:65:82:58:
                    ca:b9:31:9f:e3:36:da:b4:cb:df:1d:ab:38:4a:31:
                    ce:74:ab:78:9c:3b:8d:21:26:7a:c9:7a:91:9c:9e:
                    9d:14:2c:b5:ba:be:d2:79:21:ea:ef:28:cb:91:2a:
                    65:57:97:12:f5:55:13:16:0b:f3:17:82:ae:19:11:
                    bb:57:92:9d:73:3f:31:3a:5b:b1:8c:11:e8:94:f3:
                    04:0c:be:a5:63:14:bc:18:70:71:63:30:00:2a:d5:
                    05:3e:43:c9:d3:34:6d:15:ab:8b:6d:e8:1c:70:7e:
                    da:0d:b1:cc:3c:13:b4:7c:68:04:b0:1e:7c:1c:dc:
                    54:94:bf:ef:32:7e:4e:8a:3a:43:d7:2b:1f:03:90:
                    31:f4:3b:46:4a:77:90:ab:1d:65:d2:db:ea:2e:de:
                    83:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:6C:2F:05:00:F6:25:80:23:77:AD:0B:38:B0:36:5A:2C:06:18
            X509v3 Authority Key Identifier:
                keyid:C9:DB:8E:A1:1F:6A:5A:48:5A:EC:29:55:61:43:81:5D:B2:50:7A:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9DB8EA11F6A5A485AEC29556143815DB2507A3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TWxZVS5LJzLvUXvgk3doR9aF6h1ogXAB2C5mkegJvK4/0/3230302e362e34382e302f32342d3332203d3e20323731313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d3:a9:13:11:a6:a2:07:b7:51:8e:e3:b6:69:a9:09:59:f6:
         97:81:57:9a:e9:cf:4c:b7:59:fd:9f:e7:8a:a0:ec:62:a8:77:
         da:a1:2f:fd:08:ac:4b:c3:53:be:db:54:c5:fd:ab:79:80:36:
         5b:46:b3:87:94:9c:f2:1c:0d:91:52:f0:9f:4f:72:3b:28:8a:
         70:78:51:bf:83:4c:c4:de:87:cf:80:f8:b3:a9:8b:32:e1:da:
         0c:20:fe:26:0e:91:20:7e:00:45:f4:8f:eb:4e:92:cf:cc:dc:
         18:97:71:4e:7c:45:d2:80:05:41:f8:01:0b:ea:91:9f:72:03:
         70:6b:3e:c9:ba:42:3e:33:d9:fb:27:25:12:9e:2a:44:25:1b:
         05:a9:df:a0:a2:71:06:b0:89:64:3b:51:68:79:fb:0a:98:3a:
         da:1f:b6:3c:62:7b:b8:f2:9c:32:3d:97:2a:60:fd:aa:4b:a8:
         03:b0:8a:a3:ba:e1:1a:95:5b:1a:f1:c7:0b:e7:17:13:32:bf:
         c0:ef:a4:87:de:6f:5d:ab:39:66:76:34:41:86:ec:c6:2d:69:
         2c:26:43:2e:3b:86:cb:42:a1:37:73:6d:a9:66:b9:8b:4e:47:
         0e:aa:d0:de:70:3b:84:66:29:b2:77:70:50:09:ce:51:c3:66:
         6e:bf:cf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:14:39 2026 by rpki-client