Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134312e302f32342d3234203d3e20323730343638.roa
File:                     3230302e3130362e3134312e302f32342d3234203d3e20323730343638.roa (raw, json)
Hash identifier:          jCAZFM0eMOIZCFg8EZSJaKllY4YO/YCtc5cIHZQBlc4=
Subject key identifier:   BE:F5:7A:DC:66:3A:69:EB:50:2C:44:1F:C0:86:64:21:6B:ED:B5:E7
Certificate issuer:       /CN=870D313405780E71067BEC204B12CFE5F0268816
Certificate serial:       677F5B2830B592AC6017477050788298667A978A
Authority key identifier: 87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134312e302f32342d3234203d3e20323730343638.roa
Signing time:             Thu 27 Aug 2026 09:48:26 +0000
ROA not before:           Thu 27 Aug 2026 09:43:26 +0000
ROA not after:            Thu 26 Aug 2027 09:48:26 +0000
asID:                     270468
IP address blocks:        200.106.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl
                          rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 18:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:5b:28:30:b5:92:ac:60:17:47:70:50:78:82:98:66:7a:97:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870D313405780E71067BEC204B12CFE5F0268816
        Validity
            Not Before: Aug 27 09:43:26 2026 GMT
            Not After : Aug 26 09:48:26 2027 GMT
        Subject: CN=BEF57ADC663A69EB502C441FC08664216BEDB5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d7:01:c1:74:f6:a9:68:e6:43:2e:e3:47:ab:
                    1c:62:ea:34:7d:1b:7e:f8:78:4e:62:14:cf:bb:2c:
                    00:f5:70:de:37:18:f0:21:e8:b0:00:f5:19:83:e9:
                    6d:af:46:01:8c:25:a2:ed:75:3b:d9:f6:b1:6c:04:
                    b1:83:4a:20:e9:06:b3:19:aa:69:c1:98:45:6e:3c:
                    49:22:61:74:12:d5:ef:d1:e9:03:c0:81:fb:32:e7:
                    33:ce:e9:4b:22:eb:7a:3d:13:ad:d0:cc:8b:7e:26:
                    6d:37:a8:68:e5:93:10:5b:77:55:da:ed:51:64:8a:
                    99:4b:54:fd:ae:da:4a:ec:be:8f:cd:07:7d:4a:2f:
                    db:2a:54:b1:fd:38:a4:d3:0f:17:d6:0c:1d:4a:a0:
                    6a:01:5a:ee:73:ef:8a:8e:5d:d8:d8:71:3e:a1:ed:
                    2b:8b:b9:4c:23:76:0c:20:00:a5:fa:2d:07:f8:8a:
                    85:a5:05:64:5d:11:5b:3e:93:97:5c:8d:7f:90:bb:
                    cd:98:59:fc:8f:f8:b0:41:cf:a4:be:cd:c2:cd:12:
                    e2:3a:1c:42:07:be:c3:37:64:71:ce:60:b2:b7:99:
                    5e:eb:86:3b:fa:85:0c:b6:38:bd:bd:c0:b3:33:53:
                    09:a8:a8:01:71:e2:22:4c:b0:83:dc:16:0f:de:fa:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F5:7A:DC:66:3A:69:EB:50:2C:44:1F:C0:86:64:21:6B:ED:B5:E7
            X509v3 Authority Key Identifier:
                keyid:87:0D:31:34:05:78:0E:71:06:7B:EC:20:4B:12:CF:E5:F0:26:88:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/870D313405780E71067BEC204B12CFE5F0268816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870D313405780E71067BEC204B12CFE5F0268816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcNHLKewFRbVwBSAbS3eP7fe3J8HnNWrR7NrnFxhpN4W/0/3230302e3130362e3134312e302f32342d3234203d3e20323730343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:09:01:9c:85:69:12:88:2e:bb:33:04:d9:d9:5e:00:65:85:
         49:66:ea:ab:ff:3d:14:85:48:c2:c4:64:f5:02:d9:91:4b:13:
         e2:bb:48:d7:bb:d1:a6:0a:c2:82:df:d0:17:c5:25:35:2b:24:
         bf:d2:31:72:6a:a3:c8:17:56:2a:39:b1:1e:0b:ed:87:39:cb:
         48:2a:76:7f:d2:37:63:50:ef:bb:7e:47:98:c9:61:4b:df:34:
         df:3d:2b:a8:96:54:8f:cb:81:5b:06:0a:0e:89:a4:9d:98:03:
         f4:d2:b8:cb:e1:7a:6d:ae:26:5b:82:86:db:c2:f4:d8:9f:09:
         34:6e:0f:85:4c:3e:53:1b:4c:c0:2d:66:42:2f:22:49:6f:fa:
         c5:f6:5e:3c:d2:b2:6e:cb:2f:6f:f1:88:1a:ba:e4:40:a0:c5:
         32:c1:b7:09:b4:97:49:2d:78:20:06:8c:eb:da:2e:16:b3:0c:
         9e:bb:5c:76:62:f6:0f:44:28:95:8b:69:30:ee:2c:32:cd:a7:
         ca:38:78:74:92:f2:b1:d9:8a:75:8b:e7:54:55:b9:c2:ca:99:
         2e:b0:f5:fc:bf:e2:46:ae:4e:83:7f:fb:76:21:1d:b0:26:5e:
         51:f1:d3:19:6c:d1:47:d7:4c:d2:76:c5:31:85:e8:5b:34:0b:
         98:c4:30:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:51:16 2026 by rpki-client