Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa
File:                     3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa (raw, json)
Hash identifier:          NAFu2MLwXgi/G/JGYKHLr9SBn4y2OABNnodqi7v7w3Q=
Subject key identifier:   67:C3:D6:8D:F9:5A:0B:B7:CB:35:CA:B1:2A:D7:09:94:A0:20:A1:8D
Certificate issuer:       /CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
Certificate serial:       7AAD4050F735BD8D5EAC1BB487585719A1725507
Authority key identifier: 2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa
Signing time:             Tue 24 Feb 2026 16:22:05 +0000
ROA not before:           Tue 24 Feb 2026 16:17:05 +0000
ROA not after:            Tue 23 Feb 2027 16:22:05 +0000
asID:                     271744
IP address blocks:        200.150.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl
                          rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 12:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ad:40:50:f7:35:bd:8d:5e:ac:1b:b4:87:58:57:19:a1:72:55:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A
        Validity
            Not Before: Feb 24 16:17:05 2026 GMT
            Not After : Feb 23 16:22:05 2027 GMT
        Subject: CN=67C3D68DF95A0BB7CB35CAB12AD70994A020A18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:fd:cd:ec:68:d8:fe:48:88:74:0c:6c:ba:
                    88:3c:c0:1d:0b:ab:53:e1:8e:e5:e9:4e:13:af:c6:
                    46:0e:2b:6b:f2:c6:03:0f:76:60:64:dc:47:f7:9c:
                    9d:96:43:a8:90:ab:96:ac:d5:3a:54:03:c9:87:90:
                    fe:e1:31:59:46:2d:57:5c:25:1a:51:09:c4:b9:f5:
                    b8:5f:1d:2f:50:7c:93:8b:33:da:b5:05:36:44:f5:
                    d3:0e:32:80:2f:f4:b3:7d:ab:09:0c:ff:70:eb:8c:
                    3c:3f:df:b7:fd:f6:4d:87:12:67:b4:6d:26:9a:01:
                    fa:7c:a6:c3:79:5e:47:84:81:1c:35:3c:0c:3e:91:
                    0f:2c:4c:81:ce:4c:19:70:3d:21:ac:c5:dd:2a:7a:
                    c8:64:0b:e2:2b:ef:de:13:22:bd:74:e8:4c:92:d9:
                    92:13:b1:21:16:e1:43:db:28:fe:20:20:cc:bb:e0:
                    ab:6f:2b:a6:41:04:88:26:1f:e0:1c:62:70:27:19:
                    d4:d7:69:c7:26:44:e3:da:bd:58:f2:15:19:41:79:
                    06:ff:0c:70:e0:a2:02:a4:20:82:1f:2d:ae:89:aa:
                    09:47:59:4c:50:36:ba:14:a9:22:bb:b8:a5:d2:2c:
                    e7:0c:b3:51:0b:3d:af:14:f8:60:5c:72:e2:15:6b:
                    d0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:D6:8D:F9:5A:0B:B7:CB:35:CA:B1:2A:D7:09:94:A0:20:A1:8D
            X509v3 Authority Key Identifier:
                keyid:2F:B9:E5:4A:07:0B:DE:B6:47:5B:8A:F6:DF:9B:8E:98:3C:39:38:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FB9E54A070BDEB6475B8AF6DF9B8E983C39388A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/3230302e3135302e3234362e302f32342d3234203d3e20323731373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:27:df:df:2f:14:a7:43:e3:53:38:b8:0f:ba:77:fc:87:
