Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38352e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          8pphEJAwS3gYpQjq+snFd99x402yMl/XWmtL3P1+QTk=
Subject key identifier:   9D:6A:4A:1E:09:9E:E6:A2:FD:64:FF:09:3A:09:C4:4E:76:9F:B8:0F
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       0D00952D516D12285A25FCABFF417D5B4C708A81
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:20 +0000
ROA not before:           Fri 23 Oct 2026 13:56:20 +0000
ROA not after:            Fri 22 Oct 2027 14:01:20 +0000
asID:                     22706
IP address blocks:        200.152.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:00:95:2d:51:6d:12:28:5a:25:fc:ab:ff:41:7d:5b:4c:70:8a:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:20 2026 GMT
            Not After : Oct 22 14:01:20 2027 GMT
        Subject: CN=9D6A4A1E099EE6A2FD64FF093A09C44E769FB80F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:3b:7b:29:c2:b3:b7:e8:d3:9d:93:1c:32:
                    7e:85:06:86:13:09:01:b1:51:fd:05:a4:26:eb:c2:
                    4f:18:6f:71:1f:c8:50:18:0b:c5:67:b3:14:60:b9:
                    19:21:c3:5a:43:af:94:d0:e5:52:76:e3:c4:46:f7:
                    dd:3e:05:c6:a8:57:6f:d4:49:2a:70:47:bd:e0:60:
                    87:7e:1e:17:dc:69:15:82:c7:39:89:a7:9b:64:4d:
                    61:9c:b3:53:69:d4:c5:be:2b:d1:e9:1f:b7:76:c3:
                    88:56:3f:76:d1:c8:1c:51:30:c0:9b:6e:a2:23:71:
                    20:e3:53:6b:93:0f:d5:81:c3:9c:32:a4:57:ff:c0:
                    9f:44:50:58:aa:ea:7d:12:e8:e0:fd:45:9d:6e:a2:
                    31:90:57:cd:22:e1:9c:c8:53:c7:69:a3:48:82:5f:
                    1d:4a:35:39:cd:29:d6:54:89:57:4e:a0:0e:58:44:
                    c1:02:a1:94:f4:9a:52:ce:9e:25:9b:b7:dd:6c:85:
                    c4:28:93:a8:54:c7:d5:10:f6:52:d0:a3:eb:ce:23:
                    65:e4:6a:7f:ff:a2:19:23:d7:40:10:f5:39:37:6d:
                    50:9f:c2:2f:9c:c7:30:d7:e2:bb:64:1e:64:db:4b:
                    8c:6f:a3:78:e3:dc:e3:40:5b:49:ae:21:12:52:66:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6A:4A:1E:09:9E:E6:A2:FD:64:FF:09:3A:09:C4:4E:76:9F:B8:0F
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:de:b0:51:84:d9:f0:61:05:e3:7f:ce:83:6c:0c:fb:b1:c9:
         f1:43:b7:9c:c9:5f:17:ba:31:95:58:25:07:a0:bb:f1:4c:07:
         00:d9:16:f5:67:6f:bb:1c:db:0c:7f:ab:fa:30:3f:96:8f:a9:
         b4:c4:9a:75:af:53:53:1c:39:99:6a:7b:cb:af:08:f7:31:f9:
         ef:51:14:f7:74:de:ad:9c:5c:da:8e:d2:e5:36:4d:d4:a0:54:
         c6:32:4d:ef:ef:25:79:38:1e:48:01:f2:b7:87:7c:2f:1d:d6:
         61:80:da:a4:86:03:39:d9:01:fa:0a:8b:f8:e0:36:fc:17:74:
         35:07:8c:83:f1:2f:8b:78:6a:63:14:17:60:31:d0:90:02:14:
         61:63:22:2c:bc:1f:ef:50:20:7d:d3:81:0e:f0:24:44:15:46:
         00:c1:cb:3b:c0:3d:84:58:3c:a3:6a:12:67:11:21:37:83:5e:
         71:f4:8a:5f:50:a1:bd:7c:5a:a9:f5:2c:3f:d8:3e:d9:9a:82:
         0e:7b:9f:75:a0:bb:54:fa:1d:f8:50:2e:32:3d:9a:7c:c7:0f:
         3a:50:ac:98:99:5d:3a:54:63:5c:96:71:75:d1:a2:98:c5:6d:
         87:d4:ee:77:8b:09:f8:60:c9:44:e2:8b:88:6c:c8:20:08:8b:
         b1:28:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:03:43 2026 by rpki-client