Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa
File:                     3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa (raw, json)
Hash identifier:          NRYpV5pLnx9nAtum91i9G/oZhydbcm0vi+PLzrZW3nY=
Subject key identifier:   8B:F6:05:98:D5:CF:C1:93:F5:91:91:FD:5B:20:C5:CB:39:09:03:A0
Certificate issuer:       /CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
Certificate serial:       3527B0BBB103A7D1C98F693220E297CC641DB345
Authority key identifier: 61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa
Signing time:             Fri 22 May 2026 21:46:29 +0000
ROA not before:           Fri 22 May 2026 21:41:29 +0000
ROA not after:            Fri 21 May 2027 21:46:29 +0000
asID:                     270826
IP address blocks:        200.219.28.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl
                          rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:53:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:27:b0:bb:b1:03:a7:d1:c9:8f:69:32:20:e2:97:cc:64:1d:b3:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E
        Validity
            Not Before: May 22 21:41:29 2026 GMT
            Not After : May 21 21:46:29 2027 GMT
        Subject: CN=8BF60598D5CFC193F59191FD5B20C5CB390903A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:bd:50:8e:23:c5:8a:33:90:f4:87:81:b1:
                    db:30:79:0e:4b:b2:a9:e6:98:57:81:70:89:fd:95:
                    17:e5:43:9a:7c:bf:40:26:db:90:4c:21:67:b8:67:
                    fc:dd:20:f2:e9:c4:9b:b8:09:f1:ae:14:49:5f:a4:
                    2f:ed:a8:c6:b6:a3:1c:27:44:ec:e9:cf:0f:74:9b:
                    a5:8a:f0:70:38:6a:db:53:29:e1:94:54:9f:8d:a0:
                    ed:46:0a:8c:02:af:4c:1d:cb:f0:cb:30:b0:c1:1c:
                    2a:b8:51:57:a3:20:9c:4f:8d:08:a9:ac:7b:75:df:
                    2a:d6:af:b9:ea:45:40:37:9a:2a:a3:3d:a0:97:df:
                    87:83:2a:da:eb:4f:96:51:25:7e:d9:7a:c4:70:c0:
                    44:8a:6c:c2:fd:7c:20:a9:c9:9a:8e:c9:70:a4:56:
                    ee:36:49:fb:4f:95:14:02:24:d3:25:9e:9d:ee:5d:
                    ee:3e:1c:42:bc:14:b9:28:84:28:ed:d9:5c:f8:2a:
                    3a:1c:a0:10:3c:90:10:3e:ae:8f:29:5d:6c:17:cf:
                    9c:f4:1d:86:1f:ce:42:d2:3d:fb:7d:bf:e5:a1:8f:
                    42:e1:e9:25:6f:df:56:e9:53:20:a7:07:10:ba:ef:
                    28:cf:a8:ec:1a:9c:81:db:63:32:3c:fe:44:8f:c9:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F6:05:98:D5:CF:C1:93:F5:91:91:FD:5B:20:C5:CB:39:09:03:A0
            X509v3 Authority Key Identifier:
                keyid:61:5B:BE:24:D3:8E:2F:3D:EF:05:DE:9B:7A:3F:DA:AF:CB:D3:B6:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/615BBE24D38E2F3DEF05DE9B7A3FDAAFCBD3B67E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ea1T4Yn9kYebJmSgF6uTnMwQ9kGNgfPXRqbESgr6Div6/0/3230302e3231392e32382e302f32322d3332203d3e20323730383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:0e:f7:4a:4b:5f:d4:4f:81:ee:1e:33:8e:60:72:c5:97:31:
