Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233342e302f32342d3234203d3e20323733343930.roa
File:                     3230302e3232392e3233342e302f32342d3234203d3e20323733343930.roa (raw, json)
Hash identifier:          cheTUBfvMwOt1QVh4/uoWE1LxhVh2Z6B+RjPkppkBeU=
Subject key identifier:   74:C8:13:34:1F:ED:8F:3C:C5:2E:C5:CA:9B:BB:00:66:1A:A5:63:C3
Certificate issuer:       /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
Certificate serial:       2018571255143F1D781E8DBB817F18A9109201DE
Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233342e302f32342d3234203d3e20323733343930.roa
Signing time:             Fri 20 Feb 2026 12:32:58 +0000
ROA not before:           Fri 20 Feb 2026 12:27:58 +0000
ROA not after:            Fri 19 Feb 2027 12:32:58 +0000
asID:                     273490
IP address blocks:        200.229.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl
                          rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 09:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:18:57:12:55:14:3f:1d:78:1e:8d:bb:81:7f:18:a9:10:92:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207
        Validity
            Not Before: Feb 20 12:27:58 2026 GMT
            Not After : Feb 19 12:32:58 2027 GMT
        Subject: CN=74C813341FED8F3CC52EC5CA9BBB00661AA563C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7d:d6:87:0f:28:f9:56:31:d9:40:91:5e:e7:
                    0d:73:d1:d5:fe:a2:16:66:a5:1a:89:29:3f:98:b8:
                    da:14:0c:7d:1a:4f:d9:13:a8:41:b4:46:ad:d7:90:
                    fe:73:5d:f7:c7:4e:1a:75:7e:64:82:81:91:07:ff:
                    9b:86:3a:15:a6:9f:08:7a:75:d0:03:83:29:43:f2:
                    fc:5a:0b:86:f9:84:a9:51:24:21:f6:1b:c1:78:5b:
                    70:d6:1d:ce:42:6f:40:6e:0d:ba:d2:b9:b6:22:04:
                    e2:9d:19:60:67:d6:6b:be:db:00:42:a0:a6:96:21:
                    d4:b1:b5:a6:cc:7c:62:70:b3:e0:9b:77:4b:09:31:
                    6a:90:91:97:d8:0b:03:0d:27:6b:43:0d:14:fa:24:
                    b8:9f:0c:d7:0e:c3:e1:8d:94:7e:0e:b9:7f:49:37:
                    8f:8e:f7:ae:cb:2f:fc:f3:ed:21:78:da:c4:0b:08:
                    ae:49:21:95:d4:55:15:8b:fc:a5:33:3a:0c:65:e3:
                    2e:c0:23:dc:02:24:4c:28:d0:2b:ca:6e:f0:ed:bd:
                    f0:20:21:09:9e:c5:15:65:ff:ba:e4:a8:27:ee:74:
                    a8:63:d2:c8:95:aa:d7:eb:ad:79:75:34:70:9a:9b:
                    76:1e:d4:33:58:c6:b5:0f:6b:65:40:4b:d6:26:fb:
                    dd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C8:13:34:1F:ED:8F:3C:C5:2E:C5:CA:9B:BB:00:66:1A:A5:63:C3
            X509v3 Authority Key Identifier:
                keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233342e302f32342d3234203d3e20323733343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:14:3e:d1:3c:e1:c0:a7:03:ad:21:68:8e:02:e2:4b:8d:6b:
         8c:4c:0a:8c:46:6c:91:41:29:07:38:02:92:0d:ed:c7:ab:db:
         5c:c6:d4:6a:a8:00:a5:02:e5:ea:89:72:29:39:47:d6:83:a5:
         84:aa:ab:ad:80:c9:d6:b8:f4:93:68:bf:f1:b8:a9:11:6e:46:
         5d:86:9c:09:bf:67:be:56:5c:cb:61:23:a7:4e:f7:9e:bc:8a:
         15:04:0d:d7:b6:77:6c:df:97:d6:a2:ff:04:06:a4:9e:0c:ba:
         96:3d:c4:e8:6f:af:e5:56:85:3c:51:c6:38:20:37:6a:2e:1d:
         27:26:b7:42:bc:f0:45:05:71:cc:ab:6e:37:1b:b9:96:00:67:
         3d:3d:1e:35:de:08:63:3f:04:89:ff:f0:51:7d:3b:ec:58:93:
         1b:2a:5d:dc:de:8c:e1:fd:ff:bb:6b:40:ee:da:d2:93:91:35:
         f8:8d:49:ce:db:3e:eb:bf:f6:e8:a2:2f:2b:b0:6e:4f:d9:15:
         88:62:22:02:f2:08:5a:97:76:b1:20:fb:73:b8:b8:5b:c1:a5:
         65:4e:ed:b9:95:73:a4:52:86:c4:70:ce:46:ee:a9:99:03:3f:
         44:2e:e3:ba:91:a1:7d:f3:13:be:c6:ae:69:2f:c5:60:11:92:
         2f:7d:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:08 2026 by rpki-client