Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39302e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          31eoczZjeyqpqvctYHtsJldM0Qtef6FDX8FN84pd/fE=
Subject key identifier:   97:87:F3:D2:99:3D:11:47:70:D0:15:3A:BB:CE:F0:90:F7:24:D6:C3
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       3360BAF7F292C60553B0CE29F0834830369093D0
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:22 +0000
ROA not before:           Fri 23 Oct 2026 13:56:22 +0000
ROA not after:            Fri 22 Oct 2027 14:01:22 +0000
asID:                     22706
IP address blocks:        200.152.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 15:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:60:ba:f7:f2:92:c6:05:53:b0:ce:29:f0:83:48:30:36:90:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:22 2026 GMT
            Not After : Oct 22 14:01:22 2027 GMT
        Subject: CN=9787F3D2993D114770D0153ABBCEF090F724D6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:cf:4c:47:ee:d6:41:46:80:41:34:8c:54:
                    97:f6:26:df:4a:2b:6f:84:21:f2:5e:ef:af:f7:c1:
                    d2:a3:29:a8:32:55:a8:71:dd:05:2f:a4:f0:44:b4:
                    c8:04:65:f2:e1:11:f9:13:c3:85:96:c2:f3:86:c7:
                    38:d6:0e:c0:7a:fa:9c:ee:9b:2e:4a:44:26:6f:d9:
                    ed:fe:2e:fb:bb:9e:7c:43:dc:f5:5c:74:51:79:fb:
                    e1:56:9e:da:ff:9f:56:f0:f6:3e:15:86:77:13:84:
                    4e:b6:d9:b6:db:33:d9:d6:ab:18:28:0c:34:cf:86:
                    94:78:3c:6a:fe:82:72:ba:7d:6d:e2:12:20:e1:f6:
                    2e:cb:07:8b:c6:3a:e2:80:ad:57:62:7b:ab:e1:51:
                    23:e0:96:6e:d2:65:c3:1f:35:c4:03:b1:02:a8:37:
                    0f:07:1b:4c:8a:72:c0:e7:7c:3a:53:8b:e1:89:be:
                    77:11:cd:90:72:39:5f:88:64:45:c5:08:db:a2:d2:
                    04:c7:60:0a:d3:9c:94:5f:53:d9:67:e7:09:1d:a0:
                    73:f8:d5:91:2c:6b:a2:b8:d9:66:9d:be:de:52:c4:
                    0a:60:b1:35:12:9a:4b:b3:3d:09:0c:b6:7d:48:a5:
                    6f:8a:d8:af:30:bc:91:27:a3:7e:47:ca:96:b4:5f:
                    2d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:87:F3:D2:99:3D:11:47:70:D0:15:3A:BB:CE:F0:90:F7:24:D6:C3
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:2c:ea:48:84:92:a8:e4:74:54:cc:45:93:ad:47:f6:1c:
         ef:26:be:8e:93:6f:fd:11:1c:6b:31:63:1e:01:f5:87:6a:53:
         3c:af:20:51:b3:02:22:d3:22:95:3f:04:a3:f3:79:1b:77:1f:
         5e:94:fe:17:45:13:18:5b:84:ca:05:aa:9f:ac:b7:57:dc:36:
         6b:59:ca:a1:9d:1e:b7:f6:49:02:8f:6a:df:b9:19:22:64:89:
         11:fb:16:0a:24:f4:2b:a5:0e:14:3f:5f:d6:9b:d7:92:95:49:
         c9:56:e5:c0:7c:ff:7d:34:cc:47:97:3f:66:74:91:c7:eb:a8:
         2b:dd:f7:6a:fa:97:39:46:4a:f4:63:77:f2:67:9a:b5:3d:61:
         23:bf:0c:e0:69:9f:a8:60:11:62:c1:b3:1b:0e:3a:c5:8b:0f:
         4e:66:6f:98:d6:4b:91:b4:ca:63:a9:85:d0:cb:e9:5a:00:44:
         22:fa:91:b5:e2:77:a2:e4:b8:01:d1:27:44:bc:80:c1:39:05:
         e6:d0:34:73:99:53:08:c4:ed:ca:ec:24:cc:3c:6d:78:3c:f5:
         89:f5:79:81:42:05:d4:b8:67:92:5d:07:0e:e5:8a:da:1e:f2:
         7c:86:87:8a:e0:39:61:b9:81:ea:99:71:26:38:12:d7:93:e6:
         40:54:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:49:21 2026 by rpki-client