Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3230302e35332e39322e302f32322d3332203d3e20323731333437.roa
File:                     3230302e35332e39322e302f32322d3332203d3e20323731333437.roa (raw, json)
Hash identifier:          kI26HoQ/glZy9QzC4wxsNezi3A5G3KX38efjihCHags=
Subject key identifier:   CE:92:27:69:A9:9E:4B:2E:FB:DB:7F:77:98:C5:2E:FD:85:89:6B:8D
Certificate issuer:       /CN=3C9D4D3AEF9E810A027203F89E123454B9B54D1A
Certificate serial:       0174A622C7DE58523641C2DFFE7CE3408CA711BC
Authority key identifier: 3C:9D:4D:3A:EF:9E:81:0A:02:72:03:F8:9E:12:34:54:B9:B5:4D:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3230302e35332e39322e302f32322d3332203d3e20323731333437.roa
Signing time:             Fri 05 Jun 2026 16:23:03 +0000
ROA not before:           Fri 05 Jun 2026 16:18:03 +0000
ROA not after:            Fri 04 Jun 2027 16:23:03 +0000
asID:                     271347
IP address blocks:        200.53.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.crl
                          rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 18:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:74:a6:22:c7:de:58:52:36:41:c2:df:fe:7c:e3:40:8c:a7:11:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C9D4D3AEF9E810A027203F89E123454B9B54D1A
        Validity
            Not Before: Jun  5 16:18:03 2026 GMT
            Not After : Jun  4 16:23:03 2027 GMT
        Subject: CN=CE922769A99E4B2EFBDB7F7798C52EFD85896B8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a2:fa:3d:96:12:59:bb:5a:9f:1d:f7:df:8f:
                    d2:17:8f:f3:9d:53:46:38:fa:69:9e:d0:5e:13:d5:
                    8d:ed:1a:f1:94:da:87:25:1e:39:f6:21:b3:24:07:
                    7a:bd:cd:09:10:c7:9d:c1:ec:03:c9:82:78:9b:0e:
                    db:f6:ed:d4:84:8c:27:20:00:e0:fb:fa:cd:b7:c1:
                    ba:f5:ee:2f:84:ad:9c:83:dc:7f:d5:e8:63:8c:39:
                    6b:78:b3:aa:4e:15:2a:a7:7e:b2:ca:0c:d1:76:62:
                    54:9f:d0:d3:f0:7c:7c:1c:34:06:16:82:7d:35:1d:
                    c2:7a:d6:ec:19:61:15:ac:ff:32:26:6e:5e:cf:f8:
                    3d:33:fd:4b:9e:6a:4c:37:82:27:c8:bd:53:0c:8e:
                    0f:5b:a5:e5:5b:d6:3a:57:5f:b5:00:e8:ab:18:d2:
                    ea:36:54:18:29:b0:08:d0:f4:3d:ad:48:72:2e:c3:
                    f1:50:d3:e8:72:ed:20:81:f7:94:9f:22:d0:3a:2f:
                    ff:b3:66:ee:2e:6a:3a:2b:27:f3:1f:f1:88:cf:04:
                    b0:6c:48:23:92:0a:31:45:1f:04:ec:25:50:7c:1a:
                    b1:2c:0f:a2:ff:c6:46:e3:a8:bf:65:56:3b:e6:18:
                    bc:2f:d1:f2:c4:2f:a2:f6:38:69:75:6b:2e:02:e4:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:92:27:69:A9:9E:4B:2E:FB:DB:7F:77:98:C5:2E:FD:85:89:6B:8D
            X509v3 Authority Key Identifier:
                keyid:3C:9D:4D:3A:EF:9E:81:0A:02:72:03:F8:9E:12:34:54:B9:B5:4D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9D4D3AEF9E810A027203F89E123454B9B54D1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9eHXZGffe75fYfmTDPLUMmMLMF5EJEZyXaNyw3VhCuyt/0/3230302e35332e39322e302f32322d3332203d3e20323731333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:7a:a7:56:f0:83:00:3f:95:d9:fb:93:51:10:89:20:7a:84:
         54:c3:f0:ea:c5:ae:08:8b:7a:fc:f2:b6:b1:75:92:9e:d9:30:
         4d:9d:1b:1e:87:d3:84:09:75:3b:9f:72:5a:a7:85:d6:7c:66:
         43:55:45:e2:f6:1e:a3:8a:5a:ff:75:7f:da:7d:0b:5e:16:bf:
         f8:95:d0:9e:9c:3a:7c:ef:f4:83:b3:a7:ae:cc:f4:e2:93:a2:
         1b:ea:8c:d0:0d:74:6a:f0:e4:d7:2c:b3:a4:19:18:6f:bd:6b:
         82:4b:12:ee:74:fa:e7:43:76:4f:d0:fc:48:97:9d:3a:1b:57:
         6d:c5:70:3a:b7:67:42:60:0d:04:b8:d8:ca:c9:a7:c5:dd:cc:
         68:16:37:9b:91:9e:ae:cd:6a:4a:4d:f3:27:da:9f:41:12:53:
         08:2e:48:6c:a2:9b:03:16:81:6a:66:07:36:43:4d:30:6a:8e:
         ca:d3:ae:70:b2:b1:cd:ce:61:77:21:d5:f7:1f:c7:0d:5d:0d:
         2c:e3:37:6b:4f:c8:a5:e3:81:fd:ae:7f:32:34:4f:63:7c:c9:
         29:16:4f:6d:2b:41:7e:e4:5c:f4:f9:32:b5:b0:4e:b4:bb:33:
         dc:60:4b:ac:f2:b6:cc:65:7a:f2:38:42:0c:db:99:15:56:60:
         f9:cb:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:23:56 2026 by rpki-client