Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          SwNBp0ka5qIjKgJoDC/Io4eBTQDsLpDy2h6TijNhO/w=
Subject key identifier:   2A:6B:F1:A2:54:AB:39:5A:E3:3C:88:CD:E3:6A:70:60:90:11:51:13
Certificate issuer:       /CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
Certificate serial:       39A2E7D51FFAC38DF8F36CDE5E1E3B635C39E64A
Authority key identifier: D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa
Signing time:             Sat 06 Jun 2026 21:30:21 +0000
ROA not before:           Sat 06 Jun 2026 21:25:21 +0000
ROA not after:            Sat 05 Jun 2027 21:30:21 +0000
asID:                     22177
IP address blocks:        200.162.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl
                          rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 22:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a2:e7:d5:1f:fa:c3:8d:f8:f3:6c:de:5e:1e:3b:63:5c:39:e6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1B95B9F812F877EFB486D2E4C30B703FCAEC829
        Validity
            Not Before: Jun  6 21:25:21 2026 GMT
            Not After : Jun  5 21:30:21 2027 GMT
        Subject: CN=2A6BF1A254AB395AE33C88CDE36A706090115113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:3e:5b:87:cf:7a:80:a4:6f:62:99:9a:81:
                    82:1d:75:b1:af:12:fd:03:5f:0f:ea:2e:bc:11:2b:
                    77:ba:dd:c0:d6:97:dd:7a:53:ea:2a:ca:f0:4b:6e:
                    4e:a3:22:38:fa:6f:cc:af:bf:b6:75:60:27:16:0d:
                    ee:3c:51:45:41:de:e2:fb:86:37:e2:ac:33:06:10:
                    b0:62:3f:6d:8a:69:7b:b7:01:37:08:ee:da:90:13:
                    ed:02:48:50:f0:87:bc:ad:cd:51:cb:a1:c6:16:1b:
                    9a:ef:1c:63:cf:9e:e2:bb:ce:64:5c:c1:d2:63:0b:
                    6a:0b:b4:9c:e1:c8:f5:f8:0d:e8:61:36:9c:df:42:
                    b5:e8:88:e5:94:31:c7:2a:a8:df:8a:41:88:10:52:
                    52:7e:88:67:66:0c:97:f8:1f:c4:44:b3:af:93:93:
                    05:c1:9f:26:fe:e1:4a:1f:53:25:a9:10:11:38:f6:
                    93:1c:ef:b7:df:9e:33:5b:b5:42:7b:44:5e:59:2b:
                    fd:95:3f:0c:3c:d0:6e:15:58:c8:45:4d:df:c4:8a:
                    b7:f5:ba:9c:f1:d5:8c:67:72:15:71:f0:62:a9:57:
                    9a:24:2b:8f:7d:8a:9c:34:98:16:d4:ad:93:fc:29:
                    91:f4:56:72:4e:48:be:57:cf:7c:ae:85:95:24:03:
                    67:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:F1:A2:54:AB:39:5A:E3:3C:88:CD:E3:6A:70:60:90:11:51:13
            X509v3 Authority Key Identifier:
