Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39332e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          ngZN2uBHfoRXEClz3qzGN1gcFvofRA6HLdOZ2OqM8Ko=
Subject key identifier:   85:8B:6E:63:D3:4E:62:B5:69:DC:48:13:9F:5F:FA:34:8D:AC:A8:A7
Certificate issuer:       /CN=D1F5C9A11A2575A29CEC01F3361C418408534072
Certificate serial:       4A00745635C6312F3373D32D7B782BA13FEFBD1D
Authority key identifier: D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
Signing time:             Fri 23 Oct 2026 14:01:23 +0000
ROA not before:           Fri 23 Oct 2026 13:56:23 +0000
ROA not after:            Fri 22 Oct 2027 14:01:23 +0000
asID:                     22706
IP address blocks:        200.152.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl
                          rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 15:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:74:56:35:c6:31:2f:33:73:d3:2d:7b:78:2b:a1:3f:ef:bd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1F5C9A11A2575A29CEC01F3361C418408534072
        Validity
            Not Before: Oct 23 13:56:23 2026 GMT
            Not After : Oct 22 14:01:23 2027 GMT
        Subject: CN=858B6E63D34E62B569DC48139F5FFA348DACA8A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:da:d5:c7:f0:fb:39:7e:b0:f9:66:fd:28:
                    15:09:bd:a9:ad:06:83:0c:bd:47:f4:13:c1:83:1d:
                    db:4e:ba:69:f5:f2:1d:ff:a4:71:ab:8e:0b:ff:12:
                    03:79:68:c6:7f:cb:3f:3b:ef:89:89:76:c5:30:3b:
                    a5:d3:04:c3:67:4e:1f:ad:b4:de:a5:af:71:cc:cf:
                    af:ce:4b:38:d2:15:b8:34:1c:6b:2d:c0:44:92:f1:
                    22:49:95:99:8e:3e:7f:da:49:0d:e6:84:68:b8:bb:
                    e1:9d:2f:68:e2:91:8f:cd:bd:a7:72:35:cf:61:22:
                    b7:41:97:56:0f:b3:cb:7c:c4:6c:9b:64:25:01:b5:
                    d7:c7:6b:55:8b:0c:00:67:7e:d6:a0:6c:5c:c6:87:
                    7a:22:f8:e3:c8:9d:9d:4d:32:f2:a2:f8:96:f6:1f:
                    36:38:b0:29:89:f6:22:da:1b:f7:55:58:67:43:b8:
                    20:0c:dc:31:20:2a:4c:6d:bf:a7:d5:9a:ad:61:ec:
                    85:79:29:72:23:01:d6:86:75:9a:17:17:52:9c:3f:
                    d7:f7:67:a5:28:33:90:3c:49:a4:76:39:ed:ed:a3:
                    18:fe:59:0a:af:8b:df:cf:a4:22:b3:ef:b8:23:ef:
                    0c:23:42:97:cd:ce:c2:6e:6e:56:ca:b1:fa:8f:5c:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:6E:63:D3:4E:62:B5:69:DC:48:13:9F:5F:FA:34:8D:AC:A8:A7
            X509v3 Authority Key Identifier:
                keyid:D1:F5:C9:A1:1A:25:75:A2:9C:EC:01:F3:36:1C:41:84:08:53:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/D1F5C9A11A2575A29CEC01F3361C418408534072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1F5C9A11A2575A29CEC01F3361C418408534072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:73:32:c0:68:b0:23:13:66:c3:10:06:73:c6:fc:a1:a1:
         ca:d3:1f:1d:72:11:d8:10:2f:3b:ca:e3:79:b3:5a:b1:7b:e3:
         ec:6b:c9:39:ac:51:0e:1c:b3:99:50:47:d0:69:21:79:25:cb:
         b1:ac:17:00:88:d9:d0:42:17:27:af:8d:35:8d:ff:50:64:66:
         42:4a:9e:fc:ea:d3:f6:3e:d6:37:9f:09:77:a3:c3:09:45:17:
         de:8c:fe:10:5c:11:a1:2a:de:b2:cf:89:95:a5:22:75:d5:3f:
         b7:47:68:16:21:de:51:d8:10:60:33:f7:d4:71:72:9e:a8:0a:
         e6:07:20:8b:92:4a:c5:dd:ef:2d:c8:03:5b:0a:11:01:ad:26:
         15:55:af:ba:ea:93:aa:d7:a2:54:21:ea:0a:0d:c0:04:aa:76:
         dc:e1:3e:bd:88:74:a4:6a:c6:23:d6:d9:c4:04:0f:ce:fd:e8:
         a4:01:e2:71:cf:53:5f:06:7a:68:f7:b8:a6:c7:cb:87:6c:28:
         ca:b7:e5:87:59:4a:7f:98:d1:1f:12:c4:47:22:34:17:77:c3:
         09:33:77:d2:1a:6b:c6:db:7e:f5:77:0c:46:8b:cd:d6:04:b5:
         93:63:6b:12:e9:f3:d3:58:5c:77:13:0b:4f:64:3b:c3:54:16:
         34:e1:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 21:41:51 2026 by rpki-client