Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          4t/1QoiMUla3uEqm8gq7AS/jb84cTOl2JNYySGwOYCo=
Subject key identifier:   CD:82:FE:25:27:C6:E0:20:B1:1F:B7:61:90:5D:7C:E7:89:3C:A8:99
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       29EC066830D1067D8B51AFBBAF80906146E58CEC
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:20 +0000
ROA not before:           Fri 23 Oct 2026 13:56:20 +0000
ROA not after:            Fri 22 Oct 2027 14:01:20 +0000
asID:                     22706
IP address blocks:        200.152.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ec:06:68:30:d1:06:7d:8b:51:af:bb:af:80:90:61:46:e5:8c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:20 2026 GMT
            Not After : Oct 22 14:01:20 2027 GMT
        Subject: CN=CD82FE2527C6E020B11FB761905D7CE7893CA899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:d2:42:2a:2b:fd:a4:f0:d2:a6:22:c4:d7:
                    09:a5:fd:e2:00:c8:a4:e5:04:ce:27:9e:13:fb:4b:
                    5b:7f:58:90:be:73:41:4b:b7:c0:ef:90:98:6a:7a:
                    af:2b:b5:b6:b7:76:c9:e6:d6:1d:27:32:6b:64:82:
                    51:c6:02:4f:ae:47:fe:05:d1:a6:95:48:35:c5:29:
                    d1:ec:59:20:58:30:ab:81:61:dd:d5:cf:3a:2f:bd:
                    cf:77:a4:76:d2:d6:2e:1a:6f:d2:4c:67:36:03:ae:
                    f9:4b:3b:c3:84:ce:c2:f9:d1:cf:a7:4c:0b:0e:9e:
                    bc:fe:52:a6:e1:5e:a2:21:97:fe:8c:98:30:a6:fd:
                    56:ca:2e:62:6b:2e:99:07:94:5e:89:a0:33:db:47:
                    0f:69:cc:8a:d3:5d:b5:a3:04:3c:83:8f:e3:3b:60:
                    3a:0d:0e:0f:39:7a:e2:a8:34:be:5a:46:3f:c6:06:
                    42:b3:3b:c1:6f:2d:c5:ac:8e:5c:be:7e:52:0b:9b:
                    64:1c:12:f3:36:98:68:16:2e:b4:af:bc:7a:c6:c9:
                    47:95:13:d1:0e:d0:6d:20:91:9a:90:97:e3:7e:ab:
                    49:23:6c:96:34:8b:b9:03:f1:36:61:2f:97:73:3c:
                    32:2e:ab:fe:be:8c:3f:d5:02:2a:cc:e1:5f:10:22:
                    bf:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:82:FE:25:27:C6:E0:20:B1:1F:B7:61:90:5D:7C:E7:89:3C:A8:99
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:34:fe:13:1d:e9:69:61:ae:ad:31:61:b5:e4:3d:27:59:d7:
         4e:26:73:03:da:8a:df:0d:f5:1b:25:56:f5:64:af:bb:5f:0b:
         d1:5c:7d:9b:38:f4:c5:a1:56:41:c3:62:54:0c:49:12:ba:2e:
         5b:b3:49:5e:c0:9b:47:60:cb:26:64:20:00:48:13:b3:2e:7f:
         a2:2b:49:25:4d:18:d9:4b:57:45:38:00:ac:6f:06:7b:1b:6e:
         00:27:ef:46:59:f3:c0:a3:b1:2c:fc:22:9e:49:11:d5:19:18:
         e6:e3:74:80:d3:3c:d1:5e:f8:51:22:93:3f:3c:d3:5c:bc:71:
         c1:44:9f:a3:15:45:3e:30:4e:81:56:e4:8c:f9:ac:88:3f:f2:
         b1:8b:af:b7:fc:b4:63:4c:97:3c:3e:c6:1d:80:79:7a:55:fc:
         5a:08:a8:13:98:90:ec:af:39:06:a6:b4:a0:9f:a9:00:04:62:
         c4:a0:1e:72:f6:f6:9d:87:f9:53:6a:cf:09:8e:07:25:c9:58:
         40:1b:6a:c5:f0:15:f9:d5:90:fa:53:0d:51:66:13:8e:5b:bb:
         8d:0d:68:11:ea:a9:37:fc:cf:ba:56:9a:12:1f:f9:70:71:d9:
         89:13:05:17:3c:5a:ee:3c:ea:c9:a2:3b:34:a1:a7:9e:f6:ac:
         26:7a:6d:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKewGaDDRBn2LUa+7r4CQYUbljOwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw
ODUzNDA3MjAeFw0yNjEwMjMxMzU2MjBaFw0yNzEwMjIxNDAxMjBaMDMxMTAvBgNV
BAMTKENEODJGRTI1MjdDNkUwMjBCMTFGQjc2MTkwNUQ3Q0U3ODkzQ0E4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiytJCKiv9pPDSpiLE1wml/eIA
yKTlBM4nnhP7S1t/WJC+c0FLt8DvkJhqeq8rtba3dsnm1h0nMmtkglHGAk+uR/4F
0aaVSDXFKdHsWSBYMKuBYd3Vzzovvc93pHbS1i4ab9JMZzYDrvlLO8OEzsL50c+n
TAsOnrz+UqbhXqIhl/6MmDCm/VbKLmJrLpkHlF6JoDPbRw9pzIrTXbWjBDyDj+M7
YDoNDg85euKoNL5aRj/GBkKzO8FvLcWsjly+flILm2QcEvM2mGgWLrSvvHrGyUeV
E9EO0G0gkZqQl+N+q0kjbJY0i7kD8TZhL5dzPDIuq/6+jD/VAirM4V8QIr8/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzYL+JSfG4CCxH7dhkF1854k8qJkwHwYDVR0j
BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5
Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyJhQMA0GCSqGSIb3DQEBCwUAA4IBAQCRNP4THelp
Ya6tMWG15D0nWddOJnMD2orfDfUbJVb1ZK+7XwvRXH2bOPTFoVZBw2JUDEkSui5b
s0lewJtHYMsmZCAASBOzLn+iK0klTRjZS1dFOACsbwZ7G24AJ+9GWfPAo7Es/CKe
SRHVGRjm43SA0zzRXvhRIpM/PNNcvHHBRJ+jFUU+ME6BVuSM+ayIP/Kxi6+3/LRj
TJc8PsYdgHl6VfxaCKgTmJDsrzkGprSgn6kABGLEoB5y9vadh/lTas8JjgclyVhA
G2rF8BX51ZD6Uw1RZhOOW7uNDWgR6qk3/M+6VpoSH/lwcdmJEwUXPFruPOrJojs0
oaee9qwmem0Y
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:43:44 2026 by rpki-client