                keyid:D1:B9:5B:9F:81:2F:87:7E:FB:48:6D:2E:4C:30:B7:03:FC:AE:C8:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1B95B9F812F877EFB486D2E4C30B703FCAEC829.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/1/3230302e3136322e3132382e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:df:b4:9f:a7:76:6b:0e:21:32:a8:53:e2:89:cc:f2:e3:b3:
         c7:a5:9f:1c:3a:9f:6b:55:81:99:0e:ac:53:38:89:61:5a:9c:
         73:1c:a9:ff:bd:51:17:b5:1f:dd:eb:7b:0b:d1:3d:14:28:4b:
         ba:da:6b:f1:a6:84:a0:ee:e7:5c:27:42:b5:68:a1:2f:fc:cb:
         86:9c:cc:b3:b3:ec:2f:79:14:8d:9b:83:f1:98:4f:d2:2f:8b:
         68:6f:8a:5e:c1:83:8b:32:6c:cf:08:86:4e:ba:02:80:6c:da:
         5f:a5:c4:0b:19:5f:b5:51:71:38:be:5d:e0:b1:cd:07:2a:19:
         86:8f:fd:88:23:ea:86:3b:47:58:f8:61:78:87:08:b7:9f:7e:
         93:87:47:fc:3a:41:1d:4d:26:5c:63:75:7a:3a:02:4e:54:26:
         e7:ff:50:1f:e0:24:35:15:04:a0:15:5e:79:47:0b:e6:7a:bf:
         21:1e:86:28:42:51:57:b9:eb:78:dc:d3:df:37:c1:c9:d0:7e:
         c4:2c:64:05:18:ff:22:5f:82:8a:0c:46:20:87:ec:44:f7:f9:
         54:7f:a7:89:a9:b1:86:79:2f:51:38:02:cc:08:ba:42:52:e0:
         56:cc:a0:27:bb:52:55:29:ef:61:a0:21:a5:f3:d2:dd:3b:ca:
         f9:48:5c:bc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOaLn1R/6w43482zeXh47Y1w55kowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFCOTVCOUY4MTJGODc3RUZCNDg2RDJFNEMzMEI3MDNG
Q0FFQzgyOTAeFw0yNjA2MDYyMTI1MjFaFw0yNzA2MDUyMTMwMjFaMDMxMTAvBgNV
BAMTKDJBNkJGMUEyNTRBQjM5NUFFMzNDODhDREUzNkE3MDYwOTAxMTUxMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2j5bh896gKRvYpmagYIddbGv
Ev0DXw/qLrwRK3e63cDWl916U+oqyvBLbk6jIjj6b8yvv7Z1YCcWDe48UUVB3uL7
hjfirDMGELBiP22KaXu3ATcI7tqQE+0CSFDwh7ytzVHLocYWG5rvHGPPnuK7zmRc
wdJjC2oLtJzhyPX4DehhNpzfQrXoiOWUMccqqN+KQYgQUlJ+iGdmDJf4H8REs6+T
kwXBnyb+4UofUyWpEBE49pMc77ffnjNbtUJ7RF5ZK/2VPww80G4VWMhFTd/Eirf1
upzx1YxnchVx8GKpV5okK499ipw0mBbUrZP8KZH0VnJOSL5Xz3yuhZUkA2etAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKmvxolSrOVrjPIjN42pwYJARURMwHwYDVR0j
BBgwFoAU0blbn4Evh377SG0uTDC3A/yuyCkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMS9EMUI5NUI5RjgxMkY4NzdFRkI0ODZEMkU0QzMwQjcwM0ZDQUVDODI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQjk1QjlGODEyRjg3N0VG
QjQ4NkQyRTRDMzBCNzAzRkNBRUM4MjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzEv
MzIzMDMwMmUzMTM2MzIyZTMxMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIooAwDQYJKoZIhvcNAQELBQADggEBAGXftJ+n
dmsOITKoU+KJzPLjs8elnxw6n2tVgZkOrFM4iWFanHMcqf+9URe1H93rewvRPRQo
S7raa/GmhKDu51wnQrVooS/8y4aczLOz7C95FI2bg/GYT9Ivi2hvil7Bg4sybM8I
hk66AoBs2l+lxAsZX7VRcTi+XeCxzQcqGYaP/Ygj6oY7R1j4YXiHCLeffpOHR/w6
QR1NJlxjdXo6Ak5UJuf/UB/gJDUVBKAVXnlHC+Z6vyEehihCUVe563jc0983wcnQ
fsQsZAUY/yJfgooMRiCH7ET3+VR/p4mpsYZ5L1E4AswIukJS4FbMoCe7UlUp72Gg
IaXz0t07yvlIXLw=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:54:32 2026 by rpki-client