         e4:65:df:4b:73:8c:5f:d9:6e:a9:b1:a0:de:9c:ee:54:06:7e:
         ad:b7:16:d0:a1:0a:e3:d5:1a:1c:55:be:96:90:1a:f9:b0:15:
         01:cc:46:8b:33:9d:7d:01:6d:a4:f2:bf:c4:96:ac:44:ca:c0:
         e6:07:d7:5d:7e:0c:44:d8:77:c6:fe:25:b4:52:34:14:37:a4:
         79:61:27:b6:8c:de:6f:17:64:fb:2f:30:dc:31:ac:b1:d3:30:
         26:af:f8:c1:f9:62:8d:8a:eb:a7:e4:f1:63:28:50:09:7b:b2:
         76:82:fe:63:7b:8c:9e:76:ce:97:e4:55:42:60:ba:b6:5d:2e:
         27:d6:e3:ea:59:97:89:3f:46:9b:aa:19:a2:18:de:c6:d1:19:
         a3:a1:47:5a:49:b8:b6:e9:43:a2:d5:43:30:dd:c0:be:1f:87:
         11:00:b1:df:5f:33:f4:30:1a:a2:38:28:ca:93:d0:38:c3:89:
         96:01:23:28:3a:b4:5b:9b:0b:61:ee:54:d3:a6:65:32:08:3b:
         5d:73:1c:e3:b3:c8:f6:c4:7c:96:0f:b9:9b:e1:55:c8:3b:4b:
         4c:4f:2d:a4:c8:d5:3b:61:77:af:98:35:94:72:91:db:11:cb:
         16:6b:e2:0d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeq1AUPc1vY1erBu0h1hXGaFyVQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCOUU1NEEwNzBCREVCNjQ3NUI4QUY2REY5QjhFOTgz
QzM5Mzg4QTAeFw0yNjAyMjQxNjE3MDVaFw0yNzAyMjMxNjIyMDVaMDMxMTAvBgNV
BAMTKDY3QzNENjhERjk1QTBCQjdDQjM1Q0FCMTJBRDcwOTk0QTAyMEExOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQiv3N7GjY/kiIdAxsuog8wB0L
q1PhjuXpThOvxkYOK2vyxgMPdmBk3Ef3nJ2WQ6iQq5as1TpUA8mHkP7hMVlGLVdc
JRpRCcS59bhfHS9QfJOLM9q1BTZE9dMOMoAv9LN9qwkM/3DrjDw/37f99k2HEme0
bSaaAfp8psN5XkeEgRw1PAw+kQ8sTIHOTBlwPSGsxd0qeshkC+Ir794TIr106EyS
2ZITsSEW4UPbKP4gIMy74KtvK6ZBBIgmH+AcYnAnGdTXaccmROPavVjyFRlBeQb/
DHDgogKkIIIfLa6JqglHWUxQNroUqSK7uKXSLOcMs1ELPa8U+GBccuIVa9ApAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUZ8PWjflaC7fLNcqxKtcJlKAgoY0wHwYDVR0j
BBgwFoAUL7nlSgcL3rZHW4r235uOmDw5OIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2FkYVdXZ0hwcDJXTDVUMlNRTmJMeDlqbnpRMWY1ejZFZ3JLTmVyRnRY
UUMvMC8yRkI5RTU0QTA3MEJERUI2NDc1QjhBRjZERjlCOEU5ODNDMzkzODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGQjlFNTRBMDcwQkRFQjY0
NzVCOEFGNkRGOUI4RTk4M0MzOTM4OEEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dhZGFXV2dIcHAyV0w1VDJTUU5iTHg5am56UTFmNXo2RWdyS05lckZ0WFFDLzAv
MzIzMDMwMmUzMTM1MzAyZTMyMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM3MzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMiW9jANBgkqhkiG9w0BAQsFAAOCAQEABPwn
398vFKdD41M4uA+6d/yH5GXfS3OMX9luqbGg3pzuVAZ+rbcW0KEK49UaHFW+lpAa
+bAVAcxGizOdfQFtpPK/xJasRMrA5gfXXX4MRNh3xv4ltFI0FDekeWEntozebxdk
+y8w3DGssdMwJq/4wflijYrrp+TxYyhQCXuydoL+Y3uMnnbOl+RVQmC6tl0uJ9bj
6lmXiT9Gm6oZohjextEZo6FHWkm4tulDotVDMN3Avh+HEQCx318z9DAaojgoypPQ
OMOJlgEjKDq0W5sLYe5U06ZlMgg7XXMc47PI9sR8lg+5m+FVyDtLTE8tpMjVO2F3
r5g1lHKR2xHLFmviDQ==
-----END CERTIFICATE-----
Generated at Tue Mar 3 01:54:27 2026 by rpki-client