Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39312e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          9NODfY+gFvbDnNh9wV9FMvMsKJf0vHTu6coG1/BzkD0=
Subject key identifier:   42:6A:88:CD:AE:FD:A5:10:95:D1:FC:65:FE:6D:90:49:62:8C:B0:88
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       2E1D3A752304ADCF1004FD84429FB4BDDB98531F
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:21 +0000
ROA not before:           Fri 23 Oct 2026 13:56:21 +0000
ROA not after:            Fri 22 Oct 2027 14:01:21 +0000
asID:                     22706
IP address blocks:        200.152.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 02:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1d:3a:75:23:04:ad:cf:10:04:fd:84:42:9f:b4:bd:db:98:53:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:21 2026 GMT
            Not After : Oct 22 14:01:21 2027 GMT
        Subject: CN=426A88CDAEFDA51095D1FC65FE6D9049628CB088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:19:69:5a:5a:b3:1f:85:4b:1a:c0:4b:e8:
                    1b:8c:eb:1c:8e:02:ab:7e:90:2e:a0:b2:28:e3:00:
                    90:8d:e7:ee:f2:83:71:9b:e2:66:f8:e3:00:74:5d:
                    70:7f:94:a0:7e:75:00:1c:c0:da:ae:b8:93:10:c4:
                    b2:bb:95:69:a7:19:f8:54:72:15:21:8d:32:c5:c4:
                    a0:16:6a:f1:9a:07:ca:db:fb:6e:07:d4:1c:dc:bc:
                    f0:82:cc:03:49:a0:7a:f4:f4:bd:19:c5:03:b2:bb:
                    3a:74:59:7a:7a:dc:4a:b0:f8:ec:39:86:6a:e2:68:
                    99:bc:3c:19:af:12:72:fc:e0:ca:2c:e3:f4:f4:43:
                    b9:36:d6:87:f9:18:17:85:98:20:3f:3a:41:47:e1:
                    19:ec:0c:7d:d5:fd:9f:41:90:f7:45:4a:91:18:2c:
                    e4:57:a8:e5:66:34:21:7e:8a:d6:80:13:50:7f:5a:
                    b7:68:cb:5a:8f:fd:70:15:fc:36:b3:d3:db:86:1a:
                    26:eb:89:79:d9:30:86:b0:66:45:f9:df:fa:c6:1c:
                    da:ff:4e:01:35:35:22:c5:3f:9b:c5:07:71:34:32:
                    2b:94:76:59:5e:bf:30:7d:07:ce:56:08:1e:a4:f0:
                    3e:f3:09:76:53:72:26:5d:df:59:c9:ff:5c:93:74:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:88:CD:AE:FD:A5:10:95:D1:FC:65:FE:6D:90:49:62:8C:B0:88
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:02:5a:1b:0b:7d:9f:a5:40:c1:8f:37:99:2a:a4:43:02:77:
         aa:6d:90:98:72:8a:64:06:ae:7d:0b:db:86:f9:9d:e7:b8:cf:
         8c:c7:c2:2b:10:80:4e:fa:36:f2:7a:b3:d2:24:5c:22:c4:31:
         cf:74:1e:df:aa:2d:42:cc:90:12:ef:d3:d3:22:9d:63:f7:60:
         61:ec:55:6e:06:db:1b:44:4e:6c:7f:e6:20:41:0a:66:23:57:
         fe:1e:6a:bc:c2:04:0d:6f:0f:2c:62:f8:d2:8f:87:8f:06:8a:
         93:f0:ca:08:d8:5f:7c:e3:33:6b:2e:4e:b2:49:dc:95:c2:a2:
         ad:9c:7d:f7:72:bd:52:56:fb:c6:1c:f7:65:2f:20:8d:83:ad:
         02:18:72:f7:ef:b2:85:47:9b:2b:91:47:7e:29:0a:8f:61:b7:
         29:81:82:26:2a:40:dc:bd:9e:f3:ef:cc:96:8c:87:a0:8b:ab:
         27:b6:73:47:e6:b9:6e:d6:03:87:6d:91:16:28:d7:cd:1e:1a:
         65:4a:2c:05:3e:94:d0:ed:01:48:63:af:a4:83:1d:ee:43:30:
         56:44:b9:fb:97:ab:bd:6c:3a:7c:b4:74:f1:4c:41:1e:88:22:
         00:84:ca:f8:e8:fb:b4:6a:6f:02:4f:ba:66:94:b8:26:f1:f2:
         70:7c:8b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:20:14 2026 by rpki-client