Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38372e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          /h/TUfK5YaXFBYGHiV3Pk7nCi4k0+4GXWmfK58H0zMA=
Subject key identifier:   9E:FB:B2:89:13:F0:F0:3E:B7:68:F8:35:64:35:90:68:46:3D:8A:3F
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       156BE421A3A0A2D6F38A1B4194BE50A0C584E76C
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:16 +0000
ROA not before:           Fri 23 Oct 2026 13:56:16 +0000
ROA not after:            Fri 22 Oct 2027 14:01:16 +0000
asID:                     22706
IP address blocks:        200.152.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 09:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6b:e4:21:a3:a0:a2:d6:f3:8a:1b:41:94:be:50:a0:c5:84:e7:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:16 2026 GMT
            Not After : Oct 22 14:01:16 2027 GMT
        Subject: CN=9EFBB28913F0F03EB768F83564359068463D8A3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:bb:0d:be:05:45:6c:7e:2f:32:91:2a:7a:
                    2d:ea:95:5c:4b:53:00:f4:27:ec:65:06:c6:df:4b:
                    98:bd:17:fa:e6:91:32:35:66:98:31:6f:28:a0:4e:
                    d4:39:1d:1d:68:db:fb:45:f0:f9:0b:60:0b:d3:32:
                    b1:33:85:09:dc:38:29:02:8b:aa:42:39:4a:51:6d:
                    c1:e9:9b:ad:c3:19:9c:2a:36:4d:22:07:b7:96:c4:
                    83:1b:29:4c:8d:a9:f1:cc:7c:37:51:84:29:59:f7:
                    91:14:ab:15:60:44:15:8f:cb:99:39:91:a7:60:e2:
                    d7:2c:84:38:2f:c2:bf:a8:68:b2:7a:7d:d7:18:f2:
                    16:58:d3:fb:fe:eb:08:bc:d8:95:2b:d8:94:61:ea:
                    96:b4:15:31:da:33:c3:49:d2:85:f8:f7:c8:14:bd:
                    5b:9e:81:ca:7e:9e:42:53:b4:35:94:8c:be:a2:d0:
                    c9:60:7d:69:e8:4c:8c:e1:d7:1e:db:c5:1f:77:8b:
                    f4:f0:29:a4:79:33:56:3a:b7:2a:80:ef:8e:65:02:
                    a5:14:b6:9d:59:c3:7a:0e:67:6d:b6:7e:da:9d:b1:
                    6e:10:9e:60:06:08:dc:4d:d5:f2:55:57:9f:fa:3f:
                    5b:1a:1a:6d:08:b7:42:2d:fa:be:01:f0:77:48:52:
                    03:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:FB:B2:89:13:F0:F0:3E:B7:68:F8:35:64:35:90:68:46:3D:8A:3F
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:e0:26:44:fd:87:c1:a3:db:57:be:cd:aa:e8:41:e4:0f:
         87:6e:6d:aa:9a:c9:eb:09:4d:56:2c:d1:25:09:b6:d3:c4:36:
         f8:8d:e7:40:29:2f:ce:c2:91:30:bc:fd:d6:ed:b3:56:05:e2:
         24:f9:75:37:2f:b2:29:9c:e7:65:9f:9c:e1:c2:10:e8:ae:b3:
         09:da:15:aa:8d:52:aa:69:77:e3:fb:9b:e3:ba:2a:4f:8e:c2:
         1a:0a:07:b4:0d:32:16:d1:18:1b:fa:fe:9c:03:20:85:f9:2a:
         2c:f6:17:56:2c:eb:65:21:b5:d1:8a:d7:85:e9:c7:4a:da:51:
         06:aa:4a:12:6e:b9:2a:28:9b:28:6b:e2:fc:09:fd:76:76:6b:
         cd:d1:18:54:ca:64:df:0d:3c:d6:9e:c4:84:25:be:4f:4f:88:
         b1:1f:31:fa:d1:7a:07:cd:52:b2:92:40:2e:68:2b:c0:29:c3:
         aa:3a:ec:f1:29:50:18:a5:b5:00:e3:f5:41:8f:90:eb:34:5f:
         af:24:d3:ac:92:81:e2:76:f0:ea:24:9e:2f:69:28:96:12:55:
         44:bc:1b:95:e4:36:e3:33:1e:ba:77:82:6b:d5:1f:a8:e1:5c:
         8e:fa:f1:b9:81:4a:81:6b:f2:93:30:d0:36:6a:56:d0:25:82:
         9c:fe:c9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:43:40 2026 by rpki-client