Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
File:                     3230302e3135322e38382e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier:          MbwTO8uf1IcPx7NB7L4tm+qqym84HZ4EqxqViplPr/w=
Subject key identifier:   FA:B3:AF:D3:6A:9D:BC:BA:3E:8F:36:9E:E4:15:38:33:1B:C2:61:EC
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       7410C83ADD554089CD809948AC9ABFA7947C7352
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:16 +0000
ROA not before:           Fri 23 Oct 2026 13:56:16 +0000
ROA not after:            Fri 22 Oct 2027 14:01:16 +0000
asID:                     22706
IP address blocks:        200.152.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:10:c8:3a:dd:55:40:89:cd:80:99:48:ac:9a:bf:a7:94:7c:73:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:16 2026 GMT
            Not After : Oct 22 14:01:16 2027 GMT
        Subject: CN=FAB3AFD36A9DBCBA3E8F369EE41538331BC261EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:59:77:e7:82:f0:90:51:70:31:41:f9:1b:
                    7e:95:08:71:45:7b:ba:ab:ca:2b:e5:cc:68:16:e1:
                    b9:4d:e4:ba:84:b5:9c:ba:12:fd:05:e1:d1:7b:be:
                    59:67:3e:ff:3a:81:f6:a1:f0:1d:b4:22:e0:29:38:
                    0a:36:7a:9d:0c:be:f7:77:27:0f:26:87:55:3a:4d:
                    f3:5e:b4:bb:7d:62:9a:1d:25:2f:74:0b:11:68:38:
                    64:23:85:59:da:1e:e0:8d:7e:e2:16:0c:1e:2f:1a:
                    01:f4:c3:98:0b:fa:07:84:dd:7e:db:98:89:8f:34:
                    2a:77:4b:75:66:d4:ba:1a:78:84:e7:5b:e7:c7:05:
                    b7:72:88:7d:56:be:54:02:d2:3b:0a:e4:e7:cb:ae:
                    a8:89:1a:61:90:3e:85:99:c6:72:08:7a:58:5a:d5:
                    3e:47:51:80:d6:29:85:ea:9b:18:a3:13:6a:10:25:
                    58:9a:ed:71:d5:ae:b4:ae:36:aa:77:5a:33:79:80:
                    76:b0:65:82:8a:ba:89:ee:0e:78:26:90:4e:e7:16:
                    fa:fd:61:a0:82:9b:df:36:a4:60:1f:6b:10:e3:ee:
                    4f:00:e8:c2:86:c7:1b:b6:a2:97:d3:46:53:c2:61:
                    96:a5:bf:b2:3a:36:ea:f9:48:b5:28:57:bc:aa:8b:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:AF:D3:6A:9D:BC:BA:3E:8F:36:9E:E4:15:38:33:1B:C2:61:EC
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:35:19:3d:58:6b:87:fc:1c:aa:e5:b1:16:90:23:cd:f2:
         ea:5d:cd:40:c0:08:5f:3c:67:b0:03:9f:90:4f:6b:b6:e2:18:
         34:20:18:f9:d0:40:22:9c:11:52:ad:41:db:37:86:bc:3d:45:
         75:a1:0a:d5:f7:fe:69:e1:8b:16:ee:ad:e2:78:df:63:db:40:
         76:d6:6a:e2:bc:f8:ad:8a:cd:17:7a:2b:b2:20:52:f3:86:ca:
         f5:e8:af:27:87:07:da:ef:61:60:ef:0b:2a:14:fc:74:a9:60:
         0f:58:2d:69:f6:57:35:4d:fb:38:6c:99:fb:8b:7c:ba:a3:51:
         bd:1d:8d:31:ee:4f:63:6f:6e:e4:6e:5d:8b:3b:87:9e:b2:97:
         42:a2:eb:16:cc:6c:92:df:d2:bb:c1:40:e7:9b:16:c6:e6:10:
         9f:23:67:17:fd:b6:dc:2a:a1:ae:72:8f:70:5b:94:e6:ef:a1:
         28:ca:22:ab:6a:95:8c:97:6f:b5:53:e5:97:0a:35:b8:15:bf:
         84:3d:bd:97:88:c4:f1:30:d1:7f:6b:04:4d:53:97:ac:99:3e:
         38:36:0b:5c:37:d2:0d:cf:6d:a7:76:16:16:3e:53:7c:8f:44:
         ae:80:41:7d:70:aa:78:73:d4:aa:d1:32:04:d7:9e:31:e7:8f:
         43:a7:8c:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdBDIOt1VQInNgJlIrJq/p5R8c1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGNUM5QTExQTI1NzVBMjlDRUMwMUYzMzYxQzQxODQw
ODUzNDA3MjAeFw0yNjEwMjMxMzU2MTZaFw0yNzEwMjIxNDAxMTZaMDMxMTAvBgNV
BAMTKEZBQjNBRkQzNkE5REJDQkEzRThGMzY5RUU0MTUzODMzMUJDMjYxRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQMFl354LwkFFwMUH5G36VCHFF
e7qryivlzGgW4blN5LqEtZy6Ev0F4dF7vllnPv86gfah8B20IuApOAo2ep0Mvvd3
Jw8mh1U6TfNetLt9YpodJS90CxFoOGQjhVnaHuCNfuIWDB4vGgH0w5gL+geE3X7b
mImPNCp3S3Vm1LoaeITnW+fHBbdyiH1WvlQC0jsK5OfLrqiJGmGQPoWZxnIIelha
1T5HUYDWKYXqmxijE2oQJVia7XHVrrSuNqp3WjN5gHawZYKKuonuDngmkE7nFvr9
YaCCm982pGAfaxDj7k8A6MKGxxu2opfTRlPCYZalv7I6Nur5SLUoV7yqiy07AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+rOv02qdvLo+jzae5BU4MxvCYewwHwYDVR0j
BBgwFoAU0fXJoRoldaKc7AHzNhxBhAhTQHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC9EMUY1QzlBMTFBMjU3NUEyOUNFQzAxRjMzNjFDNDE4NDA4NTM0MDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxRjVDOUExMUEyNTc1QTI5
Q0VDMDFGMzM2MUM0MTg0MDg1MzQwNzIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyJhYMA0GCSqGSIb3DQEBCwUAA4IBAQAWqzUZPVhr
h/wcquWxFpAjzfLqXc1AwAhfPGewA5+QT2u24hg0IBj50EAinBFSrUHbN4a8PUV1
oQrV9/5p4YsW7q3ieN9j20B21mrivPitis0XeiuyIFLzhsr16K8nhwfa72Fg7wsq
FPx0qWAPWC1p9lc1Tfs4bJn7i3y6o1G9HY0x7k9jb27kbl2LO4eespdCousWzGyS
39K7wUDnmxbG5hCfI2cX/bbcKqGuco9wW5Tm76EoyiKrapWMl2+1U+WXCjW4Fb+E
Pb2XiMTxMNF/awRNU5esmT44NgtcN9INz22ndhYWPlN8j0SugEF9cKp4c9Sq0TIE
154x549Dp4zs
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:41:37 2026 by rpki-client