         ad:0e:5b:24:9c:3b:c8:90:46:0b:65:20:e3:fa:2b:0a:0e:0c:
         80:a2:83:65:d8:9d:34:16:2e:93:74:d2:c3:c5:bc:37:20:8b:
         5b:c1:5c:f5:f2:0c:c0:82:9b:d8:3d:46:ae:3d:25:ed:d4:52:
         30:4e:a4:85:a7:bc:8e:e1:83:13:d8:16:47:5d:a6:89:19:6a:
         df:4e:01:21:0f:71:6b:78:2e:02:b4:b7:20:99:93:c0:ec:f0:
         e7:9c:02:22:62:8e:20:eb:ff:39:02:19:fe:15:76:41:7e:c5:
         13:d9:26:3c:1b:41:a6:b7:a3:44:c4:a1:1f:d4:44:d9:ed:e0:
         e5:3d:bb:97:9e:2e:35:b2:6a:d3:b0:2a:0e:e2:09:17:14:09:
         72:dc:fc:4b:20:64:1b:7b:72:14:09:0a:ea:88:a1:d6:96:87:
         5f:b9:0b:04:20:da:23:53:c7:db:4c:9a:90:d3:5d:5d:de:56:
         6d:fb:bf:26:16:d2:30:3e:dd:16:be:6e:4b:5c:5c:50:0f:36:
         0b:94:f0:99:20:9f:0b:4e:5d:01:5d:44:b6:f7:08:97:97:00:
         b7:a2:a6:2b:65:0d:ce:85:38:85:3e:60:7a:55:b2:74:08:95:
         ed:26:4e:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNSewu7EDp9HJj2kyIOKXzGQds0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1QkJFMjREMzhFMkYzREVGMDVERTlCN0EzRkRBQUZD
QkQzQjY3RTAeFw0yNjA1MjIyMTQxMjlaFw0yNzA1MjEyMTQ2MjlaMDMxMTAvBgNV
BAMTKDhCRjYwNTk4RDVDRkMxOTNGNTkxOTFGRDVCMjBDNUNCMzkwOTAzQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH0b1QjiPFijOQ9IeBsdsweQ5L
sqnmmFeBcIn9lRflQ5p8v0Am25BMIWe4Z/zdIPLpxJu4CfGuFElfpC/tqMa2oxwn
ROzpzw90m6WK8HA4attTKeGUVJ+NoO1GCowCr0wdy/DLMLDBHCq4UVejIJxPjQip
rHt13yrWr7nqRUA3miqjPaCX34eDKtrrT5ZRJX7ZesRwwESKbML9fCCpyZqOyXCk
Vu42SftPlRQCJNMlnp3uXe4+HEK8FLkohCjt2Vz4KjocoBA8kBA+ro8pXWwXz5z0
HYYfzkLSPft9v+Whj0Lh6SVv31bpUyCnBxC67yjPqOwanIHbYzI8/kSPyZ6JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi/YFmNXPwZP1kZH9WyDFyzkJA6AwHwYDVR0j
BBgwFoAUYVu+JNOOLz3vBd6bej/ar8vTtn4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWExVDRZbjlrWWViSm1TZ0Y2dVRuTXdROWtHTmdmUFhScWJFU2dyNkRp
djYvMC82MTVCQkUyNEQzOEUyRjNERUYwNURFOUI3QTNGREFBRkNCRDNCNjdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxNUJCRTI0RDM4RTJGM0RF
RjA1REU5QjdBM0ZEQUFGQ0JEM0I2N0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VhMVQ0WW45a1llYkptU2dGNnVUbk13UTlrR05nZlBYUnFiRVNncjZEaXY2LzAv
MzIzMDMwMmUzMjMxMzkyZTMyMzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM3
MzAzODMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALI2xwwDQYJKoZIhvcNAQELBQADggEBAJcO90pL
X9RPge4eM45gcsWXMa0OWyScO8iQRgtlIOP6KwoODICig2XYnTQWLpN00sPFvDcg
i1vBXPXyDMCCm9g9Rq49Je3UUjBOpIWnvI7hgxPYFkddpokZat9OASEPcWt4LgK0
tyCZk8Ds8OecAiJijiDr/zkCGf4VdkF+xRPZJjwbQaa3o0TEoR/URNnt4OU9u5ee
LjWyatOwKg7iCRcUCXLc/EsgZBt7chQJCuqIodaWh1+5CwQg2iNTx9tMmpDTXV3e
Vm37vyYW0jA+3Ra+bktcXFAPNguU8JkgnwtOXQFdRLb3CJeXALeipitlDc6FOIU+
YHpVsnQIle0mTiY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:42:36 2026 by rpki-client