Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier:          xil7KfwEDQXx0eD9c20gji5bCBg5Y5zK1VQ/t8Uk4Is=
Subject key identifier:   DB:C5:0D:31:5E:B2:EF:4C:44:2D:24:90:C8:B7:4B:84:B1:0C:69:AF
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       08B88B27E57C42027898C8D527B2D025D59BBE88
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:20 +0000
ROA not before:           Fri 23 Oct 2026 13:56:20 +0000
ROA not after:            Fri 22 Oct 2027 14:01:20 +0000
asID:                     22706
IP address blocks:        200.152.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b8:8b:27:e5:7c:42:02:78:98:c8:d5:27:b2:d0:25:d5:9b:be:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:20 2026 GMT
            Not After : Oct 22 14:01:20 2027 GMT
        Subject: CN=DBC50D315EB2EF4C442D2490C8B74B84B10C69AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4e:74:43:f1:95:35:37:61:7b:9e:f5:6d:0e:
                    2d:d3:5e:7a:ae:49:a9:cc:7a:82:50:23:ae:52:0f:
                    43:f1:7f:78:6e:d7:9b:53:a1:9d:56:f9:02:c1:d5:
                    17:c2:be:bb:2f:8a:6b:2a:e2:58:6d:d2:4e:b6:09:
                    57:4b:32:03:a0:14:fb:6d:ff:ec:89:eb:1b:eb:65:
                    e1:53:29:0a:bf:e3:86:6c:ca:2c:29:d2:d8:c0:86:
                    4b:84:03:c8:28:b1:f6:3e:96:9d:14:0c:a9:58:c1:
                    fb:29:d7:63:85:61:b3:0b:65:8a:d0:1d:4d:13:5f:
                    64:b9:e9:cd:0f:3c:8d:be:4d:00:b9:32:00:7f:ad:
                    cb:6e:c2:e9:c4:53:c0:a7:b5:ef:39:51:01:49:49:
                    84:52:3e:6e:71:95:34:ca:60:e1:fd:39:ad:19:00:
                    d4:5a:a0:83:7e:f7:e6:bd:f5:3a:f5:e4:c6:cb:a5:
                    e9:01:58:5c:61:92:3e:9c:32:1f:e4:e3:82:33:04:
                    7e:c8:29:00:eb:da:39:a1:d4:9c:99:c9:29:58:10:
                    21:48:e4:00:e7:5d:ad:d0:dc:12:49:3c:8e:19:54:
                    34:ae:02:d9:6d:bb:6a:58:62:fa:a7:18:9a:62:1f:
                    c7:a2:02:08:43:ba:1f:7b:bb:17:ff:5b:61:04:c1:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C5:0D:31:5E:B2:EF:4C:44:2D:24:90:C8:B7:4B:84:B1:0C:69:AF
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:00:08:04:30:42:79:f8:75:56:7e:37:80:7b:2a:4f:b6:
         eb:84:79:67:04:c3:82:ca:fd:6b:ca:8f:1b:e0:cc:1c:2b:5b:
         5d:b7:96:3a:01:8f:f0:78:8d:9c:70:7f:58:c3:fa:c1:b7:d3:
         b2:ad:4e:93:0f:3b:ce:04:76:cf:f7:77:4c:1b:1a:8c:97:aa:
         4a:04:3a:c0:d7:03:ba:f5:30:07:f3:73:1e:3f:b0:b6:5f:f0:
         cd:f0:79:75:78:26:2f:e1:ee:f1:86:c0:26:02:53:e1:bf:d4:
         f4:f6:7d:c4:27:ff:ac:9b:73:49:ef:41:ac:5d:4d:6f:6c:ef:
         86:64:1b:8d:c1:f4:4d:dc:13:c0:74:8c:45:c0:42:bf:e5:77:
         da:a5:06:27:60:0b:04:66:82:ad:c7:28:49:51:c8:90:f0:ac:
         06:c0:26:1e:66:0e:7e:07:86:33:64:cc:d4:c0:7b:c9:b8:9f:
         6a:b2:a4:06:2c:24:48:5b:4b:2a:e2:dd:df:e1:9c:a3:59:cc:
         b5:5d:d5:28:9f:74:9d:32:01:c1:94:dd:66:78:11:4e:89:4e:
         5b:a3:63:11:23:5d:4b:d4:ad:66:80:6e:4a:2c:8d:05:d1:11:
         74:2e:98:97:71:c9:53:7a:f6:56:2b:63:22:1b:05:58:be:21:
         4e:23:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:58:43 2026 by rpki-client