Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38332e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          FFwUSpUSZSKsc4lvYFikhdCL7XlW3r431WTVPYg+YPw=
Subject key identifier:   3D:50:22:FE:5F:E3:E4:89:90:2B:5E:B7:13:AB:C0:09:E2:8D:69:C7
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       49F21A7A3CF430A7DFCBB44D06FF0D20E8C33E36
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:22 +0000
ROA not before:           Fri 23 Oct 2026 13:56:22 +0000
ROA not after:            Fri 22 Oct 2027 14:01:22 +0000
asID:                     22706
IP address blocks:        200.152.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Oct 2026 14:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f2:1a:7a:3c:f4:30:a7:df:cb:b4:4d:06:ff:0d:20:e8:c3:3e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:22 2026 GMT
            Not After : Oct 22 14:01:22 2027 GMT
        Subject: CN=3D5022FE5FE3E489902B5EB713ABC009E28D69C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:00:cd:ad:20:0a:91:36:64:30:96:cb:11:
                    5d:a2:85:6c:d3:ba:9d:f4:d2:2c:6d:95:ea:79:aa:
                    24:16:2a:1b:90:2d:e8:9d:01:8e:fc:bc:b5:fc:de:
                    13:96:2a:bb:42:3e:d0:72:62:0e:26:c7:a1:a5:e9:
                    75:ca:b8:9f:fc:98:df:50:57:87:84:f0:3f:7b:00:
                    f7:bb:13:6b:de:40:55:62:fe:e8:50:8a:ed:b9:05:
                    23:3f:5f:fe:af:c2:08:d8:ef:99:26:87:f9:c6:02:
                    a7:97:a0:7c:60:9a:95:c3:80:e1:88:b3:39:e1:61:
                    2f:46:75:e6:52:be:11:b6:be:0e:a2:39:05:ea:b4:
                    d2:0e:a8:8b:13:11:23:aa:d0:a0:76:0f:10:13:2f:
                    79:87:5e:48:60:64:25:09:2f:b2:c1:fc:5e:84:cd:
                    78:da:f0:c9:05:b5:b4:e4:3f:c2:3c:cb:55:51:83:
                    7e:43:d3:cc:12:47:61:21:89:ae:8c:a5:7b:3c:2c:
                    a7:81:94:71:42:d0:82:f0:60:b2:61:8d:31:20:86:
                    24:9b:d7:29:14:25:81:1f:38:dc:98:ae:5a:25:f7:
                    32:c5:66:f7:23:dd:c9:d5:ec:93:54:12:2e:4e:77:
                    65:f0:80:d3:51:cc:04:bc:3d:6c:f5:bd:a8:6d:b2:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:50:22:FE:5F:E3:E4:89:90:2B:5E:B7:13:AB:C0:09:E2:8D:69:C7
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2a:b8:fa:b4:b7:a6:8b:2e:ff:ba:a0:7d:3c:c7:45:39:8b:
         08:85:1c:4c:22:5b:a2:39:5c:2f:69:af:72:5c:b7:96:8d:d3:
         2e:d5:dd:4a:82:cf:0e:65:1e:c3:7d:c8:7d:57:a9:17:f9:c9:
         12:e8:d3:4e:8e:f7:af:1b:5a:af:0a:45:de:72:76:5c:ee:b9:
         6a:32:66:2c:fd:4c:19:cd:6d:8b:57:ec:d5:8b:5e:15:b4:c8:
         8a:f6:07:ce:ea:61:e2:10:cb:4a:0a:ae:ac:6d:4b:95:6e:07:
         f7:7c:8b:67:45:70:61:e4:20:08:b6:69:de:bc:a7:47:f4:13:
         c0:e8:ab:e1:9f:18:80:60:b0:83:1f:22:08:b2:f9:6b:3d:b9:
         52:53:f3:be:e5:d5:f5:3c:75:0a:98:23:d5:39:7f:e5:98:b4:
         b4:41:6f:4b:0a:00:09:ff:28:b8:ae:7d:a5:79:c2:7c:d3:83:
         ae:14:aa:8a:f2:62:e3:75:c7:91:99:b3:75:26:1d:34:e4:fb:
         f6:40:53:82:a4:99:44:e5:cf:42:85:7c:a0:8c:bc:ae:93:20:
         27:fc:b3:11:22:ac:36:02:5f:e3:e4:24:25:29:51:3c:50:37:
         03:6c:4f:66:d3:5c:6c:04:db:85:a7:dc:ca:2a:db:1b:ee:25:
         45:04:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:27:48 2026 by rpki-client